WO2020084717A1

WO2020084717A1 - Computer system

Info

Publication number: WO2020084717A1
Application number: PCT/JP2018/039545
Authority: WO
Inventors: 力松永
Original assignee: 力松永
Priority date: 2018-10-22
Filing date: 2018-10-24
Publication date: 2020-04-30

Abstract

[Problem] To provide a computer system which verifies that the input content and the operation content is correct when closing an application. [Solution] A computer system equipped with: a program 120 provided with a main function 121 and an opening/closing management unit 122 for controlling the opening and closing of the main function 121; and a memory 130 which the program 120 is capable of accessing. An opening secret code 131 for opening the main function 121 and a closing secret code 132 for successfully closing the main function 121 are set in a specific storage region of the memory 130 to be accessed by the opening/closing management unit 122. The opening/closing management unit 122 of the program is provided with a program-unlocking function 123 for opening the main function 121 when the inputted code matches the opening secret code 131, and a program-locking function 124 for successfully closing the main function 121 when the inputted code matches the closing secret code.

Description

Computer system

The present invention relates to computer systems. In particular, the present invention relates to a computer system that ensures that a program or a memory storage area is normally opened and used, and normally ended and closed. The use of the program is not limited and can be applied to programs of various uses.
The application field of the computer system of the present invention is not limited and can be applied to various business systems.
Application examples of the computer system of the present invention may be medical treatment, nursing, medical treatment, nursing care, or rehabilitation. In particular, there may be an insurance-covered service support system in which a service provider such as medical care, nursing, medical treatment, nursing care, or rehabilitation supports the service provision to the patient and at the same time improves the security when the service provision is correctly performed.
A financial transaction control system may be an application example of the computer system of the present invention. In particular, there can be a financial transaction control system that can reliably prevent impersonated use by a third party and fraudulent use due to skimming in financial transactions such as credit use and David use.
Further, as an application example of the computer system of the present invention, there may be a vehicle use support system using a user portable terminal equipped with a vehicle use support application that supports use of a vehicle. Vehicles that support the use of the present invention include, in the classification of drive devices, an engine vehicle equipped with an engine, an electric vehicle equipped with a motor, and a hybrid vehicle equipped with an engine and a motor. It can be a vehicle, a regular freight vehicle, a light freight vehicle, a small freight vehicle, a passenger vehicle, a special vehicle, a bus vehicle, and the like.
Further, as an application example of the computer system of the present invention, there may be a home use support system equipped with a home use support application that supports use of a home. The house may be a detached house, each condominium unit, each large-scale tower condominium unit, apartment complex, office building room, log house, prefabricated house, or the like. There are various possible usage patterns such as ownership, rental, share house, hotel, inn, rental room.
Further, as an application example of the computer system of the present invention, there may be a personal data application. In particular, personal data that has security settings to confirm that the input contents and operation contents to the personal data application are correct and effectively reduces false input based on mistakes due to misunderstanding or negligence and illegal input that is not true There can be applications.
In addition, as an application example of the computer system of the present invention, a data access unit that is accessed by an application running on the computer system and is a unit of browsing, outputting, or editing is managed, and the data access unit by the application is accessed to browse. There may be a data management system that controls various operations such as output and editing. Some may involve encryption processing and decryption processing for data access units.
The data access unit includes an application file, a record, a field, and the like, and there may be a data management system that ensures that the data access unit is normally opened and started to be used, and normally ended and closed. The usage of the application is not limited and can be applied to various applications.
Further, as an application example of the computer system of the present invention, there can be a utilization support system for a movable subject, a real estate, or a utilization segment of those real estates, which allows an authorized person to utilize the utilization target.
The objects of use include various things, including, but not limited to, property such as movables and real estate. Further, for example, the usage target may be data such as data files, data contents, virtual currency, etc., rights such as ownership and copyright, and intangible things such as intangible property rights such as patent rights and trademark rights.

Various applications are running on the computer system, and various security measures are also taken. Security measures have a wide range of implications, but for example, various codes such as entering a password when accessing and opening an application file can be used so that only authorized persons who access the application file can access the application file. Measures that require the input of information are widely adopted. Depending on the security level, there are those that simply enter the password from the keyboard, those that enter the ID information from the IC card carried with the password, and those that enter the password and biometric information such as fingerprints and vein patterns. . In addition, there is a case in which the operation of one person is not enough, and the application file can be opened only when the passwords and ID information of a plurality of authorized persons are gathered. In this way, there are some applications that are set with high security in order to open the application files and make them operable.

Once the application is up and the application file is operational, the user can edit the application file using the application, but when operating the application, or when using special functions. In some cases, a password or ID information may be separately required separately.
Thus, security may be set when opening an application file or using a special function. However, conversely, when the application is closed and the application file is closed, or when the use of the special function is ended, the termination itself requires the input of any password or ID information. There is no security setting. Most of them can be ended simply by inputting a command such as "End" or "Close" or pressing a button.

FIG. 52 is a diagram briefly describing an operation of starting a general application, opening an application file, and then ending and closing the application file. It is an example and is a typical operation of opening and closing an application file.
As shown in FIG. 52A, the application 10 is installed on the computer system, and when the user tries to use the application 10, the application 10 displayed on the monitor of the computer system is displayed. If an icon is selected with a pointing device such as a mouse and activated by double-clicking or the like, the application 10 is activated.

Each

application file

20a, 20b, 20c, etc. that can be edited by the application 10 is also installed on the computer system, and each icon is displayed on the monitor of the computer system. If the user selects the icon of the application file 20 to be edited with a pointing device such as a mouse and starts it by an operation such as double-clicking, the application 10 starts up and the application file 20 is read and the application 10 is used. Then, the contents of the data are displayed on the monitor.

Here, in the case of the application file 20 for which security is set, as shown in the upper part of FIG. 52 (b), a password input column pops up to confirm the usage authority. As described above, there is an operation in which the password is required to be input before starting to use the application 10 such as editing the application file 20. Some applications 10 require input of ID information or biometric information from an IC card in addition to the password.
As shown in the upper part of FIG. 52 (b), a password, code information, etc. required for normally opening and enabling the application file 20 to be used are input via a keyboard or another input device, and the When the authentication is successful and the set security level is satisfied, the application file 20 is opened and can be used.

Next, as shown in the lower part of FIG. 52 (b), when the desired editing of the application file 20 is completed, an operation menu such as “end” or “close” on the input screen of the application 10 displayed on the monitor. If the or button is selected with a pointing device such as a mouse and designated by an operation such as clicking, the application 10 is simply terminated and the application file 20 is closed.
Most of the applications 10 are not required to input a special password or ID information when closing the application file 20, and most of the applications 10 can be simply closed to close the application file 20.

In other words, when the application file 20 is accessed, it is requested to enter information based on various security levels in order to confirm whether or not the person who intends to use the application file 20 has the right to use it. If the authorization of the authority is successful, it is assumed that the person who has the right to use the authority will use it properly after that, and the termination will also end correctly under the authority. No special security settings such as password input are made when closing after editing 20. However, it is possible that an operation error may cause the operation to become inoperable, or a system error may occur, causing a forced termination in an abnormal manner, but there is no operation error or system error, and the operation itself is normal. Then application 10 can simply exit and close application file 20.

In recent years, not only stand-alone computer systems but also those that are connected by networks and in which multiple computer systems work together to execute work are increasing. However, the routine of using the application 10 such that the application 10 is started up, the application file 20 is opened, and then the application file 20 is terminated and closed is the same in the network environment. Security is required, and security is required such as entering a password or ID code when accessing the application file 20 via a network. However, when closing the application file 20, no special password or ID information is entered. You don't have to, you can simply exit and close.

JP 2006-277193 A

When using the application, if the user is a person who has passed the authentication and has the proper authority and the input contents and operation contents through the application are valid, the data will be saved as it is when the use of the application is completed. There is no problem in deciding and closing the application. Therefore, it is not necessary to take special security measures such as entering a password when the application 10 is closed and closed.

However, when the application 10 is terminated and closed, there may be a request to confirm whether or not the data reflecting the input contents and the operation contents can be confirmed.
In some cases, the input contents and the operation contents input while using the application may be incorrect contents due to misunderstanding or negligence of the user, or may be intentionally different from the actual contents due to the fraud of the user. As described above, it is a problem that data is created as it is with incorrect contents different from the facts, the created data is stored as a result of being edited via the application 10, and the created data is transmitted to another system via the network. Is.

In general, it is possible to check and confirm the contents of created data using the application by checking the contents of the created data itself to make sure that the input contents and operation contents are correct and correct. However, if the end condition is to confirm that the input contents and operation contents are correct and correct according to the facts when the application ends, the data at the normal end will have the correct contents. It has been confirmed that the content has been created in the above, and the possibility that the content is different from the fact due to the misunderstanding or negligence of the user or the injustice of the user is reduced.
There are various types of business services that require such a request, and there are various fields of application of applications in which a security level is set when editing of an application is completed.

For example, in the above-mentioned conventional insurance claim processing shown in FIG. 53, the Judo reduction teacher himself uses the application of the osteopathic system B to create the receipt data, and the claim data is created by himself. False claims based on misunderstandings or mistakes due to mistakes, and even fraudulent claims such as inflated claims, which are different from the actual facts, may be mixed in, and inappropriate claims for medical expenses have been a problem. If it is an error bill due to negligence, it is relatively easy to check if the check method such as the compatibility check of the treatment content and the amount of money based on the treatment content, the recalculation check of the treatment fee calculation is devised, but the method to check the malicious bill intentionally Can be difficult.

Therefore, in the present invention, not only when the program is opened, but also when the program is closed and closed, a security setting is provided to confirm that the input content and the operation content are correct, and an incorrect input based on an error due to misunderstanding or negligence or , The purpose of the present invention is to provide a computer system that effectively reduces illegal inputs that are different from the facts.

In order to achieve the above object, the first computer system of the present invention is accessible by a program including a main body function and a start / end management unit that controls the start and end of all or part of the main body function. In a specific storage area of the memory accessed by the start / end management unit of the program, an open password for starting all or part of the main body function of the program, and the program A close secret code for normally ending all or a part of the main body function is set, and the start / end managing unit of the program is set to the above when the input code matches the open secret code. A program unlock function that activates all or part of the main functions of the program, A computer system, characterized in that the force code is provided with the program 閉錠 ability to successfully terminate all or part of the body functions of the program if it is consistent with the close personal identification code.

In the first computer system having the above configuration, the main body function of the program has a data input / output function of recording data generated during operation or selected data in the memory storage area, and the access of the program is It includes any one of data reading of the memory storage area, data editing, data selection, writing of data generated during operation or selected data to the memory storage area, data erasing from the memory storage area, or a combination thereof. A process for the program lock function to determine the data in the memory storage area and normally end the access to the memory storage area when all or part of the main body functions of the program are normally ended. Can be included.

A business application function is provided as the main body function of the program, and if the main body function of the program can be operated via the program unlock function, the business application function can be used and the program close function can be used. It is also possible to perform processing in which the business application function normally ends independently in conjunction with or before the end of the program normally via the lock function.

With the above configuration, the first computer system of the present invention confirms the authentication with the open secret code stored in the specific storage area of the memory when activating all or part of the main functions of the program, Even when all or some of the functions of the main body are terminated, the establishment of authentication with the close secret code stored in the specific storage area of the memory can be used as a condition for confirming the input data and the operation content. That is, by requesting an open PIN code at the start of all or part of the main functions of the program, and by requesting a close PIN code at the end and closing of all or some of the main functions of the program. By performing security settings to confirm that the operation contents are correct, it is possible to effectively reduce erroneous inputs based on misunderstandings and errors caused by mistakes, and illegitimate inputs that are not true.
In addition, in the conventional computer system, not only the authentication with the personal identification code at the start of the main function of the program is confirmed, but also the authentication with the personal identification code is confirmed at the time of ending and closing, and the authentication success is confirmed by input data and operation. The present invention is the first to achieve such a high security level because there is no condition for determining the content.

Next, the second computer system of the present invention controls start and end of access to a specific storage area of the memory.
The second computer system of the present invention has a first type and a second type as described below.
The first type of the second computer system of the present invention comprises a program usable in the computer system and a memory storage area accessible by the program, and the memory accessible by the program in the memory storage area. In a part of the first specific storage area in the storage area, an open secret code for allowing the program to access the other part of the memory storage area other than the part of the first specific storage area, A close secret code for normally ending access to the other part of the first specific storage area of the memory storage area by the program is set, and in the program, the input code is the The first specific storage of the memory storage area when it matches the open secret code A memory specific storage area unlocking function for performing access to the other part of the memory area, and the first identification of the memory storage area when the input code matches the close secret code in the program. The computer system is provided with a memory-specific storage area locking function for normally ending access to the other portion of the storage area.

A second type of the second computer system of the present invention comprises a program usable in the computer system and a memory storage area accessible by the program, and a first type in the memory storage area accessible by the program. In a part of the specific storage area of the above, an open secret code for allowing the program to access a second specific storage area other than the first specific storage area, and the first specific storage by the program When a closed secret code for normally ending access to the second specific storage area other than the area is set, and the entered code in the program matches the open secret code, A memory specific storage for executing access to the second specific storage area of the memory storage area An area unlocking function and a memory specific memory area unlocking function that normally terminates access to the second specific memory area when the input code matches the close secret code in the program. It is a feature.

For example, a data access unit in which the first specific storage area or the second specific storage area of the memory is any one of a database, a record of a database, a field of a record of a database, a file, a storage, or a combination thereof. It can be stored.

Further, for example, a plurality of the first specific storage areas or the second specific storage areas of the memory are present, and a data classification structure in which these are classified and collected in a folder unit or a cluster unit is provided, and the program is In a part of the first specified storage area that can be accessed, in addition to the open PIN code and the closed PIN code, a classification selection open PIN code and a classification selection closed PIN code provided for each folder or cluster data classification structure The memory specific storage area unlocking function of the program is provided with a code, and when the input code matches the classification selection open secret code, the first specific storage area or the second identification of the memory Access the unit of the data classification structure of the storage area, and execute the program The data classification structure of the first specific storage area or the second specific storage area of the memory when the input code matches the classification selection close secret code in the memory specific storage area locking function. It is also possible to operate to normally terminate access to the unit.

In the above configuration, the access is a process including any of data reading by the program, data browsing, data editing, data selection, data erasing, or a combination thereof, and the normal termination is performed by the program. Further, the contents of the access can be determined and a process including any of data writing, data rewriting, data erasing, or a combination thereof can be performed.

According to the second computer system of the present invention, with the above configuration, in a part of the first specific storage area in the memory storage area, an open personal identification code permitting access to the second specific storage area and a second specific storage area. A closed secret code for normal termination of access to the area is stored, and when the second special storage area is accessed, authentication with the open secret code stored in the special storage area of the memory is confirmed, Even when the access to the specific storage area is finished, the establishment of the authentication with the close secret code stored in the first specific storage area is the condition for determining the input data and the operation content. That is, by inputting the open personal identification code when starting access to the second specific storage area, and further requesting the close personal identification code when ending and closing access to the second specific storage area, the input content and operation By making security settings to confirm that the contents are correct, it is possible to effectively reduce erroneous inputs based on misunderstandings and errors caused by mistakes, and illegitimate inputs that are not true.

In the above configuration, access to the memory specific storage area can be processing including any of data reading by a program, data browsing, data editing, data selection, data erasing, or a combination thereof, and normal termination is not possible. It is possible to determine the content of the access made by the program and perform a process including any of data writing, data rewriting, data erasing, or a combination thereof.

Further, in the above configuration, the open code and the closed code can be any one of an ID code, a password, biometric information, and human motion information, or a combination thereof.
In the above configuration, the biometric information can be any one of a face image pattern, a fingerprint pattern, a vein pattern, an iris pattern, a voice print pattern, or a combination thereof.

Here, the open PIN code and the closed PIN code can be the same code or different codes.

Next, the first computer system and the second computer system (first type, second type) of the present invention having the above configuration can be applied to various business fields. Some specific examples will be given. The application of the computer system of the present invention is not limited to the business fields listed below, but shows an example.

For example, the computer system of the present invention can be applied to the medical field.
As an example, there is an insurance target service provision support system in which a visitor visits the location of a visitor and supports the provision of services covered by medical insurance or long-term care insurance between the service provider and the service recipient.
For example, the service provider terminal that the service provider that provides the service has is configured to have, the program is an insurance target service provision support application that supports the service provision to the service recipient, and the main function is the service. It is an insurance target service provision support function that supports the provision of services to the recipient, and the memory storage area is applied as a data access unit generated for each user's medical insurance or long-term care insurance.

For example, the computer system of the present invention can be applied to the financial field.
As an example, the computer system is a financial transaction control system applied to a payment management system using credit or debit.
For example, the configuration is provided with a user terminal possessed by a user who uses credit or debit, the program is a financial transaction processing application that controls the financial transaction processing for the user's account, the memory storage area, It is applied as a data access unit for financial transaction processing applications generated for each user account.

For example, the computer system of the present invention can be applied to the field of personal data management.
As an example, the computer system is a personal data application system that handles user personal data.
For example, a user terminal possessed by a user is provided, a program is a personal data application that handles personal data, and a memory storage area is created for each individual used by the personal data application. It is applied as a data access unit.

For example, the computer system of the present invention can be applied to the technical field of vehicle driving support.
As an example, the computer system is a vehicle use support application system that supports the use of various functions installed in the vehicle.
For example, the program is a vehicle usage support application that supports the use of various functions installed in the vehicle, and the memory storage area is a data access unit generated for each user used in the vehicle usage support application. Apply.

For example, the computer system of the present invention can be applied to the technical field of data management involving encryption processing and decryption processing.
As an example, the computer system is a data management system, and the program is a data management application that performs data encryption processing and data decryption processing related to access to the data stored in the storage device and supports the use of the data. , The memory storage area is accessed by the data management application, and is applied as a data access unit that is a unit of browsing, outputting, or editing.

For example, the computer system of the present invention can be applied to a technical field in which an authorized person manages usage support for allowing another person to use the usage target.
As an example, the computer system is a usage support system that allows an authorized person to use the usage target with respect to the usage target, and whether the usage target is a movables or a real estate tangible object, data, ownership, It is either an intangible property right or an intangible object of virtual currency, or a section including a use section thereof, and the program is a use support application for making use of the equipment function equipped in the use target, and the storage area of the memory is It is used as a data access unit that is used by a usage support application and is a unit for viewing, outputting, or editing.

For example, the computer system of the present invention can be applied to the technical field of managing housing use support.
As an example, the computer system is a housing use support system that supports the use of various functions equipped in the house, and the house is each housing unit of an apartment, each housing unit of a large-scale tower apartment, a detached house, an apartment complex, It includes each room of an office building, log house, prefabricated house, share house, hotel, inn, rental room, or their use partition, and the program uses the equipment functions equipped by the target Data access, which is a support application and whose storage area is a data management unit of individual housing use support applications used by the house use support application and which is used by the house use support application and is a unit of browsing, outputting, or editing Apply as a unit.

For example, the computer system of the present invention can be applied to the technical field of card usage support for changing a medium to a desired credit card, debit card, or point card.
As an example, the computer system writes, rewrites, or selects the selected credit card information, the selected debit card information, or the selected point card information to the medium, and thereby the medium is specified by a specific credit card or a specific credit card. A card selection changing application system for changing to a debit card or a specific point card, in which a program selects, writes or rewrites credit card information, debit card information, or point card information on a medium. It is a certain card selection changing application, and the memory storage area is applied as the storage area of the memory mounted on the medium.

According to the first computer system of the present invention, the open secret code is requested at the time of starting all or some of the main functions of the program, and is closed at the end of all or some of the main functions of the program. By requesting a security code, security settings can be made to confirm that the input contents and operation contents are correct, and it is possible to effectively reduce erroneous input based on misunderstandings and errors due to mistakes, and illegal input that is not true. it can.
Further, according to the second computer system of the present invention, in a part of the first specific storage area in the memory storage area, an open personal identification code permitting access to the second specific storage area and a second specific storage area. A close secret code for normal termination of access to the area is stored, an open secret code is requested at the start of access to the second specific storage area, and further, when access to the second specific storage area is completed and closed. Even by requesting a close secret code, security settings can be made to confirm that the input contents and operation contents are correct, and it is possible to effectively reduce erroneous input based on misunderstandings and errors due to mistakes, and illegal input that is not true. be able to.

It is the figure which briefly showed the basic structural example of the 1st computer system of this invention. It is the figure which showed the flow of a process in the example of a structure of FIG. It is a figure showing the flow of operation by a user when using a smart phone. FIG. 3 is a diagram showing a flow of providing usage log data accumulated in a memory 130 to an external system in the first computer system 100. FIG. 10 is a diagram briefly showing an example of the basic configuration of a second computer system 100-1 of the first type according to the second exemplary embodiment of the present invention. FIG. 6 is a diagram in which a processing flow is overlapped and shown in the configuration example of FIG. 5. It is a figure showing the flow of operation by a user when using a smart phone. FIG. 10 is a diagram showing a flow of providing usage log data to an external system in the computer system 100-1 according to the second embodiment. FIG. 11 is a diagram simply showing an example of the basic configuration of a second computer system 100-2 having a second pattern according to the third exemplary embodiment of the present invention. FIG. 10 is a diagram simply showing a variation of the basic configuration example of the second computer system 100-2 according to the second pattern of the present invention according to the third embodiment. FIG. 10 is a diagram in which a processing flow is overlapped and shown in the configuration example of FIG. 9. It is a figure showing the flow of operation by a user when using a smart phone. FIG. 13 is a diagram showing a flow of providing usage log data to an external system in the computer system 100-2 according to the third embodiment. It is a figure which shows the example which applied the computer system 100 of this invention shown in Example 1 about the system configuration of a medical field and a nursing care field. FIG. 9 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to system configurations in the medical field and the care field. FIG. 13 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to system configurations in the medical field and the care field. It is a figure which shows the example which applied the computer system 100 of this invention shown in Example 1 about the financial transaction control system structure. FIG. 10 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the financial transaction control system configuration. FIG. 13 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the financial transaction control system configuration. It is a figure which shows the example which applied the computer system 100 of this invention shown in Example 1 about the vehicle utilization support system structure. FIG. 13 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the vehicle use support system configuration. FIG. 13 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the vehicle use support system configuration. It is a figure which shows the example which applied the computer system 100 of this invention shown in Example 1 about a housing utilization support system structure. FIG. 10 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of a house utilization support system. FIG. 16 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the configuration of the housing utilization support system. FIG. 1 is a diagram showing an example in which the computer system 100 of the present invention shown in the first embodiment is applied to a personal data management system configuration. FIG. 9 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the personal data management system configuration. FIG. 16 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the personal data management system configuration. FIG. 3 is a diagram showing an example in which the computer system 100 of the present invention shown in the first embodiment is applied to the data management system configuration. FIG. 13 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the data management system configuration. FIG. 13 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the data management system configuration. It is a figure which shows the example which applied the computer system 100 of this invention shown in Example 1 with respect to the utilization support system of utilization object. FIG. 9 is a diagram showing an example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to a usage support system of a usage target. FIG. 13 is a diagram showing an example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to a usage support system of a usage target. FIG. 1 is a diagram showing an example in which the computer system 100 of the present invention shown in Embodiment 1 is applied to a conversion card use support system. 5 is a diagram showing a flow of program open processing of the conversion card use support system of the type of Embodiment 1. FIG. FIG. 7 is a diagram showing a flow of a card information selection process of the conversion card use support system of the type of the first embodiment. 5 is a diagram showing a flow of a program closing process of the conversion card use support system of the type of the first embodiment. FIG. 6 illustrates a flow of operations performed by a user when using the smartphone of the type according to the first exemplary embodiment. It is a figure which shows the GUI of a monitor in case activation and invalidation can be designated for every choice of card. It is a figure explaining the 2nd merit of a conversion card. FIG. 9 is a diagram showing an example in which the computer system 100-1 of the present invention in Example 2 is applied to a conversion card use support system. FIG. 10 is a diagram showing a flow of a program open process of the conversion card use support system of the type of the second embodiment. FIG. 16 is a diagram showing a flow of a card information selection process of the conversion card use support system of the type of the second embodiment. FIG. 10 is a diagram showing a flow of program closing processing of the conversion card use support system of the type of the second embodiment. 9 illustrates a flow of operations performed by a user when using a smartphone of the type according to the second exemplary embodiment. FIG. 16 is a diagram showing an example in which the computer system 100-2 of the present invention in Example 3 is applied to a conversion card use support system. FIG. 16 is a diagram showing a flow of program open processing of the conversion card use support system of the type of the third embodiment. FIG. 16 is a diagram showing a flow of a card information selection process of the conversion card use support system of the type of the third embodiment. FIG. 16 is a diagram showing a flow of a program closing process of the conversion card use support system of the type of the third embodiment. 9 illustrates a flow of operations performed by a user when using a smartphone of the type according to the third exemplary embodiment. It is a figure which shows the operation outline of the conventional general application. It is a figure explaining the flow of the data regarding the medical treatment payment provision application in the conventional general Anma massage treatment institution and the bone grafting institution.

Hereinafter, the best mode for carrying out the present invention will be specifically described with reference to Examples. The present invention is not limited to these examples.
The first embodiment is a basic configuration example of the first computer system of the present invention.
The second embodiment is a basic configuration example of the first type of the second computer system of the present invention.
The third embodiment is a basic configuration example of the second type of the second computer system of the present invention.
The fourth and subsequent embodiments will describe examples applied to use support of various usage targets and equipment functions. In the fourth embodiment, some specific examples will be described, but the present invention is not limited to this specific example and various application configurations are possible.

A basic configuration example of the first computer system according to the first embodiment of the present invention will be described. The first computer system of the present invention performs the authentication processing of the open personal identification code when the program is started, and the authentication processing of the closed personal identification code when the program ends.
FIG. 1 is a diagram simply showing a basic configuration example of a first computer system of the present invention.
The first computer system 100 of the present invention has a configuration including a code input unit 110, an application 120, and a memory 130.

The code input means 110 is a device for inputting an open PIN code and a closed PIN code. The device configuration depends on the open PIN code and the closed PIN code that are input. For example, there may be a keyboard when the open PIN code or the closed PIN code is a password. There may be a numeric keypad if it is only numbers. When the open code and the closed code are biometric information, a biometric information reading sensor (fingerprint reader, vein pattern reader, face authentication camera, iris pattern reader, voice input device, etc.) may be used.

If the code input means 110 is a configuration example provided in a device with a communication function such as a smartphone, a device equipped in a device with a communication function such as a smartphone can be used. Although there are already examples in which a fingerprint reader, a camera, a microphone, etc. are already equipped, the mobile terminal may be equipped with a vein pattern reader or an iris pattern reader depending on the biological information used.

The application 120 has a configuration including an application main body function 121 and a start / end management unit 122. The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. In this configuration example, a usage log data collection function 125 and a data input / output function 126 are additionally provided as options.
The application 120 can access the memory 130 by reading data, editing data, selecting data, writing data generated during operation to the memory 130, erasing data from the memory 130, or a combination thereof. It includes.

The application main body function 121 is related to the main body function of the application 120, and various functions can be assumed according to the type.
For example, in the case of the application 120 in the medical / nursing field, any application required in the medical / nursing field, for example, various functions such as a receipt creation function and an insurance payment data input / output function may be used.
For example, in the case of the application 120 in the financial field, any application required to perform various functions in the financial transaction field, such as credit card use, debit card use, and point card point management, may be used.
For example, in the case of the application 120 in the vehicle use support field, it may be any application that exhibits various functions required in the vehicle use support field, for example, various functions such as a door lock opening / closing function, a navigation function, and a travel data collection function. .
For example, in the case of the application 120 in the housing use support field, the application 120 may exhibit various functions required in the housing use support field, such as a door lock opening / closing function, an air conditioner control function, and a sensor data collection function. Good.
For example, in the case of the personal data management application 120, any function required in the field of personal data management, for example, various functions such as cloud data input / output function and interlocking function with the administrative system can be used.
For example, in the case of the data management application 120, any function required in the field of data management, such as data encryption processing, data decryption processing, and cloud data input / output function, may be used. .
For example, in the case of the application 120 that controls the usage authority for the usage object, for example, various functions such as a usage authorization process of the usage object, a termination processing of the usage authority of the usage object, and a payment processing function of billing data are exhibited. Anything is fine.

The start / end management unit 122 is a part that controls the start and end of the application main body function 121. The specific storage areas (131, 132) of the memory accessed by the boot end management unit 122 are defined. As shown in FIG. 1, in this specific storage area (131, 132), an open secret code 131 for starting the application body function 121 and a close secret code 132 for normally ending the application body function 121 are set. ing.

The activation / termination management unit 122 is configured to include an application unlocking function 123 and an application locking function 124 in order to activate and terminate the application main body function 121.

The application unlocking function 123 of the start / end managing unit 122 is a function of receiving an input of the open secret code input from the user through the code input means 110, performing an authentication process, and opening the application main body function 121. The open secret code 131 is set in the specific storage area of the memory 130, and the authentication process is performed. If the authentication is successful, the application main body function 121 is opened.

Next, the usage log data collection function 125 will be described.
The usage log data collection function 125 collects usage log data generated through the use of the application 120. The usage log data collected by the usage log data collection function 125 is recorded in the memory 130 via the data input / output function 126.

The data input / output function 126 is for the application main body function 121 to input / output data generated during operation or selected data to / from the memory 130. Further, the data input / output function 126 is to determine and record the usage log data related to the current usage in the locking operation of the application locking function 124. In this way, by determining and recording the usage log data related to the current use that remains in the memory 130, it becomes possible to perform recording management, accounting processing management, and learning functions, which will be described later.

Since the application 120 has the data input / output function 126, customization can be performed by outputting the data, which is previously input and designated in the memory 130, to the application main body function 121 to give it.
The application main body function 121 executes various functions based on the data given from the application 120. In addition, when the execution sequence is described, a configuration in which various functions are operated according to the sequence is also possible. Further, when the scheduled execution time is described, it is also possible to output the corresponding function when the execution time comes. By inputting the customization data of the various functions of the application main body function 121 and by inputting the open secret code, customization can be performed as planned.

The application lock function 124 of the start / end management unit 122 receives the close secret code input from the user via the code input means 110, performs the authentication process, and normalizes the application main body function 121 in the open state. It is a function to finish and close. As will be described later, a close secret code is set in the memory 130, and if the authentication process is performed and the authentication is successful, the application lock function 124 causes the use log data collection function 125 and the data input / output function 126. Then, the recording of the usage log data relating to the current usage recorded in the memory 130 is approved and confirmed, and the processing ends normally and is brought into the closed state.

When the operation of approving, confirming, and retaining the record of the use log data related to the use, the data obtained as a result of the computer processing of the application 120 recorded in the memory 130 is collected in an organically integrated form. Therefore, various functions of the application 120 can be used.
The collected usage log data can be used in the billing process, and it is possible to support the usage of the application 120 suitable for the user by analyzing the user's taste and behavior pattern. It is also possible to provide it as personal information data to companies that want big data.

The memory 130 is a storage area of the memory that can be accessed by the application 120, and in the computer system 100 of the present invention, the memory 130 has a configuration in which an open PIN code 131 and a closed PIN code 132 are stored.

The open secret code 131 is a secret code for opening the application 120 with the application 120, and the authentication processing is performed by the application unlocking function 123.

The close secret code 132 is a secret code for normally ending and closing the application 120 opened by the application 120, and the application lock function 124 performs authentication processing. The data input / output function 126 determines the input data.
The open code 131 and the closed code 132 may be the same code or different codes. When both are the same code, the biometric information may be, for example, the fingerprint pattern of the same finger. If the two are different codes, biometric information may be used, for example, different fingerprint patterns of the fingers, for example, the open personal identification code may be the fingerprint pattern of the index finger and the closed personal identification code may be the fingerprint pattern of the thumb.

The main part of the memory 130 is a part in which data generated by using the application 120 is stored. The usage log data collected by the usage log data collection function 125 is input to and output from the memory 130 via the data input / output function 126.
That is, as described above, the usage log data generated by the application main body function 121 is collected by the usage log data collection function 125, accumulated in the memory 130 by the data input / output function 126, and the data is fixed by the application locking function 124. To be done.

Next, a control flow by the computer system 100 according to the first embodiment will be described with reference to FIGS. 2 and 3.
FIG. 2 is a diagram in which processing flows are overlapped and illustrated in the configuration example of FIG. FIG. 2A shows the flow of the program open process, and FIG. 2B shows the flow of the program close process.
FIG. 3 illustrates a flow of operations performed by a user when using a smartphone. FIG. 3 is a diagram briefly explaining an operation of launching and opening the application 120, which is the program of the first computer system of the present invention, and then ending and closing it. This is an example, and a typical operation example of opening and closing the application 120 is shown.

First, as shown in FIG. 3A, the application 120 is installed on the computer system, and when the user tries to use the application 120, the application displayed on the monitor of the computer system. The icon 120 is selected with a pointing device such as a mouse, and is activated by double-clicking or the like.

Next, as shown in FIG. 3 (2), an input column of the open personal identification code is displayed to confirm the usage right. In this example, the operation is such that a password is required to be input before the use of the application 120 is started, but some applications 120 may be required to input biometric information instead of the password.
A password or a personal identification code such as biometric information required to normally open and use the application 120 is input via a keyboard or another input device (FIG. 2A step (1), FIG. 3 (2)).
When the authentication of the open secret code is successful, the application main body function 121 is opened and becomes usable (FIG. 2 (a) step (2), FIG. 2 (a) step (3), FIG. 3 (3)). ).

After the application body function 121 is opened, various processes are executed using the application body function 121. The usage log data generated by the operation of the application main body function 121 is collected by the usage log data collection function 125 (step (4) in FIG. 2A).
Next, when the desired editing of the application 120 is completed, for example, as shown in FIG. 3D, an operation menu such as “end” or “close” on the input screen of the application 120 displayed on the monitor, If you select a button with a pointing device such as a mouse and specify it with an operation such as clicking, the input column of the close secret code at the end is displayed to confirm the end authority as shown in FIG. 3 (5). . In this example, the password is required to be input before the application 120 is terminated. However, some applications 120 may be required to input biometric information.

That is, when accessing the application 120, as shown in FIG. 3 (5), in order to confirm whether or not the person who intends to use the application has the right to use the authentication, an authentication process is performed by requesting the input of the open personal identification code. In order to confirm whether or not the person has the proper authority at the time of termination, the authentication processing is performed by requesting the input of the close secret code (FIGS. 2 (a) (11) and 3 (5)). )).

If the authentication of the close secret code is established (FIG. 2 (a) (12)), the application main body function 121 ends normally and is closed, and at that time, the use collected by the use log data collecting function 125 by the data input / output function 126. The log data is written in the memory 130 and the program closing process is executed.
As shown in FIG. 3 (6), the usage screen of the application 120 is closed, and as shown in FIG. 3 (7), the icon selection of the application 120 is also canceled.
In the first computer system 100 of the present invention, the usage log data accumulated in the memory 130 can be provided to the external system. In recent years, as big data, various data such as user's health data, medical data, consumption pattern, behavior pattern, usage pattern of vehicles, usage patterns of houses, usage patterns of usage targets, etc. are accumulated on a large scale. It is known that big data analysis contributes to corporate activities and administrative activities by analyzing information accumulated together with user attributes.
FIG. 4 is a diagram showing a flow of providing the usage log data accumulated in the memory 130 to the external system in the first computer system 100. In this configuration, the data input / output function 126 has the encryption / decryption function 127, and when the usage log data is provided to the external system, the usage log data can be encrypted and provided. The encryption and decryption algorithms are not particularly limited as long as they satisfy the required security requirements.
When the usage log data is already stored in the memory 130 and is already encrypted and stored by the encryption / decryption function 127 of the data input / output function 126, it should be provided in the encrypted state. There is also a possibility. The decryption key may be separately notified to the external system so that the provided use log data can be decrypted by the external system.

As a second embodiment, a basic configuration example of the first type of the second computer system of the present invention will be described.
The first computer system 100 according to the first embodiment of the present invention confirms whether the program is started by the open secret code and the program is normally closed by the close secret code, but the first type according to the second embodiment. The second computer system 100-1 stores the "open personal identification code" and the "close personal identification code" in the first specific storage area 130-1A of the memory, and when the program is started, the activation end management unit 122 -1 is used to perform the authentication processing of the "open secret code", and it is confirmed whether or not the person is an authorized person who can access the other area in the first specific storage area 130-1A of the memory, and the program ends. At this time, the activation completion management unit 122-1 is used to perform the authentication processing of the “close password”, and the first specific storage area 130- Is intended to confirm whether successfully and the entry and operation contents access to other areas of the A is valid authority that can be determined.

FIG. 5 is a diagram simply showing a basic configuration example of the second computer system 100-1 of the first type of the present invention according to the second embodiment.
The second computer system 100-1 of the present invention comprises a code input means 110, an application 120-1, and a memory 130-1.
As a difference from the first embodiment, as shown in FIG. 5, in a computer system 100-1 of the present invention according to the second embodiment, a first specific storage area 130-1A is provided in the memory, and the first specific storage area 130-1A is provided. The open secret code 131 and the close secret code 132 are stored in the specific storage area 130-1A.
Hereinafter, each element will be described focusing on the points different from the first embodiment.

The code input means 110 is a device for inputting an open PIN code and a closed PIN code, and may be the same as that described in the first embodiment.

The application 120-1 has a configuration including an application body function 121 and a start / end management unit 122-1.

The application main body function 121 is related to the main body function of the application 120-1 as in the first embodiment, and various functions can be assumed according to the type.

In the second embodiment, the start / end management unit 122-1 has a function of controlling access permission to other areas in the first specific storage area 130-1A of the memory accessed by the application main body function 121 and control of inaccessibility. I have it. A first specific storage area 130-1A to be accessed by the boot end management unit 122-1 is defined, and as shown in FIG. 5, in the first specific storage area 130-1A, the first specific storage area 130-1A. -1A, an open secret code 131 for authenticating access permission to other parts, and a close for disabling access to the other parts of the first specific storage area 130-1A and terminating normally. The secret code 132 is set.

The start / end management unit 122-1 has a configuration including a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. These functions are slightly different from the start / end management unit 122, the application unlocking function 123, and the application locking function 124 shown in the first embodiment.

The memory specific storage area unlocking function 123-1 of the start-up management unit 122-1 receives the input of the open secret code input from the user through the code input means 110, performs authentication processing, and the start-up management unit. This is a function (a function of permitting access) for opening another area in the first specific storage area 130-1A defined to be accessed by 122-1. The open secret code 131 is set in the first specific storage area 130-1A itself, and the authentication processing is performed. If the authentication is successful, another area in the first specific storage area 130-1A is opened ( Allow access) and put it in the open state.

The memory specific storage area locking function 124-1 of the activation end management unit 122-1 receives the close secret code input from the user via the code input means 110, performs authentication processing, and is in an open state. Is a function of normally ending and closing other areas in the first specific storage area 130-1A. As will be described later, a close password is set in the first specific storage area 130-1A itself, and if the authentication processing is performed and the authentication is successful, the memory specific storage area locking function 124-1 is used. The log data collection function 125 and the data input / output function 126 are used to approve and confirm the recording of the usage log data concerning the current usage recorded in another area in the first specific storage area 130-1A, It ends normally and enters the closed state.

If the operation of approving, confirming, and retaining the record of the use log data concerning the use is performed, the data obtained as a result of the computer processing of the application 120-1 recorded in the memory 130-1 is organically integrated. It can be collected in a form, and various functions of the application 120-1 can be used.
The data access unit stored in the above-described first specific storage area 130-1A of the memory is to handle any one of a database, a database record, a database record field, a file, a storage, or a combination thereof. You can

Next, a control flow by the second computer system 100-1 of the first pattern according to the second embodiment will be described with reference to FIGS. 6 and 7.
FIG. 6 is a diagram in which the processing flows are overlapped and illustrated in the configuration example of FIG. FIG. 6A shows a flow of open processing of another area in the first specific storage area 130-1, and FIG. 6B shows another area in the first specific storage area 130-1A. Shows the flow of the closing process of.
FIG. 7 illustrates a flow of operations performed by a user when using a smartphone. In FIG. 7, the application 120-1 of the second computer system 100-1 of the first type of the present invention is started up, another area in the first specific storage area 130-1 is opened, and then the process is terminated. FIG. 13 is a diagram briefly describing an operation of closing another area in the first specific storage area 130-1A. This is an example, and a typical operation example of launching the application 120-1 and opening or closing another area in the first specific storage area 130-1A is shown.

First, as shown in FIG. 7A, the application 120-1 is installed on the computer system and is displayed on the monitor of the computer system when the user tries to use the application 120-1. The icon of the displayed application 120-1 is selected with a pointing device such as a mouse and activated by double-clicking or the like.

Next, as shown in FIG. 7 (2), an input column of the open secret code is displayed in order to confirm the usage right.
Input a password or a personal identification code such as biometric information required to normally open and use another area in the first specific storage area 130-1A via a keyboard or another input device. (FIG. 6 (a) step (1), FIG. 7 (2)).
When the authentication of the open secret code is successful, the application main body function 121 is activated (FIG. 6 (a) step (2), FIG. 6 (a) step (3), FIG. 7 (3)), and the first Another area in the specific storage area 130-1A is opened and becomes usable (step (4) in FIG. 6A).

After the application main body function 121 is activated, various processes are executed using the application main body function 121. The usage log data generated by the operation of the application main body function 121 is collected by the usage log data collection function 125 (step (5) in FIG. 6A).
Next, when the desired editing of the application 120-1 is completed, for example, as shown in FIG. 7 (4), an operation such as "end" or "close" of the input screen of the application 120 displayed on the monitor. If you select a menu or button with a pointing device such as a mouse and specify it by an operation such as clicking, as shown in Fig. 7 (5), the input column of the close secret code at the end is displayed to confirm the end authority. To be done.

That is, when accessing the application 120-1, in order to confirm whether or not the person who intends to use the application has the right to use the authorization, as shown in FIG. The authentication process is performed, and in order to confirm whether or not the person has the proper authority at the end, the authentication process is performed by requesting the input of the close secret code (Fig. 6 (b) (11), Fig. 6). 7 (5)).

If the authentication of the close secret code is established ((b) (12) in FIG. 6), the usage log data collected by the usage log data collection function 125 by the data input / output function 126 when the application main body function 121 ends normally and is closed. Is written in another area in the first specific storage area 130-1A, and the closing processing of the other area in the first specific storage area 130-1A is executed.

As shown in FIG. 7 (6), the usage screen of the application 120-1 is closed, and as shown in FIG. 7 (7), the icon selection of the application 120-1 is also canceled.
Although the above description has been given as an example in which the application 120-1 and the first specific storage area 130-1A are in one-to-one correspondence, the combination of the application 120-1 and the first specific storage area 130-1A is It goes without saying that there are multiple sets, and they may correspond to each other.

Further, the first specific storage area of the memory may be hierarchized. That is, there is a plurality of first specific storage areas of the memory, and the first specific storage area is provided with a data classification structure in which the first specific storage areas are classified and collected in folder units or cluster units.
When the first specific storage area of the memory is hierarchized, a part of the first specific storage area 130-1A that can be accessed by the program has a folder unit or a cluster unit in addition to the open PIN code and the closed PIN code. It may be configured to include a classification selection open PIN code and a classification selection close PIN code provided for each data classification structure.
In this case, in the memory specific storage area unlocking function 123-1, when the input code matches the classification selection open secret code, access to the unit of the data classification structure of the first specific storage area 130-1A is performed. On the other hand, when the entered code matches the classification selection close secret code in the memory specific storage area locking function 124-1 of the program, the data classification structure of the first specific storage area 130-1A is changed. The operation may be such that access to the unit is normally terminated.

Also in the second computer system 100-1 having the first pattern according to the second embodiment, the usage log data accumulated in the memory 130-1 can be provided to the external system. The usage log data has high utility value as big data.
FIG. 8 is a diagram showing a flow of providing the usage log data accumulated in the memory 130-1 to the external system in the second computer system 100-1 of the first pattern. In this configuration as well, the data input / output function 126 has the encryption / decryption function 127, and when the usage log data is provided to the external system, the usage log data can be encrypted and provided. The encryption and decryption algorithms are not particularly limited as long as they satisfy the required security requirements.
When the usage log data is already stored in the memory 130-1 and is already encrypted and stored by the encryption / decryption function 127 of the data input / output function 126, the data is provided in the encrypted state. It is possible to do it. The decryption key may be separately notified to the external system so that the provided use log data can be decrypted by the external system.

As a third embodiment, a basic configuration example of the second computer system of the second type of the present invention will be described.
The second computer system 100-1 of the first type described in the second embodiment stores the “open personal identification code” and the “close personal identification code” in the first specific storage area 130-1A. Every time, whether the user is an authorized person who can access the other area in the first specific storage area 130-1A by performing the "open secret code" authentication process by using the start end management unit 122-1 when the program is started. It is confirmed whether or not, and at the end of the program, the activation completion management unit 122-1 is used to perform the authentication processing of the “close secret code” to access another area in the first specific storage area 130-1A of the memory. To confirm whether or not the user is a legitimate authority who can confirm the input content and the operation content normally.

On the other hand, the second computer system 100-2 of the second pattern according to the third embodiment stores the “open PIN code” and the “close PIN code” in the first specific storage area 130-2A. Every other time, when the program is started, the start end management unit 122-2 is used to perform the authentication processing of the “open secret code”, and the second specific storage area 130-2B (a storage area different from the first specific storage area 130-2A) is executed. ) Is confirmed, and at the end of the program, the activation completion management unit 122-2 is used to perform the authentication processing of the “close password”, and the second specific storage area 130- 2B (a storage area different from the first specific storage area 130-2A) is normally terminated and it is confirmed whether or not the person is an authorized person who can confirm the input contents and the operation contents. It is intended to.

FIG. 9 is a diagram simply showing a basic configuration example of the second computer system 100-2 according to the second pattern of the present invention according to the third embodiment.
The second computer system 100-2 of the second pattern of the present invention has a configuration including a code input means 110, an application 120-2, and a memory 130-2.
As a difference from the first and second embodiments, as shown in FIG. 9, in the second computer system 100-2 of the second pattern of the present invention according to the third embodiment, the first identification in the memory is performed. A storage area 130-2A and a second specific storage area 130-2B as another storage area in the memory are provided, and an open security code 131 and a closed security code are provided in the first specific storage area 130-2A. 132 is stored.
Hereinafter, each element will be described focusing on points different from the first and second embodiments.

The code input means 110 is a device for inputting an open personal identification code and a closed personal identification code, and may be the same as that described in the first embodiment.
The application 120-2 is configured to include an application main body function 121 and a start / end management unit 122-2.
The application main body function 121 is related to the main body function of the application 120-2 as in the first embodiment, and various functions can be assumed according to the type.

In the third embodiment, the start / end management unit 122-2 has a function of controlling access permission and inaccessibility of the second specific storage area 130-2B accessed by the application body function 121. A first specific storage area 130-2A to be accessed by the boot completion management unit 122-2 is defined, and as shown in FIG. 9, in the first specific storage area 130-2A, the first specific storage area 130-2A. -2A, an open PIN code 131 for authenticating access permission to the second specific storage area 130-2B, which is a storage area other than -2A, and a close PIN code 132 for disabling access to the portion and ending normally. Is set.

The boot end management unit 122-2 has a memory-specific storage area unlocking function 123-2 and a memory-specific storage area locking function 124-2 as in the second embodiment. The function is slightly different from the boot end management unit 122-1, the memory specific area unlocking function 123-1 and the memory specific storage area locking function 124-1 shown in the second embodiment.
The memory specific storage area unlocking function 123-2 of the activation end management unit 122-2 receives the input of the open secret code input from the user via the code input means 110, and first, the activation end management unit 122-2. 2 performs the authentication process with reference to the first specific storage area 130-2A defined to be accessed, and if the authentication is successful, the second specific storage area 130-2B to which access is permitted is opened. It has a function to open (a function to allow access). That is, the open secret code 131 is set in the first specific storage area 130-2A to be accessed first, and the authentication process is performed, and if the authentication is successful, the second specific storage area 130, which is another storage area. -2B is opened (access is permitted) and opened.

The memory specific storage area locking function 124-2 of the boot end management unit 122-2 receives the close secret code input from the user through the code input means 110, and first, the first specific storage area. It has a function of performing an authentication process by referring to 130-2A, and has a function of normally ending and closing the opened second specific storage area 130-2B if the authentication is successful. That is, the close secret code is set in the first specific storage area 130-2A, the authentication processing is performed, and if the authentication is successful, the memory specific storage area locking function 124-2 is another storage area. The recording of the usage log data relating to the current usage recorded in the second specific storage area 130-2B is approved and confirmed, and the processing ends normally and is brought into the closed state.

If the operation of approving, confirming, and retaining the record of the use log data related to the use is performed, the data obtained as a result of the computer processing of the application 120-2 recorded in the memory 130-2 is organically integrated. It can be collected in a form, and various functions of the application 120-2 can be used.
The data access unit stored in the second specific storage area 130-2B of the memory is to handle any one of a database, a database record, a database record field, a file, a storage, or a combination thereof. You can

FIG. 10 shows a configuration similar to that of the computer system 100-2 according to the third embodiment shown in FIG. 9, but the second specific storage area 130-2B is arranged as a communicable memory. Is. The configuration is the same as that of FIG. The second specific storage area 130-2B has a configuration such as a database storage. For example, the second specific storage area 130-2B may be placed on the cloud. In this way, the arrangement of components can be flexibly applied.

Next, a control flow by the computer system 100-2 according to the third embodiment will be described with reference to FIGS. 11 and 12.
FIG. 11 is a diagram in which the processing flow is overlapped and illustrated in the configuration example of FIG. 9. FIG. 11A shows a flow of open processing of the second specific storage area 130-2B, and FIG. 11B shows a flow of close processing of the second specific storage area 130-2B.
FIG. 12 illustrates a flow of operations performed by a user when using a smartphone. In FIG. 12, in the second computer system 100-2 of the second pattern of the present invention, the program is started up, the second specific storage area 130-2B is opened, and then the second specific storage area 130-2B is ended and the second specific storage is completed. It is a figure which briefly explains the operation of closing the region 130-2B. This is an example, and a typical operation example of starting the application 120-2 and opening or closing the second specific storage area 130-2B is shown.

First, as shown in FIG. 12 (1), the application 120-2 is installed on the computer system, and when the user tries to use the application 120-2, the application 120-2 is displayed on the monitor of the computer system. The icon of the displayed application 120-2 is selected with a pointing device such as a mouse and activated by double-clicking or the like.

Next, as shown in FIG. 12 (2), an input column of the open secret code is displayed in order to confirm the usage right.
A personal identification code such as a password or biometric information required to normally open and use the second specific storage area 130-2B is input via a keyboard or another input device (see FIG. 11 (a ) Step (1), FIG. 12 (2)).
When the authentication of the open secret code is successful by referring to the first specific storage area 130-2A, the application main body function 121 is started (step (2) of FIG. 11 (a), step (2) of FIG. 11 (a)). 3), FIG. 12 (3)), and the second specific storage area 130-2B is opened and becomes usable (step (4) in FIG. 11 (a)).

After the application main body function 121 is activated, various processes are executed using the application main body function 121. The usage log data generated by the operation of the application main body function 121 is collected by the usage log data collection function 125 (step (5) in FIG. 11A).
Next, when the desired editing of the application 120 is completed, for example, as shown in FIG. 12D, an operation menu such as “end” or “close” on the input screen of the application 120 displayed on the monitor, If a button is selected with a pointing device such as a mouse and specified by an operation such as clicking, an input column of the closing secret code at the end is displayed to confirm the end authority as shown in FIG. 12 (5). .

In other words, when accessing the application 120-2, in order to confirm whether or not the person who intends to use the application has the proper usage authority, as shown in FIG. The authentication process is performed, and in order to confirm whether or not the person has the proper authority even at the end, the authentication process is performed by requesting the input of the close secret code (FIG. 11 (b) (11), FIG. 12 (5)).

If the authentication of the close password is established by referring to the first specific storage area 130-2A (FIGS. 11 (b) and 12), the data input / output function 126 when the application main body function 121 ends normally and is closed. Thus, the usage log data collected by the usage log data collection function 125 is written in the second specific storage area 130-2B of the memory, and the closing process of the second specific storage area 130-2B is executed.

As shown in FIG. 12 (6), the usage screen of the application 120-2 is closed, and as shown in FIG. 12 (7), the icon selection of the application b is also canceled.
In the above description, the application b, the first specific storage area 130-2A, and the second specific storage area 130-2B are in one-to-one correspondence with each other. It goes without saying that there are a plurality of combinations of the area 130-2A and the second specific storage area 130-2B, and they may correspond to each other.

Further, the set of the first specific storage area 130-2A and the second specific storage area 130-2B may be hierarchized. That is, there are a plurality of sets of the first specific storage area 130-2A and the second specific storage area 130-2B, and these have a data classification structure in which they are classified and collected in folder units or cluster units. is there.
When the set of the first specific storage area 130-2A and the second specific storage area 130-2B is hierarchized, in addition to the open personal identification code and the closed personal identification code, for each folder or cluster data classification structure The classification selection open PIN code and the classification selection close PIN code may be provided.

Also in the second computer system 100-2 of the second pattern according to the third embodiment, the usage log data accumulated in the memory 130-2 can be provided to the external system. The usage log data has high utility value as big data.
FIG. 13 is a diagram showing a flow of providing the usage log data accumulated in the memory 130-2 to the external system in the second computer system 100-2 of the second pattern. In this configuration as well, the data input / output function 126 has the encryption / decryption function 127, and when the usage log data is provided to the external system, the usage log data can be encrypted and provided. The encryption and decryption algorithms are not particularly limited as long as they satisfy the required security requirements.
When the usage log data is already stored in the memory 130-2 and is already encrypted and stored by the encryption / decryption function 127 of the data input / output function 126, it is provided in the encrypted state. It is possible to do it. The decryption key may be separately notified to the external system so that the provided use log data can be decrypted by the external system.

Various specific examples to which the computer system of the present invention is applied will be described after the fourth embodiment.
As described above, the computer system of the present invention is the computer system 100 of the present invention shown in the first embodiment, the computer system 100-1 of the present invention shown in the second embodiment, and the present invention shown in the third embodiment. There is the computer system 100-2, but an example of applying a specific example applied to each pattern will be shown.
The fourth embodiment will explain a specific example in which the computer system of the present invention is applied to the configuration of the insurance target service providing support system in the medical field and the nursing field.
The insurance-covered service providing support system 100a is a system in which a visitor visits the location of a visitee and supports the provision of services targeted for medical insurance or long-term care insurance between the service provider and the service recipient.

(Application of the type of Example 1)
FIG. 14 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to system configurations in the medical field and the care field.
In the configuration example of FIG. 14, the insurance target service providing support system 100a has a configuration including an input unit 110a, an insurance target service providing support application 120a, and a memory 130a, as in the configuration shown in FIG. The support application 120a has a configuration including an application main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126. The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.

Here, the insurance target service provision support application 120a is an insurance target service provision support application that supports the service provision to the service recipient, and is provided with the insurance claim function.
The application main body function 121 has functions required in the fields of medical care and long-term care, and exhibits various functions such as a receipt creating function and an insurance payment data input / output function.

The memory 130a is a data access unit generated for each user's medical insurance or long-term care insurance.
In the case of a visit type service, the service provider carries the service provider terminal equipped with the insurance target service providing support system 100a and visits the service recipient's home or the like to provide the service. At that time, the insurance target service providing support application 120a of the present invention is used to activate or execute the application via the insurance target service providing support system 100a. Enter the secret code required for operations such as selective activation, opening, closing, and deselection of applications.

In the case of a visit type service, a user who is a visitor carries the insurance-covered service providing support system 100a, and the service provider side that provides services such as medical staff holds the service provider terminal 200. , The service provider terminal 200 controls medical equipment and care tools in medical institutions and nursing facilities, and the usage log data generated from them is input to the service provider terminal 200, and the service content and insurance content are covered by the insurance target service. It is configured to be passed to the provision support system 100a.
There may be a wide variety of functions 200 of medical institutions and care facilities used by medical and nursing service providers. In this example, an outpatient appointment function 210, an inpatient management function 220, an insurance information function 230, a medical device control function / care tool control function 240, a medical care navigation system function 250, an artificial intelligence system control function 260, an insurance payment processing function 270. Etc. are equipped, and it is also possible to collect usage log data from each.

The process flow is as follows.
After the application unlocking function 123 authenticates the open PIN code input by the service recipient, the main function 121 of the insurance target service providing support application 120a opens.
The main body function 121 controls the processing related to the service provision support covered by the insurance for the service provision to the service recipient, and transmits an approval request asking whether or not the user approves the service content, and the main function 121 is sent from the user. By performing the approval inquiry process that waits for the reply of the approval information, it is possible to obtain approval for the content of the provided service.

If the application code lock function 124 authenticates the close secret code input by the service recipient, the content of the data written in the data access unit is confirmed, and the main body of the insurance target service providing support application 120a in the open state. The function 121 ends normally and is closed. As shown in FIG. 4, the usage log data such as the accumulated medical record information and insurance information can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 15 is a diagram showing a specific example in which the computer system 100-1 of the present invention described in the second embodiment is applied to the system configuration in the medical field and the care field.
In the configuration example of FIG. 15, the insurance target service provision support system 100-1a has a configuration including an input unit 110a, an insurance target service provision support application 120-1a, and a memory 130-1a, as in the configuration of FIG. The insurance target service providing support application 120-1a has a configuration including an application main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126, which is different from the type shown in FIG. The boot end management unit 122-1 has a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. That is, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1aA in the memory 130-1a is unlocked or locked. In other words, other areas in the first specific storage area 130-1aA in the memory 130-1a cannot be accessed unless the open PIN code is authenticated, and the data content is not fixed unless the close PIN code is authenticated. ing. As shown in FIG. 8, the usage log data such as the accumulated medical record information and insurance information can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 14 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 16 is a diagram showing a specific example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to system configurations in the medical field and the nursing field.
In the configuration example of FIG. 16, the insurance target service provision support system 100-2a has a configuration including an input unit 110a, an insurance target service provision support application 120-2a, and a memory 130-2a, similar to the configuration shown in FIG. However, the insurance target service provision support application 120-2a has a configuration including an application main body function 121, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126. Unlike the above type, the boot end management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open PIN code and the closed PIN code are stored in the first specific storage area 130-2aA, and the entered open PIN code and the closed PIN code are compared with the second PIN in the memory 130-2a. The specific storage area 130-2aB is opened and closed. That is, the second specific storage area 130-2aB in the memory 130-2a cannot be accessed unless the open security code is authenticated, and the data content is not fixed unless the closed security code is authenticated. As shown in FIG. 13, the usage log data such as the accumulated medical record information and insurance information can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 14 and FIGS. 9 to 12 of the third embodiment.

The fifth embodiment will explain a specific example in which the computer system of the present invention is applied to the configuration of the financial transaction control system applied to the payment management system using credit or debit.
The financial transaction control system 100b is a system that supports a financial transaction when a user who uses a credit or debit purchases a product or provides a service and makes a financial settlement using a user terminal that he or she owns.

(Application of the type of Example 1)
FIG. 17 is a diagram showing a specific example in which the computer system 100 of the present invention described in the first embodiment is applied to the configuration of the financial transaction control system 100b.
In the configuration example of FIG. 17, the financial transaction control system 100b has a configuration including an input unit 110b, a financial transaction processing application 120b, and a memory 130b, similar to the configuration shown in FIG. 1, and the financial transaction processing application 120b is an application. It is configured to include a main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126. The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.

Here, the financial transaction processing application 120b is a financial transaction processing application that controls the financial transaction processing for the user's account, and is provided with a financial settlement function when using credit or debit.
The application main body function 121 is provided with a function required in a financial settlement service when using credit or debit. It is something to demonstrate.

The memory 130b is stored for each data access unit of the financial transaction processing application generated for each user account.
Note that the user terminal 300 is equipped with a user-side electronic payment application 306, manages the user medium account information 307, and executes electronic payment processing. It should be noted that the user terminal is equipped with a camera 305, a user personal application 301, a data input means 302, a personal identification code input means 303, a communication means 304, etc., as required.
The system 320 used by the store or the EC site operated by the store includes a user medium information input unit 321 which is an access device of the user medium 310 such as a credit card or a debit card, and financial transaction information for processing a transaction of electronic settlement. The generation means 322, the communication means 323, etc. are equipped.
Although illustration is simplified, the electronic payment support site 330 is assumed to be equipped with a user medium information input unit 331, a financial transaction information generation unit 332 that processes electronic payment transactions, a communication unit 333, and the like.

The process flow is as follows.
After the application unlocking function 123 authenticates the open secret code included in the request information for the financial transaction processing transmitted from the user terminal, it opens the application main body function 121 of the financial transaction processing application 120b.
The application main body function 121 receives the financial transaction information from the financial transaction operator to the user's account and performs the editing processing of writing the financial transaction information to the data access unit, as processing related to service provision support such as credit usage to the user. , Send an approval request to the user terminal asking whether to approve the financial transaction information and wait for the reply of the approval information from the user terminal. Processing becomes possible.

If the close password input by the user is authenticated by the application lock function 124, the data content written in the data access unit is confirmed, and the settlement management system of the financial transaction information written in the data access unit is entered. Is performed, and the application main body function 121 of the financial transaction processing application 120b in the opened state is normally terminated and closed. Note that, as shown in FIG. 4, the accumulated log data of financial transactions can be provided to the outside by performing an encryption process on the external system. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 18 is a diagram showing a specific example in which the computer system 100-1 of the present invention described in the second embodiment is applied to the configuration of the financial transaction control system 100-1b.
In the configuration example of FIG. 18, the financial transaction control system 100-1b has a configuration including an input unit 110b, a financial transaction processing application 120-1b, and a memory 130-1b, similar to the configuration of FIG. Although 120-1b has a configuration including an application main body function 121, a start / end management unit 122-1, a usage log data collection function 125, and a data input / output function 126, unlike the type of FIG. 17, the start / end management is performed. The unit 122-1 is configured to include a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. That is, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1bA in the memory 130-1a is unlocked or locked. As described above, the other areas in the first specific storage area 130-1bA of the memory 130-1a cannot be accessed unless the open PIN code is authenticated, and the storage of the data content is confirmed unless the close PIN code is authenticated. It is not done. Note that, as shown in FIG. 8, it is possible to perform an encryption process on an external system for the accumulated financial transaction usage log data and provide the external system with the encrypted data. Other configurations and operations may be the same as those described with reference to FIG. 17 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 19 is a diagram showing a specific example in which the computer system 100-2 of the present invention described in the third embodiment is applied to the configuration of the financial transaction control system 100-2b.
In the configuration example of FIG. 19, the financial transaction control system 100-2b has a configuration including an input unit 110b, a financial transaction processing application 120-2b, and a memory 130-2b, similar to the configuration shown in FIG. The processing application 120-2b has a configuration including an application main body function 121, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126, but unlike the type shown in FIG. The termination management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open PIN code and the closed PIN code are stored in the first specific storage area 130-2bA, and the input open PIN code and the closed PIN code are compared with the second PIN in the memory 130-2b. The specific storage area 130-2bB is opened and closed. That is, the second specific storage area 130-2aB in the memory 130-2a cannot be accessed unless the open PIN code is authenticated, and the storage of the data content is not fixed unless the close PIN code is authenticated. Note that, as shown in FIG. 13, it is possible to perform an encryption process on an external system and provide the accumulated use log data of financial transactions to the outside. Other configurations and operations may be the same as those described with reference to FIG. 17 and FIGS. 9 to 12 of the third embodiment.

(Application to vehicle driving support system)
[Embodiment 6] A sixth embodiment will explain a specific example to which the computer system of the present invention is applied, regarding the configuration of the vehicle use support system applied to the vehicle use support that supports the use of various functions mounted on the vehicle.
The vehicle use support system 100c is a system that assists a user who is driving a vehicle to use various functions installed in the vehicle.

(Application of the type of Example 1)
FIG. 20 is a diagram showing a specific example in which the computer system 100 of the present invention described in the first embodiment is applied to the configuration of the vehicle use support system 100c.
In the configuration example of FIG. 20, the vehicle use support system 100c has a configuration including an input unit 110c, a vehicle use support application 120c, and a memory 130c, like the configuration shown in FIG. 1, and the vehicle use support application 120c is an application. It is configured to include a main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126. The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.
The application main body function 121 is provided with a function of controlling various vehicle functions 400 required for use such as driving the vehicle.

The memory 130c is stored for each data access unit generated for each user used by the vehicle use support application 120c.
There are various kinds of various functions 400 of the vehicle. For example, in the example of FIG. 20, a door lock opening / closing function 410, an engine control function 420, an automatic driving system 430, a car navigation system function 440, an artificial intelligence system. A control function 450, a billing processing system function 460, a lighting and air conditioning system control function 470, an audiovisual device control function 480, etc. are provided.

The process flow is as follows.
After the application unlocking function 123 authenticates the open secret code input by the user, the application main body function 121 is opened.
First, the door lock is opened and closed by the door lock opening / closing function 410, and the application main body function 121 uses the data input / output function 126 to adjust the in-vehicle environment such as preset room temperature, lighting, and audio. Data dynamically input from a third party (such as a child) permitted by the user or data recorded in advance is given to various functions 400 of the vehicle mounted on the vehicle to execute the instruction contents.
After that, the processing necessary for driving is executed such as the start of the engine, the operation of the car navigation system, the automatic driving system, etc. Will be recorded.

Regarding charging that occurred while driving, as an accounting process such as credit use, send an approval request to the user terminal asking whether to approve financial transaction information and wait for a reply of approval information from the user terminal It is also possible to perform approval inquiry processing and obtain approval for the content of the financial transaction service.
In response to the input of the close secret code, the application lock function approves and confirms the recording of various data relating to the current traveling or parking recorded in the data access unit, completes normally, and closes.

If the close password input by the user is authenticated by the application lock function 124, the data content written in the data access unit is fixed, and the data regarding the vehicle running written in the data access unit is fixed. The application main body function 121 of the vehicle use support application 120c in the opened state is normally terminated and closed. Note that, as shown in FIG. 4, it is also possible to perform an encryption process on an external system for the accumulated use log data of vehicle traveling and provide it to the outside. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 21 is a diagram showing a specific example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of the vehicle use support system 100-1c.
In the configuration example of FIG. 21, the vehicle use support system 100-1c has a configuration including an input unit 110c, a vehicle use support application 120-1c, and a memory 130-1c, similar to the configuration of FIG. Although 120-1c has a configuration including an application main body function 121, a start / end management unit 122-1, a usage log data collection function 125, and a data input / output function 126, unlike the type of FIG. The unit 122-1 is configured to include a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. In other words, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1cA in the memory 130-1c is unlocked or locked. As described above, the other area in the first specific storage area 130-1cA in the memory 130-1c cannot be accessed unless the open PIN code is authenticated, and the data content is not fixed unless the close PIN code is authenticated. Has become. Note that, as shown in FIG. 8, it is possible to perform an encryption process on an external system and provide the stored usage log data of vehicle travel to the outside. Other configurations and operations may be the same as those described with reference to FIG. 20 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 22 is a diagram showing a specific example in which the computer system 100-2 of the present invention described in the third embodiment is applied to the configuration of the vehicle use support system 100-2c.
In the configuration example of FIG. 22, the vehicle use support system 100-2c has a configuration including an input unit 110c, a vehicle use support application 120-2c, and a memory 130-2c, similar to the configuration shown in FIG. The support application 120-2c has a configuration including an application main body function 121, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126, but unlike the type shown in FIG. The termination management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open PIN code and the closed PIN code are stored in the first specific storage area 130-2cA, and the entered open PIN code and closed PIN code are compared with the second PIN in the memory 130-2c. The specific storage area 130-2cB is unlocked or locked. That is, the second specific storage area 130-2cB in the memory 130-2c cannot be accessed unless the open security code is authenticated, and the data content is not fixed unless the closed security code is authenticated. Note that, as shown in FIG. 13, it is possible to perform an encryption process on an external system and provide the stored usage log data of vehicle traveling to the outside. Other configurations and operations may be the same as those described with reference to FIG. 20 and FIGS. 9 to 12 of the third embodiment.

(Application to housing use support system)
Example 7 is any one of the apartment units, the large-scale tower apartment units, the detached house, the apartment complex, the office building rooms, the log house, the assembled house, the share house, the hotel, the inn, or the rental room, or A specific example to which the computer system of the present invention is applied will be described with respect to the configuration of the home use support system that supports the use of various functions installed in various homes including those use sections.

(Application of the type of Example 1)
FIG. 23 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to the configuration of the housing utilization support system 100d.
In the configuration example of FIG. 23, the housing use support system 100d has a configuration including an input unit 110d, a housing use support application 120d, and a memory 130d, like the configuration shown in FIG. 1, and the housing use support application 120d is an application. It is configured to include a main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126.
The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.
The application main body function 121 has a function of controlling the various functions 500 of the house that are required in using the house.
The usage log data collection function 125 can collect the usage log data collected from the various functions 500 of the house by the unit of the house or the user of the house, or can collect the unlogged data.

The memory 130d is stored for each data access unit generated for each user used in the housing utilization support application 120d.
There are various types of functions 500 of the house, but for example, in the example of FIG. 23, a door lock opening / closing function 510, a crime prevention security management 520, a garage management function 530, a delivery box management function 540, a power storage device management. Function 550, food storage management function 560, gas / electricity and water management function 561, safety confirmation management function 562, flora and fauna management function 563, bath unit management function 564, toilet attached health management function 565, concierge function 566, artificial intelligence assistant function 567, An illumination air conditioning system control function 568, an AV device management function 569, a billing processing function 570, a sensing data collection function 580, etc. are provided.
It should be noted that these various functions may include a function that always operates, a function that a home user operates while out, and a function that a home user operates while living. It can also be switched in conjunction with the open process and the close process of the door lock opening / closing function 510.

The process flow is as follows.
After the application unlocking function 123 authenticates the open secret code input by the user, the application main body function 121 is opened.
First, the door lock is opened and closed by the door lock opening / closing function 510, and the application main body function 121 uses the data input / output function 126 to adjust the indoor environment such as preset room temperature, lighting, and audio. Data dynamically input from a third party (such as a child) permitted by the user or data recorded in advance is given to the various functions 500 of the house mounted in the house, and the instructions are executed.
After that, the function of always operating is maintained, and further, a switching process is performed in which various functions that operate during residence are turned on and conversely, functions that operate during outing are turned off.
The usage log data of various functions generated while going out is dynamically recorded for each data access unit through the usage log data collection function.

Next, when going out, the application lock function 124 authenticates the close security code after the user inputs the close security code, and then the application main function 121 is closed. Approve and confirm the recording of the usage log data that occurred during the current residence recorded for each data access unit, normally terminate and close the functions that operate during residence, and operate the functions that operate during outing. Note that, as shown in FIG. 4, it is also possible to perform an encryption process on an external system and provide it to the outside with respect to the accumulated use log data of the house. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 24 is a diagram showing a specific example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of the housing utilization support system 100-2d.
In the configuration example of FIG. 24, the housing utilization support system 100-2d has a configuration including an input unit 110d, a housing utilization support application 120-1d, and a memory 130-1d, similar to the configuration of FIG. Although 120-1d has a configuration including an application main body function 121, a start / end management unit 122-1, a usage log data collection function 125, and a data input / output function 126, unlike the type of FIG. The unit 122-1 is configured to include a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. That is, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1dA in the memory 130-1d is unlocked or locked. As described above, the other area in the first specific storage area 130-1dA in the memory 130-1d cannot be accessed unless the open PIN code is authenticated, and the data content is not fixed unless the close PIN code is authenticated. Has become. Note that, as shown in FIG. 8, it is possible to perform an encryption process on an external system and provide the stored usage log data of vehicle travel to the outside. Other configurations and operations may be the same as those described with reference to FIG. 23 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 25 is a diagram showing a specific example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the configuration of the housing utilization support system 100-2d.
In the configuration example of FIG. 25, the house utilization support system 100-2d has a configuration including an input unit 110d, a house utilization support application 120-2d, and a memory 130-2d, similar to the configuration shown in FIG. The support application 120-2d has a configuration including an application main body function 121, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126, but unlike the type shown in FIG. The termination management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open PIN code and the closed PIN code are stored in the first specific storage area 130-2dA, and the input open PIN code and the closed PIN code are compared with the second PIN in the memory 130-2d. The specific storage area 130-2 dB is opened and closed. That is, the second specific storage area 130-2dB in the memory 130-2d cannot be accessed unless the open security code is authenticated, and the data content is not fixed unless the closed security code is authenticated. Note that, as shown in FIG. 13, it is possible to perform an encryption process on an external system and provide the stored usage log data of vehicle traveling to the outside. Other configurations and operations may be the same as those described with reference to FIG. 23 and FIGS. 9 to 12 of the third embodiment.

(Application to personal data management system)
The eighth embodiment is an example applied to a personal data management system in which individual users manage and operate personal data.
The personal data to be managed may be not only basic information such as name, address, telephone number, but also various kinds such as electronic medical record, bank account information, driver's license information.
It is also possible to equip a personal data application that handles personal data using a user terminal possessed by the user and store the data in the cloud. The storage area of the memory may be a personal data access unit generated for each individual used in the personal data application.
Regarding the configuration of the personal data management system, a specific example to which the computer system of the present invention is applied will be described.

(Application of the type of Example 1)
FIG. 26 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to the configuration of the personal data management system e.
In the configuration example of FIG. 26, the personal data management system 100e has a configuration including an input unit 110e, a personal data management application 120e, and a memory 130e, similar to the configuration shown in FIG. 1, and the personal data management application 120e is an application. It is configured to include a main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126.
The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.
The application main body function 121 is provided with functions such as browsing, editing, and saving of data required for using personal data.
The usage log data collection function 125 can collect usage log data of personal data such as browsing and editing from the external system 600 in units of personal data.

The memory storage area 130e is stored for each data access unit of the user who is accessed by the personal data management application 120e.
In this example, there is an external system 600 as an external system, and there is a terminal used by a person who requests the user to browse and provide personal data, such as a service provider or an administrative person. For example, when a doctor requests the presentation of electronic medical record information, which is personal data, such as a medical record at another hospital, from an individual who is a patient who has visited the hospital, the external system 600 is used to use the personal data management system 100e of the user. Used to interact with. The external system 600 is also equipped with a personal data application 610, and in addition to an application management function 611 and an input means 612, a personal data access information receiving means 613 and a data browsing / editing function 614. The personal data access information receiving unit 613 has a function of inquiring from the user's personal data management system 100e about the address information on the cloud in which the personal data is stored and obtaining it. The personal data browsing / editing function 614 has a function of accessing, browsing, and editing the personal data on the cloud.

The process flow is as follows.
After the application unlocking function 123 authenticates the open secret code input by the user, the application main body function 121 is opened.
The application main body function 121 accesses the corresponding electronic data on a storage device such as a cloud.
URL information for accessing the corresponding electronic data on a storage device such as a cloud is transmitted to the external system 600, and the external system 600 transmits the URL information via the personal data access information receiving unit 613. To get. If necessary, the personal data browsing / editing function 614 is used to browse data and edit data. For example, while referring to the treatment history, the doctor adds the electronic medical record information regarding the new treatment in this treatment.
The personal data management system 100e collects usage log data such as data browsing and data editing performed by an external system via the usage log data collection function 125, and records it as incidental information to electronic data.

The external system 600 that has accessed the personal data in this way transmits an approval request to the personal data management system 100e to inquire whether or not to approve the content of the personal data access processing for the personal data access unit, and the user terminal It can be operated with approval inquiry processing waiting for the reply of approval information from.
When the application lock function 124 authenticates the close PIN code after receiving the input of the close PIN code from the user, the personal data management system 100e closes the application body function 121 and uses this time recorded in data access units. Approve and confirm the record of log data, close normally. Here, as a medical institution or an administrative institution, through the approval process for this approval request, there is no unexpected situation where personal data is unintentionally rewritten or deleted, and it is used for newly written contents. It is also possible to operate that the confirmation that the person himself / herself has consented has been obtained.
As shown in FIG. 54, the accumulated personal data may be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 27 is a diagram showing a specific example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of the personal data management system 100-1e.
In the configuration example of FIG. 27, the personal data management system 100-1e has a configuration including an input unit 110e, a personal data management application 120-1e, and a memory 130-1e, similar to the configuration of FIG. Although 120-1e has a configuration including an application main body function 121, a start / end management unit 122-1, a usage log data collection function 125, and a data input / output function 126, unlike the type of FIG. The unit 122-1 is configured to include a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. That is, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1eA in the memory 130-1e is unlocked or locked. As described above, the other area in the first specific storage area 130-1eA in the memory 130-1e cannot be accessed unless the open security code is authenticated, and the storage of the data content is determined unless the close security code is authenticated. It is not done. As shown in FIG. 8, the accumulated personal data may be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described in FIG. 26 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 28 is a diagram showing a specific example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the configuration of the personal data management system 100-2e.
In the configuration example of FIG. 28, the personal data management system 100-2e has a configuration including an input unit 110e, a personal data management application 120-2e, and a memory 130-2e, similar to the configuration shown in FIG. The management application 120-2e has a configuration including an application main body function 121, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126, but unlike the type of FIG. The termination management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open PIN code and the closed PIN code are stored in the first specific storage area 130-2eA, and the input open PIN code and the closed PIN code are compared with the second PIN in the memory 130-2e. The specific storage area 130-2eB is unlocked or locked. That is, the second specific storage area 130-2eB in the memory 130-2e cannot be accessed unless the open security code is authenticated, and the data content is not fixed unless the closed security code is authenticated. Note that, as shown in FIG. 13, it is also possible to perform an encryption process on an external system for personal data and provide it to the outside. Other configurations and operations may be the same as those described with reference to FIG. 26 and FIGS. 9 to 12 of the third embodiment.

(Application to encryption / decryption system)
Although the ninth embodiment is a data management system, it is an example applied to a data management system that supports the use of data by performing data encryption processing and data decryption processing in order to improve security.
Data is kept encrypted when it is not being accessed by a data management application that has a legitimate access right, and decrypted only when a data management application that has a legitimate access right is accessing it. It has a feature that it can be viewed, output or edited by being converted, and when a data management application in a state having a proper access right ends the access, the data is in an encrypted state. The data to be managed is not limited and may be various data such as personal data and various data generated in corporate activities. Regarding the configuration of the data management system 100f, a specific example in which the computer system of the present invention is applied will be described.

(Application of the type of Example 1)
FIG. 29 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to the configuration of the data management system 100f.
In the configuration example of FIG. 29, the data management system 100f has a configuration including a user computer system 101f possessed by a user and a data server 102f for storing data.
Similar to the configuration shown in FIG. 1, the input means 110f, the data management application 120f, and the memory 130f are provided, but the user computer system 101f side is provided with the code input means 110f and the data management application 120f. A storage device 130f is provided on the data server 102f side such as on the cloud. The storage area of the memory of the storage device is managed in data access units used by the data management application 120f. In this example, the fields are managed on a database field basis.
The data management application 120f of the user computer system 101f is configured to include an application body function 121, a start / end management unit 122A, a usage log data collection function 125, and a data input / output function 126.

The activation end management unit 122A has a configuration including an application unlocking function A123A and an application unlocking function A124A. That is, the application main body function 121 is unlocked or locked by inputting the open security code or the closed security code.
The application main body function 121 has functions of browsing, editing, saving, etc. of data required in data management.

The data server 102f is configured to include an application unlock function B123B and an application lock function B124B in addition to the memory 130f of the storage device and the data server main function 140 of the data server 102f.
Note that the application unlock function A123A of the start / end management unit 122A on the user computer system 101f side is for performing authentication when opening the application main body function 121, and the application lock function A124A closes the application main body function 121. This is to authenticate when doing.

On the other hand, the application unlocking function B123B of the data server 102f performs authentication when opening the data server main body function 140, and the application closing function B124B performs authentication when closing the data server main body function 140. Is.

The storage area 130f is stored for each data access unit accessed by the data management application 120f, and in this example, for each field of a record in the database. Here, each data is encrypted and stored.
The data input / output management function 126 has an encryption / decryption function, and the data stored in the storage area 130f is encrypted by the encryption function of this data input / output management function 126 and can be decrypted by the decryption function. It has become.

The process flow is as follows.
After the application unlocking function A123A authenticates the open secret code input by the user, the application main body function 121 is opened. The open password input by the user is also transmitted to the application unlocking function B123B of the data server 102f, and the data server main body function 140 of the data server 102f is also opened.

The application main body function 121 of the user computer system 101f accesses the database in the storage area 130f of the data server 102f on the cloud to access the corresponding record and field. Here, the data in some fields is encrypted. When the application body function 121 downloads the data in the field, the data is decrypted through the encryption / decryption function of the data input / output management function 126 and decrypted so that the user can read and edit the data.
After the user browses or edits the data as necessary, the data management application 120f uploads the data to return it to the database in the storage area 130f of the data server 102f on the cloud again. The data is encrypted via the encryption / decryption function of the data input / output management function 126, and the encrypted data is stored in the database in the storage area 130f.

When the series of processing is completed, the data input system closes the application main body function 121 after the application lock function A124A authenticates the close security code when the user inputs the close security code. Further, the close password input by the user is also transmitted to the application lock function B124B of the data server 102f to close the data server body function 140 of the data server 102f, but at that time, it is recorded in the data access unit. Approve and confirm the encrypted data of each field of this database that was done, and complete normally and close. As shown in FIG. 4, the accumulated data can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 30 is a diagram showing a specific example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of the data management system 100-1f.
In the configuration example of FIG. 30, the data management system 100-1f has a configuration including an input unit 110f, a data management application 120-1f, and a memory 130-1f, similarly to the configuration of FIG. Is configured to include an application main body function 121, a start / end management unit 122-1 and a data input / output function 126. However, unlike the type of FIG. 29, the start / end management unit 122-1 has a memory specific storage area. It is configured to have an unlocking function A123-1A and a memory specific storage area locking function A124-1A. Further, there are configurations that are linked with them such as a memory specific storage area unlocking function B123-1B and a memory specific storage area locking function B124-1B in the data server 102-1f. That is, by inputting the open personal identification code and the closed personal identification code, other areas in the first specific storage area 130-1fA in the memory 130-1f in the data server 102-1f are unlocked or locked. It is configured to do. As described above, other areas in the first specific storage area 130-1fA in the memory 130-1f of the data server 102-1f cannot be accessed unless the open PIN code is authenticated, and the closed PIN code is not authenticated. As long as it is, the data contents of other areas in the first specific storage area 130-1fA in the memory 130-1f in the data server 102f are not fixed. As shown in FIG. 8, the accumulated data can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 29 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 31 is a diagram showing a specific example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the configuration of the data management system 100-2f.
In the configuration example of FIG. 31, the personal data management system 100-2f has a configuration including an input unit 110f, a data management application 120-2f, and a memory 130-2f, similar to the configuration shown in FIG. Although 120-2f has a configuration including an application main body function 121, a boot end management unit 122-2, and a data input / output function 126, unlike the type of FIG. 29, the boot end management unit 122-2 is a memory It has a configuration including a specific storage area unlocking function A123-2A and a memory specific storage area locking function A124-2A. In addition, the data server 102-2f has a memory specific storage area unlocking function B123-2B and a memory specific storage area locking function B124-2B that are linked with them. That is, the open personal identification code and the closed personal identification code are stored in the first specific storage area 130-2fA, and the input open personal identification code and the closed personal identification code are collated with these and the memory in the data server 102-2f. The configuration is such that records and fields in the database of the second specific storage area 130-2fB in 130-2f are unlocked and locked. That is, the second specific storage area 130-2fB in the memory 130-2f of the data server 102-2f cannot be accessed unless the open PIN code is authenticated, and the storage of the data content is confirmed unless the close PIN code is authenticated. It is not done. Note that, as shown in FIG. 13, data can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 29 and FIGS. 9 to 12 of the third embodiment.

(Application to utilization support system for target objects)
The tenth embodiment is a usage support system in which an authorized person causes a user to use a usage target. It is a usage support application that allows the usage target to use the equipment functions.
Regarding the usage target, the owner or administrator sets the so-called usage right for the user who is another person, approves the usage result by that user, and returns it, thereby supporting the usage of the usage target Is.
The use target is not limited, but includes, for example, a tangible property of real estate or real estate, data, ownership, an intangible property right or an intangible object of virtual currency, or a use section thereof.
Regarding the configuration of the usage support system 100g to be used, a specific example to which the computer system of the present invention is applied will be described.

(Application of the type of Example 1)
FIG. 32 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to the usage support system 100g to be used.
The usage support system 100g to be used has a configuration including an input unit 110g, a usage support application 120g, and a memory 130g, as in the configuration shown in FIG. , A user system 800 that receives the setting of authority, and a usage target 900 exist.
The usage support application 120g of the usage support system 100g to be used has a configuration including an equipment function control unit 121 corresponding to an application main body function, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126. Has become.

The equipment function control unit 121 corresponds to the main function of the usage support application, has a function of controlling activation and deactivation of the equipment function 901 of the usage target 900, and gives a usage authority. , It is possible to restrict the use of some equipment functions.

The start / end management unit 122 has an application unlocking function 123 and an application locking function 124. That is, the equipment function control unit 121 is unlocked or locked by inputting the open security code or the closed security code.

The application unlocking function 123 performs authentication when the equipment function control unit 121 corresponding to the application body function 121 is opened, and the application unlocking function 124 controls the equipment function control unit 121 corresponding to the application body function 121. Authentication is performed when closing.

An open secret code and a closed secret code are stored in the memory 130g. In the usage support system 100g to be used according to the present embodiment, the open PIN code and the closed PIN code of the memory 130g can be set or rewritten by the PIN code setting function 711 of the usage right control application 710 of the authority system 700. Has become. That is, since the authority system 700 is equipped with the personal identification code setting function 711 and the personal identification code notification function 712, the open personal identification code and the closed personal identification code are set for the usage authorization of the usage target, and the user who grants the usage authorization is granted. By providing a notification via the personal identification code notification function 712, the user can be identified and used. In this way, by setting or rewriting the open PIN code and the closed PIN code, the owner or administrator of the usage target can set the so-called usage right to the user who is another person. It is possible to support the use of the object to be used by approving and returning the right of use by the person. If the open PIN code and the close PIN code are rewritten, the past user cannot perform the open process and the close process, and thus the usage right is lost.
Further, since the usage authority system 700 includes the equipment function usage restriction unit 713, it is possible to restrict the equipment function 901 of the usage target 900 when granting the usage authority.

The process flow is as follows.
When the user wants to use the usage target, or conversely, when the authority specifies the user to use the usage target, the authority grants the usage authority of the usage target.
First, the authority system 700 sets an open PIN code and a closed PIN code for opening the usage target 900 via the PIN code setting function 711, and the PIN code notification function 712 is given to the user who gives the usage authority. The user system 800 is notified via. An available equipment function 901 is selected via the equipment function use restriction unit 713 and notified to the usage support system 100g to be used.

The user inputs the open PIN code from the input means 110g of the usage support system 100g to be used via the user system 800, and the application unlocking function 123 authenticates the open PIN code, and then the application main body function 121 The equipment function control unit 121 corresponding to is opened and the control of the equipment function 901 of the usage target 900 is started. If the object of use is a facility having an indoor space such as a room or a vehicle and having a door, one of the equipment functions 901 is a door lock opening / closing function, and the door can be opened / closed.
Usage log data generated by using the equipment function 901 to be used is collected via the usage log data collection function 125.

After a series of use is completed, the user inputs the close secret code from the input means 110g, the application locking function 124 authenticates the close secret code, and then the equipment function control unit 121 is terminated and closed. Due to the closing, the equipment function 901 function to be used cannot be used. At that time, the usage log data collected by the usage log data collection function 125 is approved and confirmed, and the processing ends normally and is closed. Note that, as shown in FIG. 4, it is also possible to perform an encryption process on the accumulated data to the external system via the encryption / decryption function 127 of the data input / output function 126 and to provide it to the outside. Other configurations and operations may be the same as those described in the first embodiment with reference to FIGS.

(Application of the type of Example 2)
FIG. 33 is a diagram showing a specific example in which the computer system 100-1 of the present invention described in the second embodiment is applied to the usage support system 100-1g to be used.
In the configuration example of FIG. 33, the usage support system 100-1g to be used has a configuration including an input unit 110g, a usage support application 120-1g, and a memory 130-1g, as in the configuration of FIG. The configuration 120-1g is provided with an equipment function control unit 121 corresponding to the application main function, a start / end management unit 122-1, a usage log data collection function 125, and a data input / output function 126. Unlike the type, the boot end management unit 122-1 is configured to include a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. In other words, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1gA in the memory 130-1g is unlocked or locked. As described above, the other area in the first specific storage area 130-1gA in the memory 130-1g cannot be accessed unless the open PIN code is authenticated, and the data in the memory 130-1g cannot be accessed unless the closed PIN code is authenticated. The contents are not fixed. As shown in FIG. 8, the accumulated data can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 32 and FIGS. 5 to 7 of the second embodiment.

(Application of the type of Example 3)
FIG. 34 is a diagram showing a specific example in which the computer system 100-2 of the present invention described in the third embodiment is applied to the usage support system 100-2g to be used.
In the configuration example of FIG. 34, the usage support system 100-2g to be used has a configuration including an input unit 110g, a usage support application 120-2g, and a memory 130-2g, similar to the configuration shown in FIG. The support application 120-2g has a configuration including an equipment function control unit 121 that is an application main function, a start / end management unit 122-2, a usage log data collection function 125, and a data input / output function 126. Unlike the above type, the boot end management unit 122-2 is configured to include a memory specific storage area unlocking function 123-2 and a memory specific storage area locking function 124-2. That is, the open personal identification code and the closed personal identification code are stored in the first specific storage area 130-2gA. By collating the input open personal identification code and the closed personal identification code with these, the second specific storage area 130- It is configured to open and close 2 gB. That is, the second specific storage area 130-2gB in the memory 130-2g cannot be accessed unless the open secret code is authenticated, and the data content is not fixed unless the close secret code is authenticated. Note that, as shown in FIG. 13, data can be encrypted by an external system and provided to the outside. Other configurations and operations may be the same as those described with reference to FIG. 32 and FIGS. 9 to 12 of the third embodiment.

(Apply to conversion card)
In the eleventh embodiment, the user writes, rewrites, or selects the selected credit card information, the selected debit card information, or the selected point card information on the medium, and the medium is a specific credit card, This is an application to a card selection changing application system for changing to a specific debit card or a specific point card.
The card information is not limited, but includes, for example, a wide variety of credit card information, a wide variety of debit card information, a wide variety of point card information, or a combination thereof.
Currently, there are many cases where card information and card medium correspond one-to-one, so to speak, it is necessary to hold the same number of card mediums for each type of card. Here, although different card information is recorded on each card medium, since many of them have standardized shapes and interfaces such as IC chips, by rewriting the card information, one card is changed to another card. Is technically possible.
Therefore, in the present invention, what can change the card information by controlling the card information to be written on the card medium is called a "conversion card" in the present invention.

Regarding the configuration of the conversion card usage support system, a specific example to which the computer system of the present invention is applied will be described.
(Application of the type of Example 1)
FIG. 35 is a diagram showing a specific example in which the computer system 100 of the present invention shown in the first embodiment is applied to the conversion card use support system 100h.
The conversion card use support system 100h has a configuration including an input unit 110h, a use support application 120h, and a memory 130h as in the configuration shown in FIG. 1, but a card medium 1000h owned by the user exists. There is.
The usage support application 120h of the conversion card usage support system 100h is configured to include an application main body function 121, a start / end management unit 122, a usage log data collection function 125, and a data input / output function 126.

The application main body function 121 is for selecting, writing, or rewriting credit card information, debit card information, or point card information with respect to the card medium 1000h.
The activation end management unit 122 has a configuration including an application unlocking function 123 and an application unlocking function 124. That is, the application main body function 121 is unlocked or locked by inputting the open password or the closed password.
The application unlocking function 123 is for performing authentication when opening the application main body function 121, and the application closing function 124 is for performing authentication when closing the application main body function 121.

An open password and a closed password are stored in the memory 130h. Further, in this example, at least one card information that the user can select is recorded in the memory 130h. In this example, three pieces of A company card information, B company card information, and C company card information are stored, but the number and types are not limited.
That is, since the card information that the user can select is stored in the memory storage area 130h, the user can select and specify the card information. At the time of the designation, an open PIN code and a closed PIN code can be set to confirm the user's intention.

The data input / output function 126 is provided with a writing means for the card medium 1000h, and writes the card information selected in the memory 130h. The writing means to the card medium 1000h is not particularly limited, but examples thereof include near field communication means such as NFC (Near Field Communication) and Felica. Although the communication distance is long, Bluetooth (registered trademark) may be available as a wireless communication means in some cases. It is assumed that the conversion card side is also equipped with a corresponding communication means.
Through the data input / output function 126, the card information of the card medium 1000h can be changed to the card information designated by the user using the application main body function 121.

The process flow is as follows.
Next, a control flow by the conversion card use support system 100h according to the eleventh embodiment will be described with reference to FIGS. 36, 37, 38, and 39.
36 to 38 show the process flow in the configuration example of FIG. 35 in an overlapping manner. FIG. 36 shows the flow of the program open process, FIG. 37 shows the flow of the card information selection process, and FIG. 38 shows the flow of the program close process. FIG. 39 illustrates a flow of operations performed by a user when using a smartphone.

First, as shown in FIG. 39 (1), the usage support application 120h is installed on the computer system 100h, and when the user tries to use the usage support application 120h, it is displayed on the monitor of the computer system 100h. The icon of the usage support application 120h displayed in is selected with a pointing device such as a mouse and activated by double-clicking or the like.

Next, as shown in FIG. 39 (2), an input column of the open secret code is displayed in order to confirm the usage authority. In this example, the operation requires the input of a password before the use of the usage support application 120h is started. However, some applications 120h may require the input of biometric information instead of the password.
A password or a personal identification code such as biometric information required to normally open and use the usage support application 120 is input via a keyboard or other input device (FIG. 36, step (1), FIG. 39). (2)).
When the authentication of the open secret code is successful, the application main body function 121 is opened and becomes usable (FIG. 36 step (2), FIG. 36 step (3), FIG. 39 (3)).
After the application body function 121 is opened, the card is selected using the application body function 121. (FIG. 37 step (4), FIG. 39 (4)).

Next, when the card selection is completed, as shown in FIG. 39 (5), an input column of the closing secret code at the end is displayed to confirm the ending authority. In this example, the operation is such that the password is required to be input before the usage support application 120h is terminated, but depending on the usage support application 120h, the biometric information may be required to be input (step (5) in FIG. 38, FIG. 39 (5)).
If the authentication of the close secret code is established (step (6) in FIG. 38), the application main body function 121h ends normally and is closed (step (7) in FIG. 38), and at that time, the card information is obtained by the data input / output function 126. It is written in the IC chip of the medium 1000h and the close processing is executed (steps (8) and (9) in FIG. 38, and FIG. 39 (6)).
As shown in FIG. 39 (7), the usage screen of the usage support application 120h is closed and the icon selection of the usage support application 120h is also canceled.

The selected card information is written to the card medium 1000h in the above flow. In addition to the writing of card information, a part of the card information can be written or erased. In other words, it is possible to write the information in the missing portion or return it to a blank card for the card in which the card information is partially missing. If the card has some card information missing, some of the card information registered in advance is registered in the conversion card, and a card information valid selection button is provided to enable the card information When the button is selected, the information of the missing portion is written, and the card can be used. In the case of a blank card, a blank card selection button is provided, and when the blank card button is selected, the blank card may be written by filling Null or “0 (zero)”.
FIG. 40 shows the GUI of the monitor when it is possible to specify activation and deactivation for each card option. Only one card can be activated, but invalidation can be specified for all cards. . When all are designated to be invalid, as the processing content, as in the case where the blank card button is selected, writing is performed so as to fill in Null or “0 (zero)” to form a blank card.

Next, I will summarize the merits of the conversion card system.
The first advantage of the conversion card system is that it is not necessary to hold a plurality of card media, and a so-called card can be integrated.
The second advantage of the conversion card system is that the user terminal has the ability to make card payments by short-distance wireless communication by using the NFC function and the Felica function, but the store cash register terminal of the store itself has the NFC function and the Felica function. Even if the card payment by the short-distance wireless communication cannot be performed, it is possible to once write the card information in the conversion card and make the payment through the IC chip of the conversion card.
FIG. 41 is a diagram for explaining the second merit of the conversion card.
As shown in the upper part of FIG. 41, it is assumed that the store cash register terminal of the store is not equipped with the NFC function or the Felica function, and can be settled only by the contact type communication using only the IC card. In this case, even if the user terminal has the ability to perform card payment by short-distance wireless communication by the NFC function or the Felica function, there is no communication means between them, and card payment cannot be made after all. The user has no choice but to make payment using cash or a card medium that can be used by the store cashier terminal.
However, as shown in the lower part of FIG. 41, if the system using the conversion card of the present invention is used, if desired card information is selected from the card information held in the user terminal and written in the conversion card, By using the conversion card, it can be used even at a store cashier terminal that does not have an NFC function or a Felica function.

(Application of the type of Example 2)
FIG. 42 is a diagram showing a specific example in which the computer system 100-1 of the present invention shown in the second embodiment is applied to the configuration of the conversion card use support system 100-1h.
In the configuration example of FIG. 42, the conversion card use support system 100-1h has a configuration including an input unit 110h, a use support application 120-1h, and a memory 130-1h, similar to the configuration of FIG. 120-1h has a configuration including an application main body function 121, a start / end management unit 122-1, a usage log data collection function 125, a data input / output function 126, and a card information storage unit 128. In contrast to this, the boot end management unit 122-1 is provided with a memory specific storage area unlocking function 123-1 and a memory specific storage area locking function 124-1. In other words, by inputting the open secret code and the close secret code, the other area in the first specific storage area 130-1hA in the memory 130-1h is unlocked or locked.

42, the input unit 110h and the application 120-1h are provided in the user terminal, and the memory 130-1h is provided in the conversion card 1000h.
On the other hand, the card information is provided not in the conversion card 1000h but in the card information storage unit 128 and is provided on the user terminal side. If card information to be written to the conversion card 1000h is selected from the card information stored in the card information storage unit 128, the card information is written via the data input / output function 126.

FIG. 43 is a diagram showing a flow of open processing by input of an open secret code in the conversion card use support system 100-1h.
When the open personal identification code is input (step (1) in FIG. 43, FIG. 46 (2)), the activation completion management unit 122-1 performs the authentication processing of the open personal identification code (step (2) in FIG. 43). Is started, other areas in the first specific storage area 130-1hA of the memory 130-1h are opened (steps (3) and (4) in FIG. 43, and FIG. 46 (3)).

FIG. 44 is a diagram showing a flow of processing for selecting card information in the conversion card use support system 100-1h.
The user selects the card to be used (step (5) in FIG. 44, (4) in FIG. 46).

FIG. 45 is a diagram showing a flow of a closing process by inputting a close password in the conversion card use support system 100-1h.
By inputting the closed personal identification code (step (6) in FIG. 45, FIG. 46 (5)), the activation end management unit 122-1 performs the authentication processing of the open personal identification code (step (7) in FIG. 45), and the application main body function 121 End, and after writing to the first specific storage area 130-1hA of the memory 130-1h via the data input / output function 126, close (FIG. 45 steps (8) (9), FIG. 46 (6)). ).

(Application of the type of Example 3)
FIG. 47 is a diagram showing a specific example in which the computer system 100-2 of the present invention shown in the third embodiment is applied to the configuration of the conversion card use support system.
In the configuration example of FIG. 47, the conversion card use support system 100-2h has a configuration including an input unit 110h, an application 120-2h, and a memory 130-2h, as in the configuration of FIG. Although it has a configuration including an application main body function 121, a boot end management unit 122-1, a usage log data collection function 125, and a data input / output function 126, unlike the type of FIG. 35, the boot end management unit 122-2. However, the memory specific storage area unlocking function 123-2 and the memory specific storage area locking function 124-2 are provided. That is, the second specific storage area 130-2hB in the memory 130-2h is unlocked or locked by inputting the open password and the closed password.

In the configuration example shown in FIG. 47, the input unit 110h and the application 120-2h are provided in the user terminal, and the memory 130-2h is provided in the IC card 1000h.
On the other hand, the card information is provided not in the IC card 1000h but in the card information storage unit 128, and is provided on the user terminal side. If card information to be written to the conversion card 1000h is selected from the card information stored in the card information storage unit 128, the card information is written via the data input / output function 126.

FIG. 48 is a diagram showing a flow of open processing by input of an open secret code in the conversion card use support system 100-2h.
When the open personal identification code is input (step (1) in FIG. 48, FIG. 51 (2)), the activation completion management unit 122-2 performs authentication processing for the open personal identification code (step (2) in FIG. 48). Is started, the first specific storage area 130-1hA of the memory 130-2h is opened (steps (3) and (4) in FIG. 48, and FIG. 51 (3)).

FIG. 49 is a diagram showing a flow of processing for selecting card information in the conversion card use support system 100-2h.
The user selects the card to be used (step (5) in FIG. 49, (4) in FIG. 51).

FIG. 50 is a diagram showing a flow of a closing process by inputting a close password in the conversion card use support system 100-2h.
By inputting the closed personal identification code (step (6) in FIG. 50, FIG. 51 (5)), the start / end management unit 122-2 performs authentication processing of the open personal identification code (step (7) in FIG. 50). Is completed, and after writing to the second specific storage area 130-2hB of the memory 130-2h via the data input / output function 126, it is closed (FIGS. 50 (8) (9), 51 (6)). ).

Although the preferred embodiment of the configuration example of the computer system of the present invention has been illustrated and described above, the flow of processing may be changed before and after, and other functions may be added. It will be appreciated that various modifications can be made without departing from the scope.

INDUSTRIAL APPLICABILITY The present invention is widely applied to computer systems, and the application of the program is not limited, and can be applied to programs for various applications. The application field of the computer system of the present invention is not limited and can be applied to various business systems.

100 Computer System 110 Code Input Means 120 Application 121 Application Main Function 122 Startup Termination Management Section 122-1 Activation Termination Management Section 122-2 Startup Termination Management Section 123 Application Unlocking Function 123-1 Memory Specific Storage Area Unlocking Function 123-2 Memory specific storage area unlock function 124 Application lock function 124-1 Memory specific storage area lock function 124-2 Memory specific storage area lock function 125 Usage log data collection function 126 Data input / output function 130 Memory 130-1A 1st Specific storage area 130-2A first specific storage area 130-2B second specific storage area

Claims

A program having a main body function and a start / end management unit that controls the start and end of all or part of the main body function; and a memory storage area accessible by the program,
In a specific storage area of the memory accessed by the activation / termination management unit of the program, an open secret code for activating all or some of the main body functions of the program, and all or one of the main body functions of the program. It has a closed secret code to end the section normally,
The start / end management unit of the program has a program unlock function for activating all or a part of the main body function of the program when the input code matches the open secret code, and the input code is A computer system having a program lock function for normally ending all or part of the main body function of the program when it matches the close code.
The main body function of the program has a data input / output function for recording data generated during operation or selected data in the memory storage area,
The access of the program is any one of reading data from the memory storage area, editing data, selecting data, writing data generated during operation or selected data to the memory storage area, and erasing data from the memory storage area. Or a combination thereof,
The program lock function includes a process of deciding data in the memory storage area and normally ending access to the memory storage area when all or part of the main body functions of the program are normally ended. The computer system according to claim 1, wherein:
The main body function of the program has a business application function,
If the main body function of the program can be operated via the program unlocking function, the business application function can be used, and in conjunction with the normal termination of the program via the program unlocking function, or The computer system according to claim 1 or 2, wherein the business application function normally ends independently before the end.
A program usable in a computer system, a memory storage area accessible by the program,
In a part of the first specific storage area in the memory storage area accessible by the program, the program accesses another part other than a part of the first specific storage area in the memory storage area, Alternatively, an open secret code for allowing access to a second specific storage area other than the first specific storage area, and the other portion of the first specific storage area of the memory storage area by the program Access code or a closed secret code for normally ending access to the second specific storage area other than the first specific storage area is set,
In the program, when the input code matches the open secret code, access to the other portion of the first specific storage area of the memory storage area or access to the second specific storage area A memory specific storage area unlocking function to execute access,
In the program, when the input code matches the close secret code, the access to the other part of the first specific storage area of the memory storage area is normally terminated, or the second specific code is entered. A computer system having a memory-specific storage area locking function for normally ending access to a storage area.
The first specific storage area or the second specific storage area of the memory stores a data access unit that is a database, a record of a database, a field of a record of a database, a file, a storage, or a combination thereof. The computer system according to claim 4, wherein the computer system is a computer system.
There is a plurality of the first specific storage areas or the second specific storage areas of the memory, and a data classification structure in which the first specific storage areas or the second specific storage areas are classified and collected in a folder unit or a cluster unit,
In a part of the first specific storage area accessible by the program, in addition to the open PIN code and the closed PIN code, a classification selection open PIN code and a classification provided for each folder or cluster data classification structure Equipped with a select close PIN code,
When the input code matches the classification selection open secret code, the memory specific storage area unlocking function of the program stores the first specific storage area or the second specific storage area of the memory. Access to the units of the data classification structure,
When the input code matches the classification selection close secret code, the memory specific storage area locking function of the program stores the first specific storage area or the second specific storage area of the memory. The computer system according to claim 4, wherein access to the unit of the data classification structure is normally terminated.
The access is a process including any of data reading by the program, data browsing, data editing, data selection, data erasing, or a combination thereof,
7. The process according to claim 4, wherein the normal end is a process including a data write, a data rewrite, a data erasure, or a combination thereof, which determines the contents of the access made by the program. The computer system according to any one of the above.
8. The computer system according to claim 1, wherein the open personal identification code and the closed personal identification code are any one of an ID code, a password, biometric information, human motion information, or a combination thereof. .
The biometric information is any one of a face image pattern, a fingerprint pattern, a vein pattern, an iris pattern, a voiceprint pattern, or a combination thereof,
The computer system according to claim 8, wherein the computer system includes the biometric information reading device.
10. The computer system according to claim 1, wherein the open PIN code and the closed PIN code are the same code or different codes.
The computer system is an insurance-covered service providing support system that allows a visitor to visit the location of a visitor and assist the service provider and the service recipient to provide a service covered by medical insurance or long-term care insurance. A service provider terminal possessed by a service provider that provides the service,
The program is an insurance target service provision support application that supports the service provision to the service recipient, and the main body function is an insurance target service provision support function that supports the service provision to the service recipient. Yes,
11. The computer system according to claim 1, wherein the memory storage area is a data access unit generated for each medical insurance or nursing care insurance of the user.
The insurance target service providing support application, after unlocking the open PIN code input by the service recipient, a program unlocking process for opening all or part of the main function,
An insurance target service providing support process of providing the service to the service recipient by the main body function;
An approval inquiry process that transmits an approval request asking whether to approve the content of the service provision to the service recipient, and waits for a reply of approval information from the service recipient.
After authenticating the close password input by the service recipient, the contents of the data written in the data access unit are confirmed, and all the main functions of the insurance-covered service providing support application in the open state. 12. The computer system according to claim 11, further comprising a program lock process for normally ending and closing a part of the program.
The insurance target service providing support application, after unlocking the open PIN code input by the service provider, a program unlocking process for opening all or part of the main function,
An insurance target service providing support process of providing the service to the service recipient by the main body function;
An approval inquiry process that transmits an approval request asking whether to approve the content of the service provision to the service recipient, and waits for a reply of approval information from the service recipient.
After authenticating the close password input by the service recipient, the contents of the data written in the data access unit are confirmed, and all the main functions of the insurance-covered service providing support application in the open state. 12. The computer system according to claim 11, further comprising a program lock process for normally ending and closing a part of the program.
The computer system is a financial transaction control system applied to a payment management system using credit or debit, and is a configuration including a user terminal possessed by a user who uses the credit or debit.
The program is a financial transaction processing application for controlling financial transaction processing for a user's account,
11. The computer system according to claim 1, wherein the memory storage area is a data access unit of a financial transaction processing application generated for each account of the user.
After the financial transaction processing application authenticates the open PIN code included in the financial transaction processing request information transmitted from the user terminal,
A program unlocking process for opening all or part of the main functions of the financial transaction processing application for the account of the user;
An edit process of receiving financial transaction information from the financial transaction operator to the user's account and writing the financial transaction information to the data access unit;
An approval inquiry process that transmits an approval request asking whether to approve the financial transaction information to the user terminal, and waits for a reply to the approval information from the user terminal.
After authenticating the close PIN code included in the approval information returned from the user terminal, the financial transaction information written in the data access unit is transferred to the settlement management system, and the financial transaction is performed. 15. The computer system according to claim 14, wherein the program lock process is executed for all or part of the main body function of the processing application.
The computer system is a personal data application system that handles personal data of a user, and is configured to include a user terminal possessed by the user,
The program is a personal data application that handles the personal data,
11. The computer system according to claim 1, wherein the memory storage area is a personal data access unit generated for each individual used in the personal data application.
After the personal data application authenticates the open personal identification code included in the personal data access request information transmitted from the user terminal,
A program unlocking process for opening all or part of the main body function of the personal data application for the personal data access unit of the user;
A personal data access process for performing an access, which is a process of browsing or editing the personal data for the personal data access unit of the user, from the user or a third party permitted by the user;
An approval inquiry process that transmits an approval request to the user terminal asking whether to approve the content of the personal data access process to the personal data access unit, and waits for a reply of approval information from the user terminal. When,
After authenticating the close secret code included in the approval information returned from the user terminal, the access content to the data access unit is confirmed, and the main body function of the personal data application in the open state is confirmed. 17. The computer system according to claim 16, which executes a program lock process to normally and completely close all or part of the program.
The computer system is a vehicle use support application system for supporting the use of various functions mounted on a vehicle,
The program is a vehicle use support application that supports the use of the various functions installed in the vehicle,
11. The computer system according to claim 1, wherein the memory storage area is a data access unit generated for each of the users used by the vehicle use support application.
After the vehicle use support application receives and authenticates the input of the open secret code through the code input means,
A program unlocking process for opening all or part of the main body function of the vehicle usage support application for the data access unit of the user,
A data input / output function for executing various functions installed in the vehicle according to data dynamically input from the user or a third party permitted by the user or pre-recorded data,
A data access unit editing function for dynamically recording various data generated during running or parking in the data access unit, and a data storage function for recording the various data concerning the current running or parking recorded in the data access unit The vehicle use support system according to claim 18, further comprising:
In response to the input of the close secret code, the program unlocking function approves and confirms the recording of the various data relating to the current traveling or parking recorded in the data access unit, closes normally and ends. The vehicle use support system according to claim 19, which is characterized in that.
The computer system is a data management system,
The program is a data management application that performs data encryption processing and data decryption processing regarding access to the data stored in the storage device, and supports the use of the data.
11. The computer system according to claim 1, wherein the memory storage area is a data access unit that is accessed by the data management application and is a unit of browsing, outputting, or editing.
The data management application keeps the data encrypted in a state where the data management application has a legitimate access authority and is not accessed by the data management application, and the data management application having a legitimate access authority accesses the data. Only when you are doing the above, you can decrypt the data to view, output or edit,
22. The computer system according to claim 21, wherein when the data management application in a state having a proper access right ends the access, the data is in an encrypted state.
The memory storage area is constructed on a data server of a computer resource different from that of the computer system and the application via a network, and in the memory storage area, all or at least one of the data access units is selected. 23. The data management system according to claim 22, wherein the copy is always held in the encrypted state, and both the download and the upload are performed in the encrypted state.
The computer system is a usage support system for a usage target, the authority of which allows the user to use the usage target,
The object of use is one of tangible things of movables or real estate, one of data, ownership, intangible property right or intangible thing of virtual currency, or one containing those usage zones,
The program is a usage support application for using the equipment function of the usage target,
11. The computer system according to claim 1, wherein the memory storage area is a data access unit that is used by the usage support application and is a unit of browsing, outputting, or editing.
An authority system used by the authority includes a usage authority control application, and the usage authority control application sets an equipment function control unit for setting usage authority for the user for each equipment function to be used or each usage range thereof. Prepare,
The data access unit comprises a log data unit for recording and holding usage log data of the equipment function to be used,
The usage support application includes a log data control function of recording usage log data of the equipment function of the usage target equipped with the equipment function of the usage target in the log data unit of the data access unit. The computer system according to claim 24.
The usage right control application of the authority system is a password setting function for setting the open PIN code and the closed PIN code, and a user who uses the set open PIN code and the closed PIN code by the user. The computer system according to claim 24 or 25, further comprising a notification function for notifying a user application of the system.
The computer system is a home use support system for supporting use of various functions equipped in a home,
The house is any one of condominium units, large-scale tower condominium units, detached house, apartment complex, office building rooms, log house, prefabricated house, share house, hotel, inn, rental room, or the like. It includes the use section of
The program is a home use support application that allows the use of equipment functions that the use target equips,
The memory storage area is an individual housing use support application data management unit used by the house use support application, and is a data access unit used by the house use support application and serving as a unit for browsing, outputting or editing. The computer system according to claim 1, wherein the computer system is provided.
The housing use support application is
A function for controlling various functions of the house that gives an instruction to the functions provided for the house,
A usage log data collection function that collects usage log data generated when the house is used, by the housing unit or the user of the house, or collects the unclassified data,
28. The computer system according to claim 27, further comprising a data input / output function for inputting / outputting data collected by the usage log data collecting function with respect to the housing use support application data management unit.
The functions installed in the house are those that can be controlled by a computer, and include a door lock opening / closing function, a crime prevention security management function, an animal / plant management function, a garage management function, a delivery box management function, a power storage device management function, and a food storage management. Function, gas / electricity and water management function, safety confirmation function, bath unit management function, toilet attached health management function, concierge function, artificial intelligence assistant function, lighting air conditioning system control function, audiovisual device control function, billing processing function, various sensors 29. The computer system according to claim 27 or 28, which includes any of the sensing data collection functions or a combination thereof.
The computer system writes, rewrites, or selects the selected credit card information, the selected debit card information, or the selected point card information to or from the medium, thereby making the medium a specific credit card or a specific debit. A card selection change application system for changing to a card or a specific point card,
The program is a card selection change application for selecting, writing or rewriting the credit card information, the debit card information, or the point card information with respect to the medium,
11. The computer system according to claim 1, wherein the memory storage area is a memory storage area provided in the medium.
After the card selection changing application receives the input of the open secret code through the code input means and authenticates it, the program unlocking program enables all or part of the main body function or access to the storage area. Processing and
A selection function for selecting the specific credit card, the specific debit card, or the specific point card,
A data storage function for writing or rewriting the credit card information, the debit card information, or the point card information according to the one selected by the selection function in the storage area of the medium. 31. The computer system according to claim 30.