WO2023195310A1

WO2023195310A1 - Program that runs on embedded content web server, server device, and program that runs on user device

Info

Publication number: WO2023195310A1
Application number: PCT/JP2023/009913
Authority: WO
Inventors: 悠也山下; 敬仁榛木
Original assignee: ｌｉｖｅｐａｓｓ株式会社
Priority date: 2022-04-07
Filing date: 2023-03-14
Publication date: 2023-10-12
Also published as: JP2023154544A; JP7145547B1; JP2023155123A

Abstract

A program of the present invention runs on an embedded content web server comprising a processor unit, the program when executed by the processor unit causing the processor unit to execute at least: receiving, from a user device operated by a user, an embedded content identifier; transmitting the embedded content identifier to a management system that manages a plurality of content; receiving from the management system an embedded content and information indicating a transmission destination, the embedded content not including personal information; presenting the embedded content to the user; receiving via the embedded content a user input from the user; and transmitting the user input to the transmission destination, on the basis of information indicating the transmission destination.

Description

Programs that run on embedded content web servers, server devices, and user devices

The present invention relates to a program that runs on an embedded content web server, a server device, and a program that runs on a user device.

　My page has been known for a long time. By logging in to My Page, you can check various personal settings and perform various procedures.

If you enter personal information into external content embedded on your My Page, that personal information will be sent to the company providing the external content, so it should be kept confidential between the company providing your My Page and the user. Personal information leaks to outside parties (that is, companies that provide external content).

An object of the present invention is to provide a program that allows personal information to be input via external content on a website without leaking personal information to a company providing external content.

In one aspect of the present invention, the program of the present invention is a program that operates on an embedded content web server, the embedded content web server includes a processor unit, and the program is executed by the processor unit. then, receiving an embedded content identifier for identifying the embedded content from a user device operated by the user; and transmitting the embedded content identifier to a management system that manages a plurality of contents. , receiving, from the management system, embedded content associated with the embedded content identifier and information indicating a destination associated with the embedded content identifier, the embedded content including: one of a plurality of contents and does not include personal information; causing the user device to present the received embedded content to the user; The processor unit is configured to at least receive user input from the user via embedded content, and transmit the user input to the destination based on information indicating the destination.

In one embodiment of the invention, the user input includes at least one piece of input information, and when executed by the processor unit, the program determines whether or not each destination at the destination The processor unit may further execute the steps of specifying a storage location of input information and transmitting information indicating a storage location of each input information at the transmission destination to the transmission destination.

In one embodiment of the invention, the user input further includes information indicating the type of the at least one input information, and based on the at least one input information, the storage location of each input information at the destination is determined. The specifying may include specifying a storage location of each input information at the destination based on information indicating the type of the at least one input information.

In one embodiment of the present invention, one or more storage locations at the destination are each associated in advance with one or more input locations on the content, and based on the at least one input information, , identifying the storage location of each input information at the transmission destination includes identifying the one or more storage locations at the transmission destination corresponding to each input location of the at least one input information. Good too.

In one embodiment of the present invention, when executed by the processor unit, the program causes the processor unit to specify the user identifier of the user and to transmit the user identifier of the user to the destination. The department may also carry out further operations.

In one embodiment of the present invention, the program, when executed by the processor unit, includes receiving an access key from the management system for enabling access to the destination; The processor unit may further perform accessing the destination using a key.

In one aspect of the present invention, a server device of the present invention includes means for receiving an embedded content identifier for identifying embedded content from a user device operated by a user, and a management system for managing a plurality of contents. a means for transmitting the embedded content identifier; and receiving from the management system the embedded content associated with the embedded content identifier and information indicating a destination associated with the embedded content identifier. means, wherein the embedded content is one of the plurality of contents and does not include personal information; and the method further comprises presenting the received embedded content to the user. means for causing a user device to perform the operation; means for receiving user input from the user via the received embedded content; and transmitting the user input to the destination based on information indicating the destination. and means to do so.

In one aspect of the present invention, the program of the present invention is a program that operates on a user device, and the user device includes a processor unit, and when the program is executed by the processor unit, the program provides access to a website. receiving viewing information for accessing; identifying from the viewing information an embedded content identifier for identifying embedded content to be presented on the website; and managing a plurality of content. transmitting the embedded content identifier to a system; and receiving from the management system information indicating the embedded content associated with the embedded content identifier and a destination associated with the embedded content identifier. receiving, wherein the embedded content is one of the plurality of contents and does not include personal information; presenting the embedded content to the user; The processor unit is configured to at least receive user input from the user via embedded content, and transmit the user input to the destination based on information indicating the destination.

In one embodiment of the present invention, the program, when executed by the processor unit, includes receiving an access key from the management system for enabling access to the destination; A key may be used to access the destination and cause the processor unit to perform further operations.

In one embodiment of the present invention, the program, when executed by the processor unit, further comprises: presenting page content associated with the viewing information to the user based on the viewing information; You may run it.

According to the present invention, it is possible to provide a program that allows personal information to be input via external content on a website without leaking personal information to a company providing external content.

Diagram showing an example of the flow of a new method of transmitting input information input using external content A diagram showing an example of the configuration of a computer system 200 for realizing a new method of transmitting input information input using external content. A diagram showing an example of the configuration of information stored in the database unit 260 A diagram showing an example of the structure of information stored in a certain sub-database section among the plurality of sub-database sections included in the database section ₂₃₁₁ . A diagram showing an example of a flow executed in the computer system 200 A diagram showing another example of a flow executed in the computer system 200

Hereinafter, terms used in this specification will be defined.

"Content" refers to content that includes at least one of still images, moving images, text, and audio presented to the user.

"Page content" refers to the landing page that forms the base of the web page.

"Embedded content" refers to content that is displayed while being embedded in page content. As used herein, embedded content does not include personal information.

Embodiments of the present invention will be described below with reference to the drawings.

1. A new method for transmitting input information input using external embedded content FIG. 1 shows an example of the flow of a new method for transmitting input information input using external embedded content. In the embodiment shown in FIG. 1, the management company is a company that manages a plurality of contents, and provides embedded content as external content to a website provided by a client company of the management company. . The client company has the user's personal information through a prior user registration procedure, and operates and manages the website to be presented to the user. Further, it is assumed that the embedded content provided by the management company does not include the user's personal information.

Step S101: The client company's device provides the user with viewing information (for example, website URL) for viewing the website W provided by the client company. The viewing information includes an embedded content identifier for identifying embedded content displayed within the website W. The viewing information may further include a user identifier for identifying the user. The viewing information may further include the user's personal information. For example, by setting the website URL to "https://xxx.xxx.xx/?content_id=xxx&user_id=yyy", the embedded content identifier "xxx" and user identifier "yyy" are incorporated into the website URL. Is possible.

Step S102: The user device operated by the user accesses the website W using the viewing information provided by the user's operation. Thereby, the page content of the website W is presented to the user on the display of the user device. The user device can access the website W, for example, for the purpose of changing the contents of the contract with the client company, changing the address of the user registered with the client company, etc.

Step S103: When the user device accesses the website W, the embedded content identifier is sent to the management system of the management company.

Step S104: The management system of the management company identifies the content associated with the embedded content identifier and the information indicating the destination associated with the embedded content identifier, and transmits it to the website. This allows the management company's embedded content to be presented to the user on the user device as at least part of the page content of the website W. The embedded content is configured to be capable of receiving user input from a user.

If the user's personal information is incorporated into the viewing information, personalized page content based on the user's personal information may be presented to the user on the user device. Presentation of personalized page content may be realized, for example, by overlaying and displaying a second layer showing the user's personal information on a first layer showing the page content.

Step S105: When the user inputs user input on the embedded content, the user input is transmitted to the destination client company's device.

In this way, by providing information indicating the client company as the destination of the user input by the management company's management system, personal information that may be included in the user's user input is provided to the management company providing the external content. It can be sent from the user to the client company without being sent.

2. System configuration for realizing a new method of transmitting input information input using external embedded content Figure 2 shows a system configuration for realizing a new method of transmitting input information input using external embedded content. An example of the configuration of a computer system 200 is shown.

In the embodiment shown in FIG. 2, a computer system 200 includes a management system 210 managed and operated by a management company that manages a plurality of contents (e.g., embedded contents, page contents), and a management system 210 that is managed and operated by a management company that manages a plurality of contents (e.g., embedded contents, page contents). An embedded content web server 214, page content web servers 220 ₁ to 220 _N for presenting page content, and devices 230 ₁ to 230 _M of a plurality of client companies using services provided by the management company. It includes user devices 240 ₁ to 240 _L. The embedded content web server 214 communicates via the Internet 250 with the management system 210 and each of the page content web servers 220 ₁ to 220 _N , each of the devices 230 ₁ to 230 _M of a plurality of client companies, and It is configured to be able to communicate with each of the user devices 240 ₁ to 240 _L. Here, N, M, and L are integers of 1 or more.

The management system 210 is an information processing system that executes processing for the management company. In the embodiment shown in FIG. 2, the management system 210 includes an interface section 211, a processor section 212 including one or more CPUs (Central Processing Units), and a memory section 213. The hardware configuration of the computer system 210 is not particularly limited as long as its functions can be realized, and it may be configured with a single machine or a combination of multiple machines.

The interface unit 211 controls communication with the embedded content web server 214 and each of the user devices 240 ₁ to 240 _L.

The memory unit 213 stores programs required to execute a process, data required to execute the program, and the like. Here, it does not matter how the program is stored in the memory unit 213. For example, the program may be preinstalled in the memory unit 213. Alternatively, the program may be installed in the memory unit 213 by being downloaded via a network such as the Internet 340, or may be installed in the memory unit 213 via a storage medium such as an optical disk or USB. You can do it like this.

The processor unit 212 controls the operation of the entire management system 210. The processor unit 212 reads a program stored in the memory unit 213 and executes the program. Thereby, the management system 210 can function as a device that performs desired steps, and the processor unit 212 of the management system 210 can operate as a means for achieving desired functions.

The management system 210 is connected to the database section 260.

The embedded content web server 214 is configured to be able to communicate with the management system 210 and each of the user devices 240 ₁ to 240 _L via the Internet 250. Embedded content web server 214 is configured to perform processing to cause embedded content to be presented. Embedded content web server 214 may have a similar configuration to management system 210, for example.

Each of the plurality of client company devices 230 ₁ to 230 _M can communicate with the embedded content web server 214, the page content web servers 220 ₁ to 220 _N , and the user devices 240 ₁ to 240 _L via the Internet 250. configured so that it is possible. The client company's device ₂₃₀₁ is configured to perform processing for the client company. Each of the devices 230 ₁ to 230 _M of the plurality of client companies may have a similar configuration to the management system 210, for example.

The client company's device 230 ₁ is connected to the database unit 231 ₁ . The database section 231 ₁ may include a plurality of sub-database sections. The same applies to the client company's devices 230 ₂ to 230 _M.

Each of the page content web servers 220 ₁ to 220 _N connects to the management system 210, each of the devices 230 ₁ to 230 _M of a plurality of client companies, and each of the user devices 240 ₁ to 240 _L via the Internet 250. It is configured so that it can communicate with. The page content web server ₂₂₀₁ is configured to perform processing for presenting page content. Each of the page content web servers 220 ₁ to 220 _N may have a similar configuration to the management system 210, for example.

Each of the user devices 240 ₁ to 240 _L connects to the management system 210, the embedded content web server 214, each of the page content web servers 220 ₁ to 220 _N , and a plurality of client companies via the Internet 250. The device is configured to be able to communicate with each of the devices 230 ₁ to 230 _M. Each of the user devices 240 ₁ to 240 _L may include an interface section, a processor section, a memory section, a display section, and an input section. For example, each of the user devices 240 ₁ to 240 _L may be a mobile wireless terminal such as a mobile phone, a smartphone, or a tablet terminal, or may be a personal computer such as a laptop PC or a notebook PC.

In the embodiment shown in FIG. 2, the page content web server 220 ₁ may be under the control of client company A, which manages and operates the client company's equipment 230 ₁ . In this case, the page content web server ₂₂₀₁ is configured to perform processing for presenting page content of a website for client company A. The same applies to the page content web servers 220 ₂ to 220 _N.

Although the embodiment shown in FIG. 2 describes an example in which the page content web server ₂₂₀₁ is managed by client company A, the present invention is not limited thereto. The page content web server ₂₂₀₁ may be managed by a company other than client company A. For example, the page content web server ₂₂₀₁ may be managed by a management company that operates the management system 210. This eliminates the need for client company A itself to provide and manage the page content web server ₂₂₀₁ .

In the embodiment shown in FIG. 2, the management system 210, the page content web servers 220 ₁ to 220 _N , each of the devices 230 ₁ to 230 _M of a plurality of client companies, and the user devices 240 ₁ to Although each of the embedded content web servers 214 and 240 _L are capable of communicating with the embedded content web server 214 via the Internet 250, the invention is not so limited. Any type of network can be used instead of the Internet 250.

Furthermore, in the embodiment shown in FIG. 2, the database unit 260 is provided outside the computer system 210, but the present invention is not limited thereto. It is also possible to provide the database section 260 inside the computer system 210. The configuration of the database unit 260 is not limited to a specific hardware configuration. For example, the database unit 260 may be composed of a single hardware component or a plurality of hardware components. For example, the database unit 260 may be configured as a single external hard disk device of the computer system 210, or may be configured as a storage on a cloud connected via a network.

Further, in the embodiment shown in FIG. 2, the page content web server 220 ₁ is configured separately from the client company's device 230 ₁ , but the present invention is not limited thereto. The page content web server ₂₂₀₁ may be configured integrally with the client company's device ₂₃₀₁ . The same applies to the page content web servers 220 ₂ to 220 _N.

FIG. 3A shows an example of the configuration of information stored in the database section 260.

The database unit 260 stores information regarding client companies that use services provided by the management company. Information regarding a client company can be identified by information for identifying the client company (a company identifier (ID)). The information regarding the client company further includes, for example, the name and location of the client company, an access key for accessing the client company (or its database section), information regarding content, and the like. Information regarding embedded content is associated with information for identifying embedded content (embedded content identifier (ID)). Information regarding the embedded content includes the data of the embedded content, the types of input information on the embedded content that can be input, the input locations on the embedded content that can be input, the format of the input information, and the client company identified by the company identifier. It further includes a storage location (for example, a sub-database section) in the database. One or more storage locations in the client company identified by the company identifier may be associated with inputtable types of input information input on the embedded content. One or more storage locations at the client company identified by the company identifier may each be associated with one or more input locations on the embedded content that can be entered. One or more storage locations at the client company identified by the company identifier may each be associated with a format of the input information.

FIG. 3B shows an example of the structure of information stored in a certain sub-database section among the plurality of sub-database sections included in the database section ₂₃₁₁ .

In the embodiment shown in FIG. 3B, the sub-database section stores information regarding users who have registered with client company A that manages and operates the client company's device ₂₃₀₁ . Information regarding the user is associated with information for identifying the user (user identifier (ID)). The information regarding the user further includes, for example, the user's name, gender, date of birth, address, telephone number, e-mail address, and the like.

3. System Processing FIG. 4 shows an example of a flow executed in the computer system 200. In the embodiment shown in FIG. 4, steps S401-S402 and S418 among the plurality of steps shown in _FIG . S407 is executed, for example, by the processor unit 211 of the user device ₂₄₀₁ , step S405 is executed, for example, by the processor unit of the page content web server ₂₂₀₁ , and steps S408-S409, S413-S414, and S416-417 are For example, steps S410 to S412 are executed by a processor unit of the embedded content web server 214, steps S410 to S412 are executed by a processor unit of the management system 210, and step S415 is executed, for example, by an input unit of the user device ₂₄₀₁ . . Each step shown in FIG. 4 will be explained below.

Step S401: The client company's device ₂₃₀₁ generates viewing information for accessing the website. The viewing information may be, for example, a website URL. Viewing information is associated with page content of the website that is presented to the user. The viewing information includes an embedded content identifier for identifying embedded content managed by the management system 210.

Step S402: The client company's device ₂₃₀₁ transmits the viewing information generated in step S401 to the user device ₂₄₀₁ .

Step S403: The user device ₂₄₀₁ receives viewing information from the client company's device ₂₃₀₁ . This allows the user device ₂₄₀₁ to use the viewing information to access the website provided by the client company and to view page content associated with the viewing information.

Step S404: The user device ₂₄₀₁ accesses the website using the viewing information.

Step S405: The page content web server ₂₂₀₁ causes the user device ₂₄₀₁ to present the page content associated with the viewing information to the user in response to the access to the website using the viewing information. Thereby, the user device ₂₄₀₁ presents the page content associated with the viewing information to the user.

Step S406: The user device ₂₄₀₁ specifies an embedded content identifier for identifying embedded content. This process may be performed based on the viewing information received in step S403. For example, if the embedded content identifier is included as part of the browsing information such as "https://xxx.xxx.xx/?content_id=xxx&user_id=yyy", immediately after "content_id" It is possible to specify a certain "xxx" as an embedded content identifier.

Step S407: The user device ₂₄₀₁ transmits the embedded content identifier identified in step S406. In the embodiment shown in FIG. 4, user device ₂₄₀₁ sends an embedded content identifier to embedded content web server 214.

Note that in the embodiment shown in FIG. 4, steps S406 and S407 were described as being executed after step S405 and before step S408, but the present invention is not limited to this. Steps S406 and S407 may be executed at any timing after step S403 and before step S408.

Step S408: The embedded content web server 214 receives the embedded content identifier from the user device ₂₄₀₁ .

Step S409: The embedded content web server 214 transmits the embedded content identifier to the management system 210 in response to receiving the embedded content identifier from the user device ₂₄₀₁ .

Step S410: The management system 210 receives the embedded content identifier from the embedded content web server 214.

Step S411: The management system 210 identifies the embedded content associated with the received embedded content identifier and the information indicating the destination associated with the received embedded content identifier. This process is executed, for example, with reference to the database unit 260. Note that the destination is the destination of user input, which will be described later. In the embodiment shown in FIG. 4, the destination associated with the received embedded content identifier is the client enterprise's device ₂₃₀₁ .

Step S412: The management system 210 transmits the identified embedded content and information indicating the identified destination to the embedded content web server 214.

Step S413: The embedded content web server 214 receives the embedded content and information indicating the destination from the management system 210.

Step S414: The embedded content web server 214 causes the user device ₂₄₀₁ to present the received embedded content to the user on the page content. This means, for example, that the user device 240 ₁ (in particular, the web browser within the user device 240 ₁ ) can display embedded content embedded on page content using an iframe tag.

Note that the viewing information may further include personal information of the user owned by the client company. If the viewing information includes the user's personal information, the user device 240 ₁ (particularly the web browser within the user device 240 ₁ ) may present personalized content to the user based on the user's personal information. be. Presentation of personalized content can be achieved, for example, by the embedded content web server 214 synchronizing the embedded content layer that displays the embedded content and the personal information layer that displays the user's personal information. This may be accomplished by having the user equipment ₂₄₀₁ overlay a personal information layer on top of the personal information layer. That is, by the user device 240 ₁ overlaying and displaying the user's personal information from the client company's device 230 ₁ or the page content web server 220 ₁ on top of the embedded content from the embedded content web server 214. , may be realized. With this, the embedded content and the user's personal information are processed in separate layers, so the embedded content and the user's personal information can be treated as separate information.

Step S415: The user device 240 ₁ (in particular, the input unit of the user device 240 ₁ ) receives user input from the user on the presented embedded content. The user input may include the user's personal information. For example, the user input may include changed contract details, changed address, etc. as the user's personal information.

Step S416: The embedded content web server 214 receives the user input entered in step S410 via the embedded content presented as at least part of the page content.

Step S417: The embedded content web server 214 transmits the user input received in step S416 to the client company's device ₂₃₀₁ , which is the destination, based on the information indicating the destination received in step S413.

Step S418: The client company's device ₂₃₀₁ receives user input from the embedded content web server 214. The client company's device ₂₃₀₁ stores the received user input in a predetermined location.

In this way, the user input entered in step S415 is sent to the client company's device ₂₃₀₁ without being saved in the embedded content web server 214 and the management system 210, so that the user's personal information is not stored in the management system 210. There is no risk of leakage to 210.

Note that the embedded content web server 214 may specify the storage location of each piece of input information at the destination based on at least one piece of input information included in the user input received in step S416. In this case, information indicating the storage location of each input information at the destination is stored together with the user input (i.e., at least one input information) in step S417 (e.g., at least one input information and the storage location of each input information ), or at any timing after step S417 and before step S418, to the client company's device ₂₃₀₁ .

If the user input includes information indicating the type of at least one input information, the storage location of each input information at the destination may be identified based on the information indicating the type of at least one input information, for example. good. For example, type A (for example, inquiries) corresponds to sub-database department A' in the client company, type B (for example, accident reception) corresponds to sub-database department B' in the client company, and type C ( For example, if an insurance claim (insurance claim) corresponds to the sub-database section C' in the client company, and the user input includes selection of type A, the sub-database section A' should be specified as the storage location in the client company. Can be done.

Furthermore, if the user input includes information indicating multiple types of input information, specifying the storage location of each input information at the destination may be realized based on the information indicating multiple types of input information, for example. good. For example, type A (for example, inquiries) corresponds to sub-database department A' in the client company, type B (for example, accident reception) corresponds to sub-database department B' in the client company, and type C ( For example, if an insurance claim (insurance claim) corresponds to the sub-database section C' in the client company, and if the user input includes information indicating the first type of input information and information indicating the second type of input information, For one or more pieces of input information input after type A is selected as the first type, sub-database A' can be specified as the storage location in the client company, and type A is selected as the second type. For one or more pieces of input information input after B is selected, the sub-database section B' can be specified as the storage location in the client company.

Alternatively, if one or more storage locations at the destination are each associated in advance with one or more input locations on the content, specifying the location where each input information is stored at the destination is determined by at least one input location. The implementation may be based on one or more input locations where the information is entered. For example, the first input location on the content corresponds to the sub-database part A' in the client company, the second input location on the content corresponds to the sub-database part B' in the client company, and the content If the third input location corresponds to the sub-database section C' in the client company, the user input is the same as the first input information (for example, the user's name) entered in the first input location and the third input location. In the case where the input information includes the second input information input in the second input location (for example, the user's address) and the third input information input in the third input location (for example, the user's phone number), , the sub-database section A' is specified as the storage location of the first input information in the client company, the sub-database section B' is specified as the storage location of the second input information in the client company, and the sub-database section C' is specified as the storage location of the first input information in the client company. It can be specified as the storage location of the third input information in the company.

Alternatively, if one or more storage locations at the destination are each associated with a format of the input information in advance, specifying the storage location of each input information at the destination involves identifying the format of each input information. It may be realized by For example, the format of "Name" corresponds to the client company's sub-database part A', the format of "address" corresponds to the client company's sub-database part B', and the format of "telephone number" corresponds to the client company's sub-database part A'. When the user input corresponds to the sub-database section C' in a company, the user input includes first input information indicating the user's name, second input information indicating the user's address, and third input information indicating the user's telephone number. input information, the sub-database part A' is specified as the storage location of the first input information in the client company, and the sub-database part B' is specified as the storage location of the second input information in the client company. However, the sub-database section C' can be specified as the storage location of the third input information in the client company.

Note that in order to be able to identify the user in step S418, the viewing information transmitted in step S402 may further include a user identifier for identifying the user. For example, if the user identifier is included in the viewing information as a part of the viewing information such as "https://xxx.xxx.xx/?content_id=xxx&user_id=yyy", the user device ₂₄₀₁ may ” can be specified as the user identifier. In this case, the user identifier is transmitted from the user device ₂₄₀₁ to the embedded content web server 214 together with the embedded content identifier in step S407, and from the embedded content web server 214 to the client company's device ₂₃₀₁ together with the user input in step S417. can be sent.

Alternatively, if the viewing information does not include a user identifier, the user identifier is entered by the user in step S415 (i.e., the user input is (including the identifier) and may be transmitted from the embedded content web server 214 to the client enterprise's device ₂₃₀₁ for inclusion in the user input in step S417.

Note that the client company's device ₂₃₀₁ encodes the user's personal information before step S402 (for example, at step S401), and the viewing information generated in step S401 is the encoded user's personal information. May contain. In this case, the encoded user's personal information is decoded, for example, by the page content web server 220 ₁ or the user device 240 ₁ before step S414. This allows the user device ₂₄₀₁ to present personalized content to the user by displaying the page content and embedded content along with the decoded personal information of the user.

Note that in step S412, the management system 210 may further transmit an access key for accessing the destination specified in step S411. In this case, the embedded content web server 214 may access the client company's device 230 ₁ using the access key received from the management system 210 and send the user input to the client company's device 230 ₁ in step S417. .

Alternatively, the computer system 200 may further include an access management device (not shown) having each access key and information indicating the correspondence between the destination and the access key for accessing the destination. good. In this case, the embedded content web server 214 transmits the user input and information indicating the destination to the access management device, and the access management device transmits the user input to the destination using the access key corresponding to the destination. You may also send it to

Note that in the embodiment shown in FIG. 4, an example has been described in which the embedded content identifier is transmitted from the user device ₂₄₀₁ to the management system 210 via the embedded content web server 214. Not limited. For example, the embedded content identifier may be sent directly from user device ₂₄₀₁ to management system 210 without going through embedded content web server 214.

Although the embodiment shown in FIG. 4 describes an example in which the embedded content and the information indicating the destination are transmitted from the management system 210 to the embedded content web server 214, the present invention is not limited to this. . For example, the information indicating the embedded content and the destination may be sent directly from the management system 210 to the user device ₂₄₀₁ without being sent to the embedded content web server 214. In this case, upon receiving the user input from the user, the user device 240 ₁ may transmit the user input to the client company's device 230 ₁ based on the information indicating the destination. Additionally, an access key for accessing the client company's device 230 ₁ is also sent from the management system 210 to the user device 240 ₁ along with the embedded content and destination information to allow user input to be sent to the client company's device 230 ₁ . It may be used by the user device ₂₄₀₁ to access the client company's device ₂₃₀₁ when transmitting. Alternatively, the access key for accessing the client company's device 230 ₁ is sent from the management system 210 to the embedded content web server 214 separately from the embedded content and information indicating the destination, and the user device 240 ₁ Upon receiving the user input from the embedded content web server 214, the embedded content web server 214 accesses the client company's device ₂₃₀₁ using the access key; User input may be sent to the client company's device ₂₃₀₁ .

FIG. 5 shows another example of a flow executed in the computer system 200. In the embodiment shown in FIG. 5, steps S501-S502 and S515 among the plurality of steps shown in _FIG . S507, S511-S512, and S514 are executed, for example, by the processor unit ₂₁₁ of the user device 2401, step S505 is executed, for example, by the processor unit of the page content web server ₂₂₀₁ , and steps S508-S510 are executed, for example, by the processor unit 211 of the user device 2401. , is executed by the processor section of the management system 210, and step S513 is executed, for example, by the input section of the user device ₂₄₀₁ . In the embodiment shown in FIG. 5, it is assumed that the user device ₂₄₀₁ has downloaded the program of the embedded content web server 214 in advance (for example, at an arbitrary timing before step S503). This allows the user device ₂₄₀₁ to execute at least part of the processing of the embedded content web server 214 shown in FIG. Each step shown in FIG. 5 will be explained below.

Step S501: The client company's device ₂₃₀₁ generates viewing information for accessing the website. Since this process corresponds to step S401 in FIG. 4, detailed explanation thereof will be omitted here.

Step S502: The client company's device ₂₃₀₁ transmits the viewing information generated in step S501 to the user device ₂₄₀₁ . Since this process corresponds to step S402 in FIG. 4, detailed explanation thereof will be omitted here.

Step S503: The user device ₂₄₀₁ receives viewing information from the client company's device ₂₃₀₁ . Since this process corresponds to step S403 in FIG. 4, detailed explanation thereof will be omitted here.

Step S504: The user device ₂₄₀₁ accesses the website using the viewing information.

Step S505: In response to the access to the website using the viewing information, the page content web server ₂₂₀₁ causes the user device ₂₄₀₁ to present the page content associated with the viewing information to the user. Thereby, the user device ₂₄₀₁ presents the page content associated with the viewing information to the user.

Step S506: The user device ₂₄₀₁ specifies an embedded content identifier for identifying embedded content. Since this process corresponds to step S406 in FIG. 4, detailed explanation thereof will be omitted here.

Step S507: The user device ₂₄₀₁ transmits the embedded content identifier specified in step S506. In the embodiment shown in FIG. 5, the user device ₂₄₀₁ sends the embedded content identifier to the management system 210.

Step S508: The management system 210 receives the embedded content identifier from the user device ₂₄₀₁ .

Step S509: The management system 210 identifies the embedded content associated with the received embedded content identifier and the information indicating the destination associated with the received embedded content identifier. Since this process corresponds to step S411 in FIG. 4, detailed explanation thereof will be omitted here. Note that in the embodiment shown in FIG. 5, the destination associated with the received embedded content identifier is the client company's device ₂₃₀₁ .

Step S510: The management system 210 transmits the identified embedded content and information indicating the identified destination to the user device ₂₄₀₁ .

Step S511: The user device ₂₄₀₁ receives the embedded content and information indicating the destination from the management system 210.

Step S512: The user device 240 ₁ (particularly the web browser within the user device 240 ₁ ) presents the embedded content to the user as at least part of the page content. The user device ₂₄₀₁ can display the embedded content embedded in the page content using, for example, an iframe tag.

Note that the viewing information may further include personal information of the user owned by the client company. If the viewing information includes the user's personal information, the user device 240 ₁ (particularly the web browser within the user device 240 ₁ ) may present personalized content to the user based on the user's personal information. be. The presentation of personalized content can be achieved, for example, by the user device 240 ₁ overlaying the user's personal information from the client company's device 230 ₁ or the page content web server 220 ₁ on top of the embedded content from the management system 210. This may be realized by displaying the information as follows. With this, the embedded content and the user's personal information are processed in separate layers, so the embedded content and the user's personal information can be treated as separate information.

Step S513: The user device 240 ₁ (in particular, the input unit of the user device 240 ₁ ) receives user input from the user on the embedded content presented as at least part of the page content. Since this process corresponds to step S415 in FIG. 4, detailed explanation thereof will be omitted here.

Step S514: The user device ₂₄₀₁ transmits the user input received in step S513 to the client company's device ₂₃₀₁ , which is the destination, based on the information indicating the destination received in step S511.

Step S515: The client company's device ₂₃₀₁ receives user input from the embedded content web server 214. The client company's device ₂₃₀₁ stores the received user input in a predetermined location.

In this manner, the user device ₂₄₀₁ and the management system 210 may communicate directly in order for the user device ₂₄₀₁ to receive the embedded content and the information indicating the destination.

Note that in step S510, the management system 210 may further transmit to the user device ₂₄₀₁ an access key for accessing the destination specified in step S509. In this case, the user device ₂₄₀₁ may access the client company's device 2301 using the access key received from the management system ₂₁₀ and send the user input to the client company's device ₂₃₀₁ in step S514.

Alternatively, in step S510, the management system 210 may transmit to the embedded content web server 214 an access key for accessing the destination identified in step S509. In this case, the user device ₂₄₀₁ transmits the user input to the embedded content web server 214 in step S514' instead of step S514, and the embedded content web server 214 receives the access key from the management system 210. may be used to access the client company's device ₂₃₀₁ and send user input to the client company's device ₂₃₀₁ .

Alternatively, the computer system 200 may further include an access management device (not shown) having each access key and information indicating the correspondence between the destination and the access key for accessing the destination. good. In this case, the user device ₂₄₀₁ or the embedded content web server 214 transmits the user input and information indicating the destination to the access management device, and the access management device uses the access key corresponding to the destination. User input may be sent to a destination.

Note that in order to enable the user to be identified in step S515, the viewing information transmitted in step S502 may further include a user identifier for identifying the user. For example, if the user identifier is included in the viewing information as a part of the viewing information such as "https://xxx.xxx.xx/?content_id=xxx&user_id=yyy", the user device ₂₄₀₁ may ” can be specified as the user identifier. In this case, the user identifier may be sent from the user device 240 ₁ to the client company's device 230 ₁ along with the user input in step S514.

Alternatively, if the viewing information does not include a user identifier, the user identifier is entered by the user in step S513 (i.e., the user input is (including an identifier) and may be transmitted from the user device 240 ₁ to the client company's device 230 ₁ included in the user input in step S514.

Note that the client company's device ₂₃₀₁ encodes the user's personal information before step S502 (for example, at step S501), and the viewing information generated in step S501 is the encoded user's personal information. May contain. In this case, the encoded user's personal information is decoded, for example by the user device ₂₄₀₁ , before step S512. This allows the user device ₂₄₀₁ to present personalized content to the user by displaying the page content and embedded content along with the decoded personal information of the user.

In addition, in the embodiment shown in FIGS. 4 and 5, an example has been described in which the processing of each step shown in FIGS. 4 and 5 is realized by the processor unit executing the program stored in the memory unit. However, the present invention is not limited thereto. At least some of the steps shown in FIGS. 4 and 5 may be implemented by a hardware configuration such as a control circuit.

As mentioned above, although the present invention has been illustrated using a preferred embodiment of the present invention, the present invention should not be interpreted as being limited to this embodiment. It is understood that the invention is to be construed in scope only by the claims. It will be understood that those skilled in the art will be able to implement the present invention to an equivalent extent based on the description of the present invention and common general technical knowledge from the description of the specific preferred embodiments of the present invention.

The present invention is useful in providing a program etc. that allows personal information to be input via external content on a website without leaking personal information to a company providing external content.

200 Computer System 210 Management System 214 Embedded Content Web Server 220 ₁ to 220 _N Web Server 230 ₁ to 230 _M Client Company Equipment 240 ₁ to 240 _L User Device 250 Internet 260 Database Department

Claims

A program that operates on an embedded content web server, the embedded content web server includes a processor unit, and when the program is executed by the processor unit,
receiving an embedded content identifier for identifying the embedded content from a user device operated by the user;
transmitting the embedded content identifier to a management system that manages a plurality of contents;
receiving from the management system the embedded content associated with the embedded content identifier and information indicating a destination associated with the embedded content identifier, wherein the embedded content is It is one of multiple contents and does not include personal information;
causing the user device to present the received embedded content to the user;
receiving user input from the user via the received embedded content;
The program causes the processor unit to at least transmit the user input to the destination based on information indicating the destination.
The user input includes at least one input information,
When the program is executed by the processor unit,
identifying a storage location of each input information at the destination based on the at least one input information;
The program according to claim 1, further causing the processor section to execute the following steps: transmitting information indicating a storage location of each input information at the destination to the destination.
The user input further includes information indicating the type of the at least one input information,
Identifying the storage location of each input information at the destination based on the at least one input information means specifying the storage location of each input information at the destination based on information indicating the type of the at least one input information. 3. The program according to claim 2, comprising identifying a location.
One or more storage locations at the destination are each associated in advance with one or more input locations on the content,
Identifying a storage location of each input information at the destination based on the at least one input information includes identifying the one or more storage locations at the destination corresponding to each input location of the at least one input information. 3. The program according to claim 2, comprising identifying a location.
When the program is executed by the processor unit,
identifying a user identifier of the user;
The program according to claim 1, further causing the processor unit to execute the following steps: transmitting the user identifier of the user to the destination.
When the program is executed by the processor unit,
receiving from the management system an access key for enabling access to the destination;
The program according to claim 1, further causing the processor section to execute the following steps: accessing the destination using the access key.
A server device,
means for receiving an embedded content identifier for identifying embedded content from a user device operated by a user;
means for transmitting the embedded content identifier to a management system that manages a plurality of contents;
Means for receiving, from the management system, the embedded content associated with the embedded content identifier and information indicating a transmission destination associated with the embedded content identifier, the embedded content including: A means that is one of a plurality of contents and does not include personal information;
means for causing the user device to present the received embedded content to the user;
means for receiving user input from the user via the received embedded content;
and means for transmitting the user input to the destination based on information indicating the destination.
A program running on a user device, the user device including a processor unit,
When the program is executed by the processor unit,
receive browsing information for accessing the website; and
identifying an embedded content identifier for identifying embedded content to be presented on the website from the viewing information;
transmitting the embedded content identifier to a management system that manages a plurality of contents;
receiving from the management system the embedded content associated with the embedded content identifier and information indicating a destination associated with the embedded content identifier, wherein the embedded content is It is one of multiple contents and does not include personal information;
presenting the embedded content to the user;
receiving user input from the user via the embedded content;
The program causes the processor unit to at least transmit the user input to the destination based on information indicating the destination.
When the program is executed by the processor unit,
receiving from the management system an access key for enabling access to the destination;
The program according to claim 8, further causing the processor section to execute the following: accessing the destination using the access key.
When the program is executed by the processor unit,
The program according to claim 8 or 9, further causing the processor section to execute, based on the viewing information, page content associated with the viewing information to the user.