JPH11145949A - Personal information safety operating method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal information safety operating method with which the secrecy of personal information is kept even when performing communication while using a public network in an internet system. SOLUTION: A questionaire answer and a personal ID are communicated on a public network 4 between a user terminal 1 and a world wide web(WWW) server 3, the personal ID and the correspondent personal information are transmitted as data enciphered by a cryptographic key in a disclosed key enciphering system on the public network 4 between a provider terminal 2 and the WWW server 3, and the enciphered data are deciphered while using a deciphering key paired with the cryptographic key on the side of reception.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a user terminal,
The present invention relates to a personal information security operation method in an Internet system in which a terminal of a provider contracted by the user and a server of an Internet connection service provider are mutually connected via a public network.

[0002]

2. Description of the Related Art Various services are currently available on the Internet. The most notable is the W
It is a WW (World Wide Web) server. Recently, the number of companies and individuals having a homepage on a WWW server has been rapidly increasing, and business and business using this homepage have been actively performed. In this case, in the conventional Internet, questionnaire information attached with personal information is transmitted to a contract provider via a public network or a dedicated line.

[0003]

However, in the above communication method, questionnaire information with personal information attached is transmitted via a public network or the like, and data on this line can be relatively easily read by reading signals. There is a problem that the confidentiality of personal information cannot be maintained. For example, there is a danger that a personal credit card number is stolen and used.

[0004]

According to the present invention, there is provided a personal information safe operation method, wherein a user terminal, a terminal of a provider contracted by the user, and a server of an Internet connection service provider are respectively connected via a public network. In the personal information security operation method in an Internet system connected to each other, the user's terminal connects to the server of the Internet connection service provider via the public network and transmits a questionnaire response by searching for a home page. In doing so, an ID for personal identification given to the user from the contract provider is transmitted together with the result of the questionnaire, and the server of the Internet connection service provider receiving the ID transmits the contract through the public network. Connects to the provider's terminal and receives the received personal identification I Is converted into encrypted data by the encryption key in the public key encryption system and transmitted, and the terminal of the contract provider that receives the data decrypts the received data with the decryption key corresponding to the encryption key, and decrypts the received data. The personal information corresponding to the resulting personal identification ID is extracted, and the extracted personal information is converted into encrypted data using an encryption key in the public key system and transmitted. The server of the third party decrypts the received data using the decryption key corresponding to the encryption key, and replaces the decrypted personal information with the personal identification ID. As a result, the confidentiality of the personal information on the public network is maintained and the operation is secure.

[0005]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 is a system explanatory diagram showing an embodiment of the personal information safe operation method of the present invention. In FIG. 1, reference numeral 1 denotes a terminal of a user who uses the Internet, and is hereinafter simply referred to as a user terminal. Reference numeral 2 denotes a provider terminal contracted with the user, and is hereinafter simply referred to as a provider terminal. Reference numeral 3 denotes a server of the Internet connection service provider. In this example, the most common WWW
Server. Reference numeral 4 denotes a public network such as a telephone line. In the Internet system shown in FIG. 1, when the user terminal 1, the provider terminal 2, and the WWW server 3 communicate with each other's device, they communicate via the public network 4.

Referring to FIG. 1, an outline of the present embodiment will be described. On a public network 4 between a user terminal 1 and a WWW server 3, a questionnaire response and a personal identification ID (hereinafter referred to as a personal ID) are provided.
Or simply referred to as ID). On the public network 4 between the WWW server 3 and the provider terminal 2, the personal ID and the personal information corresponding to the personal ID are:
It is transmitted as encrypted data converted by the public key cryptosystem. In the public key cryptosystem, two keys, an encryption key and a decryption key, are used as a pair. Although the encryption key may be made public, the decryption key is managed secretly. Unless the data encrypted with the encryption key has the decryption key, it is said that the data cannot be decrypted in general because the counting amount is too large. Therefore, the secret of the encrypted personal information on the public network 4 is kept.

FIG. 2 is a diagram showing the order of implementing the personal information security operation method in the system of FIG. 1. The operation system of FIG. 1 will be described in detail with reference to FIG. (1) First, the user terminal 1 connects to the contracted provider terminal 2 via the public network 4, is authenticated by login information and a password, establishes a path with the provider terminal 2, and establishes this path. Confirm. The personal information of the user is stored in the provider terminal 2, and the personal information of the user is input at the time of contract with the user.

(2) Next, a questionnaire on the WWW server 3 from the user terminal 1 (in general, the answer is (a)
(B), (c)... The user connects to a home page having a questionnaire with an instruction to select one or the like, etc.), and the user is sent from the WWW server 3 to the user terminal 1. The questionnaire response result created by answering the questionnaire displayed in
Send it to WW server 3. Here, the ID indicates information for personal identification (for example, a number or the like) given to each user by a provider contracted by the user.
When the WWW server 3 receives the questionnaire response result and the user ID sent from the user terminal 1, the WWW server 3 updates the database with the received information, and further compiles the user ID for each provider.

(3) The WWW server 2 transmits the user IDs collected for each provider to each provider as data encrypted by an encryption key in the public key encryption system. Each provider terminal 2 decrypts the ID of each user from the encrypted data sent from the WWW server 3 using the decryption key paired with the encryption key, and obtains personal information corresponding to each ID. Is extracted, and the individual information is returned to the WWW server 3 again as data encrypted by the encryption key in the public key encryption system. The WWW server 3 decodes the encrypted data sent from the provider terminal 2 into personal information corresponding to each ID using a decryption key paired with the encryption key, and obtains an ID of the questionnaire response result. Is replaced with the personal information.

[0010] In the public key cryptosystem, if the data of two keys forming a pair is different from each other, each provider has a different key. For example, communication between the provider A and the WWW server 3 is performed. Cannot be decrypted by another provider B. In the above embodiment, the case where the Internet is connected via the public network 4 has been described. However, the present invention can be applied to a case where a dedicated line is used instead of the public network 4.

As described above, according to the embodiment of the present invention,
On the public network 4 between the user terminal 1 and the WWW server 3, personal information is not communicated but only ID is communicated. Further, on the public network 4 between the provider terminal 2 and the WWW server 3, both the ID and the corresponding personal information are communicated as encrypted data. Therefore, unless the receiving side has a decryption key paired with the encryption key, the encrypted data cannot be decrypted. In this way, the security of personal information is ensured.

[0012]

As described above, according to the present invention, the terminal of the user, the terminal of the provider contracted by the user, and the server of the Internet connection service provider are mutually connected via the public network. In the personal information security operation method in the Internet system,
When the terminal of the user connects to the server of the Internet connection service provider via the public network and transmits a questionnaire response by searching a homepage, the result of the questionnaire is provided to the user together with the result of the questionnaire. The server of the Internet connection service provider, which has transmitted the personal identification ID, connected to the terminal of the contract provider via the public network, and received the personal identification ID.
Is converted into encrypted data by the encryption key in the public key encryption system and transmitted, and the terminal of the contract provider that receives the data decrypts the received data with the decryption key corresponding to the encryption key, and decrypts the received data. The personal information corresponding to the resulting personal identification ID is extracted, and the extracted personal information is converted into encrypted data using an encryption key in the public key system and transmitted. Server decrypts the received data with the decryption key corresponding to the encryption key and replaces the decrypted personal information with the personal identification ID. As a result, the personal information on the public network is Is kept confidential and operates safely.

[Brief description of the drawings]

FIG. 1 is a system explanatory diagram showing an embodiment of a personal information safe operation method of the present invention.

FIG. 2 is a diagram showing an execution order of a personal information security operation method in the system of FIG. 1;

[Explanation of symbols]

 1 user terminal 2 provider terminal 3 WWW server 4 public network

Claims (1)

[Claims] 1. A personal information security operation method in an Internet system in which a terminal of a user, a terminal of a provider contracted by the user, and a server of an Internet connection service provider are mutually connected via a public network. When connecting to the server of the Internet connection service provider from the terminal of the user via the public network and transmitting a questionnaire response by searching a homepage, the contract provider provides the user with the result of the questionnaire response from the contract provider. The server of the Internet connection service provider that has received the received personal identification ID connects to the terminal of the contract provider via the public network, and receives the received personal identification ID.
Is converted into encrypted data by the encryption key in the public key encryption system and transmitted, and the terminal of the contract provider that receives the data decrypts the received data with the decryption key corresponding to the encryption key, and decrypts the received data. The personal information corresponding to the resulting personal identification ID is extracted, and the extracted personal information is converted into encrypted data using an encryption key in the public key system and transmitted. A server for decrypting the received data with a decryption key corresponding to the encryption key, and replacing the decrypted personal information with the personal identification ID. .