WO2009128161A1 - Distribution management system, rough classification information storage program used for the same, and limitation information storage program - Google Patents

Distribution management system, rough classification information storage program used for the same, and limitation information storage program Download PDF

Info

Publication number
WO2009128161A1
WO2009128161A1 PCT/JP2008/057529 JP2008057529W WO2009128161A1 WO 2009128161 A1 WO2009128161 A1 WO 2009128161A1 JP 2008057529 W JP2008057529 W JP 2008057529W WO 2009128161 A1 WO2009128161 A1 WO 2009128161A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
limited
unit
handler
classification
Prior art date
Application number
PCT/JP2008/057529
Other languages
French (fr)
Japanese (ja)
Inventor
智也 大西
Original Assignee
株式会社情報セキュリティー研究所
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社情報セキュリティー研究所 filed Critical 株式会社情報セキュリティー研究所
Priority to PCT/JP2008/057529 priority Critical patent/WO2009128161A1/en
Publication of WO2009128161A1 publication Critical patent/WO2009128161A1/en

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce
    • G06Q30/06Buying, selling or leasing transactions

Definitions

  • the present invention relates to a distribution management system for managing personal information given to articles or information to be distributed.
  • Patent Document 1 Conventionally, for example, as shown in Patent Document 1, various distribution systems have been considered.
  • a user purchases a product from a member store through, for example, online shopping, as shown in FIG. 13, the member store stores the postal code, address, name, telephone number, etc. registered in advance by the user.
  • the so-called personal information invoice is attached to the product and the delivery is requested from the courier.
  • the merchandise is sent from the merchant that is the sender, to the collector's departure side sales office (collection side sales office), the collector's departure side collection place (collection side collection place), and the delivery company arrival side collection place (delivery side collection place). ), And delivered to the user (recipient) through the delivery company arrival side office (delivery side office).
  • JP 2001-341819 A JP 2001-341819 A
  • the present invention was made to solve the above problems all at once, and was made from the idea that in the distribution stage, only necessary information should be given to the parties concerned.
  • the main goal is to prevent the leakage of personal information given to them in the process of distribution.
  • the distribution management system is a distribution management system for managing articles or information to be distributed, and in the personal information given to the articles or information, the personal information cannot be specified alone.
  • the personal information storage unit for storing general information, which is rough information, and the personal information, the personal information cannot be specified alone, and at least the personal information is specified in combination with the general information.
  • a limited information storage unit that stores limited information that is detailed information that can be performed, a general information handler identifier that is an identifier of a general information handler located in an intermediate stage of the distribution, and the general information
  • a first authentication unit that accepts and authenticates the broad-type information handler identifier when a broad-class information handling signal previously assigned for handling is transmitted; and When the information handler identifier is authenticated by the first authentication unit, the classification information extraction unit that receives the classification information handling signal and extracts the classification information associated therewith, and the terminal stage of the distribution
  • the limited information handler identifier that is the identifier of the limited information handler that is located and the limited information handling signal given in advance to handle the limited information are received, the limited information handler identifier is received and authenticated.
  • a limited information extracting unit that receives the limited information handling signal and extracts limited information associated therewith when the limited information handler identifier is authenticated by the second authenticating unit; It is characterized by having.
  • a specific example of the broad classification information is a high-level concept in personal information, which is abstract information.
  • personal information which is abstract information.
  • prefecture / city / district / town address for example, prefecture / city / district / town / village Say.
  • limited information indicates a subordinate concept in personal information and refers to specific information, for example, an address below a street address (prefecture / city group / town address).
  • it further comprises: a broad information output unit that outputs the broad information extracted by the broad information extraction unit to the outside; and a limited information output unit that outputs the limited information extracted by the limited information extraction unit to the outside. It is desirable that
  • the large-scale information output unit prints the extracted large-scale information on paper and outputs the paper, and the limited information output unit extracts the extracted information. It is particularly desirable to output the limited information printed on paper.
  • the general information handler is a collector of the goods and the limited information handler is a distributor of the goods. Obtainable.
  • the collector located at the intermediate stage of distribution can know only the broad information, so that personal information can be prevented from leaking out at the intermediate stage of distribution.
  • the broad information storage unit stores a mail server address of a mail recipient
  • the limited information storage unit stores an account of the mail recipient.
  • a management unit in which the general information handler and the limited information handler manage the correspondence between the mail server address and the account, and the management unit receives a request from a mail sender.
  • the mail server address is acquired from the general information storage unit
  • the account is acquired from the limited information storage unit
  • the mail address of the mail recipient is synthesized
  • the mail from the mail sender is It is transmitted to the mail recipient.
  • a delivery destination condition reception unit that accepts delivery destination condition information for setting a delivery destination condition for sending an email
  • the broadly classified information extraction unit includes The destination condition information is acquired from the destination condition receiving unit, and the broad category information that satisfies the destination condition set by the broad category information handler is extracted from the broad category information. It is desirable.
  • a classification information handler identifier that is an identifier of a classification information handler located in an intermediate stage of the distribution, and classification information assigned in advance to handle the classification information
  • the first authentication unit that accepts and authenticates the classification information handler identifier, and when the classification information handler identifier is authenticated by the first authentication section,
  • a separate information handling unit that receives a separate information handling signal and extracts the broad information associated therewith.
  • the large-scale information storage program according to the present invention is characterized in that a computer is provided with a function as a large-scale information storage unit used in the distribution management system.
  • the limited information storage program according to the present invention is characterized in that a computer has a function as a limited information storage unit used in the distribution management system.
  • only a broad-class information handler who is positioned at an intermediate stage of distribution can handle the broad-class information, and only a limited-information handler positioned at the terminal stage of the distribution handles limited information. Since it is possible, it is possible to prevent the leakage of personal information during the distribution process. In addition, since personal information is divided and stored so that personal information cannot be specified alone, personal information cannot be specified even if each information leaks, and leakage of personal information can be prevented. .
  • the distribution management system relates to a distribution management system in a case where a user purchases a product from a member store by, for example, online shopping and has the product delivered, as shown in FIG.
  • a network 1 such as the Internet
  • a user terminal 2 connected via the network 1 so as to be capable of two-way communication
  • a member store terminal 3 a management device 4, a broad information storage device 5, and a limited information storage device 6, a general information handler terminal 7, and a limited information handler terminal 8.
  • the major information handler is a collector (distributor origination depot or origination branch) that is located between the member store and the delivery company in the distribution and delivers the product to the delivery company.
  • the limited information handler is a delivery company (delivery company arrival side collection office or arrival side sales office) that is located between the collector and the user and distributes the goods to the user.
  • the user terminal 2 is a device for accessing a member store's HP and purchasing merchandise, and as shown in FIG. 2, the device configuration includes a CPU 1001, an internal memory 1002, an external storage device 1003 such as an HDD,
  • the computer is a general purpose or dedicated computer including an input unit 1004 such as a mouse or a keyboard, a display unit 1005 such as a CRT or a liquid crystal display, a communication unit 1006 for connecting to the network 1 such as the Internet.
  • reference numeral 9 denotes a service provider that connects the user terminal 2 to the Internet.
  • the member store terminal 3 is provided in the store of the member store, receives a product order signal from the user terminal 2, and sets a joint code with the user.
  • the device configuration is the same as that of the user terminal 2.
  • the joint code is information that associates a user with a product ordered by the user.
  • the management device 4 is installed in an authentication company, and its device configuration includes a CPU 1001, an internal memory 1002, an external storage device 1003 such as an HDD, an input means 1004 such as a mouse and a keyboard, a CRT, a liquid crystal display, and the like.
  • a general-purpose or dedicated computer having a display unit 1005, a communication unit 1006 for connecting to the network 1 such as the Internet, and the like, a predetermined program is installed in the memory 1002, and the CPU 1001, peripheral devices, etc. are installed based on the program.
  • it functions as a personal information receiving unit 41, a personal information dividing unit 42, a code storage unit 43, a joint signal receiving unit 44, a management unit 45, and the like.
  • the personal information receiving unit 41 receives personal information data indicating personal information input from the user terminal 2 and outputs the personal information data to the personal information dividing unit 42.
  • the personal information dividing unit 42 divides the personal information indicated by the personal information data received from the personal information receiving unit 41 into broadly classified information and limited information, and limits the largely classified information data indicating the largely classified information and the limited information.
  • the information data is transmitted to the main information storage device 5 and the limited information storage device 6, respectively.
  • the personal information dividing unit 42 stores in the code storage unit 43 a classification code for identifying the classification information and a limitation code for identifying the limitation information, and stores the codes in the classification information storage device 5 and The information is transmitted to the limited information storage device 6.
  • FIG. 1 a specific mode of dividing personal information into broadly classified information and limited information is shown in FIG.
  • personal information is divided into so-called vertical divisions.
  • the broad information is information that cannot identify personal information by itself, and is abstract information that indicates a high-level concept in personal information.
  • the limited information like the broad information, cannot identify personal information by itself, and is specific information indicating a subordinate concept in personal information.
  • the broad information includes “name (for example, Taro)” in the name, “prefecture / city group / town / village” in the address, and “city code + area code” in the telephone number. , “First 3 digits + middle 4 digits” in mobile number, “Year (for example, year) + month” in date of birth, “@ or less (mail server address)” in E-mail address, “Prefecture in work address” / City group / town / village "," area code + area code "in the work phone number,” first 8 digits "in the credit card number,” month “in the credit card expiration date, and so on.
  • the limited information includes “Mr. (for example, Yamada)” in the name, “Less than address, etc.” in the address, “Last 4 digits” in the telephone number, “Last 4 digits” in the mobile number, Date of birth “Day” in E-mail address, "Before @ (Account)” in work address, “Less than address etc.” in work address, "Last 4 digits” in work phone number, "Remaining digits” in credit card number, “Year” of the credit card expiration date, etc.
  • the large-scale information includes information that is not included in the limited information so that it can be used for questionnaires. For example, gender, presence / absence of spouse, number of children, form of residence, number of years of residence, workplace, capital of workplace, number of employees at workplace, length of service, occupation, salary, hobby, etc.
  • the code storage unit 43 receives and stores, from the personal information dividing unit 42, a large code for identifying large classification information and a limited code for identifying limited information.
  • the joint signal reception unit 44 receives a joint signal indicating a joint code transmitted from the member store terminal 3 and outputs the joint signal to the management unit 45.
  • the management unit 45 receives the joint signal from the joint signal reception unit 44, recognizes the user related by the joint code, and recognizes the general classification information and the limitation information of the user. Is obtained from the code storage unit 43. Further, a major information handling number and a limited information handling number for handling the major code and the limited code are determined. Then, a handling signal indicating these handling numbers is transmitted to the member store terminal 3 and also transmitted to the major information storage device 5 and the limited information storage device 6.
  • the major information handling number and the limited information handling number are the same number. Note that the major information handling number and the limited information handling number may be different numbers.
  • the major information storage device 5 is provided in a major information storage company provided in a place different from the authentication company, and functions as a management server.
  • “different places” means that houses and buildings are different, floors are different, or rooms are different, and the space in which each device is provided is physically separated.
  • the device configuration is the same as that of the management device 4, and a predetermined program is installed in the memory 1002, and the CPU 1001 and peripheral devices cooperate with each other based on the program, as shown in FIG. It functions as an information reception unit 51, a broad classification information storage unit 52, a first reception unit 53, a first authentication unit 54, a large classification information extraction unit 55, and the like.
  • the large classification information receiving unit 51 receives the large classification information and the large classification code transmitted from the personal information dividing unit 42 of the management apparatus 4 and outputs them to the large classification information storage unit 52.
  • the large classification information storage unit 52 receives the large classification information and the large classification code from the large classification information reception unit 51, and stores the large classification information and the large classification code.
  • the 1st reception part 53 is the classification information handling signal given beforehand in order to handle the classification information handler identifier which is an identifier of the classification information handler located in the intermediate
  • the major information handler identifier is an ID and password assigned in advance to the collector who is the major information handler. Note that only an ID may be used without a password.
  • the first authentication unit 54 receives a broad-type information handler identifier from the first reception unit 53, and determines whether or not the handler indicated by the identifier is previously permitted to be authenticated. is there. As a result of the authentication, when the general information handler is authenticated, the first authentication unit 54 outputs an authentication (permission) signal to the general information extraction unit 55. On the other hand, if the general information handler is not authenticated, an authentication (non-permission) signal is transmitted to the general information handler terminal 7.
  • the major information extraction unit 55 receives an authentication (permission) signal from the first authentication unit 54, receives a major information handling signal from the first acceptance unit 53, and based on the major information handling signal, the major classification information The classification information associated with the handling signal via the classification code is extracted from the storage unit 52. Then, the major classification information extraction unit 55 transmits the extracted major classification information to the major classification information handler terminal 7.
  • the major classification information extraction unit 55 includes major classification information that the collector can deliver to the collector, such as a name in the name, a prefecture / city group / town / village in the address, and an area code in the telephone number. + Extracts the station number and transmits it to the major information handler terminal 7.
  • the limited information storage device 6 is provided in a limited information storage company provided in a place different from the authentication company and the general information storage company, and functions as a management server.
  • the device configuration is the same as that of the management device 4 and the general information storage device 5, and a predetermined program is installed in the memory 1002, and the CPU 1001, peripheral devices, and the like cooperate with each other based on the program.
  • the limited information receiving unit 61, the limited information storing unit 62, the second receiving unit 63, the second authenticating unit 64, the limited information extracting unit 65, and the like function.
  • the limited information receiving unit 61 receives the limited information and the limited code transmitted from the personal information dividing unit 42 of the management device 4 and outputs them to the limited information storage unit 62.
  • the limited information storage unit 62 receives the limited information and the limited code from the limited information receiving unit 61 and stores the limited information and the limited code.
  • the second receiving unit 63 handles the limited information handling signal provided in advance to handle the limited information handler identifier, which is the identifier of the limited information handler located at the terminal stage of distribution, and the limited information of the predetermined user.
  • the limited information handler identifier is received from the person terminal 8 and the limited information handler identifier is output to the second authentication unit 64, and the limited information handling signal is output to the limited information extraction unit 65.
  • the limited information handler identifier is an ID and password assigned in advance to a delivery company (delivery company arrival base or arrival center) that is a limited information handler. Note that only an ID may be used without a password.
  • the second authenticating unit 64 receives the limited information handler identifier from the second receiving unit 63, and determines whether or not the handler indicated by the identifier has been previously permitted to be authenticated. . If the limited information handler is authenticated as a result of the authentication, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65. On the other hand, if the limited information handler is not authenticated, an authentication (non-permission) signal is transmitted to the limited information handler terminal 8.
  • the limited information extraction unit 65 receives an authentication (permission) signal from the second authentication unit 64, receives a limited information handling signal from the second receiving unit 63, and receives a limited information handling signal from the limited information storage unit 62 based on the limited information handling signal. Limited information associated with the handling signal via a limited code is extracted. Then, the limited information extraction unit 65 transmits the extracted limited information to the limited information handler terminal 8.
  • the limited information extraction unit 65 is limited information corresponding to the large-scale information extracted by the large-scale information extraction unit 55, and is combined with the large-scale information to deliver a delivery company (delivery company arrival side).
  • the collection station or the destination sales office extracts the limited information that can be delivered to the user, for example, the last 4 digits of the telephone number below the name, the address in the address, etc., and transmits it to the limited information handler terminal 8.
  • the major information handler terminal 7 and the limited information handler terminal 8 further include a major information output unit such as a printer and a limited information output unit in addition to the device configuration of the user terminal 2.
  • the major information output unit receives the major information transmitted from the major information storage device 5, prints the major information on paper, and outputs it.
  • the limited information output unit receives the limited information transmitted from the limited information storage device 6, prints the limited information on paper, and outputs it.
  • Step 1 delivery of ordered products, such as (Step 1) assignment of handling numbers to ordered products.
  • the member store employee who has received the order for the product from the user first accesses the authentication company HP when shipping the product to the user (step S101). Then, the management apparatus 4 of the authentication company transmits the HP top page to the member store terminal 3 (step S102), and the member store terminal 3 receives the HP top page (step S103).
  • the member store terminal 3 requests the member store exclusive screen from the management device 4 (step S104). Then, the management apparatus 4 transmits a member store confirmation screen (step S105), and the member store terminal 3 receives the member store confirmation screen (step S106).
  • the member store terminal 3 transmits the member store code and password to the management device 4 ( Step S107).
  • the management device 4 receives the member store code and password (step S108) and collates the member store code and password (step S109).
  • the management device 4 transmits an unusable signal to the member store terminal 3, and the member store terminal 3 displays an unusable display (step S110).
  • the management device 4 transmits a member store dedicated screen to the member store terminal 3 (step S111).
  • the member store terminal 3 that has received the member store dedicated screen (step S112) requests the management device 4 for a home delivery handling request screen based on the operation of the input means of the member store employee (step S113).
  • the management device 4 transmits a home delivery handling request screen to the member store terminal 3 (step S114).
  • the member store terminal 3 displays a courier service request screen (step S115), and transmits a courier service request form to the management device 4 by operating the input means of the member store employee (step S116).
  • the courier service handling request form includes a joint code and a member store code.
  • the management unit 45 of the management device 4 that has received the handling request form confirms prior permission (step S118), and if not, sends a handling disapproval notification signal to the member store terminal 3 (step S119).
  • a handling number associated with the user's general code is issued and valid conditions (for example, expiration date and number of times of validity) of the handling number are determined (step S120).
  • the management unit 45 of the management device 4 that has issued the handling number transmits a handling request form A to the major information storage device 5 of the major information storage company (step S121).
  • the major information storage device 5 receives the handling request document A (step S122), extracts the major classification information handling number and its valid condition from the handling request document A, and records it (step S123). Thereafter, the main information storage device 5 transmits a handling notification indicating whether or not handling is possible to the management unit 45 of the management device 4 (step S124).
  • the management unit 45 that has received the notification of handling extracts a limited code from the general code linked to the handling number, and stores it in association with the handling number (step S126).
  • the handling request form B is transmitted to the limited information storage device 6 of the limited information storage company (step S127).
  • the limited information storage device 6 receives the handling request document B (step S128), and extracts and records the limited information handling number and its valid condition from the handling request document B (step S129). Thereafter, the limited information storage device 6 transmits a handling notification indicating whether or not handling is possible to the management unit 45 of the management device 4 (step S130).
  • the management unit 45 that has received the handling notice (step S131) transmits a handling preparation completion notice and a delivery note to the member store terminal 3 (step S132).
  • the member store terminal 3 receives the handling preparation completion notice and the delivery note (step S133), and the member store employee sends the merchandise (delivery product) with the handling number attached (step S134).
  • step S120 to step S126 after the classification code is linked to the handling number, it is determined whether or not the classification information storage device 5 can handle the classification code, and then the limited code is assigned to the handling number. However, it is also possible to tie the major code and the limited code to the handling number at the same time.
  • the collector who collects the merchandise from the member store reads the handling number attached to the merchandise (step S201), and operates the major information handler terminal 7 to inquire about the major classification information associated with the handling number. (Step S202). At this time, the general information handler terminal 7 transmits the general information handler signal and the general information handler identifier to the general information storage device 5.
  • the 1st reception part 53 of the classification information storage apparatus 5 receives a classification information handler identifier and a classification information handling signal (step S203).
  • the 1st authentication part 54 authenticates a classification information handler identifier (step S204).
  • the first authenticating unit 54 transmits an authentication (non-permission) signal to the general information handler terminal 7 (step S205).
  • the first authenticating unit 54 outputs an authentication (permission) signal to the general information extracting unit 55.
  • the broad classification information extraction unit 55 extracts large classification information of information necessary for the delivery of the product based on the large classification information handling signal (step S206), and the broad classification information is classified into the large classification information handler terminal 7. (Step S207). Then, the major information handler terminal 7 receives the major classification information (step S208), and the major classification information output unit prints and outputs the major classification information (step S209). The paper on which the broad classification information is printed in this way is attached on the ordered product. Then, the ordered product is sent from the collector to the delivery company based on the general information.
  • the delivery company handed over the product from the collector collects the handling number given on the product (step S210), and operates the limited information handler terminal 8 to inquire about the limited information associated with the handling number ( Step S211). At this time, the limited information handler terminal 8 transmits a limited information handling signal and a limited information handler identifier to the limited information storage device 6.
  • the second receiving unit 63 of the limited information storage device 6 receives the limited information handler identifier and the limited information handling signal (step S212).
  • the second authentication unit 64 authenticates the limited information handler identifier (step S213). If the identifier is not authenticated, the second authenticating unit 64 transmits an authentication (non-permission) signal to the limited information handler terminal 8 (step S214). On the other hand, when authenticating the identifier, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65.
  • the limited information extraction unit 65 extracts limited information that can identify personal information by being combined with the broad classification information based on the limited information handling signal (step S215). It transmits to the handler terminal 8 (step S216).
  • the limited information handler terminal 8 receives the limited information (step S217), and the limited information output unit prints and outputs the limited information (step S218).
  • the paper on which the limited information is printed is attached in the vicinity of the paper on which the general information is printed on the ordered product. Then, the user's address and the like are combined with the paper on which the general information is printed and the paper on which the limited information is printed, and the ordered product is delivered to the user by the delivery company.
  • the collector can handle the broad information, and only the delivery company can handle the limited information. Can be prevented.
  • personal information is divided and stored so that personal information cannot be specified alone, personal information cannot be specified even if each information leaks, and leakage of personal information can be prevented.
  • the delivery company can know the personal information in a state of being printed on paper, it is not handled in the form of data, so that it is possible to prevent a problem that a large amount of personal information is leaked at once.
  • the member store can only know the joint code and the handling number, and the collector can only know the handling number and the general information, so that personal information can be prevented from being leaked from the member store and the collector. .
  • the distribution management system relates to a distribution management system when an E-mail is transmitted from a member store to a user.
  • a network 1 such as the Internet and the network 1 are connected.
  • the user terminal 2, the member store terminal 3, the main information storage device 5, and the limited information storage device 6 are the same as those in the first embodiment, but the management device 4 is different in function from the first embodiment. That is, the management device 4 functions as a general information handler and limited information handler of the first embodiment and also functions as a dedicated mail server.
  • the management device 4 functions as a personal information receiving unit 41, a personal information dividing unit 42, a joint signal receiving unit 44, a transfer request mail receiving unit 46, a management unit 45, and the like. .
  • the transfer request mail receiving unit 46 receives a transfer request mail to the user transmitted to the dedicated mail address from the member store terminal 3 to which the handling number and the dedicated mail address are assigned, and outputs the received mail to the management unit 45. is there.
  • the management unit 45 receives the joint signal from the joint signal reception unit 44, recognizes the user related by the joint code, and recognizes the general classification information and the limitation information of the user. Is obtained from the code storage unit 43. In addition, a handling number for handling the general code and the limited code is determined. Then, a handling signal indicating the handling number is transmitted to the member store terminal 3, and is also transmitted to the major information storage device 5 and the limited information storage device 6. Further, a dedicated mail address using the handling number is transmitted to the member store terminal 3.
  • the management unit 45 receives the transfer request mail from the transfer request mail receiving unit 46, extracts the handling number from the dedicated mail address, and extracts the broadly classified code and the limited code. Then, using the classification code and the limitation code, the classification information (user's mail server address) is acquired from the classification information storage device 5, and the limitation information (user account) is acquired from the limitation information storage device 6. Synthesize email addresses of users. Thereafter, the transfer request mail from the member store terminal 3 is transferred to the user mail address.
  • Step 1 assignment of a handling number and the like
  • Step 2 transmission of mail from a member store to the user.
  • the member store employee who wants to send an e-mail to the user first accesses the authentication company HP (step S301). Then, the management apparatus 4 of the authentication company transmits the HP top page to the member store terminal 3 (step S302), and the member store terminal 3 receives the HP top page (step S303). When the member store employee operates the member store terminal 3, the member store terminal 3 requests the member store exclusive screen from the management device 4 (step S304). Then, the management apparatus 4 transmits a member store confirmation screen (step S305), and the member store terminal 3 receives the member store confirmation screen (step S306).
  • the member store terminal 3 transmits the member store code and the joint code to the management device 4.
  • the management device 4 receives the member store code and the joint code (step S308) and collates the member store code and the joint code (step S309). As a result of the collation, if the member store code and the joint code cannot be handled, the management device 4 transmits an unusable signal to the member store terminal 3, and the member store terminal 3 displays an unusable display (step S310). .
  • the management unit 45 of the management device 4 issues a handling number associated with the user's general classification code and the limited code, and a dedicated mail using the handling number. Addresses (for example, handling number @ dedicated mail server address) are generated, their valid conditions are determined, and transmitted to the member store terminal 3 (step S311).
  • the member store If the member store wishes to send an email to the user, it forwards an email to be forwarded to the dedicated email address assigned in step 1 (step S401). Then, the transfer request mail receiving unit 46 of the management device 4 receives the transfer request mail (step S402) and outputs it to the management unit 45.
  • the management unit 45 checks whether or not the transmission source is correct (step S403). When the transmission source is not correct, the management unit 45 transmits a handling impossible notification to the member store terminal 3, and the member store terminal 3 receives the handling impossible notification (step S404). On the other hand, when the transmission source is correct, the management unit 45 extracts a handling number from the dedicated mail address (step S405), and extracts a general code from the handling number (step S406). Thereafter, in order to inquire about the dedicated mail server address of the recipient (user), the management unit 45 transmits the major information handler identifier and the major code to the major information storage device 5 (step S407).
  • the 1st reception part 53 of the classification information storage apparatus 5 receives a classification information handler identifier and a classification code (step S408).
  • the 1st authentication part 54 acquires a classification information handler identifier and a classification code from the 1st reception part 53, and authenticates a classification information handler identifier and a classification code (step S409).
  • the first authentication unit 54 transmits an authentication (non-permission) signal to the management device 4 (step S410).
  • the management device 4 transmits an authentication (non-permission) signal to the member store terminal 3, and the member store terminal 3 receives the authentication (non-permission) signal (step S411).
  • the first authentication unit 54 when authenticating the identifier and code, the first authentication unit 54 outputs an authentication (permission) signal to the broad information extraction unit 55. Then, the broad classification information extraction unit 55 extracts a mail server address that is broad classification information based on the broad classification code (step S412), and transmits the mail server address to the management apparatus 4 (step S413). Then, the management device 4 receives the mail server address (step S414), extracts a limitation code from the broad classification code (step S415), and then handles the limitation information in order to inquire about the recipient (user) account. The person identifier and the limitation code are transmitted to the limitation information storage device 6 (step S416).
  • the second reception unit 63 of the limited information storage device 6 receives the limited information handler identifier and the limited code (step S417).
  • the second authentication unit 64 acquires the limited information handler identifier and the limitation code from the second reception unit 63, and authenticates the limited information handler identifier and the limitation code (step S418). If the identifier and code are not authenticated, the second authenticating unit 64 transmits an authentication (non-permission) signal to the management device 4 (step S419). Then, the management device 4 transmits an authentication (non-permission) signal to the member store terminal 3, and the member store terminal 3 receives the authentication (non-permission) signal (step S420).
  • the second authenticating unit 64 when authenticating the identifier and code, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65. Then, the limited information extracting unit 65 extracts a receiver (user) account that is limited information based on the limited code (step S421), and transmits the account to the management apparatus 4 (step S422).
  • the management company receives an account from the limited information storage device 6 (step S423), combines the mail server address received from the general information storage device 5 and the account, and generates a recipient email address. (Step S424). Then, the management device 4 transmits a transfer request mail of the member store to the combined recipient mail address (step S425). This mail is sent to the user via the service provider 9.
  • the user can receive mail from the member store without notifying the member store of the user's mail address. That is, the user's e-mail address does not flow out at the member store, and the user's e-mail address is divided into a mail server address and an account, and stored in the major information storage device 5 and the limited information storage device 6, respectively. Therefore, even if the mail server address that is broadly classified information and the account that is limited information are leaked from the broadly classified information storage device and the limited information storage device, the correspondence between them is unknown, so the user's mail It is possible to prevent the entire address from leaking.
  • the present invention is not limited to the above embodiment.
  • the management device includes a personal information dividing unit, and the personal information dividing unit divides the personal information input by the user and transmits it to each storage device.
  • the user may transmit the broad classification information directly to the large classification information storage unit without going through the management apparatus, and the limited information may be directly transmitted to the limited information storage apparatus to store the information.
  • the classification information extraction unit extracts classification information using the classification code associated with the handling number, and delivers the classification information from the classification information.
  • the main information storage unit 52 may store only information used for delivery. The same applies to the limited information.
  • the function as the management device in the first embodiment may be distributed to the broad information storage device and the limited information storage device, and the management device may not be used.
  • the merchandise is delivered to the user.
  • a mail may be delivered.
  • information such as advertisements related to the classification information may be posted on the member store HP accessed by the user using classification information (for example, hobbies).
  • the large information storage device further includes a transmission destination condition reception unit that receives transmission destination condition information for setting a mail transmission destination condition, and the large classification information extraction unit receives a transmission destination from the transmission destination condition reception unit.
  • Condition information may be acquired, and the broad classification information satisfying the destination condition set by the broad classification information handler may be extracted from the broad classification information.
  • the broad classification information extraction unit acquires limited information associated with the extracted broad classification information and sends direct mail or direct mail to the individual.
  • the distribution management system may include only the limited information storage unit.
  • the broadly classified information and the limited information are stored.
  • only the broadly classified information is stored in the largely classified information storage unit.
  • the distribution management system may be provided with only a major information storage unit.
  • FIG. 13 shows a distribution management system in the case of performing audience rating survey.
  • the trend research organization is the member store and the main information handler in the first embodiment
  • the terminal of the trend survey organization is the member store terminal 3 and the main information processing terminal 7 in the first embodiment. is there.
  • the terminal 3 (7) of the trend research organization receives the viewing data and the general classification from the data output device (the user terminal 2 may be different from the user terminal) connected to the television.
  • the information handling number is acquired, and the broad classification information is acquired from the broad classification information storage device 5 based on the large classification information handling number. In this way, the audience rating survey based on the broad classification information can be performed.
  • purchase trend surveys can be conducted.
  • the viewing data (purchase data) from the viewer (purchaser) may be stored in a data storage unit provided in the management device 4 without being output to the trend survey organization.
  • the trend research organization sets a condition (for example, a condition for selecting an audience rating or purchase status at a predetermined date and time), and outputs a condition signal to the management apparatus.
  • a condition for example, a condition for selecting an audience rating or purchase status at a predetermined date and time
  • Can be extracted, and statistical data of the viewing data (purchase data) or the viewing data (purchase data) associated therewith can be calculated, and the statistical data can be output to a trend research organization.
  • the major information handler and the limited information handler are a collector and a delivery company.
  • the major information handler is the head office of the company, and the limited information handler.
  • the handler can also be the branch office.
  • a non-contact type IC chip in which a handling number is recorded in an invoice or a stamp may be embedded, or a bar code in which a handling number is recorded may be attached.
  • the general information handler terminal and the limited information handler terminal are provided with reading means for reading the IC chip and the barcode.
  • At least one of a broadly classified information storage device, a limited information storage device, or a management device may be provided in a foreign country.
  • the distribution management system of the present invention can also be applied to cases where a user purchases a product with a credit card from a member store through online shopping or the like.
  • the major information handler is a card processing service company
  • the limited information handler is a credit issuing company.
  • the major information in this case is mainly the “first 8 digits” of the user's credit card number and the “month” of the expiration date of the credit card
  • the limited information is mainly “the remaining digits” of the user's credit card number and The credit card expiration date is the “year”.
  • the distribution management system of the present invention can also be applied to cases where a member store makes a telephone contact with a user.
  • the major information handler and the limited information handler are authentication companies (management devices) as in the second embodiment.
  • the general information is “area code + area code” of the user's telephone number
  • the limited information is “last 4 digits”.
  • the main information is “upper 3 digits + middle 4 digits”
  • the limited information is “lower 4 digits”.
  • the management unit of the management device generates a dedicated e-mail address and transmits it to the member store, and the member store transmits a transfer request mail to the dedicated e-mail address.
  • the management device may synthesize the user's mail address using only the handling number, as in the first embodiment, and send the transfer request mail to the user.
  • the method for dividing personal information is not limited to the above-described embodiment, and each of the broadly classified information and the limited information can be divided in various ways in which the personal information cannot be specified by itself.
  • the personal information is divided into two parts, roughly classified information and limited information. It may be divided into three or more and stored in different storage devices. At this time, the personal information may not be specified unless all the divided information is combined, or the personal information may be specified by combining any two pieces of information.
  • the network may be a dedicated line or a public line. Furthermore, when using a public line, it is preferable to have a line authentication function.
  • a line authentication function in Japan, a line authentication function of NGN (Next Generation System, next generation network) can be mentioned. Thereby, the safety of personal information can be further improved.
  • NGN Next Generation System, next generation network

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

A distribution management system for blocking leaks of personal information given to distributing articles or information and managing the personal information given to the distributing articles or information is so designed, in the personal information, that only a personnel handling rough classification information positioned in the middle stage of distribution can access the rough classification information, and that only a personnel handling limitation information positioned in the end stage of the distribution can access the limitation information.

Description

流通管理システム、その流通管理システムに用いる大別情報格納プログラム及び限定情報格納プログラムDistribution management system, broadly classified information storage program and limited information storage program used in the distribution management system
 本発明は、流通する物品又は情報に付与される個人情報を管理するための流通管理システムに関するものである。 The present invention relates to a distribution management system for managing personal information given to articles or information to be distributed.
 従来、例えば、特許文献1に示すように、種々の流通システムが考えられている。このような流通システムにおいて、ユーザが例えばネット通販で加盟店から商品を購入した場合には、図13に示すように、加盟店は、予めユーザが登録した郵便番号、住所、氏名、電話番号などのいわゆる個人情報が記載された送り状を商品に付して宅配業者に配達を依頼する。そうすると、その商品は、送り主である加盟店から、集荷業者発側営業所(集荷側営業所)、集荷業者発側集積所(集荷側集積所)、配達業者着側集積所(配達側集積所)、配達業者着側営業所(配達側営業所)を経て、ユーザ(受取主)に配達される。 Conventionally, for example, as shown in Patent Document 1, various distribution systems have been considered. In such a distribution system, when a user purchases a product from a member store through, for example, online shopping, as shown in FIG. 13, the member store stores the postal code, address, name, telephone number, etc. registered in advance by the user. The so-called personal information invoice is attached to the product and the delivery is requested from the courier. Then, the merchandise is sent from the merchant that is the sender, to the collector's departure side sales office (collection side sales office), the collector's departure side collection place (collection side collection place), and the delivery company arrival side collection place (delivery side collection place). ), And delivered to the user (recipient) through the delivery company arrival side office (delivery side office).
 しかしながら、このような流通システムであると、各段階において流通関係者が受取主の個人情報を容易に見ることができ、個人情報を配達処理以外の目的に使用したり、流出させたりしてしまうという問題がある。 However, with such a distribution system, the distribution parties can easily see the recipient's personal information at each stage, and the personal information is used for purposes other than delivery processing or leaked. There is a problem.
 また、個人情報は加盟店などにより一元的にまとめて保存されており、不正アクセスにより個人情報が持ち出される等の問題もある。
特開2001-341819号公報
In addition, personal information is collectively stored by member stores and the like, and there is a problem that personal information is taken out by unauthorized access.
JP 2001-341819 A
 そこで本発明は、上記問題点を一挙に解決するためになされたものであり、流通段階において、必要な情報のみをその関係者に付与すれば良いという発想からなされたものであり、物品や情報が流通していく過程で、それらに付与される個人情報の漏洩を防ぐことをその主たる所期課題とするものである。 Therefore, the present invention was made to solve the above problems all at once, and was made from the idea that in the distribution stage, only necessary information should be given to the parties concerned. The main goal is to prevent the leakage of personal information given to them in the process of distribution.
 すなわち本発明に係る流通管理システムは、流通する物品又は情報を管理するための流通管理システムであって、前記物品又は情報に付与される個人情報において、単独では前記個人情報を特定することができない大まかな情報である大別情報を格納する大別情報格納部と、前記個人情報において、単独では前記個人情報を特定することができず、少なくとも前記大別情報と組み合わされて前記個人情報を特定することができる詳細な情報である限定情報を格納する限定情報格納部と、前記流通の中間段階に位置する大別情報取扱者の識別子である大別情報取扱者識別子、及び前記大別情報を取り扱うために予め付与された大別情報取扱信号が送信されてきたときに、前記大別情報取扱者識別子を受け付けて認証する第1認証部と、前記大別情報取扱者識別子が前記第1認証部により認証された場合に、前記大別情報取扱信号を受け付けて、それに関連付けられた大別情報を抽出する大別情報抽出部と、前記流通の末端段階に位置する限定情報取扱者の識別子である限定情報取扱者識別子、及び前記限定情報を取り扱うために予め付与された限定情報取扱信号が送信されたときに、前記限定情報取扱者識別子を受け付けて認証する第2認証部と、前記限定情報取扱者識別子が前記第2認証部により認証された場合に、前記限定情報取扱信号を受け付けて、それに関連付けられた限定情報を抽出する限定情報抽出部と、を備えていることを特徴とする。 That is, the distribution management system according to the present invention is a distribution management system for managing articles or information to be distributed, and in the personal information given to the articles or information, the personal information cannot be specified alone. In the personal information storage unit for storing general information, which is rough information, and the personal information, the personal information cannot be specified alone, and at least the personal information is specified in combination with the general information. A limited information storage unit that stores limited information that is detailed information that can be performed, a general information handler identifier that is an identifier of a general information handler located in an intermediate stage of the distribution, and the general information A first authentication unit that accepts and authenticates the broad-type information handler identifier when a broad-class information handling signal previously assigned for handling is transmitted; and When the information handler identifier is authenticated by the first authentication unit, the classification information extraction unit that receives the classification information handling signal and extracts the classification information associated therewith, and the terminal stage of the distribution When the limited information handler identifier that is the identifier of the limited information handler that is located and the limited information handling signal given in advance to handle the limited information are received, the limited information handler identifier is received and authenticated. A limited information extracting unit that receives the limited information handling signal and extracts limited information associated therewith when the limited information handler identifier is authenticated by the second authenticating unit; It is characterized by having.
 このようなものであれば、大別情報を流通の中間段階に位置する大別情報取扱者のみが、限定情報を流通の末端段階に位置する限定情報取扱者のみが、取り扱い可能としているので、流通過程における個人情報の流出を防ぐことができる。また、個人情報を単独では特定できないように分割して格納しているので、それぞれの情報が漏洩しても個人情報を特定することができず、個人情報の漏洩を防ぐことができる。 If this is the case, only the major information handler who is in the middle stage of distribution can handle the major information, only the limited information handler who is in the terminal stage of distribution, The leakage of personal information during the distribution process can be prevented. Also, since the personal information is divided and stored so that it cannot be identified alone, the personal information cannot be identified even if each information leaks, and the leakage of the personal information can be prevented.
 大別情報の具体例としては、個人情報において上位概念を示すものであり、抽象的な情報をいい、例えば住所(都道府県/市区郡/町村番地)における例えば都道府県/市区郡/町村をいう。 A specific example of the broad classification information is a high-level concept in personal information, which is abstract information. For example, in the address (prefecture / city / district / town address), for example, prefecture / city / district / town / village Say.
 限定情報の具体例としては、個人情報において下位概念を示すものであり、具体的な情報をいい、例えば住所(都道府県/市区群/町村番地)における例えば番地以下をいう。 As a specific example of limited information, it indicates a subordinate concept in personal information and refers to specific information, for example, an address below a street address (prefecture / city group / town address).
 また、前記大別情報抽出部が抽出した大別情報を外部に出力する大別情報出力部と、前記限定情報抽出部が抽出した限定情報を外部に出力する限定情報出力部と、をさらに備えていることが望ましい。 In addition, it further comprises: a broad information output unit that outputs the broad information extracted by the broad information extraction unit to the outside; and a limited information output unit that outputs the limited information extracted by the limited information extraction unit to the outside. It is desirable that
 特に物品の流通に好適に用いられるためには、前記大別情報出力部が、前記抽出された大別情報を紙に印字して出力するものであり、前記限定情報出力部が、前記抽出された限定情報を紙に印字して出力するものであることが特に望ましい。 In particular, in order to be suitably used for the distribution of goods, the large-scale information output unit prints the extracted large-scale information on paper and outputs the paper, and the limited information output unit extracts the extracted information. It is particularly desirable to output the limited information printed on paper.
 本発明の具体的な実施の態様としては、前記大別情報取扱者が、前記物品の集荷業者であり、前記限定情報取扱者が、前記物品の配達業者である場合に、特に顕著な効果を得ることができる。 As a specific embodiment of the present invention, a particularly remarkable effect can be obtained when the general information handler is a collector of the goods and the limited information handler is a distributor of the goods. Obtainable.
 このようなものであれば、流通の中間段階に位置する集荷業者は大別情報のみしか知ることができないので、流通の中間段階において個人情報が流出することを防ぐことができる。 If this is the case, the collector located at the intermediate stage of distribution can know only the broad information, so that personal information can be prevented from leaking out at the intermediate stage of distribution.
 本発明の別の具体的な実施の態様としては、前記大別情報格納部が、メール受取者のメールサーバアドレスを格納するものであり、前記限定情報格納部が、メール受取者のアカウントを格納するものであり、前記大別情報取扱者及び前記限定情報取扱者が前記メールサーバアドレス及び前記アカウントの対応付けを管理している管理部であり、前記管理部が、メール送り主からの要請を受けて、前記大別情報格納部から前記メールサーバアドレスを取得し、前記限定情報格納部から前記アカウントを取得して、前記メール受取者のメールアドレスを合成して、前記メール送り主からのメールを前記メール受取者に送信することを特徴とする。 As another specific embodiment of the present invention, the broad information storage unit stores a mail server address of a mail recipient, and the limited information storage unit stores an account of the mail recipient. A management unit in which the general information handler and the limited information handler manage the correspondence between the mail server address and the account, and the management unit receives a request from a mail sender. The mail server address is acquired from the general information storage unit, the account is acquired from the limited information storage unit, the mail address of the mail recipient is synthesized, and the mail from the mail sender is It is transmitted to the mail recipient.
 例えばダイレクトメール等を好適に送付できるようにするためには、メールを送付する送付先条件を設定する送付先条件情報を受け付ける送付先条件受付部をさらに備え、前記大別情報抽出部が、前記送付先条件受付部から、送付先条件情報を取得して、前記大別情報取扱者が設定した送付先条件を満たす大別情報を大別情報の中から抽出するものであることを特徴とすることが望ましい。 For example, in order to be able to send a direct mail or the like suitably, a delivery destination condition reception unit that accepts delivery destination condition information for setting a delivery destination condition for sending an email is further provided, and the broadly classified information extraction unit includes The destination condition information is acquired from the destination condition receiving unit, and the broad category information that satisfies the destination condition set by the broad category information handler is extracted from the broad category information. It is desirable.
 また、流通する物品又は情報を管理するための流通管理システムであって、前記物品又は情報に付与される個人情報において、単独では前記個人情報を特定することができない大まかな情報である大別情報を格納する大別情報格納部と、前記流通の中間段階に位置する大別情報取扱者の識別子である大別情報取扱者識別子、及び前記大別情報を取り扱うために予め付与された大別情報取扱信号が送信されてきたときに、前記大別情報取扱者識別子を受け付けて認証する第1認証部と、前記大別情報取扱者識別子が前記第1認証部により認証された場合に、前記大別情報取扱信号を受け付けて、それに関連付けられた大別情報を抽出する大別情報抽出部と、を備えていることを特徴とする。 Moreover, it is a distribution management system for managing articles or information to be distributed, and in the personal information given to the articles or information, it is roughly classified information that is rough information that cannot identify the personal information alone. , A classification information handler identifier that is an identifier of a classification information handler located in an intermediate stage of the distribution, and classification information assigned in advance to handle the classification information When the handling signal is transmitted, the first authentication unit that accepts and authenticates the classification information handler identifier, and when the classification information handler identifier is authenticated by the first authentication section, A separate information handling unit that receives a separate information handling signal and extracts the broad information associated therewith.
 このようなものであれば、上記発明の効果に加えて、例えば市場動向等の動向調査を行う場合において、大別情報のみの分析で充分な場合に好適に用いることができる。 In this case, in addition to the effects of the above invention, for example, when conducting a trend survey such as a market trend, it can be suitably used when it is sufficient to analyze only roughly classified information.
 さらに、本発明に係る大別情報格納プログラムは、上記流通管理システムに用いる大別情報格納部としての機能をコンピュータに備えさせることを特徴とする。 Furthermore, the large-scale information storage program according to the present invention is characterized in that a computer is provided with a function as a large-scale information storage unit used in the distribution management system.
 同様に、本発明に係る限定情報格納プログラムは、上記流通管理システムに用いる限定情報格納部としての機能をコンピュータに備えさせることを特徴とする。 Similarly, the limited information storage program according to the present invention is characterized in that a computer has a function as a limited information storage unit used in the distribution management system.
 このように構成した本発明によれば、流通の中間段階に位置する大別情報取扱者のみが大別情報を取り扱い可能とし、流通の末端段階に位置する限定情報取扱者のみが限定情報を取り扱い可能としているので、流通過程における個人情報の流出を防ぐことができる。また、個人情報を単独では個人情報を特定できないように分割して格納しているので、それぞれの情報が漏洩しても個人情報を特定することができず、個人情報の漏洩を防ぐことができる。 According to the present invention configured as described above, only a broad-class information handler who is positioned at an intermediate stage of distribution can handle the broad-class information, and only a limited-information handler positioned at the terminal stage of the distribution handles limited information. Since it is possible, it is possible to prevent the leakage of personal information during the distribution process. In addition, since personal information is divided and stored so that personal information cannot be specified alone, personal information cannot be specified even if each information leaks, and leakage of personal information can be prevented. .
本発明の第1実施形態に係る流通管理システムを示す模式図である。It is a mimetic diagram showing the distribution management system concerning a 1st embodiment of the present invention. 同実施形態における各装置の機器構成図である。It is an apparatus block diagram of each apparatus in the embodiment. 同実施形態における管理装置の機能構成図である。It is a functional block diagram of the management apparatus in the embodiment. 同実施形態における個人情報の大別情報及び限定情報への分割の仕方を示す図である。It is a figure which shows the method of the division | segmentation into the classified information and limited information of the personal information in the embodiment. 同実施形態における大別情報格納装置の機能構成図である。It is a functional block diagram of the classification information storage apparatus in the embodiment. 同実施形態における限定情報格納装置6の機能構成図である。It is a functional block diagram of the limited information storage device 6 in the same embodiment. 同実施形態における商品への取扱番号の付与及び加盟店における商品送付まで手続きを示すフローチャートである。It is a flowchart which shows a procedure until the provision of the handling number to the goods in the embodiment, and the goods delivery in a member store. 同実施形態における注文商品の配達手続きを示すフローチャートである。It is a flowchart which shows the delivery procedure of the ordered goods in the embodiment. 本発明の第2実施形態に係る流通管理システムを示す模式的構成図である。It is a typical block diagram which shows the distribution management system which concerns on 2nd Embodiment of this invention. 同実施形態における管理装置の機能構成図である。It is a functional block diagram of the management apparatus in the embodiment. 同実施形態における取扱番号及び専用メールアドレスの付与まで手続きを示すフローチャートである。It is a flowchart which shows a procedure until provision of the handling number and exclusive mail address in the embodiment. 同実施形態における専用メールアドレスを用いたメールの送信までの手続きを示すフローチャートである。It is a flowchart which shows the procedure until the transmission of the mail using the exclusive mail address in the embodiment. 動向調査に用いた場合の流通管理システムを示す模式的構成図である。It is a typical block diagram which shows the distribution management system at the time of using for a trend investigation. 従来の流通システムを示す模式図である。It is a schematic diagram which shows the conventional distribution system.
符号の説明Explanation of symbols
1 ・・・ネットワーク
2 ・・・ユーザ端末
3 ・・・加盟店端末
4 ・・・管理装置
5 ・・・大別情報格納装置
6 ・・・限定情報格納装置
7 ・・・大別情報取扱者端末
8 ・・・限定情報取扱者端末
52・・・大別情報格納部
54・・・第1認証部
55・・・大別情報抽出部
62・・・限定情報格納部
64・・・第2認証部
65・・・限定情報抽出部
45・・・管理部
DESCRIPTION OF SYMBOLS 1 ... Network 2 ... User terminal 3 ... Member store terminal 4 ... Management apparatus 5 ... Broadly classified information storage apparatus 6 ... Limited information storage apparatus 7 ... Broadly classified information handler Terminal 8 ... limited information handler terminal 52 ... roughly classified information storage section 54 ... first authentication section 55 ... roughly classified information extraction section 62 ... limited information storage section 64 ... second Authentication unit 65 ... limited information extraction unit 45 ... management unit
 <第1実施形態> <First embodiment>
 以下に本発明の第1実施形態について図面を参照して説明する。 Hereinafter, a first embodiment of the present invention will be described with reference to the drawings.
 本実施形態に係る流通管理システムは、例えばネット通販などでユーザが加盟店から商品を購入して、その商品を配達してもらう場合の流通管理システムに関するものであって、図1に示すように、インターネット等のネットワーク1と、このネットワーク1を介して双方向通信可能に接続されたユーザ端末2と、加盟店端末3と、管理装置4と、大別情報格納装置5と、限定情報格納装置6と、大別情報取扱者端末7と、限定情報取扱者端末8と、を備えている。ここで、大別情報取扱者は、流通において加盟店と配達業者との間に位置して、配達業者に商品を配達する集荷業者(集荷業者発側集積所又は発側営業所)であり、限定情報取扱者は、流通に置いて集荷業者とユーザとの間に位置して、ユーザに商品を配達する配達業者(配達業者着側集積所又は着側営業所)である。 The distribution management system according to the present embodiment relates to a distribution management system in a case where a user purchases a product from a member store by, for example, online shopping and has the product delivered, as shown in FIG. A network 1 such as the Internet, a user terminal 2 connected via the network 1 so as to be capable of two-way communication, a member store terminal 3, a management device 4, a broad information storage device 5, and a limited information storage device 6, a general information handler terminal 7, and a limited information handler terminal 8. Here, the major information handler is a collector (distributor origination depot or origination branch) that is located between the member store and the delivery company in the distribution and delivers the product to the delivery company. The limited information handler is a delivery company (delivery company arrival side collection office or arrival side sales office) that is located between the collector and the user and distributes the goods to the user.
 以下に各装置2~8について説明する。 Hereinafter, each device 2 to 8 will be described.
 ユーザ端末2は、加盟店のHPにアクセスして、商品を購入するための装置であり、その機器構成は、図2に示すように、CPU1001、内部メモリ1002、HDD等の外部記憶装置1003、マウスやキーボード等の入力手段1004、CRTや液晶ディスプレイ等の表示手段1005、インターネット等のネットワーク1に接続するための通信手段1006等を備えた汎用乃至専用コンピュータである。なお、図1において、9は、ユーザ端末2のインターネットへの接続を執り行うサービスプロバイダである。 The user terminal 2 is a device for accessing a member store's HP and purchasing merchandise, and as shown in FIG. 2, the device configuration includes a CPU 1001, an internal memory 1002, an external storage device 1003 such as an HDD, The computer is a general purpose or dedicated computer including an input unit 1004 such as a mouse or a keyboard, a display unit 1005 such as a CRT or a liquid crystal display, a communication unit 1006 for connecting to the network 1 such as the Internet. In FIG. 1, reference numeral 9 denotes a service provider that connects the user terminal 2 to the Internet.
 加盟店端末3は、加盟店の店舗内に設けられ、ユーザ端末2から商品の注文信号を受け付けて、ユーザとの間にジョイントコードを設定するものである。その機器構成は、上記ユーザ端末2と同様である。ジョイントコードとは、ユーザとそのユーザが注文した商品とを関連づける情報である。 The member store terminal 3 is provided in the store of the member store, receives a product order signal from the user terminal 2, and sets a joint code with the user. The device configuration is the same as that of the user terminal 2. The joint code is information that associates a user with a product ordered by the user.
 管理装置4は、認証会社内に設置されるものであり、その機器構成は、CPU1001、内部メモリ1002、HDD等の外部記憶装置1003、マウスやキーボード等の入力手段1004、CRTや液晶ディスプレイ等の表示手段1005、インターネット等のネットワーク1に接続するための通信手段1006等を備えた汎用乃至専用のコンピュータであり、前記メモリ1002に所定のプログラムをインストールし、そのプログラムに基づいてCPU1001や周辺機器等が協働することにより、図3に示すように、個人情報受付部41、個人情報分割部42、コード格納部43、ジョイント信号受付部44、管理部45等、として機能する。 The management device 4 is installed in an authentication company, and its device configuration includes a CPU 1001, an internal memory 1002, an external storage device 1003 such as an HDD, an input means 1004 such as a mouse and a keyboard, a CRT, a liquid crystal display, and the like. A general-purpose or dedicated computer having a display unit 1005, a communication unit 1006 for connecting to the network 1 such as the Internet, and the like, a predetermined program is installed in the memory 1002, and the CPU 1001, peripheral devices, etc. are installed based on the program. As a result of the cooperation, as shown in FIG. 3, it functions as a personal information receiving unit 41, a personal information dividing unit 42, a code storage unit 43, a joint signal receiving unit 44, a management unit 45, and the like.
 以下、各部41~45について詳述する。 Hereinafter, each part 41 to 45 will be described in detail.
 個人情報受付部41は、ユーザ端末2から入力された個人情報を示す個人情報データを受け付けて、その個人情報データを個人情報分割部42に出力するものである。 The personal information receiving unit 41 receives personal information data indicating personal information input from the user terminal 2 and outputs the personal information data to the personal information dividing unit 42.
 個人情報分割部42は、前記個人情報受付部41から受信した個人情報データが示す個人情報を大別情報及び限定情報に分割して、大別情報を示す大別情報データ及び限定情報を示す限定情報データをそれぞれ、大別情報格納装置5及び限定情報格納装置6に送信するものである。また、個人情報分割部42は、大別情報を識別するための大別コード及び限定情報を識別するための限定コードをコード格納部43に格納させるとともに、それらコードを大別情報格納装置5及び限定情報格納装置6に送信するものである。 The personal information dividing unit 42 divides the personal information indicated by the personal information data received from the personal information receiving unit 41 into broadly classified information and limited information, and limits the largely classified information data indicating the largely classified information and the limited information. The information data is transmitted to the main information storage device 5 and the limited information storage device 6, respectively. Further, the personal information dividing unit 42 stores in the code storage unit 43 a classification code for identifying the classification information and a limitation code for identifying the limitation information, and stores the codes in the classification information storage device 5 and The information is transmitted to the limited information storage device 6.
 ここで、個人情報を大別情報と限定情報とに分割する具体的な態様を図4に示す。分割の仕方としては、個人情報をいわゆる縦割りにしたものである。大別情報は、それ単独では個人情報を特定することができないものであり、個人情報において上位概念を示す抽象的な情報をいう。また、限定情報は、前記大別情報と同様、それ単独では個人情報を特定することができないものであり、個人情報において下位概念を示す具体的な情報をいう。 Here, a specific mode of dividing personal information into broadly classified information and limited information is shown in FIG. As a method of division, personal information is divided into so-called vertical divisions. The broad information is information that cannot identify personal information by itself, and is abstract information that indicates a high-level concept in personal information. The limited information, like the broad information, cannot identify personal information by itself, and is specific information indicating a subordinate concept in personal information.
 より詳細には、大別情報は、図4に示すように、氏名おける「名(例えば太郎)」、住所における「都道府県/市区群/町村」、電話番号における「市外局番+局番」、携帯番号における「上3桁+中4桁」、生年月日における「年(例えば西暦)+月」、E-mailアドレスにおける「@以下(メールサーバアドレス)」、勤務先住所における「都道府県/市区群/町村」、勤務先電話番号における「市外局番+局番」、クレジットカード番号における「上8桁」、クレジットカード有効期限における「月」、等である。 More specifically, as shown in FIG. 4, the broad information includes “name (for example, Taro)” in the name, “prefecture / city group / town / village” in the address, and “city code + area code” in the telephone number. , “First 3 digits + middle 4 digits” in mobile number, “Year (for example, year) + month” in date of birth, “@ or less (mail server address)” in E-mail address, “Prefecture in work address” / City group / town / village "," area code + area code "in the work phone number," first 8 digits "in the credit card number," month "in the credit card expiration date, and so on.
 限定情報は、図4に示すように、氏名おける「氏(例えば山田)」、住所における「番地等以下」、電話番号における「下4桁」、携帯番号における「下4桁」、生年月日における「日」、E-mailアドレスにおける「@より前(アカウント)」、勤務先住所における「番地等以下」、勤務先電話番号における「下4桁」、クレジットカード番号における「残りの桁」、クレジットカード有効期限における「年」、等である。 As shown in FIG. 4, the limited information includes “Mr. (for example, Yamada)” in the name, “Less than address, etc.” in the address, “Last 4 digits” in the telephone number, “Last 4 digits” in the mobile number, Date of birth "Day" in E-mail address, "Before @ (Account)" in work address, "Less than address etc." in work address, "Last 4 digits" in work phone number, "Remaining digits" in credit card number, “Year” of the credit card expiration date, etc.
 さらに、大別情報には、アンケート等にも利用可能なように、限定情報には無い情報も含まれる。例えば、性別、配偶者の有無、子供の人数、居住形態、居住年数、勤務先、勤務先の資本金、勤務先の従業者数、勤続年数、職種、年収、趣味等である。 Furthermore, the large-scale information includes information that is not included in the limited information so that it can be used for questionnaires. For example, gender, presence / absence of spouse, number of children, form of residence, number of years of residence, workplace, capital of workplace, number of employees at workplace, length of service, occupation, salary, hobby, etc.
 コード格納部43は、前記個人情報分割部42から、大別情報を識別するための大別コード及び限定情報を識別するための限定コードを受け付けて格納するものである。 The code storage unit 43 receives and stores, from the personal information dividing unit 42, a large code for identifying large classification information and a limited code for identifying limited information.
 ジョイント信号受付部44は、加盟店端末3から送信されるジョイントコードを示すジョイント信号を受信して、そのジョイント信号を管理部45に出力するものである。 The joint signal reception unit 44 receives a joint signal indicating a joint code transmitted from the member store terminal 3 and outputs the joint signal to the management unit 45.
 管理部45は、ジョイント信号受付部44からジョイント信号を受け付けて、そのジョイントコードにより関係付けられたユーザを認識し、そのユーザの大別情報及び限定情報を認識するための大別コード及び限定コードを、コード格納部43から取得する。また、その大別コード及び限定コードを取り扱うための大別情報取扱番号及び限定情報取扱番号を決定する。そして、それら取扱番号を示す取扱信号を加盟店端末3に送信するとともに、大別情報格納装置5及び限定情報格納装置6に送信する。 The management unit 45 receives the joint signal from the joint signal reception unit 44, recognizes the user related by the joint code, and recognizes the general classification information and the limitation information of the user. Is obtained from the code storage unit 43. Further, a major information handling number and a limited information handling number for handling the major code and the limited code are determined. Then, a handling signal indicating these handling numbers is transmitted to the member store terminal 3 and also transmitted to the major information storage device 5 and the limited information storage device 6.
 ここで、本実施形態では、大別情報取扱番号と限定情報取扱番号とを同じ番号にしている。なお、大別情報取扱番号及び限定情報取扱番号を異なる番号としても良い。 Here, in this embodiment, the major information handling number and the limited information handling number are the same number. Note that the major information handling number and the limited information handling number may be different numbers.
 次に、大別情報格納装置5について説明する。大別情報格納装置5は、前記認証会社とは、異なる場所に設けられた大別情報保管会社内に設けられて、管理サーバとして機能するものである。ここで、「異なる場所」とは、家屋、建物が異なること、フロアが異なること又は部屋が異なることをいい、各装置が設けられている空間が物理的に分離していることをいう。その機器構成は、上記管理装置4と同様であり、メモリ1002に所定のプログラムをインストールし、そのプログラムに基づいてCPU1001や周辺機器等が協働することにより、図5に示すように、大別情報受付部51、大別情報格納部52、第1受付部53、第1認証部54、大別情報抽出部55等、として機能する。 Next, the main information storage device 5 will be described. The major information storage device 5 is provided in a major information storage company provided in a place different from the authentication company, and functions as a management server. Here, “different places” means that houses and buildings are different, floors are different, or rooms are different, and the space in which each device is provided is physically separated. The device configuration is the same as that of the management device 4, and a predetermined program is installed in the memory 1002, and the CPU 1001 and peripheral devices cooperate with each other based on the program, as shown in FIG. It functions as an information reception unit 51, a broad classification information storage unit 52, a first reception unit 53, a first authentication unit 54, a large classification information extraction unit 55, and the like.
 以下、各部51~55について詳述する。 Hereinafter, each part 51 to 55 will be described in detail.
 大別情報受付部51は、前記管理装置4の個人情報分割部42から送信された大別情報及びその大別コードを受信して、大別情報格納部52に出力するものである。 The large classification information receiving unit 51 receives the large classification information and the large classification code transmitted from the personal information dividing unit 42 of the management apparatus 4 and outputs them to the large classification information storage unit 52.
 大別情報格納部52は、大別情報受付部51から大別情報及びその大別コードを受け付けて、その大別情報及びその大別コードを格納するものである。 The large classification information storage unit 52 receives the large classification information and the large classification code from the large classification information reception unit 51, and stores the large classification information and the large classification code.
 第1受付部53は、流通の中間段階に位置する大別情報取扱者の識別子である大別情報取扱者識別子、及び所定ユーザの大別情報を取り扱うために予め付与された大別情報取扱信号を大別情報取扱者端末7から受け付けて、その大別情報取扱者識別子を第1認証部54に出力し、大別情報取扱信号を大別情報抽出部55に出力するものである。 The 1st reception part 53 is the classification information handling signal given beforehand in order to handle the classification information handler identifier which is an identifier of the classification information handler located in the intermediate | middle stage of distribution, and the classification information of a predetermined user Is received from the broadly classified information handler terminal 7, the broadly classified information handler identifier is output to the first authentication unit 54, and the broadly classified information handling signal is output to the broadly classified information extracting unit 55.
 ここで大別情報取扱者識別子とは、大別情報取扱者である集荷業者に予め付与されたID及びパスワードである。なお、パスワード無しでIDのみであっても良い。 Here, the major information handler identifier is an ID and password assigned in advance to the collector who is the major information handler. Note that only an ID may be used without a password.
 第1認証部54は、前記第1受付部53から大別情報取扱者識別子を受け付けて、その識別子が示す取扱者が予めアクセス許可されたものであるが否かを判断して認証するものである。認証の結果、大別情報取扱者が認証された場合には、第1認証部54は、認証(許可)信号を大別情報抽出部55に出力する。一方、大別情報取扱者が認証されない場合には、認証(不許可)信号を大別情報取扱者端末7に送信する。 The first authentication unit 54 receives a broad-type information handler identifier from the first reception unit 53, and determines whether or not the handler indicated by the identifier is previously permitted to be authenticated. is there. As a result of the authentication, when the general information handler is authenticated, the first authentication unit 54 outputs an authentication (permission) signal to the general information extraction unit 55. On the other hand, if the general information handler is not authenticated, an authentication (non-permission) signal is transmitted to the general information handler terminal 7.
 大別情報抽出部55は、第1認証部54から認証(許可)信号を受け付けるとともに、第1受付部53から大別情報取扱信号を受け付けて、大別情報取扱信号に基づいて、大別情報格納部52からその取扱信号に大別コードを介して関連付けられた大別情報を抽出する。そして、大別情報抽出部55は、抽出した大別情報を大別情報取扱者端末7に送信する。 The major information extraction unit 55 receives an authentication (permission) signal from the first authentication unit 54, receives a major information handling signal from the first acceptance unit 53, and based on the major information handling signal, the major classification information The classification information associated with the handling signal via the classification code is extracted from the storage unit 52. Then, the major classification information extraction unit 55 transmits the extracted major classification information to the major classification information handler terminal 7.
 本実施形態においては、大別情報抽出部55は、集荷業者が、集荷業者に配達できるだけの大別情報、例えば氏名における名、住所における都道府県/市区群/町村、電話番号における市外局番+局番を抽出して、大別情報取扱者端末7に送信する。 In the present embodiment, the major classification information extraction unit 55 includes major classification information that the collector can deliver to the collector, such as a name in the name, a prefecture / city group / town / village in the address, and an area code in the telephone number. + Extracts the station number and transmits it to the major information handler terminal 7.
 次に、限定情報格納装置6について説明する。限定情報格納装置6は、前記認証会社及び大別情報保管会社とは異なる場所に設けられた限定情報保管会社に設けられて、管理サーバとして機能するものである。その機器構成は、上記管理装置4及び大別情報格納装置5と同様であり、メモリ1002に所定のプログラムをインストールし、そのプログラムに基づいてCPU1001や周辺機器等が協働することにより、図6に示すように、限定情報受付部61、限定情報格納部62、第2受付部63、第2認証部64、限定情報抽出部65等、として機能する。 Next, the limited information storage device 6 will be described. The limited information storage device 6 is provided in a limited information storage company provided in a place different from the authentication company and the general information storage company, and functions as a management server. The device configuration is the same as that of the management device 4 and the general information storage device 5, and a predetermined program is installed in the memory 1002, and the CPU 1001, peripheral devices, and the like cooperate with each other based on the program. As shown, the limited information receiving unit 61, the limited information storing unit 62, the second receiving unit 63, the second authenticating unit 64, the limited information extracting unit 65, and the like function.
 以下、各部61~65について詳述する。 Hereinafter, each part 61 to 65 will be described in detail.
 限定情報受付部61は、前記管理装置4の個人情報分割部42から送信された限定情報及び限定コードを受信して、限定情報格納部62に出力するものである。 The limited information receiving unit 61 receives the limited information and the limited code transmitted from the personal information dividing unit 42 of the management device 4 and outputs them to the limited information storage unit 62.
 限定情報格納部62は、限定情報受付部61から限定情報及び限定コードを受け付けて、その限定情報及び限定コードを格納するものである。 The limited information storage unit 62 receives the limited information and the limited code from the limited information receiving unit 61 and stores the limited information and the limited code.
 第2受付部63は、流通の末端段階に位置する限定情報取扱者の識別子である限定情報取扱者識別子、及び所定ユーザの限定情報を取り扱うために予め付与された限定情報取扱信号を限定情報取扱者端末8から受け付けて、その限定情報取扱者識別子を第2認証部64に出力し、限定情報取扱信号を限定情報抽出部65に出力するものである。 The second receiving unit 63 handles the limited information handling signal provided in advance to handle the limited information handler identifier, which is the identifier of the limited information handler located at the terminal stage of distribution, and the limited information of the predetermined user. The limited information handler identifier is received from the person terminal 8 and the limited information handler identifier is output to the second authentication unit 64, and the limited information handling signal is output to the limited information extraction unit 65.
 ここで限定情報取扱者識別子とは、限定情報取扱者である配達業者(配達業者着ベース又は着センタ)に予め付与されたID及びパスワードである。なお、パスワード無しでIDのみであっても良い。 Here, the limited information handler identifier is an ID and password assigned in advance to a delivery company (delivery company arrival base or arrival center) that is a limited information handler. Note that only an ID may be used without a password.
 第2認証部64は、前記第2受付部63から限定情報取扱者識別子を受け付けて、その識別子が示す取扱者が予めアクセス許可されたものであるが否かを判断して認証するものである。認証の結果、限定情報取扱者が認証された場合には、第2認証部64は、認証(許可)信号を限定情報抽出部65に出力する。一方、限定情報取扱者が認証されない場合には、認証(不許可)信号を限定情報取扱者端末8に送信する。 The second authenticating unit 64 receives the limited information handler identifier from the second receiving unit 63, and determines whether or not the handler indicated by the identifier has been previously permitted to be authenticated. . If the limited information handler is authenticated as a result of the authentication, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65. On the other hand, if the limited information handler is not authenticated, an authentication (non-permission) signal is transmitted to the limited information handler terminal 8.
 限定情報抽出部65は、第2認証部64から認証(許可)信号を受け付けるとともに、第2受付部63から限定情報取扱信号を受け付けて、限定情報取扱信号に基づいて、限定情報格納部62からその取扱信号に限定コードを介して関連付けられた限定情報を抽出する。そして、限定情報抽出部65は、抽出した限定情報を限定情報取扱者端末8に送信する。 The limited information extraction unit 65 receives an authentication (permission) signal from the second authentication unit 64, receives a limited information handling signal from the second receiving unit 63, and receives a limited information handling signal from the limited information storage unit 62 based on the limited information handling signal. Limited information associated with the handling signal via a limited code is extracted. Then, the limited information extraction unit 65 transmits the extracted limited information to the limited information handler terminal 8.
 本実施形態においては、限定情報抽出部65は、前記大別情報抽出部55が抽出した大別情報に対応する限定情報であって、当該大別情報を組み合わされて配達業者(配達業者着側集積所又は着側営業所)がユーザに配達できるだけの限定情報、例えば氏名における氏、住所における番地等以下、電話番号における下4桁を抽出して、限定情報取扱者端末8に送信する。 In the present embodiment, the limited information extraction unit 65 is limited information corresponding to the large-scale information extracted by the large-scale information extraction unit 55, and is combined with the large-scale information to deliver a delivery company (delivery company arrival side). The collection station or the destination sales office) extracts the limited information that can be delivered to the user, for example, the last 4 digits of the telephone number below the name, the address in the address, etc., and transmits it to the limited information handler terminal 8.
 大別情報取扱者端末7及び限定情報取扱者端末8は、上記ユーザ端末2の機器構成に加えて、さらにプリンタなどの大別情報出力部及び限定情報出力部を備えている。大別情報出力部は、前記大別情報格納装置5から送信された大別情報を受信して、その大別情報を紙に印字して出力するものである。限定情報出力部は、前記限定情報格納装置6から送信された限定情報を受信して、その限定情報を紙に印字して出力するものである。 The major information handler terminal 7 and the limited information handler terminal 8 further include a major information output unit such as a printer and a limited information output unit in addition to the device configuration of the user terminal 2. The major information output unit receives the major information transmitted from the major information storage device 5, prints the major information on paper, and outputs it. The limited information output unit receives the limited information transmitted from the limited information storage device 6, prints the limited information on paper, and outputs it.
 次にこのように構成した流通管理システムの動作について、(ステップ1)注文商品への取扱番号の付与等、(ステップ2)注文商品の配達、に分けて説明する。 Next, the operation of the distribution management system configured as described above will be described by dividing into (Step 1) delivery of ordered products, such as (Step 1) assignment of handling numbers to ordered products.
 まず、注文商品への取扱番号の付与及び加盟店における商品送付まで手続きについて、図7のフローチャートを参照して説明する。 First, the procedure for assigning a handling number to an ordered product and sending the product at a member store will be described with reference to the flowchart of FIG.
 ユーザから商品の注文を受けた加盟店従業員は、その商品をユーザに発送するにあたり、まず認証会社HPにアクセスする(ステップS101)。そうすると、認証会社の管理装置4が、HPのトップページを加盟店端末3に送信して(ステップS102)、加盟店端末3は、そのHPのトップページを受信する(ステップS103)。加盟店従業員が、加盟店端末3を操作することにより、加盟店端末3は、管理装置4に加盟店専用画面を要求する(ステップS104)。すると、管理装置4は加盟店確認画面を送信して(ステップS105)、加盟店端末3がその加盟店確認画面を受信する(ステップS106)。 The member store employee who has received the order for the product from the user first accesses the authentication company HP when shipping the product to the user (step S101). Then, the management apparatus 4 of the authentication company transmits the HP top page to the member store terminal 3 (step S102), and the member store terminal 3 receives the HP top page (step S103). When the member store employee operates the member store terminal 3, the member store terminal 3 requests the member store exclusive screen from the management device 4 (step S104). Then, the management apparatus 4 transmits a member store confirmation screen (step S105), and the member store terminal 3 receives the member store confirmation screen (step S106).
 加盟店確認画面を受信した端末において、加盟店従業員が入力手段を用いて、加盟店コード及びパスワードを入力すると、加盟店端末3が、その加盟店コード及びパスワードを管理装置4に送信する(ステップS107)。管理装置4は、その加盟店コード及びパスワードを受信して(ステップS108)、加盟店コード及びパスワードの照合を行う(ステップS109)。照合の結果、加盟店コード及びパスワードが不一致である場合には、管理装置4は加盟店端末3に取扱不能信号を送信して、加盟店端末3は、取扱不能表示をする(ステップS110)。一方、加盟店コード及びパスワードが一致している場合には、管理装置4は、加盟店専用画面を加盟店端末3に送信する(ステップS111)。 When the member store employee inputs the member store code and password using the input means at the terminal that has received the member store confirmation screen, the member store terminal 3 transmits the member store code and password to the management device 4 ( Step S107). The management device 4 receives the member store code and password (step S108) and collates the member store code and password (step S109). As a result of the collation, if the member store code and the password do not match, the management device 4 transmits an unusable signal to the member store terminal 3, and the member store terminal 3 displays an unusable display (step S110). On the other hand, if the member store code and the password match, the management device 4 transmits a member store dedicated screen to the member store terminal 3 (step S111).
 そして、加盟店専用画面を受信した加盟店端末3は(ステップS112)、加盟店従業員の入力手段の操作に基づいて、宅配取扱依頼画面を管理装置4に要求する(ステップS113)。その要求を受けた管理装置4は、宅配取扱依頼画面を加盟店端末3に送信する(ステップS114)。加盟店端末3は、宅配便取扱依頼画面を表示して(ステップS115)、加盟店従業員の入力手段の操作により、宅配便取扱依頼書を管理装置4に送信する(ステップS116)。このとき、宅配便取扱依頼書中には、ジョイントコード及び加盟店コードが含まれている。その取扱依頼書を受信した管理装置4の管理部45は(ステップS117)、事前許可の確認を行い(ステップS118)、不可であれば取扱不可通知信号を加盟店端末3に送信し(ステップS119)、可能であれば、ユーザの大別コードと結びつけた取扱番号を発行するとともに、その取扱番号の有効条件(例えば、有効期限や有効回数など)を決定する(ステップS120)。 Then, the member store terminal 3 that has received the member store dedicated screen (step S112) requests the management device 4 for a home delivery handling request screen based on the operation of the input means of the member store employee (step S113). Upon receiving the request, the management device 4 transmits a home delivery handling request screen to the member store terminal 3 (step S114). The member store terminal 3 displays a courier service request screen (step S115), and transmits a courier service request form to the management device 4 by operating the input means of the member store employee (step S116). At this time, the courier service handling request form includes a joint code and a member store code. The management unit 45 of the management device 4 that has received the handling request form (step S117) confirms prior permission (step S118), and if not, sends a handling disapproval notification signal to the member store terminal 3 (step S119). ) If possible, a handling number associated with the user's general code is issued and valid conditions (for example, expiration date and number of times of validity) of the handling number are determined (step S120).
 次に、取扱番号を発行した管理装置4の管理部45は、取扱依頼書Aを大別情報保管会社の大別情報格納装置5に送信する(ステップS121)。大別情報格納装置5は、取扱依頼書Aを受信して(ステップS122)、その取扱依頼書A中から大別情報取扱番号及びその有効条件を抽出し記録する(ステップS123)。その後、大別情報格納装置5は、取扱ができるか否かを示した取扱通知書を管理装置4の管理部45に送信する(ステップS124)。その取扱通知書を受信した管理部45は(ステップS125)、取扱番号に結びつけられた大別コードから、限定コードを抽出し、取扱番号に結びつけて記憶する(ステップS126)。そして、取扱依頼書Bを限定情報保管会社の限定情報格納装置6に送信する(ステップS127)。限定情報格納装置6は、取扱依頼書Bを受信して(ステップS128)、その取扱依頼書B中から限定情報取扱番号及びその有効条件を抽出し記録する(ステップS129)。その後、限定情報格納装置6は、取扱ができるか否かを示した取扱通知書を管理装置4の管理部45に送信する(ステップS130)。その取扱通知書を受信した管理部45は(ステップS131)、取扱準備完了通知及び納品書を加盟店端末3に送信する(ステップS132)。加盟店端末3は、取扱準備完了通知及び納品書を受信し(ステップS133)、加盟店従業員により、商品(宅配物)に取扱番号が付されて送付される(ステップS134)。 Next, the management unit 45 of the management device 4 that has issued the handling number transmits a handling request form A to the major information storage device 5 of the major information storage company (step S121). The major information storage device 5 receives the handling request document A (step S122), extracts the major classification information handling number and its valid condition from the handling request document A, and records it (step S123). Thereafter, the main information storage device 5 transmits a handling notification indicating whether or not handling is possible to the management unit 45 of the management device 4 (step S124). The management unit 45 that has received the notification of handling (step S125) extracts a limited code from the general code linked to the handling number, and stores it in association with the handling number (step S126). Then, the handling request form B is transmitted to the limited information storage device 6 of the limited information storage company (step S127). The limited information storage device 6 receives the handling request document B (step S128), and extracts and records the limited information handling number and its valid condition from the handling request document B (step S129). Thereafter, the limited information storage device 6 transmits a handling notification indicating whether or not handling is possible to the management unit 45 of the management device 4 (step S130). The management unit 45 that has received the handling notice (step S131) transmits a handling preparation completion notice and a delivery note to the member store terminal 3 (step S132). The member store terminal 3 receives the handling preparation completion notice and the delivery note (step S133), and the member store employee sends the merchandise (delivery product) with the handling number attached (step S134).
 なお、上記ステップS120~ステップS126において、取扱番号に大別コードを結びつけてから、その大別コードが、大別情報格納装置5が取扱可能か否かを判断してから、取扱番号に限定コードを結びつけるようにしているが、大別コード及び限定コードを同時に取扱番号に結びつけるようにしても良い。 In step S120 to step S126, after the classification code is linked to the handling number, it is determined whether or not the classification information storage device 5 can handle the classification code, and then the limited code is assigned to the handling number. However, it is also possible to tie the major code and the limited code to the handling number at the same time.
 次に、注文商品の配達について、図8のフローチャートを参照して説明する。 Next, delivery of ordered products will be described with reference to the flowchart of FIG.
 加盟店から商品を集荷した集荷業者は、商品上に付された取扱番号を読み取り(ステップS201)、大別情報取扱者端末7を操作することにより、取扱番号に関連付けられた大別情報を問い合わせる(ステップS202)。このとき、大別情報取扱者端末7は、大別情報取扱信号及び大別情報取扱者識別子を大別情報格納装置5に送信する。 The collector who collects the merchandise from the member store reads the handling number attached to the merchandise (step S201), and operates the major information handler terminal 7 to inquire about the major classification information associated with the handling number. (Step S202). At this time, the general information handler terminal 7 transmits the general information handler signal and the general information handler identifier to the general information storage device 5.
 そして、大別情報格納装置5の第1受付部53が、大別情報取扱者識別子及び大別情報取扱信号を受信する(ステップS203)。次に、第1認証部54が、大別情報取扱者識別子を認証する(ステップS204)。その識別子を認証しない場合には、第1認証部54は、認証(不許可)信号を大別情報取扱者端末7に送信する(ステップS205)。一方、その識別子を認証する場合には、第1認証部54は、認証(許可)信号を大別情報抽出部55に出力する。そうすると、大別情報抽出部55が、大別情報取扱信号に基づいて、商品の配達に必要な情報の大別情報を抽出し(ステップS206)、その大別情報を大別情報取扱者端末7に送信する(ステップS207)。そして、大別情報取扱者端末7は、その大別情報を受信して(ステップS208)、その大別情報出力部が、大別情報を印字して出力する(ステップS209)。このように大別情報が印字された紙は、注文商品上に付される。そして、注文商品は、その大別情報に基づいて集荷業者から配達業者に送られる。 And the 1st reception part 53 of the classification information storage apparatus 5 receives a classification information handler identifier and a classification information handling signal (step S203). Next, the 1st authentication part 54 authenticates a classification information handler identifier (step S204). When the identifier is not authenticated, the first authenticating unit 54 transmits an authentication (non-permission) signal to the general information handler terminal 7 (step S205). On the other hand, when authenticating the identifier, the first authenticating unit 54 outputs an authentication (permission) signal to the general information extracting unit 55. Then, the broad classification information extraction unit 55 extracts large classification information of information necessary for the delivery of the product based on the large classification information handling signal (step S206), and the broad classification information is classified into the large classification information handler terminal 7. (Step S207). Then, the major information handler terminal 7 receives the major classification information (step S208), and the major classification information output unit prints and outputs the major classification information (step S209). The paper on which the broad classification information is printed in this way is attached on the ordered product. Then, the ordered product is sent from the collector to the delivery company based on the general information.
 集荷業者から商品を渡された配達業者は、商品上に付された取扱番号を読み取り(ステップS210)、限定情報取扱者端末8を操作することにより、取扱番号に関連付けられた限定情報を問い合わせる(ステップS211)。このとき、限定情報取扱者端末8は、限定情報取扱信号及び限定情報取扱者識別子を限定情報格納装置6に送信する。 The delivery company handed over the product from the collector collects the handling number given on the product (step S210), and operates the limited information handler terminal 8 to inquire about the limited information associated with the handling number ( Step S211). At this time, the limited information handler terminal 8 transmits a limited information handling signal and a limited information handler identifier to the limited information storage device 6.
 そして、限定情報格納装置6の第2受付部63が、限定情報取扱者識別子及び限定情報取扱信号を受信する(ステップS212)。次に、第2認証部64が、限定情報取扱者識別子を認証する(ステップS213)。その識別子を認証しない場合には、第2認証部64は、認証(不許可)信号を限定情報取扱者端末8に送信する(ステップS214)。一方、その識別子を認証する場合には、第2認証部64は、認証(許可)信号を限定情報抽出部65に出力する。そうすると、限定情報抽出部65が、限定情報取扱信号にもとづいて、前記大別情報と組み合わされることにより個人情報を特定することができる限定情報を抽出し(ステップS215)、その限定情報を限定情報取扱者端末8に送信する(ステップS216)。そして、限定情報取扱者端末8は、その限定情報を受信して(ステップS217)、限定情報出力部が、限定情報を印字して出力する(ステップS218)。このように限定情報が印字された紙は、注文商品上において大別情報が印字された紙の近傍に付される。そうして、大別情報が印字された紙及び限定情報が印字された紙により、ユーザの住所等が組み合わされて、注文商品は、配達業者の手によってユーザに配達される。 Then, the second receiving unit 63 of the limited information storage device 6 receives the limited information handler identifier and the limited information handling signal (step S212). Next, the second authentication unit 64 authenticates the limited information handler identifier (step S213). If the identifier is not authenticated, the second authenticating unit 64 transmits an authentication (non-permission) signal to the limited information handler terminal 8 (step S214). On the other hand, when authenticating the identifier, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65. Then, the limited information extraction unit 65 extracts limited information that can identify personal information by being combined with the broad classification information based on the limited information handling signal (step S215). It transmits to the handler terminal 8 (step S216). Then, the limited information handler terminal 8 receives the limited information (step S217), and the limited information output unit prints and outputs the limited information (step S218). Thus, the paper on which the limited information is printed is attached in the vicinity of the paper on which the general information is printed on the ordered product. Then, the user's address and the like are combined with the paper on which the general information is printed and the paper on which the limited information is printed, and the ordered product is delivered to the user by the delivery company.
 このように構成した本実施形態に係る流通管理システムによれば、集荷業者のみが大別情報を取り扱い可能とし、配達業者のみが限定情報を取り扱い可能としているので、流通過程における個人情報の流出を防ぐことができる。また、個人情報を単独では個人情報を特定できないように分割して格納しているので、それぞれの情報が漏洩しても個人情報を特定することができず、個人情報の漏洩を防ぐことができる。さらに、配達業者は紙に印字されたという状態で個人情報を知ることができるものの、データという形で取り扱うことがないため、多数の個人情報が一挙に漏洩するといった不具合を防止できる。加盟店は、ジョイントコード及び取扱番号しか知ることができず、集荷業者は、取扱番号及び大別情報しか知ることができないので、加盟店及び集荷業者から個人情報が流出することを防ぐことができる。 According to the distribution management system according to the present embodiment configured as described above, only the collector can handle the broad information, and only the delivery company can handle the limited information. Can be prevented. In addition, since personal information is divided and stored so that personal information cannot be specified alone, personal information cannot be specified even if each information leaks, and leakage of personal information can be prevented. . Further, although the delivery company can know the personal information in a state of being printed on paper, it is not handled in the form of data, so that it is possible to prevent a problem that a large amount of personal information is leaked at once. The member store can only know the joint code and the handling number, and the collector can only know the handling number and the general information, so that personal information can be prevented from being leaked from the member store and the collector. .
 <第2実施形態> <Second Embodiment>
 次に本発明に係る流通管理システムの第2実施形態について説明する。前記第1実施形態に対応するものには、同一の符号を付している。 Next, a second embodiment of the distribution management system according to the present invention will be described. Components corresponding to those in the first embodiment are denoted by the same reference numerals.
 本実施形態に係る流通管理システムは、加盟店からユーザにE-mailを送信する場合の流通管理システムに関するものであって、図9に示すように、インターネット等のネットワーク1と、このネットワーク1を介して双方向通信可能に接続されたユーザ端末2と、加盟店端末3と、管理装置4と、大別情報格納装置5と、限定情報格納装置6と、を備えている。ユーザ端末2、加盟店端末3、大別情報格納装置5、限定情報格納装置6は、前記第1実施形態と同一であるが、管理装置4は前記第1実施形態とはその機能が異なる。つまり、管理装置4は、前記第1実施形態の大別情報取扱者及び限定情報取扱者として機能するとともに、専用メールサーバとして機能するものである。 The distribution management system according to the present embodiment relates to a distribution management system when an E-mail is transmitted from a member store to a user. As shown in FIG. 9, a network 1 such as the Internet and the network 1 are connected. A user terminal 2, a member store terminal 3, a management device 4, a general information storage device 5, and a limited information storage device 6, which are connected so as to be capable of bidirectional communication. The user terminal 2, the member store terminal 3, the main information storage device 5, and the limited information storage device 6 are the same as those in the first embodiment, but the management device 4 is different in function from the first embodiment. That is, the management device 4 functions as a general information handler and limited information handler of the first embodiment and also functions as a dedicated mail server.
 具体的には、管理装置4は、図10に示すように、個人情報受付部41、個人情報分割部42、ジョイント信号受付部44、転送希望メール受付部46、管理部45等、として機能する。 Specifically, as shown in FIG. 10, the management device 4 functions as a personal information receiving unit 41, a personal information dividing unit 42, a joint signal receiving unit 44, a transfer request mail receiving unit 46, a management unit 45, and the like. .
 転送希望メール受付部46は、取扱番号及び専用メールアドレスが付与された加盟店端末3から、専用メールアドレスに送信されたユーザへの転送希望メールを受信して、管理部45に出力するものである。 The transfer request mail receiving unit 46 receives a transfer request mail to the user transmitted to the dedicated mail address from the member store terminal 3 to which the handling number and the dedicated mail address are assigned, and outputs the received mail to the management unit 45. is there.
 管理部45は、ジョイント信号受付部44からジョイント信号を受け付けて、そのジョイントコードにより関係付けられたユーザを認識し、そのユーザの大別情報及び限定情報を認識するための大別コード及び限定コードを、コード格納部43から取得する。また、その大別コード及び限定コードを取り扱うための取扱番号を決定する。そして、その取扱番号を示す取扱信号を加盟店端末3に送信するとともに、大別情報格納装置5及び限定情報格納装置6に送信する。さらに、取扱番号を用いた専用メールアドレスを加盟店端末3に送信する。 The management unit 45 receives the joint signal from the joint signal reception unit 44, recognizes the user related by the joint code, and recognizes the general classification information and the limitation information of the user. Is obtained from the code storage unit 43. In addition, a handling number for handling the general code and the limited code is determined. Then, a handling signal indicating the handling number is transmitted to the member store terminal 3, and is also transmitted to the major information storage device 5 and the limited information storage device 6. Further, a dedicated mail address using the handling number is transmitted to the member store terminal 3.
 また、管理部45は、転送希望メール受付部46から転送希望メールを受信して、その専用メールアドレスから取扱番号を抽出し、大別コード及び限定コードを抽出する。そして、その大別コード及び限定コードを用いて、大別情報格納装置5から大別情報(ユーザのメールサーバアドレス)を取得し、限定情報格納装置6から限定情報(ユーザのアカウント)を取得し、ユーザのメールアドレスを合成する。その後、そのユーザメールアドレスに加盟店端末3からの転送希望メールを転送する。 Further, the management unit 45 receives the transfer request mail from the transfer request mail receiving unit 46, extracts the handling number from the dedicated mail address, and extracts the broadly classified code and the limited code. Then, using the classification code and the limitation code, the classification information (user's mail server address) is acquired from the classification information storage device 5, and the limitation information (user account) is acquired from the limitation information storage device 6. Synthesize email addresses of users. Thereafter, the transfer request mail from the member store terminal 3 is transferred to the user mail address.
 次にこのように構成した流通管理システムの動作について、(ステップ1)取扱番号等の付与、(ステップ2)加盟店からユーザへのメールの送信、に分けて説明する。 Next, the operation of the distribution management system configured as described above will be described by dividing into (Step 1) assignment of a handling number and the like (Step 2) transmission of mail from a member store to the user.
 まず、取扱番号及び専用メールアドレスの付与について、図11のフローチャートを参照して説明する。 First, the assignment of a handling number and a dedicated email address will be described with reference to the flowchart of FIG.
 ユーザへメールを送りたい加盟店従業員は、まず認証会社HPにアクセスする(ステップS301)。そうすると、認証会社の管理装置4が、HPのトップページを加盟店端末3に送信して(ステップS302)、加盟店端末3は、そのHPのトップページを受信する(ステップS303)。加盟店従業員が、加盟店端末3を操作することにより、加盟店端末3は、管理装置4に加盟店専用画面を要求する(ステップS304)。すると、管理装置4は加盟店確認画面を送信して(ステップS305)、加盟店端末3がその加盟店確認画面を受信する(ステップS306)。 The member store employee who wants to send an e-mail to the user first accesses the authentication company HP (step S301). Then, the management apparatus 4 of the authentication company transmits the HP top page to the member store terminal 3 (step S302), and the member store terminal 3 receives the HP top page (step S303). When the member store employee operates the member store terminal 3, the member store terminal 3 requests the member store exclusive screen from the management device 4 (step S304). Then, the management apparatus 4 transmits a member store confirmation screen (step S305), and the member store terminal 3 receives the member store confirmation screen (step S306).
 加盟店確認画面を受信した端末において、加盟店従業員が入力手段を用いて、加盟店コード及びジョイントコードを入力すると、加盟店端末3が、その加盟店コード及びジョイントコードを管理装置4に送信する(ステップS307)。管理装置4は、その加盟店コード及びジョイントコードを受信して(ステップS308)、加盟店コード及びジョイントコードの照合を行う(ステップS309)。照合の結果、加盟店コード及びジョイントコードの取り扱いができない場合には、管理装置4は加盟店端末3に取扱不能信号を送信して、加盟店端末3は、取扱不能表示をする(ステップS310)。一方、加盟店コード及びジョイントコードの取り扱いができる場合には、管理装置4の管理部45は、ユーザの大別コード及び限定コードと結びつけた取扱番号を発行し、その取扱番号を用いた専用メールアドレス(例えば、取扱番号@専用メールサーバアドレス)を生成し、それらの有効条件を決定して、加盟店端末3に送信する(ステップS311)。 When the member store employee inputs the member store code and the joint code using the input means at the terminal that has received the member store confirmation screen, the member store terminal 3 transmits the member store code and the joint code to the management device 4. (Step S307). The management device 4 receives the member store code and the joint code (step S308) and collates the member store code and the joint code (step S309). As a result of the collation, if the member store code and the joint code cannot be handled, the management device 4 transmits an unusable signal to the member store terminal 3, and the member store terminal 3 displays an unusable display (step S310). . On the other hand, when the member store code and the joint code can be handled, the management unit 45 of the management device 4 issues a handling number associated with the user's general classification code and the limited code, and a dedicated mail using the handling number. Addresses (for example, handling number @ dedicated mail server address) are generated, their valid conditions are determined, and transmitted to the member store terminal 3 (step S311).
 次に、専用メールアドレスを用いたメールの送信について、図12のフローチャートを参照して説明する。 Next, transmission of mail using a dedicated mail address will be described with reference to the flowchart of FIG.
 加盟店がユーザにメールを送信したい場合には、前記ステップ1にて付与された専用メールアドレスに転送希望メールを送信する(ステップS401)。そうすると、管理装置4の転送希望メール受付部46が転送希望メールを受信して(ステップS402)管理部45に出力する。管理部45は、送信元が正しいか否かを確認する(ステップS403)。送信元が正しくない場合には、管理部45は、取扱不能通知を加盟店端末3に送信し、加盟店端末3は取扱不能通知を受信する(ステップS404)。一方、送信元が正しい場合には、管理部45は、その専用メールアドレスから取扱番号を抽出し(ステップS405)、その取扱番号から大別コードを抽出する(ステップS406)。その後、管理部45は、受信者(ユーザ)の専用メールサーバアドレスを問い合わせるために、大別情報取扱者識別子及び大別コードを大別情報格納装置5に送信する(ステップS407)。 If the member store wishes to send an email to the user, it forwards an email to be forwarded to the dedicated email address assigned in step 1 (step S401). Then, the transfer request mail receiving unit 46 of the management device 4 receives the transfer request mail (step S402) and outputs it to the management unit 45. The management unit 45 checks whether or not the transmission source is correct (step S403). When the transmission source is not correct, the management unit 45 transmits a handling impossible notification to the member store terminal 3, and the member store terminal 3 receives the handling impossible notification (step S404). On the other hand, when the transmission source is correct, the management unit 45 extracts a handling number from the dedicated mail address (step S405), and extracts a general code from the handling number (step S406). Thereafter, in order to inquire about the dedicated mail server address of the recipient (user), the management unit 45 transmits the major information handler identifier and the major code to the major information storage device 5 (step S407).
 そして、大別情報格納装置5の第1受付部53が、大別情報取扱者識別子及び大別コードを受信する(ステップS408)。次に、第1認証部54が、第1受付部53から大別情報取扱者識別子及び大別コードを取得して、大別情報取扱者識別子及び大別コードを認証する(ステップS409)。その識別子及びコードを認証しない場合には、第1認証部54は、認証(不許可)信号を管理装置4に送信する(ステップS410)。そして、管理装置4が、認証(不許可)信号を加盟店端末3に送信し、加盟店端末3が、認証(不許可)信号を受信する(ステップS411)。一方、その識別子及びコードを認証する場合には、第1認証部54は、認証(許可)信号を大別情報抽出部55に出力する。そうすると、大別情報抽出部55が、大別コードに基づいて、大別情報であるメールサーバアドレスを抽出し(ステップS412)、そのメールサーバアドレスを管理装置4に送信する(ステップS413)。そして、管理装置4は、そのメールサーバアドレスを受信して(ステップS414)、大別コードから限定コードを抽出する(ステップS415)その後、受信者(ユーザ)のアカウントを問い合わせるために、限定情報取扱者識別子及び限定コードを限定情報格納装置6に送信する(ステップS416)。 And the 1st reception part 53 of the classification information storage apparatus 5 receives a classification information handler identifier and a classification code (step S408). Next, the 1st authentication part 54 acquires a classification information handler identifier and a classification code from the 1st reception part 53, and authenticates a classification information handler identifier and a classification code (step S409). When the identifier and code are not authenticated, the first authentication unit 54 transmits an authentication (non-permission) signal to the management device 4 (step S410). Then, the management device 4 transmits an authentication (non-permission) signal to the member store terminal 3, and the member store terminal 3 receives the authentication (non-permission) signal (step S411). On the other hand, when authenticating the identifier and code, the first authentication unit 54 outputs an authentication (permission) signal to the broad information extraction unit 55. Then, the broad classification information extraction unit 55 extracts a mail server address that is broad classification information based on the broad classification code (step S412), and transmits the mail server address to the management apparatus 4 (step S413). Then, the management device 4 receives the mail server address (step S414), extracts a limitation code from the broad classification code (step S415), and then handles the limitation information in order to inquire about the recipient (user) account. The person identifier and the limitation code are transmitted to the limitation information storage device 6 (step S416).
 そして、限定情報格納装置6の第2受付部63が、限定情報取扱者識別子及び限定コードを受信する(ステップS417)。次に、第2認証部64が、第2受付部63から限定情報取扱者識別子及び限定コードを取得して、限定情報取扱者識別子及び限定コードを認証する(ステップS418)。その識別子及びコードを認証しない場合には、第2認証部64は、認証(不許可)信号を管理装置4に送信する(ステップS419)。そして、管理装置4が、認証(不許可)信号を加盟店端末3に送信し、加盟店端末3が、認証(不許可)信号を受信する(ステップS420)。一方、その識別子及びコードを認証する場合には、第2認証部64は、認証(許可)信号を限定情報抽出部65に出力する。そうすると、限定情報抽出部65が、限定コードに基づいて、限定情報である受信者(ユーザ)のアカウントを抽出し(ステップS421)、そのアカウントを管理装置4に送信する(ステップS422)。 Then, the second reception unit 63 of the limited information storage device 6 receives the limited information handler identifier and the limited code (step S417). Next, the second authentication unit 64 acquires the limited information handler identifier and the limitation code from the second reception unit 63, and authenticates the limited information handler identifier and the limitation code (step S418). If the identifier and code are not authenticated, the second authenticating unit 64 transmits an authentication (non-permission) signal to the management device 4 (step S419). Then, the management device 4 transmits an authentication (non-permission) signal to the member store terminal 3, and the member store terminal 3 receives the authentication (non-permission) signal (step S420). On the other hand, when authenticating the identifier and code, the second authenticating unit 64 outputs an authentication (permission) signal to the limited information extracting unit 65. Then, the limited information extracting unit 65 extracts a receiver (user) account that is limited information based on the limited code (step S421), and transmits the account to the management apparatus 4 (step S422).
 次に、管理会社は、限定情報格納装置6からアカウントを受信して(ステップS423)、大別情報格納装置5から受信したメールサーバアドレスとアカウントとを合成して、受信者メールアドレスを生成する(ステップS424)。そして、管理装置4は、合成した受信者メールアドレスに加盟店の転送希望メールを送信する(ステップS425)。このメールは、サービスプロバイダ9を介してユーザにメールを送信される。 Next, the management company receives an account from the limited information storage device 6 (step S423), combines the mail server address received from the general information storage device 5 and the account, and generates a recipient email address. (Step S424). Then, the management device 4 transmits a transfer request mail of the member store to the combined recipient mail address (step S425). This mail is sent to the user via the service provider 9.
 このように構成した本実施形態によれば、加盟店にユーザのメールアドレスを知らせることなく、ユーザは加盟店からメールを受信することができる。つまり、加盟店においてユーザのメールアドレスが流出することが無い、また、ユーザのメールアドレスは、メールサーバアドレスとアカウントとに分割されて、それぞれ大別情報格納装置5及び限定情報格納装置6に格納されるので、仮に大別情報格納装置及び限定情報格納装置からそれぞれ大別情報であるメールサーバアドレス及び限定情報であるアカウントが漏洩したとしても、それらの対応関係が不明であるので、ユーザのメールアドレス全体が漏洩することを防ぐことができる。 According to this embodiment configured as described above, the user can receive mail from the member store without notifying the member store of the user's mail address. That is, the user's e-mail address does not flow out at the member store, and the user's e-mail address is divided into a mail server address and an account, and stored in the major information storage device 5 and the limited information storage device 6, respectively. Therefore, even if the mail server address that is broadly classified information and the account that is limited information are leaked from the broadly classified information storage device and the limited information storage device, the correspondence between them is unknown, so the user's mail It is possible to prevent the entire address from leaking.
 <その他の変形実施形態> <Other modified embodiments>
 なお、本発明は前記実施形態に限られるものではない。 The present invention is not limited to the above embodiment.
 例えば、前記各実施形態では、管理装置が個人情報分割部を備え、その個人情報分割部により、ユーザが入力した個人情報を分割して、各格納装置に送信するようにしているが、その他にも管理装置を介さずにユーザが大別情報格納部に大別情報を直接送信し、限定情報を限定情報格納装置に直接送信して、それら情報を格納するようにしても良い。 For example, in each of the above embodiments, the management device includes a personal information dividing unit, and the personal information dividing unit divides the personal information input by the user and transmits it to each storage device. Alternatively, the user may transmit the broad classification information directly to the large classification information storage unit without going through the management apparatus, and the limited information may be directly transmitted to the limited information storage apparatus to store the information.
 前記第1実施形態において、大別情報抽出部は、取扱番号を受信した後に、その取扱番号に結びつけられた大別コードを用いて大別情報を抽出し、その大別情報の中から、配達に必要な情報をさらに抽出するようにしているが、ユーザの大別情報のうち、配達に必要な大別情報のみを予め別のデータベースに格納するようにしても良い。また、流通管理システムを物品の配達に用いる場合には、大別情報格納部52には、配達に用いる情報のみを格納するようにしても良い。限定情報の場合も同様である。 In the first embodiment, after receiving the handling number, the classification information extraction unit extracts classification information using the classification code associated with the handling number, and delivers the classification information from the classification information. However, it is also possible to store only the major information necessary for delivery out of the major information of the user in a separate database in advance. Further, when the distribution management system is used for delivery of goods, the main information storage unit 52 may store only information used for delivery. The same applies to the limited information.
 さらに、前記第1実施形態おける管理装置としての機能を大別情報格納装置及び限定情報格納装置に分散させて、管理装置を用いないものであっても良い。 Furthermore, the function as the management device in the first embodiment may be distributed to the broad information storage device and the limited information storage device, and the management device may not be used.
 その上、前記第1実施形態では、商品をユーザに配達する実施形態であったが、その他、郵便物を配達するものであっても良い。 In addition, in the first embodiment, the merchandise is delivered to the user. However, a mail may be delivered.
 その上、大別情報(例えば趣味など)を利用して、ユーザがアクセスする加盟店HP上にその大別情報に関連した広告等の情報を掲載するようにしても良い。 In addition, information such as advertisements related to the classification information may be posted on the member store HP accessed by the user using classification information (for example, hobbies).
 加えて、前記各実施形態において、ダイレクトメール(手紙又は電子メール)を一斉に送付することもできる。つまり、大別情報格納装置が、メールの送付先条件を設定する送付先条件情報を受け付ける送付先条件受付部をさらに備え、前記大別情報抽出部が、前記送付先条件受付部から、送付先条件情報を取得して、前記大別情報取扱者が設定した送付先条件を満たす大別情報を大別情報の中から抽出するようにしても良い。このように大別情報抽出部が、抽出した大別情報に対応付けられた限定情報を取得して、その個人にダイレクト郵便やダイレクトメールを送付するようにすることも考えられる。 In addition, in each of the above embodiments, direct mail (letter or electronic mail) can be sent all at once. In other words, the large information storage device further includes a transmission destination condition reception unit that receives transmission destination condition information for setting a mail transmission destination condition, and the large classification information extraction unit receives a transmission destination from the transmission destination condition reception unit. Condition information may be acquired, and the broad classification information satisfying the destination condition set by the broad classification information handler may be extracted from the broad classification information. In this way, it is also conceivable that the broad classification information extraction unit acquires limited information associated with the extracted broad classification information and sends direct mail or direct mail to the individual.
 さらに、大別情報のみを用いてアンケート等にも用いることもできる。一方、限られた地域(例えば市区群や町村等)のみで用いられるシステムにおいては、限定情報のみを用いるものであっても良い。このとき、流通管理システムは、限定情報格納部のみを備えるものであっても良い。 Furthermore, it can also be used for questionnaires, etc. using only major information. On the other hand, in a system used only in a limited area (for example, a city group or a town / village), only limited information may be used. At this time, the distribution management system may include only the limited information storage unit.
 上記の大別情報のみをアンケートに用いるという観点から言うと、前記実施形態では、大別情報及び限定情報を格納するようにしているが、大別情報のみを大別情報格納部に格納するようにしても良い。つまり、流通管理システムは、大別情報格納部のみを備えるものであっても良い。 From the viewpoint of using only the above-mentioned broadly classified information for the questionnaire, in the above embodiment, the broadly classified information and the limited information are stored. However, only the broadly classified information is stored in the largely classified information storage unit. Anyway. That is, the distribution management system may be provided with only a major information storage unit.
 大別情報のみを取り扱うことに関して言うと、例えば視聴率調査又は購買動向調査等に用いることができる。図13は、視聴率調査を行う場合の流通管理システムを示す。このとき、動向調査機関は、前記第1実施形態における加盟店及び大別情報取扱者であり、動向調査機関の端末は、前記第1実施形態における加盟店端末3及び大別情報取扱端末7である。そして、動向調査機関の端末3(7)は、テレビに連結されたデータ出力装置(ユーザ端末2であっても良いし、ユーザ端末と異なるものであっても良い。)から視聴データ及び大別情報取扱番号を取得し、当該大別情報取扱番号に基づいて、大別情報格納装置5から大別情報を取得する。このようにして、大別情報に基づいた視聴率調査を行うことができる。同様にして、購買動向調査も行うことができる。 As for handling only major information, it can be used for, for example, audience rating survey or purchasing trend survey. FIG. 13 shows a distribution management system in the case of performing audience rating survey. At this time, the trend research organization is the member store and the main information handler in the first embodiment, and the terminal of the trend survey organization is the member store terminal 3 and the main information processing terminal 7 in the first embodiment. is there. Then, the terminal 3 (7) of the trend research organization receives the viewing data and the general classification from the data output device (the user terminal 2 may be different from the user terminal) connected to the television. The information handling number is acquired, and the broad classification information is acquired from the broad classification information storage device 5 based on the large classification information handling number. In this way, the audience rating survey based on the broad classification information can be performed. Similarly, purchase trend surveys can be conducted.
 なお、視聴者(購入者)からの視聴データ(購入データ)を、動向調査機関に出力することなく、管理装置4内に設けたデータ格納部内に格納するようにしても良い。このとき、動向調査機関が、条件(例えば、所定の日時における視聴率又は購入状況を選択するための条件)を設定して、管理装置に条件信号を出力することにより、管理装置が、当該条件に合う大別情報を抽出するとともに、それに関連する視聴データ(購入データ)又はその視聴データ(購入データ)の統計データを算出して、その統計データを動向調査機関に出力することもできる。 Note that the viewing data (purchase data) from the viewer (purchaser) may be stored in a data storage unit provided in the management device 4 without being output to the trend survey organization. At this time, the trend research organization sets a condition (for example, a condition for selecting an audience rating or purchase status at a predetermined date and time), and outputs a condition signal to the management apparatus. Can be extracted, and statistical data of the viewing data (purchase data) or the viewing data (purchase data) associated therewith can be calculated, and the statistical data can be output to a trend research organization.
 前記第1実施形態の流通管理システムにおける大別情報取扱者及び限定情報取扱者は、集荷業者及び配達業者であったが、その他にも大別情報取扱者が、会社における本社であり、限定情報取扱者が、その支社とすることもできる。 In the distribution management system according to the first embodiment, the major information handler and the limited information handler are a collector and a delivery company. In addition, the major information handler is the head office of the company, and the limited information handler. The handler can also be the branch office.
 また、送り状や切手中に取扱番号を記録した例えば非接触型のICチップを埋め込んでも良いし、取扱番号を記録したバーコードを付するようにしても良い。この場合、大別情報取扱者端末及び限定情報取扱者端末は、前記ICチップやバーコードを読みとる読み取り手段を備えさせている。 Further, for example, a non-contact type IC chip in which a handling number is recorded in an invoice or a stamp may be embedded, or a bar code in which a handling number is recorded may be attached. In this case, the general information handler terminal and the limited information handler terminal are provided with reading means for reading the IC chip and the barcode.
 さらに加えて、大別情報格納装置、限定情報格納装置又は管理装置のうち少なくとも1つ以上が外国に設けられていても良い。 In addition, at least one of a broadly classified information storage device, a limited information storage device, or a management device may be provided in a foreign country.
 本発明の流通管理システムを、ネット通販等でユーザが加盟店からクレジットカードで商品を購入した場合にも適用することができる。この場合、大別情報取扱者はカード処理サービス会社であり、限定情報取扱者はクレジット発行会社である。そして、この場合の大別情報は主としてユーザのクレジットカード番号の「上8桁」及びクレジットカードの有効期限の「月」であり、限定情報は主としてユーザのクレジットカード番号の「残りの桁」及びクレジットカードの有効期限の「年」である。 The distribution management system of the present invention can also be applied to cases where a user purchases a product with a credit card from a member store through online shopping or the like. In this case, the major information handler is a card processing service company, and the limited information handler is a credit issuing company. The major information in this case is mainly the “first 8 digits” of the user's credit card number and the “month” of the expiration date of the credit card, and the limited information is mainly “the remaining digits” of the user's credit card number and The credit card expiration date is the “year”.
 さらに、本発明の流通管理システムを、加盟店からユーザに電話連絡する場合にも適用することができる。この場合、大別情報取扱者及び限定情報取扱者は、前記第2実施形態と同様に認証会社(管理装置)である。そして、この場合の大別情報はユーザの電話番号の「市外局番+局番」であり、限定情報は「下4桁」である。携帯番号の場合には、大別情報は「上3桁+中4桁」であり、限定情報は「下4桁」である。 Furthermore, the distribution management system of the present invention can also be applied to cases where a member store makes a telephone contact with a user. In this case, the major information handler and the limited information handler are authentication companies (management devices) as in the second embodiment. In this case, the general information is “area code + area code” of the user's telephone number, and the limited information is “last 4 digits”. In the case of a mobile number, the main information is “upper 3 digits + middle 4 digits”, and the limited information is “lower 4 digits”.
 また、前記第2実施形態では、管理装置の管理部が、専用メールアドレスを生成し加盟店に送信して、加盟店が専用メールアドレスに転送希望メールを送信するようにしているが、専用メールアドレスを用いずに、前記第1実施形態と同様に取扱番号のみを用いて管理装置がユーザのメールアドレスを合成して、転送希望メールをユーザに送信するようにしても良い。 In the second embodiment, the management unit of the management device generates a dedicated e-mail address and transmits it to the member store, and the member store transmits a transfer request mail to the dedicated e-mail address. Instead of using an address, the management device may synthesize the user's mail address using only the handling number, as in the first embodiment, and send the transfer request mail to the user.
 さらに加えて、個人情報を分割する方法としては、前記実施形態に限られず、大別情報及び限定情報それぞれが、それ単独で個人情報を特定できない態様において種々の分割をすることができる。 In addition, the method for dividing personal information is not limited to the above-described embodiment, and each of the broadly classified information and the limited information can be divided in various ways in which the personal information cannot be specified by itself.
 その上、前記各実施形態では、個人情報を大別情報及び限定情報の2つに分割するものであったが、その他にも、個人情報を例えば大別情報、中別情報及び限定情報等の3つ以上に分割して、それぞれ異なる格納装置に格納するようにしても良い。このとき、分割した情報全てを合成しないと個人情報が特定できないようにしても良いし、いずれか2つの情報を合成すれば個人情報を特定できるようにしても良い。 In addition, in each of the above embodiments, the personal information is divided into two parts, roughly classified information and limited information. It may be divided into three or more and stored in different storage devices. At this time, the personal information may not be specified unless all the divided information is combined, or the personal information may be specified by combining any two pieces of information.
 また、ネットワークは、専用回線であっても良いし、公衆回線であっても良い。さらに、公衆回線を用いる場合には、回線認証機能を有するものであることが好ましい。回線認証機能としては、日本においては、NGN(Next Generation System、次世代ネットワーク)の回線認証機能が挙げられる。これにより、個人情報の安全を一層向上させることができる。 The network may be a dedicated line or a public line. Furthermore, when using a public line, it is preferable to have a line authentication function. As a line authentication function, in Japan, a line authentication function of NGN (Next Generation System, next generation network) can be mentioned. Thereby, the safety of personal information can be further improved.
 その他、前述した実施形態や変形実施形態の一部又は全部を適宜組み合わせてよいし、本発明は前記実施形態に限られず、その趣旨を逸脱しない範囲で種々の変形が可能であるのは言うまでもない。 In addition, a part or all of the above-described embodiments and modified embodiments may be combined as appropriate, and the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit thereof. .
 本発明によって、物品や情報が流通していく過程で、それらに付与される個人情報の漏洩を防ぐことができる。 According to the present invention, it is possible to prevent leakage of personal information given to goods and information in the process of distribution.

Claims (9)

  1.  流通する物品又は情報を管理するための流通管理システムであって、
     前記物品又は情報に付与される個人情報において、単独では前記個人情報を特定することができない大まかな情報である大別情報を格納する大別情報格納部と、
     前記個人情報において、単独では前記個人情報を特定することができず、少なくとも前記大別情報と組み合わされて前記個人情報を特定することができる詳細な情報である限定情報を格納する限定情報格納部と、
     前記流通の中間段階に位置する大別情報取扱者の識別子である大別情報取扱者識別子、及び前記大別情報を取り扱うために予め付与された大別情報取扱信号が送信されてきたときに、前記大別情報取扱者識別子を受け付けて認証する第1認証部と、
     前記大別情報取扱者識別子が前記第1認証部により認証された場合に、前記大別情報取扱信号を受け付けて、それに関連付けられた大別情報を抽出する大別情報抽出部と、
     前記流通の末端段階に位置する限定情報取扱者の識別子である限定情報取扱者識別子、及び前記限定情報を取り扱うために予め付与された限定情報取扱信号が送信されたときに、前記限定情報取扱者識別子を受け付けて認証する第2認証部と、
     前記限定情報取扱者識別子が前記第2認証部により認証された場合に、前記限定情報取扱信号を受け付けて、それに関連付けられた限定情報を抽出する限定情報抽出部と、を備えている流通管理システム。
    A distribution management system for managing distributed goods or information,
    In the personal information given to the article or information, a broad classification information storage unit that stores broad classification information that is rough information that cannot be specified alone.
    In the personal information, the limited information storage unit that stores the limited information that is detailed information that cannot identify the personal information alone and can be specified in combination with at least the broad classification information. When,
    When a classification information handler signal that is assigned in advance to handle the classification information and a classification information handler identifier that is an identifier of a classification information handler that is located in an intermediate stage of the distribution has been transmitted, A first authenticating unit that accepts and authenticates the general information handler identifier;
    When the classification information handler identifier is authenticated by the first authentication unit, the classification information extraction unit that receives the classification information handling signal and extracts classification information associated therewith;
    When a limited information handler identifier that is an identifier of a limited information handler located at the terminal stage of the distribution and a limited information handling signal given in advance for handling the limited information is transmitted, the limited information handler A second authenticating unit that accepts and authenticates the identifier;
    A distribution management system comprising: a limited information extraction unit that receives the limited information handling signal and extracts the limited information associated therewith when the limited information handler identifier is authenticated by the second authentication unit; .
  2.  前記大別情報抽出部が抽出した大別情報を外部に出力する大別情報出力部と、
     前記限定情報抽出部が抽出した限定情報を外部に出力する限定情報出力部と、をさらに備えていることを特徴とする請求項1記載の流通管理システム。
    A main information output unit that outputs the main information extracted by the main information extraction unit;
    The distribution management system according to claim 1, further comprising a limited information output unit that outputs the limited information extracted by the limited information extraction unit to the outside.
  3.  前記大別情報出力部が、前記抽出された大別情報を紙に印字して出力するものであり、
     前記限定情報出力部が、前記抽出された限定情報を紙に印字して出力するものであることを特徴とする請求項2記載の流通管理システム。
    The broad classification information output unit prints the extracted broad classification information on paper and outputs it,
    3. The distribution management system according to claim 2, wherein the limited information output unit prints and outputs the extracted limited information on paper.
  4.  前記大別情報取扱者が、前記物品の集荷業者であり、
     前記限定情報取扱者が、前記物品の配達業者であることを特徴とする請求項1、2又は3記載の流通管理システム。
    The general information handler is a collector of the goods,
    4. The distribution management system according to claim 1, wherein the limited information handler is a delivery company of the article.
  5.  前記大別情報格納部が、メール受取者のメールサーバアドレスを格納するものであり、
     前記限定情報格納部が、メール受取者のアカウントを格納するものであり、
     前記大別情報取扱者及び前記限定情報取扱者が前記メールサーバアドレス及び前記アカウントの対応付けを管理している管理部を備え、
     前記管理部が、メール送り主からの要請を受けて、前記大別情報格納部から前記メールサーバアドレスを取得し、前記限定情報格納部から前記アカウントを取得して、前記メール受取者のメールアドレスを合成して、前記メール送り主からのメールを前記メール受取者に送信することを特徴とする請求項1記載の流通管理システム。
    The broad information storage unit stores a mail server address of a mail recipient,
    The limited information storage unit stores an account of a mail recipient;
    The management unit that manages the correspondence between the mail server address and the account, the broad information handler and the limited information handler,
    In response to a request from the mail sender, the management unit acquires the mail server address from the general information storage unit, acquires the account from the limited information storage unit, and sets the email address of the mail recipient. The distribution management system according to claim 1, wherein the mail is sent from the mail sender to the mail recipient after being synthesized.
  6.  メールを送付する送付先条件を設定する送付先条件情報を受け付ける送付先条件受付部をさらに備え、
     前記大別情報抽出部が、前記送付先条件受付部から、送付先条件情報を取得して、前記大別情報取扱者が設定した送付先条件を満たす大別情報を大別情報の中から抽出するものであることを特徴とする請求項5記載の流通管理システム。
    A delivery destination condition receiving unit for receiving delivery destination condition information for setting delivery destination conditions for sending an email;
    The main information extraction unit acquires the destination condition information from the destination condition reception unit, and extracts the main information satisfying the destination condition set by the main information handler from the main information. The distribution management system according to claim 5, wherein
  7.  流通する物品又は情報を管理するための流通管理システムであって、
     前記物品又は情報に付与される個人情報において、単独では前記個人情報を特定することができない大まかな情報である大別情報を格納する大別情報格納部と、
     前記流通の中間段階に位置する大別情報取扱者の識別子である大別情報取扱者識別子、及び前記大別情報を取り扱うために予め付与された大別情報取扱信号が送信されてきたときに、前記大別情報取扱者識別子を受け付けて認証する第1認証部と、
     前記大別情報取扱者識別子が前記第1認証部により認証された場合に、前記大別情報取扱信号を受け付けて、それに関連付けられた大別情報を抽出する大別情報抽出部と、を備えている流通管理システム。
    A distribution management system for managing distributed goods or information,
    In the personal information given to the article or information, a broad classification information storage unit that stores broad classification information that is rough information that cannot be specified alone.
    When a classification information handler signal that is assigned in advance to handle the classification information and a classification information handler identifier that is an identifier of a classification information handler that is located in an intermediate stage of the distribution has been transmitted, A first authenticating unit that accepts and authenticates the general information handler identifier;
    A classification information extraction unit that receives the classification information handling signal and extracts classification information associated therewith when the classification information handler identifier is authenticated by the first authentication unit; Distribution management system.
  8.  請求項1乃至7に記載の流通管理システムに用いる大別情報格納部としての機能をコンピュータに備えさせるための大別情報格納プログラム。 A large-scale information storage program for causing a computer to have a function as a large-scale information storage unit used in the distribution management system according to claim 1.
  9.  請求項1乃至6に記載の流通管理システムに用いる限定情報格納部としての機能をコンピュータに備えさせるための限定情報格納プログラム。 A limited information storage program for causing a computer to have a function as a limited information storage unit used in the distribution management system according to claim 1.
PCT/JP2008/057529 2008-04-17 2008-04-17 Distribution management system, rough classification information storage program used for the same, and limitation information storage program WO2009128161A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/JP2008/057529 WO2009128161A1 (en) 2008-04-17 2008-04-17 Distribution management system, rough classification information storage program used for the same, and limitation information storage program

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2008/057529 WO2009128161A1 (en) 2008-04-17 2008-04-17 Distribution management system, rough classification information storage program used for the same, and limitation information storage program

Publications (1)

Publication Number Publication Date
WO2009128161A1 true WO2009128161A1 (en) 2009-10-22

Family

ID=41198873

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2008/057529 WO2009128161A1 (en) 2008-04-17 2008-04-17 Distribution management system, rough classification information storage program used for the same, and limitation information storage program

Country Status (1)

Country Link
WO (1) WO2009128161A1 (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002230117A (en) * 2001-01-31 2002-08-16 Felissimo E-Porter:Kk Delivery slip creating device and distribution slip
JP2003233659A (en) * 2001-12-07 2003-08-22 Fujitsu Ltd Delivery advance notice method, delivery advance notice system, central device and server computer

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002230117A (en) * 2001-01-31 2002-08-16 Felissimo E-Porter:Kk Delivery slip creating device and distribution slip
JP2003233659A (en) * 2001-12-07 2003-08-22 Fujitsu Ltd Delivery advance notice method, delivery advance notice system, central device and server computer

Similar Documents

Publication Publication Date Title
US11232670B2 (en) Identification verification system
US20100076832A1 (en) Virtual coupon service system
JP2003132256A (en) Coupon ticket information issuance system and display system
US20110228337A1 (en) Delivery transfer system and delivery order form printing program
JP2002042008A (en) Optional base delivery service providing method and system for cargo
US10387981B2 (en) System and method for confidentially issuing and managing delivery waybill using virtual personal information matched with credit card information
KR20150122554A (en) Mobile Smart-Ticket Application Having Function For Sending Gift Ticket And Smart-Ticket System Comprising The Same
US20130268380A1 (en) Method for accessing point-of-sale transaction information over a network
JP5835818B2 (en) Inquiry order information inquiry method by collecting and determining order information, its program, and information inquiry device
KR20080025350A (en) Individual information authentication and offer method and system thereof using individual identification code
KR100384545B1 (en) System and method of recommending and issuing a card using Internet and point-calculating method using card-mall
JP5117118B2 (en) Coupon related information management server
JP2008097534A (en) Distribution management system, roughly classified information storage program and limited information storage program used in distribution management system
WO2009128161A1 (en) Distribution management system, rough classification information storage program used for the same, and limitation information storage program
JP4990659B2 (en) Lottery sales system, lottery sales server, lottery sales method and program
JP5117119B2 (en) Coupon related information management server
JP7126188B2 (en) Product sales system and product sales program
JP5902489B2 (en) Information processing system, delivery information terminal, server device, payment card, information processing method, program
JP2001312662A (en) Shopping method, shopping system and customer information managing center
JP2007115141A (en) Card payment authentication server and card payment authentication method
KR20140029696A (en) Method and apparatus for querying and utilizing the digital receipt
KR101340313B1 (en) Apparatus for managing message and Method for operating the same
JP2009087314A (en) Customer management support system
JP2009282655A (en) Vehicle inspection and maintenance information management system for service station
KR102071409B1 (en) Server apparatus and method for providing common usage ticket

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08751867

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 08751867

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP