JP7499553B1 - Information processing system, control method for information processing system, and information processing program - Google Patents

Abstract

[Problem] To provide an information processing system, a control method for an information processing system, and an information processing program that enable effective management of personal information on an application under the initiative of the user when the user's regular personal information is updated. [Solution] In an information processing system 100, when a user's regular personal information managed by at least one of a management server 1 of a national or local government is updated, an information updating device 3 acquires the updated information. Here, if automatic updating of personal information is set in the user's first user terminal 2, the information updating device 3 acquires the user's regular personal information from the management server 1 and updates the personal information used in the first application 21 of the first user terminal 2. Furthermore, if acquisition of updated information is permitted in the second application 22 of the first user terminal 2, the information updating device 3 also updates the personal information used in the second application 22. [Selected Figure] FIG.

Description

The present invention relates to an information processing system that controls updates to personal information, a control method for an information processing system, and an information processing program.

The My Number Card is an IC card that can be used as a document to prove your personal number or as an official identification document when verifying your identity. The public personal authentication service, which uses the electronic certificate mounted on the IC chip of the My Number Card, can be introduced not only by government agencies but also by various services provided by private businesses. Here, a latest user information (four pieces of information) provision service was launched on May 16, 2023, which allows private businesses to inquire about the latest four pieces of information (address, name, date of birth, and gender) of an individual (customer) to the Japan Agency for Local Government Information Systems (J-LIS) if they have obtained prior consent from the individual using the public personal authentication service (Non-Patent Document 1).

“Public Personal Identification Service (JPKI)”, Digital Agency [online], [Retrieved February 22, 2024], Internet <URL: https://www.digital.go.jp/policies/mynumber/private-business/jpki-introduction>

However, the technology described in Non-Patent Document 1 above is related to private businesses making inquiries about four pieces of personal information, and is not related to users themselves managing their own personal information on an application. Therefore, there is a demand for a system that allows customers (users) to effectively manage their own personal information on an application.

The present invention has been made in consideration of these circumstances, and aims to provide an information processing system, a control method for an information processing system, and an information processing program that enable the user to effectively manage personal information on an application when the user's legitimate personal information is updated.

In order to solve the above problems, the present invention provides an information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application linked to the first application,
an update information acquisition unit that acquires update information indicating that the regular personal information of the user managed by a management server of at least one of a national government and a local government has been updated;
a first setting unit that sets an automatic update of the first personal information of the user managed by the first application;
a second setting unit that sets whether to permit the second application to acquire the updated first personal information;
a first updating unit that, when the update information acquisition unit acquires the update information and the first setting unit has already set automatic update of the first personal information, acquires the updated regular personal information from the management server and updates the first personal information;
and a second updating unit that updates second personal information used by the second application using the first personal information when the first updating unit updates the first personal information and the second setting unit has already permitted the second application to acquire the updated first personal information.

In order to solve the above problem, the present invention provides a method for controlling an information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application linked to the first application, the method comprising:
The computer
Obtaining update information indicating that the user's regular personal information managed by at least one of a national and local government management server has been updated;
Configuring automatic updates of first personal information of the user managed by the first application;
Set whether to permit the second application to acquire the updated first personal information;
When the update information is acquired, if automatic update of the first personal information has already been set, the updated regular personal information is acquired from the management server, and the first personal information is updated;
When the first personal information is updated, and the second application is already permitted to acquire the updated first personal information, the first personal information is used to update the second personal information used by the second application.

Furthermore, in order to solve the above-mentioned problems, the present invention provides an information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application linked to the first application,
On the computer,
an update information acquisition step of acquiring update information indicating that the regular personal information of the user managed by at least one of a management server of a national government and a local government has been updated;
a first setting step for setting automatic updating of first personal information of the user managed by the first application;
a second setting step of setting whether to permit the second application to acquire the updated first personal information;
a first updating step of acquiring the updated regular personal information from the management server and updating the first personal information when the update information has been acquired in the update information acquiring step and automatic updating of the first personal information has already been set in the first setting step;
and a second update procedure for updating second personal information used by the second application using the first personal information when the first personal information is updated in the first update procedure and the second application has already been permitted in the second setting procedure to acquire the updated first personal information.

According to the present invention, when a user's legitimate personal information is updated, the user can effectively manage the personal information on the application.

1 is a schematic block diagram showing an information processing system according to a first embodiment. FIG. 2 is a diagram illustrating an example of a hardware configuration of an information updating device. 11 is a diagram showing a processing flow regarding updating of personal information of an application of a first user terminal by the information updating device according to the first embodiment; FIG. 13 is a diagram showing a processing flow regarding permission for automatic update of first personal information by a first setting unit of the information updating device. FIG. 13 is a diagram showing an example of a processing screen regarding permission for automatic update of first personal information by a first setting unit of the information updating device. FIG. FIG. 13 is a diagram showing a processing flow regarding permission for automatic updating of second personal information by a second setting unit of the information updating device. 13 is a diagram showing an example of a processing screen regarding permission for automatic updating of second personal information by a second setting unit of the information updating device. FIG. 13 is a diagram showing an example of a processing screen for permitting automatic updating of second personal information by a second setting unit of the information updating device. FIG. FIG. 13 is a diagram showing an example of automatic update prompting information displayed on the screen of a first user terminal. FIG. 13 is a diagram showing an example of a screen display of a first user terminal in a state in which automatic update of first personal information is set. FIG. 11 is a diagram showing an example of first personal information update information displayed on the screen of the first user terminal. FIG. 11 is a schematic block diagram showing an information processing system according to a second embodiment.

The following describes an embodiment of the present invention with reference to the drawings. Note that in all drawings, similar components are given similar reference numerals and descriptions are omitted where appropriate.

In the following explanation, each component of each device is represented as a functional block, not as a hardware configuration. Each component of each device is realized by any combination of hardware and software, centered on the CPU of any computer, memory, a program loaded into the memory, a storage medium such as a hard disk that stores the program, and an interface for network connection. There are various variations in the methods and devices for realizing this.

First Embodiment
(Configuration of information processing system 100)
1 is a schematic block diagram showing an information processing system 100 according to the first embodiment. The information processing system 100 includes a management server 1 in which at least one of a national government and a local government directly or indirectly manages information, a first user terminal 2 of a user who uses the information processing system 100, and an information update device 3, and these devices are connected to each other via known communication networks 50, 60 such as the wired or wireless Internet or a dedicated line.

The communication networks 50 and 60 include, for example, communication over 4G or 5G lines. The communication networks 50 and 60 may be networks independent of each other, or may be networks that share part or all of each other.

The information updating device 3 is connected to a memory unit 4. The memory unit 4 is a storage that stores predetermined information. The memory unit 4 may be provided inside the information updating device 3 or may be provided externally. The information updating device 3 may also be a so-called cloud server.

The management server 1 managed by at least one of the national government and a local government may include a management server managed (operated) by a corporation operated by at least one of the national government and a local government (for example, the Japan Agency for Local Government Information Systems (J-LIS)). The management server 1 may also include a case where it is directly or indirectly managed or operated by an organization equivalent to the national government or a local government.

The first user terminal 2 is a terminal device owned, managed, carried, or used by a user who uses the information processing system 100, and is, for example, a mobile phone such as a smartphone, a tablet, a personal computer, or a multifunction printer. Here, a user refers to a customer who receives goods or services using the information processing system 100.

The My Number Card (Individual Number Card) is an IC card that can be used as a document to prove the individual number or as an official identification document (identification medium) for identity verification. When identity verification is performed by an authentication server, the so-called four basic pieces of information, namely, name, date of birth, address, and gender, can be obtained from the My Number Card. In this embodiment, the user is authenticated by a public personal authentication service using a method using the My Number Card or a method using a smartphone electronic certificate (so-called smartphone JPKI), and a digital ID (digital ID application) that reflects these in the application of the first user terminal 2 is issued. Then, the user can, for example, purchase goods (items) or receive services at a store by performing personal authentication using this digital ID and making a cashless payment (electronic payment).

A first application 21 (e.g., the digital ID application described above) that functions as an application that manages the user's personal information on the first user terminal 2, and a second application 22 that links with the first application are installed on the first user terminal 2. Here, "linked" means, for example, that the second application 22 functions as an application that uses the user's personal information managed by the first application 21.

The first application 21 has a function as an ID authentication platform as a digital ID card, and also has a function as a so-called super app. The second application 22 can include one or more mini apps with the first application 21 as the super app. The mini app may be, for example, a disaster prevention app that can issue evacuation instructions appropriate for each resident, and a local point app that can grant and use local points. The second application 22 is linked to the first application 21, but can also be one or more applications that provide a completely different service (for example, a smartphone app or a web service) rather than a mini app of the first application. The second application 22 may be, for example, a bank app related to a bank. In this case, a bank account may be opened in the bank app as the second application by using personal information managed by the digital ID app as the first application.

When the authentic personal information of a user managed by the management server 1 is updated, the information update device 3 reflects the updated personal information in the first application 21 on the user's first user terminal 2. The information update device 3 includes a communication unit (not shown) for communicating with external devices, etc. via the communication networks 50 and 60.

The update information acquisition unit 31 acquires update information indicating that the user's regular personal information managed by at least one of the management servers 1 of the national and local governments has been updated. Here, the user's regular personal information includes at least resident registration data. The user's regular personal information also includes at least the four basic pieces of information: name, address, sex, and date of birth. In addition to the four basic pieces of information, the user's regular personal information may also include information such as place of birth, telephone number, occupation, email address, and family structure.

The first setting unit 32 sets automatic updates of the user's first personal information. The first personal information is the user's personal information managed by the first application 21 of the first user terminal 2, and in this embodiment, is the above-mentioned four basic pieces of information: the user's name, address, gender, and date of birth. In addition to the above-mentioned four basic pieces of information, the first personal information may also include information such as the place of birth, telephone number, occupation, email address, and family structure. The first setting unit 32 may also function as a judgment unit that judges whether or not automatic updates of the user's first personal information are permitted.

The second setting unit 33 sets whether the user permits the second application 22 to acquire the updated (including automatic update) first personal information. In other words, the second setting unit 33 allows the user to set whether the updated first personal information is provided to the second application 22, or allows the second application 22 to refer to the updated first personal information. The second setting unit 33 may also set whether the second application 22 is permitted to refer to the first personal information (to acquire the first personal information) when a predetermined action (such as starting the second application 22) in the second application 22 is detected. Furthermore, the second setting unit 33 can set to permit the second application 22 to acquire the updated first personal information for a set period of time or to always permit it. Note that, when the second application 22 is a plurality of mini-apps, the second setting unit 33 may be able to set whether the first personal information is permitted to be acquired for each of the plurality of mini-apps.

When the update information acquisition unit 31 acquires update information for the resident record data and the first setting unit 32 has already set the user to automatically update the first personal information, the first update unit 34 acquires updated authentic personal information (e.g., including at least the latest version of the resident record data) from the management server 1 and updates the first personal information.

The second update unit 35 updates the second personal information when the first update unit 34 updates the first personal information and the second setting unit 33 has already permitted the second application 22 to acquire the updated first personal information. Here, the second personal information is personal information of the user used in the second application 22 using the first personal information. For example, when the second application is a bank application and the user's address information as the first personal information is updated, the user's address information as the second personal information used in the bank application is updated. Note that the second personal information may include information such as the place of birth, telephone number, occupation, email address, and family structure in addition to the four basic information (name, address, sex, and date of birth). Note that the above-mentioned second setting unit 33 may function as a determination unit that determines whether or not the update of the second personal information is permitted.

When the first setting unit 32 has not set the automatic update of the first personal information, the display control unit 36 controls the first user terminal 2 to display automatic update prompting information that prompts the user to set the automatic update. A specific example of the automatic update prompting information will be described later with reference to FIG. 8 and the like. In addition, when the first setting unit 32 sets the automatic update of the first personal information, the display control unit 36 can also control the first user terminal 2 not to display the automatic update prompting information or to change the display mode of the automatic update prompting information in the first user terminal 2. Furthermore, when the first update unit 34 updates the first personal information, the display control unit 36 can also control the first user terminal 2 to display first personal information update information indicating that the first personal information has been updated. In addition, there may be a function that allows the user to cancel the automatic update setting after setting the automatic update with the first setting unit 32.

The forced logout unit 37 forcibly transitions the user's login state to the first application 21 to a logged-out state when the update information acquisition unit 31 acquires update information and the first setting unit 32 has not set automatic update of the first personal information, etc.

(Hardware configuration example)
2 is a diagram showing an example of the hardware configuration of the information updating device 3. The information updating device 3 includes a bus 1010, a processor 1020, a memory 1030, a storage device 1040, an input/output interface 1050, and a network interface 1060.

The bus 1010 is a data transmission path for the processor 1020, memory 1030, storage device 1040, input/output interface 1050, and network interface 1060 to transmit and receive data to and from each other. However, the method of connecting the processor 1020 and other components to each other is not limited to a bus connection.

The processor 1020 is a processor realized by a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit), etc.

Memory 1030 is a main storage device realized by RAM (Random Access Memory) or the like.

The storage device 1040 is an auxiliary storage device realized by a removable medium such as a hard disk drive (HDD), a solid state drive (SSD), a memory card, or a read only memory (ROM), and has a recording medium. The recording medium of the storage device 1040 stores program modules that realize each function of the information update device 3 (for example, the update information acquisition unit 31, the first setting unit 32, the second setting unit 33, the first update unit 34, the second update unit 35, the display control unit 36, and the forced logout unit 37). The program modules are related to the applications (first application 21, second application 22) installed in the first user terminal 2. The processor 1020 loads and executes each of these program modules on the memory 1030 to realize each function corresponding to the program module. The storage device 1040 may also function as a part or all of the memory unit 4 connected to the information update device 3.

The input/output interface 1050 is an interface for connecting the information update device 3 to various input/output devices.

The network interface 1060 is an interface for connecting the information updating device 3 to a network. This network is, for example, a LAN (Local Area Network) or a WAN (Wide Area Network). The method for connecting the network interface 1060 to the network may be a wireless connection or a wired connection. The information updating device 3 may communicate with the first user terminal 2 via the network interface 1060.

The hardware configuration of the first user terminal 2 is similar to that of the information update device 3, so a description of it will be omitted here.

(Operation example of the first embodiment)
3 is a diagram showing a process flow for updating personal information of an application of a first user terminal 2 by the information updating device 3 according to the first embodiment. Here, a process is described after a user who has installed the first application 21, which is a digital identification card, in the first user terminal 2 experiences an event such as marriage or relocation, which causes a change in the information recorded in the resident's card of the user in the management server 1 managed by J-LIS, and the data in the resident's card is updated.

If there is a change in the information on the resident's card, the signature electronic certificate on the user's My Number card (and smartphone electronic certificate) will become invalid. The reason for the expiration is that the signature electronic certificate contains the user's legitimate personal information, such as name, address, date of birth, and gender, and the information on the resident's card and the electronic certificate will differ due to marriage, relocation, etc. On the other hand, the user authentication electronic certificate does not contain the user's name, address, date of birth, or gender, so it will not become invalid even if the resident's card data is updated.

In the processing flow according to this embodiment, the trigger is when the user submits a marriage notification, moving out notification, or moving in notification to the city/ward/town/village office, causing the data on the resident's card to change (for example, the administrator of management server 1 inputs the user's new address card data into management server 1). This causes management server 1 to update the data on the resident's card (for example, name, address) which is part of the legitimate personal information about the user (step S11).

When the data on the resident's card managed by management server 1 is updated, the information on the electronic signature certificate on the My Number card differs from the information on the resident's card, and the electronic signature certificate becomes invalid (step S12).

Meanwhile, the update information acquisition unit 31 of the information update device 3 acquires information that the signature electronic certificate of the My Number card of the user managed by the management server 1 has expired (step S21). The timing at which the update information acquisition unit 31 acquires the information that the signature electronic certificate has expired is arbitrary. For example, the update information acquisition unit 31 may be set to check the expiration information of the signature electronic certificate at a fixed time every day and acquire information that the signature electronic certificate has expired.

In step S21, the information updating device 3 acquires information on the reason for the expiration of the signature electronic certificate, in addition to the information that the signature electronic certificate has expired, such as whether the reason for the expiration is due to "update of at least one of the data items of name, address, date of birth, and gender." The above-mentioned reason for the expiration is, for example, an update of address data due to moving, or an update of name data due to marriage. For example, the information on the reason for the expiration can be acquired as tag information attached to the information on the expiration, indicating which data update caused the expiration, at the same time as the information on the expiration is acquired. Furthermore, the information on the reason for the expiration may be acquired as information associated with the information on the expiration, either at the same time as the information on the expiration is acquired, or at a different time.

The update information acquisition unit 31 determines whether the reason for revocation is due to "update of at least one of the name, address, date of birth, and gender" from the acquired information on the reason for revocation of the signature electronic certificate (step S22). For example, the update information acquisition unit 31 can determine whether the reason for revocation is due to "update of at least one of the data items of the name, address, date of birth, and gender" from the acquired information on the reason for revocation.

If the update information acquisition unit 31 determines in step S22 that the reason for the invalidation of the signature electronic certificate is due to "update of at least one of the data items of name, address, date of birth, and gender" (YES), the first setting unit 32 determines whether automatic update of the user's first personal information (e.g., the four basic pieces of information of name, address, date of birth, and gender) is permitted (step S23). On the other hand, if it is determined in step S22 that the reason for the invalidation is not due to "update of at least one of the data items of name, address, date of birth, and gender" (NO), the forced logout unit 37 forcibly changes the login state of the user to a logout state in the first application 21 of the first user terminal (step S24). In this case, the user's digital identification card may become unusable at the same time as the forced logout.

For example, if a user's My Number card is lost or stolen, the signature electronic certificate will be invalidated by submitting a lost My Number card report. In such a case, since the reason for invalidation in step S22 is not due to "update of at least one of the data items name, address, date of birth, and gender" (NO), a forced logout will occur in step S24. Even if a third party illegally logs in in this state, the forced logout will prevent the third party from using the app, preventing the third party from illegally viewing personal information or using services.

In addition, if the second application 22 is linked to the first application 21 and the second application 22 cannot be used unless the first application 21 is logged in (for example, when the second application is a mini-app), when the login state of the first application 21 is forcibly logged out, the login state of the second application 22 may also be forcibly logged out.

If the first setting unit 32 determines in step S23 that automatic updating of the user's first personal information is permitted (YES), the first updating unit 34 (information updating device 3) acquires the latest version of the resident's card data, which is the updated legitimate personal information, from the management server 1 (step S25). The first updating unit 34 then updates the first personal information managed by the first application 21 of the first user terminal 2 using the latest version of the personal information acquired in step S25 (step S27).

If the first setting unit 32 determines in step S23 that the automatic update of the user's first personal information is not permitted (NO), the forced logout unit 37 forcibly switches the login state of the user to the first application 21 of the first user terminal to a logged-out state (step S26). In the embodiment, for example, when logging in again after logging out in step S26, the user may be required to log in after personal authentication using a valid digital certificate for signature again. The forced logout function can prevent the user from using the digital identification card when the contents of the resident's card data and the contents of the digital identification card are different. In other words, it can prevent the user from continuing to use personal information (inaccurate personal information) that is out of date before the resident's card data is updated. Specifically, when the reason for expiration is a move (moving), it is possible to prevent the mini-app limited to residents of the area from being used at the address before the move at a different address after the move. In addition, when the login state of the first application 21 is forcibly switched to a logged-out state, the login state of the linked second application 22 may also be forcibly logged out.

After the first personal information of the first application of the first user terminal 2 is updated to the latest version in step S27, the second setting unit 33 determines whether the second application 22 is permitted to obtain the updated latest version of the first personal information (step S28).

In step S28, if the second setting unit 33 determines that the second application 22 is permitted to obtain the latest version of the first personal information (YES), the process proceeds to step S29, where the second update unit 35 (information update device 3) determines whether a predetermined action has been taken from the second application 22. In the first embodiment, for example, the second update unit 35 may detect whether the second application 22 has been started (whether the user has launched the second application 22) and determine whether the above-mentioned predetermined action (starting of the second application 22) has been taken. If the second update unit 35 determines that the above-mentioned predetermined action has been taken from the second application 22 (YES), the process proceeds to step S30. Then, in step S30, the second update unit 35 updates the second personal information used in the second application using the first personal information updated to the latest version in step S27, and ends the information update process. Note that if the second update unit 35 determines that there has been no predetermined action from the second application 22 (NO), the process returns to step S29 and repeats the determination in step S29. For example, if the timing for updating the second personal information used by the second application 22 is set to 7 p.m. every day, the above-mentioned specified action may be taken at 7 p.m. In this case, in step S29, the second update unit 35 may detect the timing at which the second personal information is updated at 7 p.m. and determine that the above-mentioned specified action has been taken (detecting the timing of 7 p.m.).

In addition, if the second setting unit 33 determines in step S28 that the second application 22 is not permitted to obtain the latest version of the first personal information (NO), the information update process is terminated without updating the second personal information used by the second application 22.

The second setting unit 33 can set whether or not to permit the second application 22 to acquire the second personal information of the user used in the second application 22, for each piece of information related to name, address, sex, and date of birth. Even when the second setting unit 33 permits acquisition, it may permit acquisition only for a certain period of time (for example, one week from the time of granting permission), rather than permitting it all the time.

Figure 4 is a diagram showing a processing flow for permission to automatically update the first personal information by the first setting unit 32 of the information updating device 3. The user of the first user terminal 2 can permit automatic update of the first personal information used (managed) by the first application 21 (step S31). Figure 5 is a diagram showing an example of a processing screen for permission to automatically update the first personal information by the first setting unit 32 of the information updating device 3. For example, the first setting unit 32 may permit automatic update of the first personal information by the user pressing an "Automatic Update" UI button 51 displayed on the first user terminal 2 (step S31). Note that at this time, the automatic update is performed only after the user agrees to the terms of use regarding the automatic update.

Returning to FIG. 4, the permission for automatic update of the first personal information by the user through the first user terminal 2 in step S31 is given by the user himself/herself, and upon receiving this consent from the user, the information updating device 3 stores information (permission information) indicating permission for automatic update of the first personal information in the storage unit 4 (step S41). In the processing of the above-mentioned step S23 by the information updating device 3, the first setting unit 32 determines whether or not automatic update of the user's first personal information is permitted by checking this permission information. Note that the first setting unit 32 can also cancel the permission for automatic update of the first personal information (cancel automatic update).

Figure 6 is a diagram showing a processing flow for allowing automatic updating of second personal information by the second setting unit 33 of the information updating device 3. The user of the first user terminal 2 selects which information of the second personal information used in the second application 22 is to be acquired from the first personal information used in the first application 21, i.e., which information is to be set for automatic updating (step S51). Specifically, the second setting unit 33 selects which information of the information related to name, address, sex, and date of birth acquired as the first personal information is to be acquired as the second personal information, i.e., which information is to be set for automatic updating.

Next, the second setting unit 33 can set whether or not to permit the second application 22 to acquire each piece of second personal information selected in step S51 (each piece of information related to the selected name, address, gender, and date of birth). Even if the second setting unit 33 permits acquisition, it may permit acquisition only for a certain period of time (for example, one week from the time of granting permission) rather than permitting it all the time.

The permission and setting of automatic update of the second personal information by the user through the first user terminal 2 in steps S51 and S52 is consented to by the user himself, and with this consent from the user, the information updating device 3 stores information (setting information) related to the setting of automatic update for the selected information among the second personal information in the storage unit 4 (step S61). In the processing of the above-mentioned step S28 by the information updating device 3, the second setting unit 33 determines whether or not acquisition of the latest version of the first personal information that will become the second personal information used by the second application 22 is permitted by checking this setting information.

7 is a diagram showing an example of a processing screen for permission to automatically update the second personal information by the second setting unit 33 of the information updating device 3. In the example of FIG. 7, the first application 21 is assumed to be a super application, and a mini application as the second application 22 is assumed to be installed in the first user terminal 2. In the example of FIG. 7, the following description will be given assuming that the setting for permission to automatically update the second personal information of the second application 22 (mini application) can be performed on the first application 21. For example, as shown in FIG. 7, the first application 21 installed in the first user terminal 2 is launched, and the "second application information" directory 62 located in the "privacy settings" directory 61 located in the lower hierarchy of "settings" which is a lower hierarchy of "home" is opened, and an information selection screen 63 is displayed. For example, when "address" is selected as the second personal information to be automatically updated, the ">" part of the mark prompting the screen transition in the area 64 in which the selected information is displayed is clicked or touched.

Figure 8 is a diagram showing an example of a processing screen for permitting automatic updating of the second personal information by the second setting unit 33 of the information updating device 3. For example, by pressing area 64 in Figure 7, a selection screen 72 for selecting a period for obtaining update information (i.e., a period during which address setting is possible) located in the "Address update setting" directory 71, which is located in a lower hierarchy of the "Second application information" directory 62, is displayed. Here, if the user does not particularly limit the period and always permits obtaining update information (here, address setting), an instruction is given by checking a check box in the "Always allow" area 73. For example, when the user presses the "Always allow" area 73, the process of step S52 in Figure 6 is performed. If the setting is made as in the example of Figure 8, when the address information in the first personal information is updated, the address information in the second personal information of the second application 22 will be updated.

Figure 9 is a diagram showing an example of automatic update prompting information displayed on the screen of the first user terminal 2. If automatic update of the user's first personal information is not set, the information update device 3 may prompt the user to automatically update the first personal information. That is, when automatic update of the user's first personal information is not set (when the first setting unit 32 has not set automatic update of the first personal information), the display control unit 36 causes the first user terminal 2 to display automatic update prompting information that prompts the user to set automatic update.

In FIG. 9, the automatic update reminder information is provided as a user interface (UI) button 87 displaying the text "Automatically update", for example, and the user can click or touch the UI button 87 to select it, and set the automatic update by making the required settings on the destination screen (such as obtaining the user's consent to the automatic update or obtaining consent to the terms of use). In this way, by displaying the UI button 87 related to the automatic update reminder information on the display screen of the first user terminal 2, it becomes clear that the user has not set the automatic update of the first personal information, and the user can be prompted to set the automatic update of the first personal information.

In FIG. 9, the first application 21 displays a user's digital identification card 81 on the screen of the first user terminal 2. The display contents of the digital identification card 81 include at least the so-called four basic pieces of information: the user's name 83, address 84, date of birth 85, and gender 86.

In addition, in FIG. 9, a hide button 82 may be displayed to hide the screen display of the digital identification card 81. When the user touches this hide button 82, the display of the digital identification card 81 can be made invisible, thereby preventing information leakage due to others looking at the screen, etc.

When the first setting unit 32 sets the automatic update of the first personal information (in other words, when the first setting unit 32 determines that the automatic update of the first personal information is set), the display control unit 36 of the information update device 3 can perform control so that the automatic update reminder information is not displayed on the first user terminal 2. For example, the display control unit 36 may perform control so that the UI button 87 displayed on the screen of the first user terminal 2 is not displayed. The display control unit 36 can also perform control so that the display mode of the automatic update reminder information on the screen of the first user terminal 2 is changed.

10 is a diagram showing an example of a screen display of the first user terminal 2 in a state in which automatic update of the first personal information is set. FIG. 10 shows an example in which the display mode of the automatic update prompt information on the screen of the first user terminal 2 is changed to a mode in which the UI button 87 on which the characters "Automatic Update" are displayed is erased from the screen and made invisible (in FIG. 10, the area where the UI button 87 was located is indicated by the reference character 88). Here, "changing the display mode of the automatic update prompt information" may include making the display mode such that the automatic update prompt information is made difficult to see by erasing the UI button itself or changing the brightness, color, or font, etc., of the characters "Automatic Update" on the UI button. In this way, with regard to the display of the automatic update prompt information, after the user allows the automatic update, the UI button prompting the automatic update is erased or made difficult to see. This prevents the display of the digital identification 81 from becoming cumbersome, and a user-friendly digital identification can be provided. Furthermore, to give the user an incentive to remove the cumbersome "Auto Update" UI button, a pop-up such as "If you perform an automatic update, the "Auto Update" UI button will disappear" may be displayed, encouraging the user to perform an automatic update.

When the first update unit 34 updates the first personal information in the process of step S27 shown in FIG. 3, the display control unit 36 can also control information indicating that the first personal information has been updated (first personal information update information) to be displayed on the screen of the first user terminal 2. FIG. 11 is a diagram showing an example of first personal information update information 91 displayed on the screen of the first user terminal 2. In FIG. 11, as an example, the text "Updated to latest resident registration information" is displayed as a pop-up as the first personal information update information 91. After checking the display of the first personal information update information 91, the user of the first user terminal 2 can close the pop-up display by touching/clicking a close button (for example, a button indicated by an "x") in the display.

As described above, in the first embodiment, the information processing system 100 is a system in which the first user terminal 2, the first application 21, and the second application 22 are used, and includes an update information acquisition unit 31, a first setting unit 32, a second setting unit 33, a first update unit 34, and a second update unit 35. As described above, private businesses can inquire about the four pieces of personal information in the J-LIS (management server) through the latest user information (four pieces of information) provision service, but for example, if personal information stored in the J-LIS (management server) is updated, it is typical that the four pieces of information are simply updated under the management of a private business that has obtained comprehensive consent from the user in advance, and the user himself/herself does not directly manage the update of personal information on the application and can selectively control the permission, cancellation, period, and type of the four pieces of information to be updated. However, the information processing system 100 according to this embodiment includes the first setting unit 32 and the first update unit 34, and can set automatic update of the first personal information (including the four pieces of information) in the first application 21 (for example, a digital ID card). Furthermore, the information processing system 100 according to the present embodiment includes a second setting unit 33 and a second updating unit 35, and can set whether to individually update the second personal information of one or more second applications 22 (e.g., mini-applications) related to other services linked to the first application 21 (e.g., digital identification card) using the automatically updated first personal information, the contents of the information to be updated (which personal information among name, address, etc. to update), and the period during which the update is permitted. That is, the first application 21 (digital identification card) according to the first embodiment is linked to other services (e.g., mini-applications), and the user can control the update of the second personal information used in each service linked to the first application 21 at his/her own discretion. Therefore, in the information processing system 100 according to the present embodiment, not only can the personal information of the first application 21 be simply updated to the latest version, but also the update of the personal information used in various applications (second application 22) (linked to the first application 21) can be set, so that the user can manage the recency of the personal information by himself/herself. In addition, since the update of the personal information of the first application 21 and the second application 22 can be set, the user can centrally manage his/her personal information by setting the first application 22. As described above, in the information processing system 100 according to this embodiment, when the user's regular personal information is updated, the personal information on the application (first application 21, second application 22) of the first user terminal 2 can be effectively managed by the user. That is, when the user's regular personal information is updated, the user can select whether or not to update the personal information on the application of the first user terminal 2, and even if the user has selected to update, the user can stop the update, and can select which personal information to update and the period during which the update is permitted. Therefore, the user can efficiently and selectively manage the personal information on the application by the user. And, for example, even if the user's regular personal information (e.g., resident registration data) stored in the management server 1 is updated due to the user's moving or marriage, the personal information on the first application 21 and the second application 22 can be updated smoothly.

Second Embodiment
(Another Configuration of Information Processing System 100)
Fig. 12 is a schematic block diagram showing an information processing system 100 according to the second embodiment. When each component of the information processing system 100 in Fig. 12 has the same configuration as each component of the information processing system 100 in Fig. 1, the same reference numerals are used and the description is omitted as appropriate.

The information processing system 100 according to the second embodiment, unlike the first embodiment, further includes a second user terminal 5. In this embodiment, the second user terminal 5, like the first user terminal 2, is a terminal device that is owned, managed, carried, or used by a user who uses the information processing system 100, and is, for example, a mobile phone such as a smartphone, a tablet, a personal computer, or a multifunction device.

In this embodiment, a first application 21 that functions as an application for managing personal information of a user is installed on the first user terminal 2. A second application 22 that works in conjunction with the first application 21 installed on the first user terminal 2 is installed on the second user terminal 5.

In this embodiment, the first application 21 of the first user terminal 2 and the second application 22 of the second user terminal 5 are installed on different hardware (terminals), but the application functions are the same as those described in the first embodiment. The other configurations of the information processing system 100 according to this embodiment are the same as those of the information processing system 100 according to the first embodiment. Therefore, the flow of the update process of the user's personal information described in the first embodiment is the same as the flow of the update process, except that the second application 22 is installed on the second user terminal 5. The other update processes are the same. Therefore, when the user's personal information, which is the so-called four basic pieces of information, is updated, the information processing system 100 according to this embodiment can effectively reflect the personal information on the application of the user terminal.

In this embodiment, the update information acquisition unit 31, the first setting unit 32, the second setting unit 33, the first update unit 34, the second update unit 35, the display control unit 36, and the forced logout unit 37 are all described as being provided in the information update device 3, but at least a part of the update information acquisition unit 31, the first setting unit 32, the second setting unit 33, the first update unit 34, the second update unit 35, the display control unit 36, and the forced logout unit 37 may be provided in at least one of the first user terminal 2 and the second user terminal 5. For example, in the first embodiment, the first setting unit 32 and the second setting unit 33 are provided in the information update device 3, but may be provided in the first user terminal 2 (the first application 21 and the second application 22). In this case, a program module realizing the first setting unit 32 and the second setting unit 33 may be stored in a storage unit included in the first user terminal 2.

Note that the flowcharts according to this embodiment (FIGS. 3, 4, and 6) are merely one embodiment. Within the scope of the present invention, there may be processes other than those described in FIG. 3, FIG. 4, and FIG. 6, some of the processes described in FIG. 3, FIG. 4, and FIG. 6 may be omitted, or the order of the processes may be changed, as long as the purpose of the present invention is not changed. For example, the forced logout process described in step S24 in FIG. 3 may be omitted. Also, for example, the process in step S29 in FIG. 3 may be omitted.

Although the embodiment of the present invention has been described above, the embodiment disclosed herein is illustrative in all respects and should not be considered as limiting. The scope of the present invention is indicated by the claims rather than the above description, and is intended to include the meaning equivalent to the claims and all modifications within the scope.

Reference Signs List 1 Management server 2 First user terminal 3 Information update device 4 Storage unit 5 Second user terminal 21 First application 22 Second application 31 Update information acquisition unit 32 First setting unit 33 Second setting unit 34 First update unit 35 Second update unit 36 Display control unit 37 Forced logout unit 50, 60 Communication network 100 Information processing system

Claims (11)

An information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application functioning in data linkage with the first application,
an update information acquisition unit that acquires update information indicating that the genuine personal information of the user registered with at least one of a national government agency and a local government agency and managed by a management server of the agency has been updated;
a first setting unit that sets an automatic update of the first personal information of the user managed by the first application;
a second setting unit that sets whether to permit the second application to acquire the updated first personal information;
a first updating unit that, when the update information acquisition unit acquires the update information and the first setting unit has already set automatic update of the first personal information, acquires the updated regular personal information from the management server and updates the first personal information;
a second updating unit that updates second personal information used by the second application using the first personal information when the first updating unit updates the first personal information and the second setting unit has already permitted the second application to acquire the updated first personal information,
The second application functions in a second user terminal used by the user, which is different from the first user terminal, or in the first user terminal, in data linkage with the first application.
Information processing system. An information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application functioning in data linkage with the first application,
an update information acquisition unit that acquires update information indicating that the genuine personal information of the user registered with at least one of a national government agency and a local government agency and managed by a management server of the agency has been updated;
a first setting unit that sets automatic updating of first personal information of the user managed by the first application;
a second setting unit that sets whether to permit the second application to acquire the updated first personal information;
a first updating unit that, when the update information acquisition unit acquires the update information and the first setting unit has already set automatic update of the first personal information, acquires the updated regular personal information from the management server and updates the first personal information;
a second updating unit that updates second personal information used by the second application using the first personal information when the first updating unit updates the first personal information and the second setting unit has already permitted the second application to acquire the updated first personal information,
The second application functions in a second user terminal of the user, which is separate from the first user terminal, in data linkage with the first application.
Information processing system. 3. The information processing system according to claim 1,
The information processing system further includes a display control unit that displays automatic update prompting information on the first user terminal to prompt the user to set the automatic update when the first setting unit has not set the automatic update of the first personal information. 4. The information processing system according to claim 3 ,
An information processing system, wherein when the first setting unit sets the automatic update of the first personal information, the display control unit does not display the automatic update prompting information on the first user terminal, or changes the display mode of the automatic update prompting information on the first user terminal to another display mode. 3. The information processing system according to claim 1,
The information processing system further includes a display control unit that, when the first update unit updates the first personal information, displays first personal information update information on the first user terminal indicating that the first personal information has been updated. 3. The information processing system according to claim 1,
The second setting unit can be set to permit the second application to acquire the updated first personal information only for a predetermined period of time. 3. The information processing system according to claim 1,
The first personal information includes at least one of information regarding the user's name, address, gender, and date of birth;
An information processing system, wherein the second setting unit can set whether or not to permit the second application to acquire information regarding the user's name, address, gender, and date of birth. 3. The information processing system according to claim 1,
The second application includes one or more applications that perform data linkage with the first application in the first user terminal,
The second setting unit can set whether or not to permit acquisition of updated first personal information for each of the one or more applications. 3. The information processing system according to claim 1,
The information processing system further includes a forced logout unit that, when the update information acquisition unit acquires the update information and the first setting unit has not set the automatic update of the first personal information, forcibly transitions the user's login state to a logged-out state. A method for controlling an information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application functioning in data linkage with the first application, the method comprising:
A computer that realizes the information processing system ,
Obtaining update information indicating that the genuine personal information of the user registered with at least one of a national and local government agency and managed by a management server of the agency has been updated;
Configuring automatic updates of first personal information of the user managed by the first application;
Set whether to permit the second application to acquire the updated first personal information;
When the update information is acquired, if automatic update of the first personal information has already been set, the updated regular personal information is acquired from the management server, and the first personal information is updated;
When the first personal information is updated, if the second application is already permitted to acquire the updated first personal information, updating second personal information used by the second application using the first personal information;
The second application functions in a second user terminal used by the user, which is different from the first user terminal, or in the first user terminal, in data linkage with the first application.
A method for controlling an information processing system. An information processing system using a first user terminal of a user, a first application functioning as an application for managing personal information of the user on the first user terminal, and a second application functioning in data linkage with the first application, wherein the second application functions in data linkage with the first application on a second user terminal used by the user that is separate from the first user terminal, or on the first user terminal,
A computer that realizes the information processing system includes:
an update information acquisition step of acquiring update information indicating that the genuine personal information of the user , which is registered in at least one of a national government agency and a local government agency and managed in a management server of the agency, has been updated;
a first setting step for setting automatic updating of first personal information of the user managed by the first application;
a second setting step of setting whether to permit the second application to acquire the updated first personal information;
a first updating step of acquiring the updated regular personal information from the management server and updating the first personal information when the update information has been acquired in the update information acquiring step and automatic updating of the first personal information has already been set in the first setting step;
A computer-readable information processing program for executing a second update procedure, which updates second personal information used by the second application using the first personal information when the first personal information is updated in the first update procedure and the second setting procedure has already permitted the second application to obtain the updated first personal information.