JP7326826B2 - Personal data utilization system, data management device and program - Google Patents

Description

The present invention relates to a personal data utilization system, data management device and program.

Conventionally, a system has been disclosed in which personal data related to individuals, including financial asset information, is registered in advance in a system, personal data set to be made public is searched, and information related to products or services is distributed (for example, patent Reference 1).

Japanese Patent No. 5453939

It would be convenient for the user if he could receive suggestions for various useful services for the user based on the provided personal data. For that purpose, the user needs to provide data for many items and disclose the provided personal data.
If the provided personal data is used for proposing useful services, it is advantageous for the user to provide and publish data on many items. However, publishing data for many items is problematic from a privacy point of view.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a personal data utilization system, a data management device, and a program that enable disclosure of personal data in response to proposals of services that are beneficial to users.

The present invention solves the above problems by means of the following solutions.
A first invention is a personal database that stores personal data, which is user's personal information, and permission/non-approval information regarding disclosure to a third party in association with each user, and information on services that use the personal data. to the user, and a user terminal used by the user, wherein the service providing device provides the content of the service proposal and the information necessary for providing the service. a proposal information transmission unit that transmits proposal information including necessary items that are items of the personal data to the user terminal; a judgment unit for judging whether the availability information satisfies the necessary conditions related to the proposal information; and providing information for satisfying the necessary conditions when the judgment unit judges that the necessary conditions are not satisfied. an information requesting unit for transmitting a request to the user terminal, the user terminal outputting the proposed information received from the service providing device to a display unit; and an information providing unit that transmits information for satisfying the necessary conditions to the service providing device when the provision request is received.
In a second invention based on the personal data utilization system of the first invention, the determination unit of the service providing device has data related to the necessary items in the personal database, and The personal data utilization system judges that the necessary conditions are satisfied when the data is acceptable.
In a third invention, in the personal data utilization system of the first invention or the second invention, the information for satisfying the necessary conditions includes a permission range setting request regarding disclosure of the personal data to a third party. It is a personal data utilization system including:
A fourth invention is the personal data utilization system according to any one of the first invention to the third invention, comprising a proposal information database storing the proposal information, wherein the proposal information transmitting unit of the service providing device is configured to: In the personal data utilization system, the proposal information obtained by searching the proposal information database is transmitted to the user terminal.
In a fifth invention based on the personal data utilization system of the fourth invention, the service providing device includes a proposal information reception unit that receives the proposal information, and the proposal information received by the proposal information reception unit. and a storage processing unit for storing in the proposal information database together with the transmission by the transmission unit.
In a sixth invention, in the personal data utilization system according to any one of the first invention to the fifth invention, the personal database is associated with each user to determine whether or not the permission is granted for each item of the personal data. It is a personal data utilization system that stores information.
A seventh invention is the personal data utilization system according to any one of the first invention to the sixth invention, wherein the personal database stores the permission/denial of the personal data for each genre of business operator in association with each user. It is a personal data utilization system that stores information.
An eighth invention is the personal data utilization system according to any one of the first invention to the seventh invention, wherein the user terminal provides the service related to the proposal information output by the proposal information output unit. a reply transmitting unit that receives reply information as to whether or not to accept the service and transmits the reply information to the service providing device, the service providing device confirming that the reply information received from the user terminal indicates that the service is to be provided; The personal data utilization system performs processing by the determination unit when the content is to accept.
In a ninth aspect of the invention, in the personal data utilization system of any one of the first to eighth inventions, when the service providing device receives information for satisfying the necessary conditions from the user terminal, A personal data utilization system comprising a data updating unit that updates data in the personal database based on a predetermined condition.
A tenth invention is the personal data utilization system according to any one of the first invention to the ninth invention, wherein the proposal information transmission unit of the service providing device sends an evaluation of the proposal information to the user terminal. further transmitting evaluation selection information that can be input, wherein the user terminal comprises an evaluation transmission unit configured to transmit evaluation information related to evaluation of the proposal information input by the user to the service providing apparatus; The provision device is a personal data utilization system comprising an evaluation registration unit that stores the evaluation information received from the user terminal in association with the proposal information.
According to an eleventh invention, in the personal data utilization system according to any one of the first invention to the tenth invention, the user terminal transmits the personal data of the user and the permission/denial information to the service providing device. wherein the service providing device comprises a personal data registration unit for registering, in the personal database, the personal data received from the user terminal and the permission/non-approval information; It is a data utilization system.
According to a twelfth invention, in the personal data utilization system according to any one of the first invention to the eleventh invention, the service providing device comprises a data management device connected to the personal database, and the data management device. and a business operator terminal connected to the personal data utilization system.
In a thirteenth invention based on the personal data utilization system of the twelfth invention, when the data management device receives information for satisfying the necessary conditions from the user terminal, the data management device stores the data related to the necessary items to the previous information. A personal data utilization system comprising a data providing unit that transmits data to an article provider terminal.
According to a fourteenth invention, in the personal data utilization system of the twelfth invention or the thirteenth invention, the operator terminal transmits search conditions for selecting the user to whom the proposal information is transmitted to the data management device. The data management device refers to the personal database and extracts information indicating that the permission permission/prohibition information contained in the personal data that matches the search conditions is permission. and a personal data utilization system comprising an information transmitting unit for transmitting to the business terminal.
A fifteenth invention is the data management device of the personal data utilization system according to any one of the twelfth invention to the fourteenth invention.
A sixteenth invention is a program for causing a computer to function as the service providing device of the personal data utilization system according to any one of the first invention to the eleventh invention.

According to the present invention, it is possible to provide a personal data utilization system, a data management device, and a program that enable disclosure of personal data in response to proposals of services beneficial to users.

1 is an overall configuration diagram of a personal data utilization system and a functional block diagram of a data management device according to the present embodiment; FIG. It is a figure which shows the example of personal DB which concerns on this embodiment. 3 is a functional block diagram of a business operator terminal and a user terminal according to this embodiment; FIG. 4 is a flowchart showing personal data registration processing of the personal data utilization system according to the present embodiment; It is a figure which shows the example of a display with the user terminal which concerns on this embodiment. It is a figure which shows the example of a display with the user terminal which concerns on this embodiment. 4 is a flow chart showing proposal providing processing of the personal data utilization system according to the present embodiment; It is a figure which shows the example of a display with the user terminal which concerns on this embodiment. 6 is a flow chart showing application processing of the personal data utilization system according to the present embodiment; It is a figure which shows the example of a display with the user terminal which concerns on this embodiment. It is a figure which shows the example of personal DB which concerns on a deformation|transformation.

EMBODIMENT OF THE INVENTION Hereafter, the form for implementing this invention is demonstrated, referring a figure. This is just an example, and the technical scope of the present invention is not limited to this.
(embodiment)
<Overall Configuration of Personal Data Utilization System 100>
FIG. 1 is an overall configuration diagram of a personal data utilization system 100 and a functional block diagram of a data management device 1 according to this embodiment.
FIG. 2 is a diagram showing an example of the personal DB 4 according to this embodiment.
FIG. 3 is a functional block diagram of the business operator terminal 5 and the user terminal 7 according to this embodiment.

The personal data utilization system 100 shown in FIG. 1 includes a data management device 1 (service providing device), a personal DB (database) 4, a business operator terminal 5 (service providing device), and a user terminal 7. FIG. The data management device 1 and the personal DB 4 are directly connected by wire, for example. Also, the data management device 1, the operator terminal 5, and the user terminal 7 are connected via a communication network N so as to be communicable. The communication network N is, for example, an Internet line, a mobile terminal communication network, or the like, and may be wired or wireless.
In this embodiment, the data management device 1 and the business operator terminal 5 constitute each function of the service providing device, but this is just an example. For example, the data management device 1 and the business operator terminal 5 may not be separated. Also, part of the functions of the operator terminal 5 may be performed by the data management device 1, or vice versa.

The data management device 1 and the personal DB 4 do not have to be directly connected, but since the personal DB 4 stores personal data that is information about the individual user, it is desirable that the personal DB 4 cannot be accessed directly from the outside.
Also, the personal data utilization system 100 may include a personal DB 4 in the data management device 1 .

In the personal data utilization system 100, the data management device 1 selects a user as a proposal destination based on the proposal information related to the service proposed by the business operator, and sends the proposal information to the user terminal 7 of the selected user. Send. Then, when the response to the proposal from the user terminal 7 is to accept the proposal, the data management device 1 provides the user's personal data stored in the personal DB 4 to the business operator terminal 5 of the business operator related to the proposal information. do.

Here, the business operator is a company or the like that provides a service. Also, the user may be any person as long as it registers personal data in the personal DB 4 .
As for the user's personal data stored in the personal DB 4, only the data relating to the minimum items are disclosed to third parties such as each business operator with the permission of the user. Then, when the answer to the proposal is that the proposal is accepted, the data of items required by the business operator among the user's personal data are disclosed only to the business operator based on the answer.

<Data management device 1>
The data management device 1 is, for example, a server owned by a company that manages the personal DB 4 . The data management device 1 is accessed by a plurality of businesses and a plurality of users using their respective terminals.
The data management device 1 includes a control section 10 , a storage section 20 and a communication interface section 29 .
The control unit 10 is a central processing unit (CPU) that controls the entire data management device 1 . The control unit 10 reads and executes an operating system (OS) and application programs stored in the storage unit 20 as appropriate, thereby cooperating with the hardware described above and executing various functions.

The control unit 10 includes a data registration processing unit 11 (personal data registration unit), a proposal provision processing unit 12 (proposal information reception unit, storage processing unit, proposal information transmission unit), and a registration status judgment unit 14 (judgment unit). , a data processing unit 15 (information requesting unit, data updating unit), and a licensed data providing unit 17 (data providing unit).

By receiving personal data from the user terminal 7 , the data registration processing unit 11 registers the received personal data in the personal data storage unit 41 of the personal DB 4 . Here, the data registration processing unit 11 also receives from the user terminal 7 permission approval/disapproval information indicating whether or not each item of the personal data is to be opened (disclosed) to a third party. Then, the data registration processing unit 11 registers the received approval/non-approval information in the item-by-item permission information storage unit 42 of the personal DB 4 in association with each item. Here, each item of personal data refers to personal information such as name, date of birth, address, and e-mail address, and also includes information such as height, clothing size, and food allergies.

In addition, the data registration processing unit 11 receives, from the user terminal 7, approval approval/disapproval information indicating whether or not to open (disclose) the personal data to a third party for each genre of the business operator. Then, the data registration processing unit 11 registers the received permission information in the genre-specific permission information storage unit 43 of the personal DB 4 in association with each genre. Here, the genre refers to the business field of the business operator, and refers to the type of service content provided by the business operator, such as eating and drinking, shopping, and experience.

The proposal provision processing unit 12 receives proposal information from the business operator terminal 5 . Here, the proposal information includes the content of the service proposed by the business operator and necessary items, which are items of personal data required by the business operator. Here, the necessary items include mandatory items and optional items. An essential item is an item that is absolutely necessary, such as a name. Optional items are items for which the business operator considers the data, if any, such as allergenic foods.
In addition, the proposal provision processing unit 12 may receive search conditions for selecting a user who is a proposal destination together with the proposal information. The search condition is set by the provider as a means of selecting users who are interested in the proposed information. Search conditions include, for example, "woman in her thirties" and "living in Tokyo".

Next, the proposal provision processing unit 12 refers to the personal DB 4 and extracts, for example, personal data that matches the search conditions.
At that time, the proposal provision processing unit 12 refers to the genre-specific permission information storage unit 43, and extracts personal data that matches the search conditions only when the user's permission/non-permission information for the genre of the business operator can be provided. You may make it
In addition, the proposal provision processing unit 12 refers to the personal DB 4, and extracts, for example, personal data for which the user's permission/non-permission information for the genre of the business operator in the genre-specific permission information storage unit 43 can be provided. good too.

Then, the proposal provision processing unit 12 may refer to the item-by-item permission information storage unit 42 and extract from the personal data storage unit 41 only the personal data of the items for which disclosure to a third party is permitted. Also, as personal data, contact information of the user may be extracted. Here, the contact information is used for transmitting proposal information to the user terminal 7, and may be, for example, an e-mail address, an ID (Identification) of SNS (Social Networking Service), or the like.
Then, the proposal provision processing unit 12 transmits the proposal information to the user terminal 7 specified by the extracted personal data. Here, as described above, the proposal information includes service proposal content and necessary items, which are items of personal data necessary for providing the service.

The registration status determination unit 14 refers to the personal DB 4 for the user of the user terminal 7 to whom the proposal provision processing unit 12 has transmitted the proposal information, and determines whether or not the user satisfies the necessary conditions. Here, the registration status judging unit 14 judges that the necessary conditions are met when the data corresponding to the necessary item included in the proposal information is registered and the permission permission/prohibition information for the item is permitted. do. Note that the proposal provision processing unit 12 may determine whether or not data is registered for at least the required items among the required items. In addition to the approval approval/disapproval information of the necessary items, the proposal provision processing unit 12 determines whether approval approval/disapproval information for the genre of the business operator is permitted.
Here, the registration status determination unit 14 may determine whether or not the necessary conditions are satisfied when response information to the effect that the service related to the proposal information is received from the user terminal 7 is received.

When the registration status determination unit 14 determines that the necessary conditions are not satisfied, the data processing unit 15 transmits to the user terminal 7 an information provision request for satisfying the necessary conditions. For example, if the data for the necessary items are insufficient, a provision request requesting input of the data for the missing items is sent to the user terminal 7 . Also, if the approval approval/disapproval information for the required item is approval/disapproval, a range setting request for approval of the corresponding item is transmitted to the user terminal 7 .
Then, when the data processing unit 15 receives additional data in response to the request from the user terminal 7, the data processing unit 15 updates the target item of the personal DB 4 based on the additional data based on a predetermined condition.

When receiving additional data for the request from the user terminal 7 , the permission data providing section 17 extracts data related to the necessary items from the personal DB 4 and transmits the extracted data to the business operator terminal 5 .
Here, it does not matter whether the processing by the licensed data providing unit 17 and the data updating processing in the personal DB 4 by the data processing unit 15 are performed before or after, for example, they may be performed at the same time.
The details of these will be described later.

The storage unit 20 is a storage area such as a hard disk or a semiconductor memory device for storing programs, data, etc. necessary for the control unit 10 to execute various processes.
The storage unit 20 includes a program storage unit 21 and a business operator information storage unit 24 (proposal information database).
The program storage unit 21 is a storage unit that stores programs necessary for the control unit 10 to execute various processes.
The program storage unit 21 includes a program 21a. The program 21 a is a program for executing various functions of the control unit 10 .

The business operator information storage unit 24 is a storage area that stores information about the business operator such as the business name and the business genre. Further, the business operator information storage unit 24 stores, for example, the proposal information received by the proposal provision processing unit 12 in association with the business operator.

The communication interface unit 29 is an interface for communicating with the operator terminal 5 and the user terminal 7 via the communication network N. FIG. Also, the communication interface unit 29 is an interface for communicating with the personal DB 4 .
A computer is an information processing apparatus having a control unit, a storage device, etc. The data management apparatus 1 is an information processing apparatus having a control unit 10, a storage unit 20, etc., and is included in the concept of a computer. .

<Personal DB4>
The personal DB 4 is a database that stores personal data, which is user's personal information. The personal DB 4 is used to provide the user-approved business operator with data related to items that the user has given permission to disclose to a third party only when the user has given permission to disclose the data to a third party.
The personal DB 4 stores a personal data storage unit 41 , an item-by-item permission information storage unit 42 , and a genre-by-genre permission information storage unit 43 .
The personal data storage unit 41 is, for example, a storage area that stores personal data such as a name and date of birth using a user ID for identifying the user as a key.

The item-by-item permission information storage unit 42 is a storage area that stores permission permission/prohibition information for each item in the personal data storage unit 41 for each user. The item-by-item permission information storage unit 42 stores, for example, permission permission/prohibition information for names, dates of birth, etc., using user IDs as keys.
FIG. 2A is an example of user permission/denial information stored in the item-by-item permission information storage unit 42 .
In the example shown in FIG. 2A, availability of provision is stored for each item in the personal data storage unit 41 for each user. In this example, "O" indicates that disclosure to a third party is permitted, and "X" indicates that it is not permitted. Here, it is assumed that "x" is set when data for the corresponding item in the personal data storage unit 41 is not registered, but the present invention is not limited to this. good too.

The genre-by-genre permission information storage unit 43 is a storage area for storing permission/non-permission information for each genre of a business operator for each user.
FIG. 2B is an example of the user's permission/non-permission information stored in the genre-specific permission information storage unit 43 .
In the example shown in FIG. 2B, for each user and for each genre of the business, the cases where disclosure to the business is permitted are indicated by "O", and the cases where disclosure to the business is not permitted are indicated by "X". Here, it is assumed that if there is no registration of permission by the user, the permission for that genre is set to "x".

<Business operator terminal 5>
The operator terminal 5 is a terminal used by each operator. The operator terminal 5 is, for example, a personal computer (PC). The business terminal 5 may also be a portable terminal such as a tablet. The operator terminal 5 only needs to be communicably connected to the data management device 1 and the user terminal 7, and may also be used as a terminal used by the operator for other business.
As shown in FIG. 3A , the operator terminal 5 includes a control section 50 , a storage section 55 , an input section 56 , a display section 57 and a communication interface section 59 .

The control unit 50 is a CPU that controls the entire operator terminal 5 . The control unit 50 reads and executes the OS and application programs stored in the storage unit 55 as appropriate, thereby cooperating with the above-described hardware and executing various functions.
The control unit 50 includes a proposal registration requesting unit 51 (selection requesting unit) and a personal data receiving unit 52 .
The proposal registration requesting unit 51 requests registration of proposal information by transmitting the proposal information created by the business to the data management device 1 . The proposal registration requesting unit 51 transmits the search conditions for selecting the user who is the proposal destination together with the proposal information.
Personal data receiving unit 52 receives personal data from data management device 1 . The received personal data is data related to the user who has given permission to the proposal information. Also, the received personal data is data corresponding to the necessary items included in the proposal information.

The storage unit 55 is a storage area such as a hard disk or a semiconductor memory device for storing programs, data, etc. necessary for the control unit 50 to execute various processes.
The input unit 56 is, for example, an input device such as a keyboard or mouse.
The display unit 57 is, for example, a display device such as an LCD (Liquid Crystal Display).
The communication interface unit 59 is an interface for communicating with the data management device 1 or the like via the communication network N. FIG.

<User terminal 7>
A user terminal 7 is a terminal possessed by a user. The user terminal 7 is, for example, a mobile terminal having computer functions represented by a smart phone or a tablet terminal. The user terminal 7 may also be a PC or the like.
As shown in FIG. 3B, the user terminal 7 includes a control section 70 , a storage section 75 , a touch panel display 78 (display section), and a communication interface section 79 .

The control unit 70 is a CPU that controls the entire user terminal 7 . The control unit 70 reads and executes the OS and application programs stored in the storage unit 75 to cooperate with the above-described hardware and execute various functions.
The control unit 70 includes a proposal reception processing unit 71 (proposal information output unit), a proposal reply transmission unit 72 (response transmission unit), an information provision unit 73 and a personal data transmission unit 74 .

Proposal reception processing unit 71 receives proposal information from data management device 1 and outputs the proposal information to touch panel display 78 .
The proposal reply transmission unit 72 receives reply information as to whether or not to receive the provision of the service related to the proposal of the proposal information via the touch panel display 78, and transmits the received reply information to the data management device 1. .

The information providing unit 73 receives from the data management device 1 a request for providing information on the necessary items included in the proposal information. Then, the information providing unit 73 transmits additional data for the provision request to the data management device 1 according to the input by the user.
The personal data transmission unit 74 transmits to the data management apparatus 1 data of each item of the user's own personal data and information on permission/non-approval of the data. In addition, the personal data transmission unit 74 transmits to the data management device 1 the permission/non-approval information for each genre of the business operator.

The storage unit 75 is a storage area such as a semiconductor memory device for storing programs, data, etc. necessary for the control unit 70 to execute various processes.
The touch panel display 78 has a function as a display section configured by a liquid crystal panel or the like, and a function as an input section for performing various operation inputs with a user's finger.
The communication interface unit 79 is an interface for communicating with the data management device 1 and the like via the communication network N. FIG.

<Description of processing>
Next, the process of registering the user's personal data in the personal DB 4 will be described.
FIG. 4 is a flowchart showing personal data registration processing of the personal data utilization system 100 according to this embodiment.
5 and 6 are diagrams showing display examples on the user terminal 7 according to this embodiment.

First, the user communicates with the data management device 1 using the user terminal 7, and, for example, performs usage registration for obtaining proposals for various services.
By doing so, in step S (hereinafter referred to as “S”) 11 in FIG. Send to
In S<b>12 , the control unit 70 (personal data transmission unit 74 ) of the user terminal 7 receives the registration screen and displays it on the touch panel display 78 .

FIG. 5 shows an example of a personal data registration screen 81, which is one of the registration screens. A personal data registration screen 81 shown in FIG. 5 enables data registration of items that can be registered in the personal DB 4 . In this example, as the minimum items required for registration, name and e-mail address are required items for registration, and other items are optional items. The items shown on the personal data registration screen 81 are only examples, and other items representing the user's personal information can be registered.
The user selects the button 81a after registering data for at least the items required for registration on the screen 81 for personal data registration.

By doing so, the control unit 70 next outputs to the touch panel display 78 an itemized provision permission setting screen 82 shown in FIG. The item-by-item provision permission setting screen 82 is for setting whether or not the data of the item is to be provided by operating the knob of the slide bar on the right side of each item. In this example, when the knob of the slide bar is on the left, the provision of the data of the item is not permitted, and when the knob is on the right, the provision of the data of the item is permitted. Here, on the item-by-item provision permission setting screen 82, for items for which data has not been registered on the personal data registration screen 81, which is the previous screen, the knob of the slide bar is kept at the left. good too.
The user selects the button 82a after making settings on the itemized provision permission setting screen 82 .

By doing so, the control unit 70 next outputs, to the touch panel display 78, a genre-specific provision permission setting screen 83 shown in FIG. The genre-specific provision permission setting screen 83 is for setting whether personal data is to be provided or not for the business operator of the genre by operating the knob of the slide bar on the right side of each item. . The operation of the slide bar and the like are the same as those of the itemized provision permission setting screen 82 .
When the user selects the button 83a after making settings on the genre-specific provision permission setting screen 83, the control unit 70 (personal data transmission unit 74) accepts a save operation in S13 of FIG.

In S14, the control unit 70 (personal data transmission unit 74) associates the personal data set on the registration screen described above with permission/denial information for each item of the personal data, and transmits the information to the data management device 1. do. In addition, the control unit 70 (personal data transmission unit 74) transmits to the data management device 1 permission permission/prohibition information for each genre set on the registration screen described above. After that, the control unit 70 terminates this process.

At S<b>15 , the control unit 10 (data registration processing unit 11 ) of the data management device 1 receives each piece of information including personal data transmitted by the user terminal 7 .
In S<b>16 , the control section 10 (data registration processing section 11 ) registers the received personal data in the personal data storage section 41 of the personal DB 4 . In addition, the control unit 10 (data registration processing unit 11) registers the received approval/non-approval information for each item in the item-by-item permission information storage unit 42 of the personal DB4. Furthermore, the control unit 10 (data registration processing unit 11) registers the received permission approval/disapproval information for each genre in the genre-specific permission information storage unit 43 of the personal DB 4. FIG. After that, the control unit 10 terminates this process.

By this personal data registration process, the user's personal data and the permission/non-approval information set by the user are registered in the personal DB 4 . The information registered in this way can be used when each business proposes a service to be described below.

Next, the processing when using the personal data registered in the personal DB 4 will be described.
FIG. 7 is a flow chart showing the proposal providing process of the personal data utilization system 100 according to this embodiment.
FIG. 8 is a diagram showing a display example on the user terminal 7 according to this embodiment.

The company creates proposal information, and starts this process at the timing when it wants to provide the created proposal information, for example.
In S21 of FIG. 7, the control unit 50 (proposal registration requesting unit 51) of the business operator terminal 5 transmits proposal information related to the business of the business operator to the data management device 1, thereby requesting registration of the proposal information. request. Here, the proposal information includes the content of the service proposed by the business operator and necessary items, which are items of personal data required by the business operator.
The proposal registration requesting unit 51 also transmits the search conditions for selecting the user to whom the proposal is made, together with the proposal information. Then, the control unit 50 terminates this process.
In S<b>22 , the control unit 10 (proposal provision processing unit 12 ) of the data management device 1 receives proposal information and search conditions from the business operator terminal 5 , thereby accepting proposal information.

In S23, the control unit 10 (proposal provision processing unit 12) refers to the personal DB 4 and extracts users who match the search conditions. At this time, the control unit 10 refers to the genre-specific permission information storage unit 43, and excludes users whose permission/non-permission information for the genre of the business operator indicates permission/rejection from the extraction targets. For example, when the genre of the business operator is "experience", in the example of FIG. , User A is excluded from the extraction target even if it matches the search condition.
Then, the control unit 10 acquires, for example, data related to the item of the e-mail address as the contact information of the extracted user.

In S24, the control unit 10 (proposal provision processing unit 12) transmits a proposal content screen including proposal information to the user terminal 7 specified by the extracted contact information. Then, the control unit 10 (proposal provision processing unit 12) causes the business operator information storage unit 24 to store the proposal information.
In S<b>25 , the control unit 70 (proposal reception processing unit 71 ) of the user terminal 7 receives the proposal content screen and outputs it to the touch panel display 78 .
Here, FIG. 8 shows an example of the proposal content screen.

The offer screen 91 shown in FIG. 8 includes a proposal information area 91a, buttons 91b and 91c, and an evaluation area 91d.
The proposal information area 91a is a screen that includes the content of a proposal to experience wearing a kimono. The proposal information area 91a includes proposal content and essential items, which are items of personal data that require permission from the user.
The button 91b is selected when not participating in the offer, and is for closing the offer screen 91. FIG.
The button 91c is selected when participating in the offer.
The evaluation area 91d is for inputting an evaluation for the offer.

When the user looks at the offer screen 91 and selects the button 91b or the button 91c, in S26 of FIG. Send to More specifically, when the user selects the button 91b on the offer screen 91, the control unit 70 closes the offer screen 91 and stores reply information indicating that the service related to the proposal information will not be provided. Send to the management device 1 . Further, when the user selects the button 91c on the offer screen 91, the control unit 70 transmits to the data management device 1 response information indicating that the service related to the proposal information is to be provided. After that, the control unit 70 terminates this process.

At S27, the control unit 10 of the data management device 1 receives the reply information.
At S28, the control unit 10 determines whether the content of the response in the received response information is affirmative, that is, whether the content of the response indicates that the service will be provided. If the content of the reply is affirmative (S28: YES), the control unit 10 shifts the process to S29. On the other hand, if the content of the reply is not affirmative (S28: NO), the control unit 10 terminates this process.
In S29, the control unit 10 performs application processing.

Here, application processing will be described.
FIG. 9 is a flowchart showing application processing of the personal data utilization system 100 according to this embodiment.
FIG. 10 is a diagram showing a display example on the user terminal 7 according to this embodiment.

In S31 of FIG. 9, the control unit 10 (registration status determination unit 14) of the data management device 1 confirms by inquiring the personal DB 4 whether or not the user's personal data is registered for the necessary items. do.
In S<b>32 , the control unit 10 (registration status determination unit 14 ) determines whether or not the data related to the necessary items have been registered in the personal DB 4 as a result of the confirmation. If the data related to the necessary items are registered in the personal DB 4 (S32: YES), the control unit 10 shifts the process to S33. On the other hand, when the data related to the necessary items are not registered in the personal DB 4 (S32: NO), the control unit 10 shifts the process to S34. It should be noted that the control unit 10 determines that if the data related to the essential items among the required items are registered in the personal DB 4, the data related to the optional items are registered in the personal DB 4 even if the data related to the optional items are not registered in the personal DB 4. You may process as.

In S33, the control unit 10 (registration status determination unit 14) determines whether or not the approval approval/disapproval information related to the required item indicates approval. If the permission permission/prohibition information related to the required item indicates that permission is permitted (S33: YES), the control unit 10 shifts the process to S37. On the other hand, if the permission permission/prohibition information related to the required item is not permitted (S33: NO), the control unit 10 shifts the process to S34. It should be noted that the control unit 10 determines that if the permission permission information related to the essential items among the required items is permitted, even if the permission permission information related to the optional items is not permission permitted, the permission permission information related to the necessary items is permitted. It may be treated as possible.

In S<b>34 , the control unit 10 (data processing unit 15 ) requests the input of data for the item whose data has not been registered, and transmits to the user terminal 7 an information providing screen for setting permission.
By doing so, the control unit 70 (information providing unit 73 ) of the user terminal 7 receives the information providing screen and displays it on the touch panel display 78 .

FIG. 10A shows an example of a permitted range change screen 95, which is one of the information providing screens. On the permission range change screen 95 shown in FIG. 10(A), items that are essential items among the necessary items included in the proposal information and for which data has already been registered have knobs on the right side and are colored inconspicuously. It is displayed by the slide bar 95a. Further, on the permission range change screen 95, items that are required items among the required items included in the proposal information and whose data have not been registered are displayed with a knob on the right and a slide bar 95b in a conspicuous color. These slide bars 95a and 95b are designed so that the knob cannot be moved. It should be noted that the slide bar 95c for optional items that are not essential items in the proposed information this time may be changed arbitrarily by using a knob. Then, when the knob is changed, the control unit 10 of the data management device 1 may allow the content of the change only in the service. In addition, when changed, by receiving registration permission information by the user from the user terminal 7, the change may be reflected in the personal DB 4. FIG. Registration permission by the user may be both data for each item and data for the genre.
The user selects the button 95d after confirming the setting state on the permission range change screen 95. FIG.

By doing so, the control unit 70 outputs to the touch panel display 78 a personal data change screen 96 shown in FIG. The personal data change screen 96 contains the personal data registration screen 96 used for personal data registration described in FIG. It is almost the same as screen 81 .
When the user inputs data on the personal data change screen 96 and selects the button 96 a , the control section 70 (information providing section 73 ) transmits the additional data to the data management device 1 . Here, the additional data includes the content set on the permission range change screen 95 and the input content on the personal data change screen 96 described above.

In S35 of FIG. 9, the control unit 10 (data processing unit 15) of the data management device 1 determines whether additional data has been received. If additional data has been received (S35: YES), the control unit 10 shifts the process to S36. On the other hand, if the additional data has not been received (S35: NO), the control unit 10 stays in this process until the user terminal 7 transmits the additional data.

In S36, the control unit 10 (data processing unit 15) performs data update processing based on predetermined conditions. Specifically, for example, when the data registration permission information is received, the control unit 10 assumes that a predetermined condition is satisfied, and based on the additional data, adds data to the target item of the personal DB 4 . register. After that, the control unit 10 shifts the process to S32. It should be noted that the control unit 10 does not perform this process if the predetermined condition is not satisfied.

On the other hand, at S<b>37 , the control unit 10 (licensed data providing unit 17 ) extracts data related to the necessary items of the target user from the personal DB 4 and transmits the extracted data to the operator terminal 5 . At that time, the control unit 10 may transmit an application completion screen 97 shown in FIG. 10C to the user terminal 7, for example. After that, the control unit 10 terminates this process.

Thus, according to the personal data utilization system 100 of this embodiment, the following effects are obtained.
(1) The data management device 1 transmits proposal information by the business operator to the user terminal 7, and the user terminal 7 sends reply information as to whether or not to receive the service related to the proposal information to the data management device 1. to send. Here, the proposal information to be transmitted to the user terminal 7 includes service proposal content and necessary items, which are items of personal data required by the service provider who proposes the service. Therefore, the user can determine whether or not to receive the service related to the proposal information by looking at the necessary items in addition to the content of the proposal. Therefore, when personal data items that the user does not want to provide to the business operator are included, the personal data need not be disclosed if the user does not receive the service related to the proposal information. Also, if the user replies that he/she will receive the service related to the proposal information, the user can apply for the proposal, which is convenient. Then, it is possible to disclose personal data in response to proposals of services beneficial to the user.

(2) The data management device 1 extracts from the personal DB 4 the data already stored in the personal DB 4 among the data relating to the required items when all the data relating to the required items are available, and transmits the data to the operator terminal 5. . Therefore, by using the data registered in the personal DB 4, the user can save the trouble of repeatedly inputting personal data, which is convenient.
(3) When the data management device 1 determines that the required item does not meet the required condition, it transmits to the user terminal 7 a request for providing information to meet the required condition. Then, it is confirmed whether or not the additional data received from the user terminal 7 satisfies the necessary conditions. Therefore, it is possible to construct a system for reliably obtaining the data of the necessary items presented by the business operator, including permission for disclosure of the data to a third party.

(4) Based on the additional data received from the user terminal 7, the data management device 1 updates the data in the personal DB 4 when a predetermined condition is satisfied. The predetermined condition is, for example, registration permission information for the personal DB 4 by the user. Therefore, additional data can be used for updating the personal DB 4 if a predetermined condition is satisfied. If the data is registered in the personal DB 4, the data registered in the personal DB 4 this time can be used for the next proposal, which is convenient.

(5) The data management device 1 receives proposal information and search conditions for selecting a user who is a proposal destination from the provider terminal 5 . Then, the data management device 1 extracts the contact information of the personal data that matches the search conditions from the personal DB 4 and transmits the proposal information to the user terminal 7 . Therefore, the business operator can designate search conditions so that proposal information is transmitted to users targeted by the business operator. Therefore, it is possible to transmit the proposal information to users who meet the needs of the business.
(6) On the other hand, the data management device 1 refers to the genre-specific permission information storage unit 43 that stores the permission/non-permission information that sets whether or not the user provides personal data for each genre of the business operator. If the genre is not to be provided, the user is excluded from the extraction target even if the search condition is met. Therefore, the user does not need to receive the proposal information about the proposal of the genre that the user does not need.

(7) The data management device 1 refers to the item-by-item permission information storage unit 42 that associates permission permission/prohibition information set by the user with each item of the personal data, and only data related to the items that can be provided is used for business purposes. provided to the user terminal 5. Therefore, the user can control the information to be disclosed.

(8) The data management device 1 receives from the user terminal 7 the personal data, the approval approval/disapproval information for each item, and the approval approval/disapproval information for each genre. Then, the data management device 1 registers the personal data in the personal data storage unit 41 of the personal DB 4, and registers the permission/non-approval information in the itemized permission information storage unit 42 and the genre-based permission information storage unit 43 of the personal DB 4. . Therefore, personal data can be used by using various information once registered by the user.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments. Moreover, the effects described in the embodiments are merely enumerations of the most suitable effects produced by the present invention, and the effects of the present invention are not limited to those described in the embodiments. The above-described embodiments and modifications described later can be used in combination as appropriate, but detailed description thereof will be omitted.

(deformed form)
(1) In the present embodiment, the user to whom the proposal information is sent is selected based on the search conditions and the provision availability information related to the genre of the business operator. However, the present invention is not limited to this. For example, the control unit (evaluation registration unit) of the data management device receives the evaluation information transmitted by the control unit (evaluation transmission unit) of the user terminal through the input related to the evaluation area 91d (evaluation selection information) of the offer screen 91 shown in FIG. is received, and the evaluation is stored in the business operator information storage unit 24 in association with the business operator.
Then, the control unit (proposal provision processing unit) of the data management device may consider the evaluation when selecting users to whom the proposal information is to be transmitted. For example, the data management device stores the evaluation in association with the user, so that the evaluation can be used when deciding whether or not to select the user in the next and subsequent proposals. Also, for example, even if the data management device stores only the evaluation, it can be used as the evaluation of the business operator.

(2) In the present embodiment, an example in which the data management device transmits the proposal information requested by the business to the user terminal has been described, but the present invention is not limited to this. For example, the control unit (information transmission unit) of the data management device refers to the personal DB and transmits only data permitted for disclosure to a third party to the operator terminal, and the operator terminal transmits the proposal information. may be sent to the user terminal using contact information, for example. Then, when the user replies that he/she will receive the provision of the service related to the proposal information, the reply information may be transmitted from the provider's terminal to the data management device. By doing so, as in the case of the present embodiment, it is possible to perform the process related to the proposal while providing only the minimum necessary data of the personal data to the business operator.

Also, even if the person is not registered in the personal DB, the proposal information may be sent to the user terminal using minimum data such as the name and contact information that the business individually possesses. In that case, when the user replies that he or she will receive the service related to the proposal information, the minimum data is transmitted from the provider terminal to the data management device in addition to the reply information. Even in such a case, if the data management device registers the minimum data received from the business operator terminal and the additional data in the personal DB, the number of data input by the user at the time of the next and subsequent proposals can be reduced.

(3) In the present embodiment, the proposal providing process is performed on the assumption that the user has registered personal data in the personal DB, but the present invention is not limited to this. As the user's personal data, even the minimum data item data should be registered in the personal DB.

(4) In the present embodiment, the personal DB has a personal data storage unit, an item-by-item permission information storage unit, and a genre-by-genre permission information storage unit. However, the present invention is not limited to this. For example, it is also possible to have a permission information storage unit that combines the item-specific permission information storage unit and the genre-specific permission information storage unit into one.
FIG. 11 shows an example of the permission information storage unit 45 according to a modification. The permission information storage unit 45 stores permission/non-permission information regarding disclosure of each item to a third party based on the user ID and the genre. In this way, for example, it is possible to perform more detailed setting of whether or not to permit permission, such as permitting the disclosure of allergy-related information to eating and drinking and lodging, but not permitting disclosure to other genres. can.

(5) In the present embodiment, an example has been described in which the business operator creates the proposal information and transmits the proposal information to the data management device at the timing when he or she wants to provide the proposal information, but the present invention is not limited to this. By sending the proposal information created by the business operator to the data management device in advance, it is stored in advance in the business operator information storage unit, and at a predetermined timing, an instruction to provide the proposal information is sent from the business operator terminal to the data management device. It may be sent to the management device. Also, the information including the timing information for providing the proposal information may be transmitted to the data management device in advance, and the proposal information may be transmitted to the user terminal when the timing of the timing information comes.
Furthermore, the control unit (proposed information transmitting unit) of the data management device transmits the proposed information obtained by searching the business operator information storage unit (proposed information database) at appropriate timing to the user terminal. There may be.

(6) In the present embodiment, the data management device registers the additional data in the personal DB in response to the reception of the additional data. Upon receiving the additional data, the data management device may check whether or not the data of the necessary items are complete, and register the additional data in the personal DB when it is confirmed. Also, the timing of registration in the personal DB may be, for example, every hour, and the data management device may collectively register a plurality of data in the personal DB.

(7) In the present embodiment, an example of using an e-mail address as contact information has been described, but the present invention is not limited to this. Other information may be used as long as it can provide proposal information to the user terminal.
(8) In the present embodiment, as a service proposed by a business operator, an experience-related service has been described as an example, but the present invention is not limited to this. For example, it can be applied to various services included in the genre.

(9) In the present embodiment, a personal data utilization system having a configuration including a data management device and a business operator terminal has been described, but the present invention is not limited to this. The data management device and the business operator terminal may be integrated. Also, the data management device and the personal DB have been described as separate devices, but for example, the data management device may be provided with the storage units of the personal DB.

1 data management device 4 personal DB
5 business operator terminal 7 user terminal 10, 50, 70 control unit 11 data registration processing unit 12 proposal provision processing unit 14 registration status judgment unit 15 data processing unit 17 licensed data providing unit 20, 55, 75 storage unit 21a program 24 business operator Information storage unit 41 Personal data storage unit 42 Item-based permission information storage unit 43 Genre-based permission information storage unit 51 Proposal registration request unit 52 Personal data reception unit 71 Proposal reception processing unit 72 Proposal reply transmission unit 73 Information provision unit 74 Personal data transmission Part 78 Touch panel display 100 Personal data utilization system N Communication network

Claims (15)

a personal database that stores personal data, which is user's personal information, and permission/non-approval information regarding disclosure to a third party in association with each user;
a service providing device that provides the user with information on a service using the personal data;
a user terminal used by the user;
A personal data utilization system comprising
The personal database stores the permission/non-approval information of the personal data for each business category in association with each user,
The service providing device
The genre of the business operator included in the personal data as the user who transmits the proposal information proposed by the business operator , including the content of the service proposal and necessary items that are items of the personal data necessary for providing the service. a proposal information transmission unit that selects the user for whom the permission permission/prohibition information pertaining to is permitted, and transmits the proposal information to the user terminal of the selected user ;
a determination unit that refers to the personal database and determines whether or not the personal data and the approval/non-approval information relating to the user of the user terminal satisfy the necessary conditions relating to the proposal information;
an information requesting unit configured to transmit, to the user terminal, an information provision request for satisfying the necessary conditions when the determining unit determines that the necessary conditions are not satisfied;
with
The user terminal is
a proposal information output unit that outputs the proposal information received from the service providing device to a display unit;
an information providing unit that, when receiving the provision request from the service providing device, sends information for satisfying the necessary conditions to the service providing device;
A personal data utilization system comprising: In the personal data utilization system according to claim 1,
personal data, wherein the determining unit of the service providing apparatus determines that the necessary conditions are met when the personal database has data related to the required items and the permission permission/prohibition information indicates that permission is permitted; system of use. In the personal data utilization system according to claim 1 or claim 2,
The personal data utilization system, wherein the information for satisfying the necessary conditions includes a permission range setting request regarding disclosure of the personal data to a third party. In the personal data utilization system according to any one of claims 1 to 3,
A proposal information database storing the proposal information;
The personal data utilization system, wherein the proposal information transmission unit of the service providing device transmits the proposal information obtained by searching the proposal information database to the user terminal. In the personal data utilization system according to claim 4,
The service providing device
a proposal information reception unit that receives the proposal information;
a storage processing unit that stores the proposal information received by the proposal information reception unit in the proposal information database together with transmission by the proposal information transmission unit;
A personal data utilization system comprising: In the personal data utilization system according to any one of claims 1 to 5,
The personal data utilization system, wherein the personal database stores the permission/non-approval information for each item of the personal data in association with each user. In the personal data utilization system according to any one of claims 1 to 6 ,
The user terminal receives reply information as to whether or not to receive the service related to the proposal information output by the proposal information output unit, and transmits the reply information to the service providing device. with
The personal data utilization system, wherein the service providing device performs processing by the determination unit when the response information received from the user terminal indicates that the service is to be provided. In the personal data utilization system according to any one of claims 1 to 7 ,
The personal data utilization system, wherein the service providing device includes a data updating unit that updates data in the personal database based on a predetermined condition when information for satisfying the required condition is received from the user terminal. In the personal data utilization system according to any one of claims 1 to 8 ,
The proposal information transmission unit of the service providing device further transmits evaluation selection information into which an evaluation of the proposal information can be input to the user terminal,
The user terminal comprises an evaluation transmission unit that transmits evaluation information related to evaluation of the proposal information input by the user to the service providing device,
The personal data utilization system, wherein the service providing device includes an evaluation registration unit that stores the evaluation information received from the user terminal in association with the proposal information. In the personal data utilization system according to any one of claims 1 to 9 ,
The user terminal comprises a personal data transmission unit that transmits the user's own personal data and the permission/non-approval information to the service providing device,
The personal data utilization system, wherein the service providing device includes a personal data registration unit that registers the personal data received from the user terminal and the permission/non-approval information in the personal database. In the personal data utilization system according to any one of claims 1 to 10 ,
A personal data utilization system, wherein the service providing device comprises a data management device connected to the personal database, and a business operator terminal connected to the data management device. In the personal data utilization system according to claim 11 ,
The personal data utilization system, wherein the data management device includes a data providing unit that transmits data related to the necessary items to the operator terminal when information for satisfying the necessary conditions is received from the user terminal. In the personal data utilization system according to claim 11 or claim 12 ,
The operator terminal includes a selection request unit that transmits search conditions for selecting the user who transmits the proposal information to the data management device,
The data management device refers to the personal database, extracts information indicating that the permission permission/prohibition information related to the genre of the business operator included in the personal data that matches the search condition is permission, and A personal data utilization system comprising an information transmission unit that transmits information to a trader terminal. 14. The data management device of the personal data utilization system according to any one of claims 11 to 13 . A program for causing a computer to function as the service providing device of the personal data utilization system according to any one of claims 1 to 10 .

Images