WO2024004069A1

WO2024004069A1 - Personal information confirmation device, personal information confirmation method, and personal authentication server

Info

Publication number: WO2024004069A1
Application number: PCT/JP2022/025896
Authority: WO
Inventors: 恭介石井; さゆり深野
Original assignee: 三菱電機株式会社
Priority date: 2022-06-29
Filing date: 2022-06-29
Publication date: 2024-01-04
Also published as: JPWO2024004069A1; JP7378650B1

Abstract

A personal information confirmation device (2) is configured so as to be provided with: an identification information acquisition unit (11) for acquiring a user's identification information from a user terminal (1); and a request transmission unit (12) for transmitting, to a personal authentication server (3) where personal information has been recorded, a personal information acquisition request including type information indicating a type of personal information of the user and the identification information acquired by the identification information acquisition unit (11). The personal information confirmation device (2) is provided with: a personal information acquisition unit (13) for acquiring, from the personal information recorded on the personal authentication server (3), personal information corresponding to the identification information included in the personal information acquisition request and also corresponding to the type indicated by the type information included in the personal information acquisition request; and a display data generation unit (14) for generating display data for displaying the personal information acquired by the personal information acquisition unit (13).

Description

Personal information confirmation device, personal information confirmation method, and personal authentication server

The present disclosure relates to a personal information verification device, a personal information verification method, and a personal authentication server.

There is a sales support system that searches for services that can be provided to a user who is a customer based on the user's personal information from among a plurality of services (see, for example, Patent Document 1). The sales support system includes a database in which personal information of users is recorded. The user's personal information includes, for example, name, age, account, workplace, debt, or information regarding family.

JP 2017-91012 Publication

There are various services provided to users. A service provider of each service may request personal information of a user when providing the service to the user. In this case, there is a problem in that each service provider needs to independently acquire personal information from users. In this case, it was also inconvenient for the user to have to present personal information for each service provider.

The present disclosure was made in order to solve the above-mentioned problems, and each service provider independently obtains a personal information verification device and a personal information verification method that do not require acquiring personal information from users. The purpose is to

A personal information confirmation device according to the present disclosure includes an identification information acquisition unit that acquires identification information of a user from a user terminal, type information indicating the type of personal information of the user, and identification information acquired by the identification information acquisition unit. and a request transmitting unit that transmits a personal information acquisition request including the personal information to a personal authentication server that records personal information. In addition, the personal information confirmation device corresponds to the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server, and the personal information confirmation device The device includes a personal information acquisition unit that acquires personal information corresponding to the type indicated by the type information, and a display data generation unit that generates display data for displaying the personal information acquired by the personal information acquisition unit. .

According to the present disclosure, there is no need for each service provider to independently acquire personal information from users.

1 is a configuration diagram showing a personal information confirmation system according to Embodiment 1. FIG. 1 is a configuration diagram showing a personal information confirmation device 2 according to Embodiment 1. FIG. 1 is a hardware configuration diagram showing hardware of a personal information confirmation device 2 according to Embodiment 1. FIG. 1 is a configuration diagram showing a personal authentication server 3 according to Embodiment 1. FIG. FIG. 2 is a hardware configuration diagram showing the hardware of the personal authentication server 3 according to the first embodiment. FIG. 2 is a hardware configuration diagram of a computer when a personal information confirmation device 2 is realized by software, firmware, or the like. FIG. 2 is a hardware configuration diagram of a computer when the personal authentication server 3 is realized by software, firmware, or the like. 3 is a flowchart showing a personal information confirmation method which is a processing procedure of the personal information confirmation device 2. FIG. 3 is a flowchart showing the processing procedure of the personal authentication server 3. FIG. FIG. 2 is a configuration diagram showing a personal information confirmation system according to a second embodiment. FIG. 2 is a configuration diagram showing a personal authentication server 3 according to a second embodiment. 3 is a hardware configuration diagram showing the hardware of a personal authentication server 3 according to a second embodiment. FIG. FIG. 3 is a configuration diagram showing a personal information confirmation device 2 according to a third embodiment. 3 is a hardware configuration diagram showing hardware of a personal information confirmation device 2 according to a third embodiment. FIG. 3 is a configuration diagram showing a personal authentication server 3 according to Embodiment 3. FIG. 3 is a hardware configuration diagram showing the hardware of a personal authentication server 3 according to Embodiment 3. FIG.

Hereinafter, in order to explain the present disclosure in more detail, embodiments for carrying out the present disclosure will be described with reference to the accompanying drawings.

Embodiment 1.
FIG. 1 is a configuration diagram showing a personal information confirmation system according to the first embodiment.
The personal information confirmation system shown in FIG. 1 includes a personal information confirmation device 2 and a personal authentication server 3.
The personal information confirmation system shown in FIG. 1 includes one personal information confirmation device 2. The personal information confirmation system shown in FIG. However, this is just an example, and if there are multiple service providers providing services, the personal information confirmation system will be equipped with the personal information confirmation device 2 used by each service provider. It's okay.

The user terminal 1 is a terminal used by a user, and is, for example, a smartphone, a tablet, or a personal computer.
The user terminal 1 causes the personal authentication server 3 to record the registered information by transmitting the registered information including the user's identification information and the user's personal information to the personal authentication server 3.
The user terminal 1 transmits user identification information to the personal information confirmation device 2 when receiving a service from a service provider.
Each of the user terminal 1 and the personal information verification device 2, the user terminal 1 and the personal authentication server 3, and the personal information verification device 2 and the personal authentication server 3 are connected via a network. There is. Examples of the network include the Internet, a LAN (Local Area Network), or a telephone communication network.

FIG. 2 is a configuration diagram showing the personal information confirmation device 2 according to the first embodiment.
FIG. 3 is a hardware configuration diagram showing the hardware of the personal information confirmation device 2 according to the first embodiment.
The personal information confirmation device 2 shown in FIG. 2 includes an identification information acquisition section 11, a request transmission section 12, a personal information acquisition section 13, and a display data generation section 14.
The identification information acquisition unit 11 is realized, for example, by the identification information acquisition circuit 21 shown in FIG.
The identification information acquisition unit 11 acquires user identification information from the user terminal 1 and outputs the user identification information to the request transmission unit 12 .

The request transmitter 12 is realized, for example, by a request transmitter circuit 22 shown in FIG.
The request transmitter 12 acquires the user's identification information from the identification information acquirer 11.
The request transmitter 12 transmits a personal information acquisition request including type information indicating the type of personal information and user identification information to the personal authentication server 3.
The type of personal information is, for example, the type of user's personal information that needs to be confirmed when a service provider provides a service to the user.

The personal information acquisition unit 13 is realized, for example, by a personal information acquisition circuit 23 shown in FIG.
The personal information acquisition unit 13 acquires personal information from the personal authentication server 3.
Specifically, the personal information acquisition unit 13 selects the personal information that corresponds to the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server 3, and Acquire the personal information corresponding to the type indicated by the type information included in.
The personal information acquisition unit 13 outputs the acquired personal information to the display data generation unit 14.

The display data generation section 14 is realized, for example, by a display data generation circuit 24 shown in FIG. 3.
The display data generation unit 14 generates display data for displaying the personal information acquired by the personal information acquisition unit 13.
The display data generation unit 14 causes the display device 15 to display personal information by outputting display data to the display device 15.

The display device 15 includes a display.
The display device 15 displays personal information on the display according to the display data output from the display data generation section 14.

FIG. 4 is a configuration diagram showing the personal authentication server 3 according to the first embodiment.
FIG. 5 is a hardware configuration diagram showing the hardware of the personal authentication server 3 according to the first embodiment.
The personal authentication server 3 shown in FIG. 4 includes a registration information acquisition section 31, a registration information recording section 32, a request acquisition section 33, and a personal information transmission section 34.
The registration information acquisition unit 31 is realized, for example, by a registration information acquisition circuit 41 shown in FIG.
The registration information acquisition unit 31 acquires user identification information and user personal information from the user terminal 1 as registration information.
The registration information acquisition section 31 outputs the registration information to the registration information recording section 32.

The registration information recording unit 32 is realized, for example, by a registration information recording circuit 42 shown in FIG.
The registration information recording unit 32 includes a recording medium 32a.
The registration information recording unit 32 records the registration information acquired by the registration information acquisition unit 31.
That is, the registration information recording section 32 records the registration information acquired by the registration information acquisition section 31 on the recording medium 32a.

The request acquisition unit 33 is realized, for example, by a request acquisition circuit 43 shown in FIG.
The request acquisition unit 33 acquires a personal information acquisition request including type information indicating the type of personal information and user identification information from the personal information confirmation device 2 .
The request acquisition unit 33 outputs a personal information acquisition request to the personal information transmission unit 34.

The personal information transmitter 34 is realized, for example, by a personal information transmitter circuit 44 shown in FIG.
The personal information transmitting unit 34 acquires a personal information acquisition request from the request acquiring unit 33.
The personal information transmitting unit 34 selects information that corresponds to the identification information included in the personal information acquisition request among the personal information recorded in the registered information recording unit 32 and that is included in the personal information acquisition request. The personal information corresponding to the type indicated by the type information is sent to the personal information confirmation device 2.

In FIG. 2, each of the identification information acquisition unit 11, request transmission unit 12, personal information acquisition unit 13, and display data generation unit 14, which are components of the personal information confirmation device 2, is a dedicated hardware as shown in FIG. It is assumed that this will be realized by That is, it is assumed that the personal information confirmation device 2 is realized by an identification information acquisition circuit 21, a request transmission circuit 22, a personal information acquisition circuit 23, and a display data generation circuit 24.
The identification information acquisition circuit 21, the request transmission circuit 22, the personal information acquisition circuit 23, and the display data generation circuit 24 each include, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, or an ASIC (Application Specific This applies to FPGA (Field-Programmable Gate Array), or a combination of these.

The components of the personal information verification device 2 are not limited to those realized by dedicated hardware, but the personal information verification device 2 may be realized by software, firmware, or a combination of software and firmware. There may be.
Software or firmware is stored in a computer's memory as a program. A computer means hardware that executes a program, and includes, for example, a CPU (Central Processing Unit), a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, a processor, or a DSP (Digital Signal Processor). do.

FIG. 6 is a hardware configuration diagram of a computer when the personal information confirmation device 2 is realized by software, firmware, or the like.
When the personal information confirmation device 2 is realized by software, firmware, etc., to cause a computer to execute the respective processing procedures in the identification information acquisition unit 11, request transmission unit 12, personal information acquisition unit 13, and display data generation unit 14. The program is stored in the memory 51. Then, the processor 52 of the computer executes the program stored in the memory 51.

Further, FIG. 3 shows an example in which each of the components of the personal information confirmation device 2 is realized by dedicated hardware, and FIG. 6 shows an example in which the personal information confirmation device 2 is realized by software, firmware, etc. ing. However, this is just an example, and some of the components in the personal information confirmation device 2 may be realized by dedicated hardware, and the remaining components may be realized by software, firmware, or the like.

In FIG. 4, each of the registered information acquisition section 31, registration information recording section 32, request acquisition section 33, and personal information transmission section 34, which are components of the personal authentication server 3, is implemented by dedicated hardware as shown in FIG. We envision what will come true. That is, it is assumed that the personal authentication server 3 is realized by a registration information acquisition circuit 41, a registration information recording circuit 42, a request acquisition circuit 43, and a personal information transmission circuit 44.
The registration information recording circuit 42 includes, for example, RAM (Random Access Memory), ROM (Read Only Memory), flash memory, EPROM (Erasable Programmable Read Only Memory), and EEPROM (Electrica Memory). Non-volatile or volatile such as Erasable Programmable Read Only Memory) This includes a flexible semiconductor memory, a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, and a DVD (Digital Versatile Disc).
Each of the registration information acquisition circuit 41, request acquisition circuit 43, and personal information transmission circuit 44 is, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination of these. applicable.

The components of the personal authentication server 3 are not limited to those realized by dedicated hardware, but the personal authentication server 3 may be realized by software, firmware, or a combination of software and firmware. Good too.
FIG. 7 is a hardware configuration diagram of a computer when the personal authentication server 3 is realized by software, firmware, or the like.
When the personal authentication server 3 is realized by software, firmware, etc., the registration information recording section 32 is configured on the memory 61 of the computer. A program for causing a computer to execute the respective processing procedures in the registration information acquisition section 31, request acquisition section 33, and personal information transmission section 34 is stored in the memory 61. Then, the processor 62 of the computer executes the program stored in the memory 61.

Further, FIG. 5 shows an example in which each of the components of the personal authentication server 3 is realized by dedicated hardware, and FIG. 7 shows an example in which the personal authentication server 3 is realized by software, firmware, etc. . However, this is just an example, and some of the components in the personal authentication server 3 may be realized by dedicated hardware, and the remaining components may be realized by software, firmware, or the like.

Next, the operation of the personal information confirmation system shown in FIG. 1 will be explained.
FIG. 8 is a flowchart showing a personal information confirmation method, which is a processing procedure of the personal information confirmation device 2.
FIG. 9 is a flowchart showing the processing procedure of the personal authentication server 3.

From the perspective of protecting personal information, the personal information recorded in the personal authentication server 3 must not be leaked to a third party. However, even if the user's personal information is presented to the service provider in the case where the user has consented to the viewing of his/her personal information by a specific third party service provider, the personal information may be leaked. It doesn't hit. If a service provider can obtain user's personal information that needs to be verified from a database when providing a service to a user, it is useful because it saves the trouble of receiving personal information from the user. It is also useful for users because it saves them the trouble of presenting their personal information to a service provider.

For example, when concluding a rental contract for a rental property with a real estate company that is a service provider, the user who rents a room generally needs to present his or her personal information to the real estate company. Personal information that needs to be presented to a real estate company includes, for example, name, age, annual income, place of employment, years of service, or information indicating borrowing status.
For example, when seeking employment at a company that is a service provider, a user who desires employment generally needs to present his or her personal information to the company. The personal information that needs to be presented to the company where the person is employed includes, for example, information indicating one's permanent address, place of birth, family, or residence. Information indicating family includes, for example, information indicating occupation, relationship, health, medical history, status, educational background, income, or assets. The information indicating the house includes, for example, the floor plan, the number of rooms, the type of house, or information indicating nearby facilities.
For example, when joining a sports gym that is a service provider, a user who wishes to join generally needs to present his or her personal information to the gym. Personal information that needs to be presented to the gym includes, for example, name, date of birth, gender, workplace, school name, grade, address, telephone number, email address, parent's name, relationship, parent's contact information, or , there is information indicating health status.
In this way, the type of personal information that needs to be presented differs depending on the presentation destination. Therefore, when a user needs to present personal information to multiple service providers, it is troublesome to present different types of personal information to each service provider.
The personal information confirmation system shown in Figure 1 allows users to save the trouble of presenting personal information to service providers, and also allows service providers to provide services to users without the need for confirmation. Only personal information can be presented to service providers.

In the personal information confirmation system shown in FIG. 1, the user's personal information needs to be registered in the personal authentication server 3 in advance.
The processing procedure when personal information is registered in the personal authentication server 3 will be explained below.
First, the user operates the user terminal 1 to access the personal authentication server 3 and performs user registration with the personal authentication server 3.
Specifically, the user operates the user terminal 1 to set, for example, an ID (IDentification) and a password to the personal authentication server 3.
Further, the user operates the user terminal 1 to set the user's identification information in the personal authentication server 3.
Although the previously set ID may be used as the user's identification information, it is also possible to use, for example, the user's face image, user's fingerprint image, or user's iris image as the user's identification information. good.
When using a user's face image, user's fingerprint image, or user's iris image as the user's identification information, the user takes a picture of his or her own face image, own fingerprint image, or own iris image. A camera installed in the user terminal 1 may be used to capture a face image, etc., or a camera different from the camera installed in the user terminal 1 may be used.
Further, as the user identification information, for example, conversion data from a user's face image, conversion data from a user's fingerprint image, or conversion data from a user's iris image may be used. These converted data include, for example, image data representing a face image, image data representing a fingerprint image, or data obtained by encrypting image data representing an iris image. Further, these converted data include, for example, data obtained by removing a part of image data indicating a face image or the like. Using converted data is more desirable than using the image itself, such as a facial image, in terms of protecting individual privacy.

After completing user registration with the personal authentication server 3, the user logs into the personal authentication server 3 by operating the user terminal 1 and transmitting an ID and password to the personal authentication server 3.
When logged in to the personal authentication server 3, the user operates the user terminal 1 to transmit registration information including the user's identification information and the user's personal information to the personal authentication server 3.
When a face image, a fingerprint image, or an iris image is used as the user's identification information, the identification information included in the registration information is image data indicating the face image, fingerprint image, or iris image.
In addition, when using conversion data from a face image, conversion data from a fingerprint image, or conversion data from an iris image as user identification information, the identification information included in the registered information is the conversion data from a face image, This is conversion data from a fingerprint image or conversion data from an iris image.
The type of user's personal information included in the registered information does not matter, but if more types of personal information are included, the service provider will be able to obtain personal information that requires confirmation in more situations. .

The registration information acquisition unit 31 of the personal authentication server 3 acquires user identification information and user personal information from the user terminal 1 as registration information.
The registration information acquisition section 31 outputs the registration information to the registration information recording section 32.
The registration information recording unit 32 acquires registration information from the registration information acquisition unit 31, and records the registration information on the recording medium 32a.

Next, a processing procedure when a service provider confirms a user's personal information will be explained.
When a user receives a certain service from a service provider, the user operates the user terminal 1 to access the service provider's personal information confirmation device 2, and from the user terminal 1, the user's identification information is transferred to the personal information. The confirmation device 2 is made to transmit.
If the user identification information included in the registration information recorded in the personal authentication server 3 is, for example, image data showing the user's face image, the user terminal 1 can send the image data showing the user's face image. The information is sent to the personal information confirmation device 2. If the user identification information included in the registration information is, for example, image data representing the user's fingerprint image, the user terminal 1 transmits the image data representing the user's fingerprint image to the personal information confirmation device 2 . If the user identification information included in the registration information is, for example, image data showing the user's iris image, the user terminal 1 transmits the image data showing the user's iris image to the personal information confirmation device 2.
If the user identification information included in the registration information is, for example, an ID, the user terminal 1 transmits the ID to the personal information confirmation device 2.
If the user identification information included in the registration information is, for example, converted data from the user's face image, etc., the user terminal 1 transmits the converted data from the user's face image etc. to the personal information confirmation device 2. do. For example, if the converted data from a face image etc. is data obtained by encrypting image data showing a face image etc., the user terminal 1 can encrypt the image data showing the face image etc. by encrypting the image data showing the face image etc. Generate converted data.

The identification information acquisition unit 11 of the personal information confirmation device 2 acquires the user's identification information from the user terminal 1 (step ST1 in FIG. 8).
The identification information acquisition section 11 outputs the user's identification information to the request transmission section 12 .

The request transmitter 12 acquires the user's identification information from the identification information acquirer 11.
The request transmitter 12 specifies the type of user's personal information that needs to be confirmed when the service provider provides the service to the user (step ST2 in FIG. 8).
In a case where a service provider has a plurality of services that can be provided, if the types of personal information corresponding to each service are recorded in a table, for example, the request transmitting unit 12 can record the table. By referring to it, it is possible to specify the type of personal information corresponding to the service desired by the user. If a service provider has multiple services, the user terminal 1 needs to transmit information indicating the service desired by the user to the personal information confirmation device 2. If the service provider has only one service as a service that can be provided, the user terminal 1 does not need to transmit information indicating the service desired by the user to the personal information confirmation device 2.
The request transmitter 12 transmits a personal information acquisition request including type information indicating the type of the specified personal information and user identification information to the personal authentication server 3 (step ST3 in FIG. 8).

The request acquisition unit 33 of the personal authentication server 3 acquires a personal information acquisition request from the personal information confirmation device 2 (step ST11 in FIG. 9). The personal information acquisition request includes type information indicating the type of personal information and user identification information.
The request acquisition unit 33 outputs a personal information acquisition request to the personal information transmission unit 34.

The personal information transmitting unit 34 acquires a personal information acquisition request from the request acquiring unit 33.
The personal information transmitter 34 compares each of the plural pieces of identification information recorded on the recording medium 32a with the user's identification information included in the personal information acquisition request.
Specifically, if the user's identification information is, for example, image data showing a face image of the user, the face image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the user's face image. do. If the user's identification information is, for example, image data showing a fingerprint image of the user, the fingerprint image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the fingerprint image of the user. If the user's identification information is, for example, image data showing the user's iris image, the iris image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the user's iris image. If the user's identification information is, for example, the user's ID, each of the plurality of IDs recorded on the recording medium 32a is compared with the user's ID. If the user's identification information is, for example, converted data from a user's face image, etc., each of the plurality of converted data recorded on the recording medium 32a is compared with the user's converted data.

If the identification information that matches the user's identification information is included in the plurality of identification information recorded on the recording medium 32a (step ST12 in FIG. 9: YES), the personal information transmitting unit 34 It is confirmed whether or not the type of personal information indicated by the type information is included among the plurality of types of personal information corresponding to the matching identification information.
If the type of personal information indicated by the type information is included in the plurality of types of personal information corresponding to the matching identification information, the personal information transmitting unit 34 transmits the message (step ST13 in FIG. 9: YES). ), the type of personal information indicated by the type information is acquired from the recording medium 32a (step ST14 in FIG. 9).
The personal information transmitter 34 transmits the acquired personal information to the personal information confirmation device 2 (step ST15 in FIG. 9).

If the personal information transmitting unit 34 does not include identification information that matches the user's identification information among the plurality of identification information recorded on the recording medium 32a (step ST12 in FIG. 9: NO), First notification information indicating that the user's personal information is not recorded is transmitted to the personal information confirmation device 2 (step ST16 in FIG. 9).
Even if the personal information transmitting unit 34 includes identification information that matches the user's identification information (step ST12 in FIG. 9: YES), if personal information of the type indicated by the type information is not included (in the case of step ST12 in FIG. 9), second notification information indicating that personal information that requires confirmation is not recorded is transmitted to the personal information confirmation device 2 (step ST17 in FIG. 9).

If the personal information of the user is transmitted from the personal authentication server 3 (step ST4 in FIG. 8: YES), the personal information acquisition unit 13 of the personal information confirmation device 2 acquires the personal information of the user (in the case of YES in step ST4 in FIG. 8). step ST5).
After acquiring the user's personal information, the personal information acquisition unit 13 outputs the acquired personal information to the display data generation unit 14 .
If the user's personal information is not transmitted from the personal authentication server 3 (step ST4 in FIG. 8: NO), the personal information acquisition unit 13 receives the first notification information or the second notification information from the personal authentication server 3. (Step ST6 in FIG. 8).
Upon acquiring the first notification information or the second notification information, the personal information acquisition unit 13 outputs the first notification information or the second notification information to the display data generation unit 14 .

When the display data generation unit 14 acquires the user's personal information from the personal information acquisition unit 13, it generates display data for displaying the personal information (step ST7 in FIG. 8). The display data generation process itself is a well-known technique, so a detailed explanation will be omitted.
The display data generation unit 14 outputs display data to the display device 15.
The display device 15 displays personal information on the display according to the display data output from the display data generation section 14.

When the display data generation unit 14 acquires the first notification information or the second notification information from the personal information acquisition unit 13, the display data generation unit 14 performs a process for displaying the first notification information or the second notification information. Display data is generated (step ST8 in FIG. 8).
The display data generation unit 14 outputs display data to the display device 15.
The display device 15 displays the first notification information or the second notification information on the display according to the display data output from the display data generation unit 14.

In the first embodiment described above, the identification information acquisition section 11 acquires the user's identification information from the user terminal 1, and the type information indicating the type of user's personal information and the identification information acquired by the identification information acquisition section 11. The personal information confirmation device 2 is configured to include a request transmitting section 12 that transmits a personal information acquisition request including the following to the personal authentication server 3 that records personal information. In addition, the personal information confirmation device 2 selects the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server 3, and identifies the identification information included in the personal information acquisition request. A personal information acquisition unit 13 that acquires personal information corresponding to the type indicated by the type information that is displayed, and a display data generation unit 14 that generates display data for displaying the personal information acquired by the personal information acquisition unit 13. It is equipped with Therefore, according to the personal information confirmation device 2, there is no need for each service provider to independently acquire personal information from the user.

In the first embodiment, the registered information acquisition unit 31 acquires user identification information and user personal information from the user terminal 1 as registered information, and the registered information acquired by the registered information acquisition unit 31 is recorded. personal information recording section 32; and a request acquisition section 33 that acquires a personal information acquisition request including type information indicating the type of personal information and user identification information from the personal information verification device 2. Server 3 was configured. In addition, the personal authentication server 3 corresponds to the identification information included in the personal information acquisition request among the personal information recorded in the registered information recording unit 32, and the personal information The personal information transmitting unit 34 is provided to transmit personal information corresponding to the type indicated by the type information displayed to the personal information confirmation device 2. Therefore, the personal authentication server 3 can transmit only the user's personal information that needs to be confirmed to the personal information confirmation device 2 when the service provider provides the service to the user.

In the personal information confirmation device 2 shown in FIG. 1, the request transmitter 12 transmits a personal information acquisition request including type information indicating the type of user's personal information to the personal authentication server 3.
The user's personal information may be credit information indicating the user's ability to pay or track record information regarding the user's track record. If the user's personal information is credit information or track record information, the request transmitter 12 sends a message indicating that the user's personal information is credit information or track record information as type information indicating the type of user's personal information. A personal information acquisition request including information indicating this is transmitted to the personal authentication server 3.
Examples of credit information indicating a user's ability to pay include financial credit information, identity information, information on qualifications held, or information on skills held.
The track record information indicating the user's track record includes, for example, information indicating service usage history, information indicating behavior points, information indicating blood donation history, information indicating volunteer hours, or information indicating nursing care history.

Embodiment 2.
In the second embodiment, personal information that corresponds to the identification information included in the personal information acquisition request and corresponds to the type indicated by the type information included in the personal information acquisition request is registered information. A description will be given of a personal authentication server 3 including a personal information transmitting section 35 that acquires the personal information from a server 4 external to the personal authentication server 3 if the personal information is not recorded in the recording section 32 .

FIG. 10 is a configuration diagram showing a personal information confirmation system according to the second embodiment. In FIG. 10, the same reference numerals as those in FIG. 1 indicate the same or corresponding parts, so the explanation will be omitted.
FIG. 11 is a configuration diagram showing the personal authentication server 3 according to the second embodiment. In FIG. 11, the same reference numerals as those in FIG. 4 indicate the same or corresponding parts, so the explanation will be omitted.
FIG. 12 is a hardware configuration diagram showing the hardware of the personal authentication server 3 according to the second embodiment. In FIG. 12, the same reference numerals as those in FIG. 5 indicate the same or corresponding parts, so the explanation will be omitted.
The personal information confirmation system shown in FIG. 10 includes a personal information confirmation device 2, a personal authentication server 3, and an external server 4. The external server 4 includes a credit information server 4a and a track record information server 4b.

The credit information server 4a records credit information indicating the user's ability to pay.
The performance information server 4b records performance information indicating the user's performance.
The personal authentication server 3 and credit information server 4a and the personal authentication server 3 and performance information server 4b are connected via a network.

As shown in FIG. 11, the personal authentication server 3 includes a registration information acquisition section 31, a registration information recording section 32, a request acquisition section 33, and a personal information transmission section 35.
The personal information transmitter 35 is realized, for example, by a personal information transmitter circuit 45 shown in FIG.
The personal information transmitting unit 35 acquires a personal information acquisition request from the request acquiring unit 33.
The personal information transmitter 35 selects information that corresponds to the identification information included in the personal information acquisition request among the personal information recorded in the registered information recording unit 32 and that is included in the personal information acquisition request. If there is personal information corresponding to the type indicated by the type information, the personal information is transmitted to the personal information confirmation device 2.
The personal information transmitting unit 35 is configured to transmit the personal information corresponding to the type indicated by the type information to the registered information recording unit 32 even if the personal information corresponding to the identification information is recorded in the registered information recording unit 32. If not recorded, personal information corresponding to the type indicated by the type information is acquired from a server 4 external to the personal authentication server 3. Then, the personal information transmitting unit 35 transmits the acquired personal information to the personal information confirmation device 2.

In FIG. 11, each of the registered information acquisition section 31, registration information recording section 32, request acquisition section 33, and personal information transmission section 35, which are components of the personal authentication server 3, is implemented by dedicated hardware as shown in FIG. We envision what will come true. That is, it is assumed that the personal authentication server 3 is realized by a registration information acquisition circuit 41, a registration information recording circuit 42, a request acquisition circuit 43, and a personal information transmission circuit 45.
Each of the registration information acquisition circuit 41, request acquisition circuit 43, and personal information transmission circuit 45 is, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof. applicable.

The components of the personal authentication server 3 are not limited to those realized by dedicated hardware, but the personal authentication server 3 may be realized by software, firmware, or a combination of software and firmware. Good too.
When the personal authentication server 3 is realized by software, firmware, etc., the registration information recording unit 32 is configured on the memory 61 shown in FIG. A program for causing a computer to execute the respective processing procedures in the registration information acquisition section 31, request acquisition section 33, and personal information transmission section 35 is stored in the memory 61. Then, the processor 62 shown in FIG. 7 executes the program stored in the memory 61.

Further, FIG. 12 shows an example in which each of the components of the personal authentication server 3 is realized by dedicated hardware, and FIG. 7 shows an example in which the personal authentication server 3 is realized by software, firmware, etc. . However, this is just an example, and some of the components in the personal authentication server 3 may be realized by dedicated hardware, and the remaining components may be realized by software, firmware, or the like.

Next, the operation of the personal information confirmation system shown in FIG. 10 will be explained. Components other than the external server 4 and the personal information transmitter 35 are the same as the personal information confirmation system shown in FIG. Therefore, only the operations of the external server 4 and the personal information transmitter 35 will be described here.

The personal information transmitting unit 35 of the personal authentication server 3 acquires a personal information acquisition request from the request acquiring unit 33, similar to the personal information transmitting unit 34 shown in FIG.
Like the personal information transmitting unit 34 shown in FIG. Verify.

If the plurality of identification information recorded on the recording medium 32a includes identification information that matches the user's identification information, the personal information transmitter 35 transmits the plurality of identification information corresponding to the user's identification information. It is confirmed whether or not the type of personal information includes personal information corresponding to the type indicated by the type information.
If personal information corresponding to the type indicated by the type information is included, the personal information transmitting unit 35 acquires the personal information from the recording medium 32a.
The personal information transmitter 35 transmits the acquired personal information to the personal information confirmation device 2.

If the personal information corresponding to the type indicated by the type information is not included in the plurality of types of personal information corresponding to the user's identification information, the personal information transmitting unit 35 transmits the information to the credit information server 4a or Personal information corresponding to the type indicated by the type information is acquired from the performance information server 4b.
That is, the personal information transmitting unit 35 transmits a personal information acquisition request to the credit information server 4a or the track record information server 4b. When the credit information server 4a receives the personal information acquisition request sent from the personal authentication server 3, the credit information server 4a determines that the information corresponds to the identification information included in the personal information acquisition request and that the information is not included in the personal information acquisition request. If credit information corresponding to the type indicated by the type information is recorded, the credit information is transmitted to the personal authentication server 3 as personal information.
When the performance information server 4b receives the personal information acquisition request sent from the personal authentication server 3, the performance information server 4b determines whether the information corresponds to the identification information included in the personal information acquisition request and which information is included in the personal information acquisition request. If performance information corresponding to the type indicated by the type information is recorded, the performance information is transmitted to the personal authentication server 3 as personal information.
The personal information transmitter 35 receives personal information transmitted from the credit information server 4a or personal information transmitted from the performance information server 4b.
The personal information transmitter 35 transmits personal information to the personal information confirmation device 2.

For example, when the personal information corresponding to the type indicated by the type information is annual income information, workplace information, qualification information, and information indicating volunteer hours, annual income information and workplace information It is assumed that the qualification information and information indicating volunteer hours are not recorded on the recording medium 32a.
In this case, the personal information transmitter 35 acquires annual income information and workplace information from the recording medium 32a, acquires qualification information from the credit information server 4a, and acquires volunteer hours from the performance information server 4b. Get the information shown.

The personal information transmitter 35 transmits the qualification information acquired from the credit information server 4a to the personal information confirmation device 2, and then discards the acquired qualification information within a certain period of time.
Further, the personal information transmitting unit 35 transmits the information indicating the volunteer hours acquired from the track record information server 4b to the personal information confirmation device 2, and then discards the information indicating the acquired volunteer hours within a certain period of time.

In the second embodiment described above, even if the personal information corresponding to the identification information included in the personal information acquisition request is recorded in the registered information recording unit 32, the personal information transmitting unit 35 acquires the personal information. If personal information corresponding to the type indicated by the type information included in the request is not recorded in the registered information recording unit 32, personal information corresponding to the type indicated by the type information is sent from a server 4 external to the personal authentication server 3. The personal authentication server 3 is configured to acquire the personal information that is being used and send the personal information to the personal information confirmation device 2. Therefore, even if the user's personal information that requires confirmation is not recorded in the registered information recording unit 32, the personal authentication server 3 can send only the user's personal information that requires confirmation to the personal information confirmation device 2. can.

Embodiment 3.
In the third embodiment, a personal information confirmation device 2 including a request transmitting section 16 that transmits a personal information acquisition request including only the identification information acquired by the identification information acquiring section 11 to the personal authentication server 3 will be described.

FIG. 13 is a configuration diagram showing a personal information confirmation device 2 according to the third embodiment. In FIG. 13, the same reference numerals as those in FIG. 2 indicate the same or corresponding parts, so the explanation will be omitted.
FIG. 14 is a hardware configuration diagram showing the hardware of the personal information confirmation device 2 according to the third embodiment. In FIG. 14, the same reference numerals as those in FIG. 3 indicate the same or corresponding parts, so the explanation will be omitted.
FIG. 15 is a configuration diagram showing the personal authentication server 3 according to the third embodiment. In FIG. 15, the same reference numerals as those in FIGS. 4 and 11 indicate the same or corresponding parts, so the explanation will be omitted.
FIG. 16 is a hardware configuration diagram showing the hardware of the personal authentication server 3 according to the third embodiment. In FIG. 16, the same reference numerals as those in FIGS. 5 and 12 indicate the same or corresponding parts, so the explanation will be omitted.

The configuration of the personal information confirmation system according to the third embodiment is similar to the configuration of the personal information confirmation system according to the first embodiment or the configuration of the personal information confirmation system according to the second embodiment. Therefore, the configuration diagram showing the personal information confirmation system according to the third embodiment is FIG. 1 or FIG. 10.

As shown in FIG. 13, the personal information confirmation device 2 includes an identification information acquisition section 11, a request transmission section 16, a personal information acquisition section 17, and a display data generation section 18.
The request transmitter 16 is realized, for example, by a request transmitter circuit 26 shown in FIG.
The request transmitter 16 acquires the user's identification information from the identification information acquirer 11.
The request transmitter 16 transmits a personal information acquisition request containing only the user's identification information to the personal authentication server 3.

The personal information acquisition unit 17 is realized, for example, by a personal information acquisition circuit 27 shown in FIG.
The personal information acquisition unit 17 acquires personal information from the personal authentication server 3.
Specifically, the personal information acquisition unit 17 acquires personal information corresponding only to the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server 3.
The personal information acquisition unit 17 outputs the acquired personal information to the display data generation unit 18.

The display data generation section 18 is realized, for example, by a display data generation circuit 28 shown in FIG. 14.
The display data generation unit 18 selects personal information corresponding to the type indicated by the type information from among the personal information acquired by the personal information acquisition unit 17, and generates display data for displaying the selected personal information. generate.
The display data generation unit 18 causes the display device 15 to display personal information by outputting display data to the display device 15.

As shown in FIG. 15, the personal authentication server 3 includes a registration information acquisition section 31, a registration information recording section 32, a request acquisition section 33, and a personal information transmission section 36.
The personal information transmitter 36 is realized, for example, by a personal information transmitter circuit 46 shown in FIG. 16.
The personal information transmitting unit 36 acquires a personal information acquisition request from the request acquiring unit 33.
The personal information transmitting unit 36 transmits to the personal information confirmation device 2 personal information that corresponds only to the identification information included in the personal information acquisition request among the personal information recorded in the registered information recording unit 32. do.

In the personal authentication server 3 shown in FIG. 15, the personal information transmitter 36 is applied to the personal authentication server 3 shown in FIG. However, this is just an example, and the personal information transmitter 36 may be applied to the personal authentication server 3 shown in FIG. 11.

In FIG. 13, each of the identification information acquisition unit 11, request transmission unit 16, personal information acquisition unit 17, and display data generation unit 18, which are components of the personal information confirmation device 2, is a dedicated hardware as shown in FIG. It is assumed that this will be realized by That is, it is assumed that the personal information confirmation device 2 is realized by an identification information acquisition circuit 21, a request transmission circuit 26, a personal information acquisition circuit 27, and a display data generation circuit 28.
Each of the identification information acquisition circuit 21, the request transmission circuit 26, the personal information acquisition circuit 27, and the display data generation circuit 28 is, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, Or a combination of these applies.

The components of the personal information verification device 2 are not limited to those realized by dedicated hardware, but the personal information verification device 2 may be realized by software, firmware, or a combination of software and firmware. There may be.
When the personal information confirmation device 2 is realized by software, firmware, etc., to cause a computer to execute the respective processing procedures in the identification information acquisition unit 11, request transmission unit 16, personal information acquisition unit 17, and display data generation unit 18. The program is stored in the memory 51 shown in FIG. Then, the processor 52 of the computer executes the program stored in the memory 51.

Further, FIG. 14 shows an example in which each of the components of the personal information confirmation device 2 is realized by dedicated hardware, and FIG. 6 shows an example in which the personal information confirmation device 2 is realized by software, firmware, etc. ing. However, this is just an example, and some of the components in the personal information confirmation device 2 may be realized by dedicated hardware, and the remaining components may be realized by software, firmware, or the like.

In FIG. 15, each of the registered information acquisition section 31, registration information recording section 32, request acquisition section 33, and personal information transmission section 36, which are components of the personal authentication server 3, is implemented by dedicated hardware as shown in FIG. We envision what will come true. That is, it is assumed that the personal authentication server 3 is realized by a registration information acquisition circuit 41, a registration information recording circuit 42, a request acquisition circuit 43, and a personal information transmission circuit 46.
Each of the registration information acquisition circuit 41, request acquisition circuit 43, and personal information transmission circuit 46 is, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof. applicable.

The components of the personal authentication server 3 are not limited to those realized by dedicated hardware, but the personal authentication server 3 may be realized by software, firmware, or a combination of software and firmware. Good too.
When the personal authentication server 3 is realized by software, firmware, etc., the registration information recording unit 32 is configured on the memory 61 shown in FIG. A program for causing a computer to execute the respective processing procedures in the registration information acquisition section 31, request acquisition section 33, and personal information transmission section 36 is stored in the memory 61. Then, the processor 62 shown in FIG. 7 executes the program stored in the memory 61.

Further, FIG. 16 shows an example in which each of the components of the personal authentication server 3 is realized by dedicated hardware, and FIG. 7 shows an example in which the personal authentication server 3 is realized by software, firmware, etc. . However, this is just an example, and some of the components in the personal authentication server 3 may be realized by dedicated hardware, and the remaining components may be realized by software, firmware, or the like.

Next, the operation of the personal information confirmation system according to the third embodiment will be explained.
The identification information acquisition unit 11 of the personal information confirmation device 2 acquires user identification information from the user terminal 1.
The identification information acquisition unit 11 outputs user identification information to the request transmission unit 16.

The request transmitter 16 acquires the user's identification information from the identification information acquirer 11.
The request transmitter 16 transmits a personal information acquisition request containing only the user's identification information to the personal authentication server 3.

The request acquisition unit 33 of the personal authentication server 3 acquires a personal information acquisition request from the personal information confirmation device 2.
The request acquisition unit 33 outputs a personal information acquisition request to the personal information transmission unit 36.

The personal information transmitting unit 36 acquires a personal information acquisition request from the request acquiring unit 33.
The personal information transmitter 36 compares each of the plurality of pieces of identification information recorded on the recording medium 32a with the user's identification information included in the personal information acquisition request.
Specifically, if the user's identification information is, for example, image data showing a face image of the user, the face image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the user's face image. do. If the user's identification information is, for example, image data showing a fingerprint image of the user, the fingerprint image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the fingerprint image of the user. If the user's identification information is, for example, image data showing the user's iris image, the iris image shown by each of the plurality of image data recorded on the recording medium 32a is compared with the user's iris image. If the user's identification information is, for example, the user's ID, each of the plurality of IDs recorded on the recording medium 32a is compared with the user's ID. If the user's identification information is, for example, converted data from a user's face image, etc., each of the plurality of converted data recorded on the recording medium 32a is compared with the user's converted data.

If the plurality of pieces of identification information recorded on the recording medium 32a include identification information that matches the user's identification information, the personal information transmitter 36 transmits the information from the recording medium 32a to match the user's identification information. Obtain personal information that corresponds to the identified information.
The personal information transmitter 36 transmits the acquired personal information to the personal information confirmation device 2.
If the identification information that matches the user's identification information is not included in the plurality of pieces of identification information recorded on the recording medium 32a, the personal information transmitting unit 36 indicates that the user's personal information is not recorded. The first notification information shown is transmitted to the personal information confirmation device 2.

The personal information acquisition unit 17 of the personal information confirmation device 2 acquires the user's personal information when the user's personal information is transmitted from the personal authentication server 3.
After acquiring the user's personal information, the personal information acquisition unit 17 outputs the acquired personal information to the display data generation unit 18.
The personal information acquisition unit 17 acquires the first notification information or the second notification information from the personal authentication server 3 if the user's personal information is not transmitted from the personal authentication server 3 .

After acquiring the user's personal information from the personal information acquisition unit 17, the display data generation unit 18 selects personal information corresponding to the type indicated by the type information from among the acquired personal information.
In a case where a service provider has a plurality of services that can be provided, if the types of personal information corresponding to each service are recorded in a table, for example, the display data generation unit 18 By referring to , it is possible to specify the type of personal information that corresponds to the service that the user desires. If a service provider has multiple services, the user terminal 1 needs to transmit information indicating the service desired by the user to the personal information confirmation device 2. If the service provider has only one service as a service that can be provided, the user terminal 1 does not need to transmit information indicating the service desired by the user to the personal information confirmation device 2.
The display data generation unit 18 generates display data for displaying the selected personal information.
The display data generation unit 18 outputs display data to the display device 15.
The display device 15 displays personal information on the display according to the display data output from the display data generation section 18.

When the display data generation unit 18 acquires the first notification information or the second notification information from the personal information acquisition unit 17, the display data generation unit 18 performs a process for displaying the first notification information or the second notification information. Generate display data.
The display data generation unit 18 outputs display data to the display device 15.
The display device 15 displays the first notification information or the second notification information on the display according to the display data output from the display data generation unit 18.

In the third embodiment described above, the request transmitting unit 16 transmits a personal information acquisition request that includes only identification information to the personal authentication server 3 instead of a personal information acquisition request that includes type information and identification information. A personal information acquisition unit 17 acquires personal information corresponding only to the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server 3. Then, the display data generation unit 18 selects personal information corresponding to the type indicated by the type information from among the personal information acquired by the personal information acquisition unit 17, and displays a display for displaying the selected personal information. The personal information confirmation device 2 was configured to generate data. Therefore, according to the personal information confirmation device 2, there is no need for each service provider to independently acquire personal information from the user.

Furthermore, in the third embodiment, the personal information acquisition request acquired by the request acquisition unit 33 does not include type information, but only the user's identification information. The personal information transmitting unit 36 transmits to the personal information confirmation device 2 personal information that corresponds only to the identification information included in the personal information acquisition request among the personal information recorded in the registered information recording unit 32. The personal authentication server 3 was configured to do so. Therefore, the personal authentication server 3 can transmit the user's personal information to the personal information confirmation device 2.

Note that in the present disclosure, it is possible to freely combine the embodiments, to modify any component of each embodiment, or to omit any component in each embodiment.

The present disclosure is suitable for personal information verification devices, personal information verification methods, and personal authentication servers.

1 User terminal, 2 Personal information confirmation device, 3 Personal authentication server, 4 Server, 4a Credit information server, 4b Performance information server, 11 Identification information acquisition unit, 12 Request transmission unit, 13 Personal information acquisition unit, 14 Display data generation unit , 15 Display device, 16 Request transmission unit, 17 Personal information acquisition unit, 18 Display data generation unit, 21 Identification information acquisition circuit, 22 Request transmission circuit, 23 Personal information acquisition circuit, 24 Display data generation circuit, 26 Request transmission circuit, 27 Personal information acquisition circuit, 28 Display data generation circuit, 31 Registration information acquisition unit, 32 Registration information recording unit, 32a Recording medium, 33 Request acquisition unit, 34, 35, 36 Personal information transmission unit, 41 Registration information acquisition circuit, 42 Registration information recording circuit, 43 request acquisition circuit, 44, 45, 46 personal information transmission circuit, 51 memory, 52 processor, 61 memory, 62 processor.

Claims

an identification information acquisition unit that acquires user identification information from the user terminal;
a request transmission unit that transmits a personal information acquisition request including type information indicating the type of personal information of the user and identification information acquired by the identification information acquisition unit to a personal authentication server that records personal information;
Among the personal information recorded in the personal authentication server, the type that corresponds to the identification information included in the personal information acquisition request and that is indicated by the type information included in the personal information acquisition request. a personal information acquisition unit that acquires personal information corresponding to the
and a display data generation section that generates display data for displaying the personal information acquired by the personal information acquisition section.
The personal information of the user is credit information indicating the user's ability to pay, or performance information related to the user's performance,
The request transmitter includes:
Sending a personal information acquisition request to the personal authentication server that includes information indicating that the user's personal information is the credit information or the track record information as type information indicating the type of the user's personal information. The personal information confirmation device according to claim 1, characterized in that:
The identification information acquisition unit includes:
As the user's identification information, the user's face image, the user's fingerprint image, or the user's iris image is acquired, or as the user's identification information, conversion data from the user's face image, the 2. The personal information confirmation device according to claim 1, wherein conversion data from a fingerprint image of the user or conversion data from an iris image of the user is acquired.
The request transmitter includes:
transmitting a personal information acquisition request including only the identification information to the personal authentication server instead of the personal information acquisition request including the type information and the identification information;
The personal information acquisition department is
acquiring personal information corresponding only to the identification information included in the personal information acquisition request from among the personal information recorded in the personal authentication server;
The display data generation unit includes:
The personal information acquisition unit selects personal information corresponding to the type indicated by the type information from among the personal information acquired by the personal information acquisition unit, and generates display data for displaying the selected personal information. The personal information confirmation device according to claim 1.
The identification information acquisition unit acquires the user's identification information from the user terminal,
A request transmission unit transmits a personal information acquisition request including type information indicating the type of personal information of the user and identification information acquired by the identification information acquisition unit to a personal authentication server that records personal information. ,
The personal information acquisition unit selects from among the personal information recorded in the personal authentication server the identification information included in the personal information acquisition request and that corresponds to the identification information included in the personal information acquisition request. obtain the personal information corresponding to the type indicated by the type information,
A personal information confirmation method, wherein a display data generation section generates display data for displaying the personal information acquired by the personal information acquisition section.
a registration information acquisition unit that acquires user identification information and personal information of the user as registration information from a user terminal;
a registration information recording unit that records the registration information acquired by the registration information acquisition unit;
a request acquisition unit that acquires a personal information acquisition request including type information indicating the type of personal information and user identification information from the personal information confirmation device;
Among the personal information recorded in the registered information recording unit, the information that corresponds to the identification information included in the personal information acquisition request and that is indicated by the type information included in the personal information acquisition request. and a personal information transmitting unit that transmits personal information corresponding to the type to the personal information confirmation device.
The personal information transmitting unit is
Even if the personal information corresponding to the identification information included in the personal information acquisition request is recorded in the registered information recording unit, the personal information corresponding to the identification information included in the personal information acquisition request does not correspond to the type indicated by the type information included in the personal information acquisition request. If the personal information corresponding to the type indicated by the type information is not recorded in the registered information recording section, the personal information corresponding to the type indicated by the type information is obtained from a server external to the personal authentication server, and the personal information is stored. 7. The personal authentication server according to claim 6, wherein the personal authentication server transmits the information to the personal information confirmation device.
If the personal information acquisition request acquired by the request acquisition unit does not include the type information but only the identification information of the user,
The personal information transmitting unit is
7. The personal authentication server according to claim 6, wherein among the personal information recorded in the registered information recording unit, personal information corresponding only to the identification information is transmitted to the personal information confirmation device.