JP2011039999A - Personal information output device, personal information reading system, method and program for outputting personal information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To read and output only an item of requested personal information when personal information of a plurality of items stored in a portable medium is read by an information terminal. <P>SOLUTION: A personal information output device communicates with both the portable medium including an IC chip which stores therein user personal information corresponding to a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request, and the information terminal which receives personal information stored in the portable medium. The personal information output device stores a requested item indicating an item of personal information requested by the information terminal, out of personal information of the plurality of items stored in the IC chip and transmits a personal information read request to the portable medium and reads out personal information of the plurality of items stored in the portable medium and detects the item indicated by the requested item to transmit personal information corresponding to the detected item, out of read personal information of the plurality of items, to the information terminal. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for reading personal information stored in a portable medium provided with an IC chip.

2. Description of the Related Art In recent years, portable media such as IC cards and portable information terminals incorporating IC (Integrated Circuit) chips that store various information and perform information processing have become widespread. For example, an IC license that is an IC card having such an IC chip stores a plurality of items of personal information such as the name, address, and date of birth of the user identified by the IC license. An IC license verifies a PIN (personal identification number) transmitted from an IC reader and a PIN stored in advance in its own storage area, and performs authentication processing. The user's personal information stored in advance in the area is output. Such portable media in which personal information is stored are used for personal authentication in various situations, for example, when a mobile phone operator verifies the identity of a user at the time of contract.
Patent Document 1 describes a technology for providing an information service according to information read from such a portable medium. Patent Document 2 describes a technique for preventing leakage of personal information read from such a portable medium.

JP 2007-241647 A JP 2009-32247 A

  However, the portable medium as described above outputs all of the personal information of a plurality of items stored in its own storage area when the authentication by the authentication process based on the transmitted PIN is successful. In this case, even when the information necessary for the business operator to confirm the identity of the user is only a limited item of the plurality of items of personal information stored in the portable medium, the business information terminal of the business operator is used. All personal information is read by. Here, when the personal information stored in the portable medium is read by the operator's information terminal, it is desirable that only the information necessary for identity verification by the operator is read.

  The present invention has been made in view of such a situation. When a plurality of items of personal information stored in a portable medium are read by an information terminal, only the required items of personal information are read and output. A personal information output device, a personal information reading system, a personal information output method, and a personal information output program are provided.

  In order to solve the above-described problem, the present invention is an IC that stores personal information of a user associated with each of a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request. A personal information output device that communicates with both a portable medium provided with a chip and an information terminal that receives personal information stored in the portable medium, wherein a plurality of items of personal information stored in the IC chip are stored. Among them, a request item storage unit for storing a request item indicating an item of personal information requested by the information terminal, and a personal information reading request transmitted to a portable medium, and a plurality of items of personal information stored in the portable medium The personal information reading unit that reads out the information and the personal information of the plurality of items read out by the personal information reading unit detects the item indicated by the request item stored in the request item storage unit, and corresponds to the detected item Pieces Information, and personal information output unit for transmitting to the information terminal, characterized in that it comprises a.

  Further, the present invention provides a disclosure item storage unit that stores a disclosure item indicating an item of personal information to be output to an information terminal among a plurality of items of personal information stored in an IC chip, and a personal information output unit includes: Among a plurality of items of personal information read by the information reading unit, the item indicated by the disclosed item stored in the disclosed item storage unit is detected, and the personal information corresponding to the detected item is transmitted to the information terminal. It is characterized by that.

  In addition, the present invention is characterized by including a disclosure item input unit that receives an input of a disclosure item and stores it in a disclosure item storage unit.

  According to the present invention, the portable medium is an IC license in which a plurality of items of personal information including items of a user's name, address, and date of birth are stored in an IC chip. Indicates the user's name, address, and date of birth.

  The present invention also relates to a portable medium including an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs the personal information in response to a transmitted personal information read request. An information terminal that receives personal information stored in the portable medium, a personal information output device that communicates with the portable medium and the information terminal, and user identification based on the personal information received by the information terminal. A personal information reading system including a business operator terminal of a business operator to be performed, a personal information output device, and an authentication server for communication with the business operator terminal, wherein the business operator terminal has a plurality of items stored in an IC chip. Among the information, it comprises an operator registration request unit that receives an input of a request item indicating an item of personal information requested for identity verification, and transmits the input request item to the authentication server. A request item providing unit that transmits a request item transmitted from a trader terminal to a personal information output device is provided. The personal information output device includes a request item storage unit that stores a request item transmitted from the authentication server, and a portable device. A personal information reading unit that transmits a personal information reading request to a medium and reads a plurality of items of personal information stored in a portable medium, and a request item storage among the plurality of items of personal information read by the personal information reading unit A personal information output unit that detects an item indicated by the request item stored in the unit and transmits personal information corresponding to the detected item to the information terminal.

  The present invention also relates to a portable medium including an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs the personal information in response to a transmitted personal information read request. And an information terminal that receives personal information stored in a portable medium, and indicates items of personal information requested by the information terminal among a plurality of items of personal information stored in the IC chip. A personal information output method of a personal information output device comprising a request item storage unit for storing request items, wherein a personal information read request is transmitted to a portable medium, and a plurality of items of personal information stored in the portable medium are stored. A step of reading and detecting items indicated by the request items stored in the request item storage unit from among the read personal information of the plurality of items, and transmitting the personal information corresponding to the detected items to the information terminal. Tsu and up, characterized in that it comprises a.

  The present invention also relates to a portable medium including an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs the personal information in response to a transmitted personal information read request. And an information terminal that receives personal information stored in a portable medium, and indicates items of personal information requested by the information terminal among a plurality of items of personal information stored in the IC chip. A step of transmitting a personal information read request to a portable medium to a computer of a personal information output device including a request item storage unit in which the request items are stored, and reading out a plurality of items of personal information stored in the portable medium; Detecting the item indicated by the request item stored in the request item storage unit among the plurality of items of personal information, and transmitting the personal information corresponding to the detected item to the information terminal; Is a personal information output program executed.

  As described above, according to the present invention, the user's personal information associated with each of a plurality of predetermined items is stored, and the IC chip outputs personal information in response to a transmitted personal information read request. A personal information output device that communicates with both a portable medium provided with the information terminal that receives personal information stored in the portable medium, and includes information among a plurality of items of personal information stored in the IC chip. Stores a request item indicating an item of personal information requested by the terminal, transmits a personal information read request to a portable medium, reads a plurality of items of personal information stored in the portable medium, and reads a plurality of items of individuals Among the information, the item indicated in the request item is detected, and the personal information corresponding to the detected item is transmitted to the information terminal. Therefore, the personal information among the plurality of items of personal information stored in the IC chip. Check Only personal information necessary for Utame can be output to the information terminal. As a result, when a plurality of items of personal information stored in the portable medium are read by the information terminal, it is possible to read and output only the requested items of personal information.

It is a block diagram which shows the structural example of the personal information reading system by one Embodiment of this invention. It is a sequence diagram which shows the operation example of the personal information reading system by one Embodiment of this invention. It is a sequence diagram which shows the operation example of the personal information reading system by one Embodiment of this invention. It is a sequence diagram which shows the operation example of the personal information reading system by one Embodiment of this invention.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a personal information reading system 1 according to the present embodiment. The personal information reading system 1 includes a user IC card 100 and a portable information terminal 200 that provide personal information to a business operator by the personal information reading system 1, and a business that confirms the identity of the user based on personal information provided by the user. Personal information receiving terminal 300, IC reader 400 and business operator terminal 500, and an authentication server 600 of a third party that performs authentication between the user and the business operator. Here, a computer terminal used for one user and one operator will be described as an example, but a plurality of computer terminals used for each of a plurality of users and a plurality of operators may be provided.

  The IC card 100 stores user personal information associated with each of a plurality of predetermined items, and a portable medium including an IC chip 110 that outputs personal information in response to a transmitted personal information read request. It is. For example, as the IC card 100, an IC license in which a plurality of items of personal information including items of the user's name, address, and date of birth are stored in the IC chip 110 can be applied. The IC chip 110 includes a personal information storage unit 111, a communication unit 112, an authentication unit 113, and a personal information reading unit 114.

The personal information storage unit 111 stores user personal information associated with a plurality of predetermined items. For example, when an IC license is applied as the IC card 100, the personal information storage unit 111 includes a user's name, address, date of birth, date of license issuance, validity period, type of license, license number, The personal information of the user associated with each item such as a permanent account and a face photograph is stored.
The communication unit 112 communicates with the IC reader 400. In this embodiment, the IC card 100 is a non-contact type IC card, and the communication unit 112 communicates with the IC reader 400 by wireless communication.

  The authentication unit 113 performs a user authentication process by comparing a PIN, which is a personal identification number input by the user, with a PIN stored in advance in its own storage area. The PIN is, for example, a character string in which a plurality of alphanumeric characters are concatenated. The authentication unit 113 determines that the authentication is successful if the input PIN matches the PIN stored in advance, and determines that the authentication fails if the input PIN does not match the PIN stored in advance. Here, when an IC license is applied as the IC card 100, different character strings of the first PIN and the second PIN are stored in advance, and an authentication process based on each PIN is performed.

  The personal information reading unit 114 reads the personal information stored in the personal information storage unit 111 and outputs the personal information to the IC reader 400 via the communication unit 112 when the authentication unit 113 determines that the authentication is successful. Here, in the case where an IC license is applied as the IC card 100, the personal information reading unit 114, if authentication by the first PIN is successful, of the personal information stored in the personal information storage unit 111, the name of the user And personal information corresponding to the following items: address, date of birth, date of license issuance, validity period, type of license, and license number. If both the authentication by the first PIN and the authentication by the second PIN are successful, the personal information corresponding to the items of the main register and the face photo among the personal information stored in the personal information storage unit 111 Is read and output.

The portable information terminal 200 is a computer terminal having a communication function such as a so-called web browser and mail software. For example, a portable telephone terminal, a PDA (Personal Digital Assistant), etc. can be applied. The portable information terminal 200 includes a user registration request unit 210 and a mail receiving unit 220.
The user registration request unit 210 transmits a user registration request to the authentication server 600 and performs user registration in the authentication server 600. For example, the user registration request unit 210 accesses a user registration web page provided by the web server function of the authentication server 600 and authenticates a user registration request including user information indicating a user attribute input by the user. Send to server 600. The user information includes, for example, the user's license number, the user's personal digital assistant 200 mail address, and the like.
The mail receiving unit 220 receives an e-mail returned from the authentication server 600 in response to a user registration request or an authentication request transmitted by the user registration request unit 210 and displays it on the display unit of the portable information terminal 200.

The personal information receiving terminal 300 is a computer device that receives personal information stored in the IC card 100 via the IC reader 400. The personal information receiving terminal 300 is installed, for example, in a store of a business operator who sells mobile phone terminals, and is used to verify the identity of the user who has visited the store. The personal information receiving terminal 300 includes a personal information requesting unit 310 and a personal information receiving unit 320.
The personal information request unit 310 transmits an IC reader application activation request to the IC reader 400 and transmits a request for reading personal information stored in the user's IC card 100.
The personal information receiving unit 320 receives the personal information output from the IC reader 400 in response to the personal information reading request transmitted by the personal information requesting unit 310.

  The IC reader 400 is a computer terminal that communicates with both the IC card 100 and the personal information receiving terminal 300. The IC reader 400 includes a communication unit 410, a personal information reading unit 420, a request item storage unit 430, a disclosure item input unit 440, a disclosure item storage unit 450, and a personal information output unit 460. Here, the personal information reading unit 420, the request item storage unit 430, the disclosure item input unit 440, the disclosure item storage unit 450, and the personal information output unit 460 are IC reader applications provided from the authentication server 600. You may make it comprise based on a program.

  The communication unit 410 communicates with the IC card 100. In this embodiment, since the IC card 100 performs non-contact communication, the communication unit 410 performs wireless communication with the communication unit 112 of the IC card 100. For example, when the IC card 100 is brought close to the IC reader 400 and detects the IC card 100 in its communication area, the communication unit 410 starts communication with the IC card 100.

  The personal information reading unit 420 transmits a personal information reading request to the IC card 100 and reads a plurality of items of personal information stored in the IC card 100. Here, personal information reading unit 420 is provided with a PIN pad that accepts a PIN input from the user, generates a request for reading personal information including the PIN input to the PIN pad, and transmits the request via communication unit 410. To the IC card 100.

  The request item storage unit 430 stores a request item indicating an item of personal information requested by the personal information receiving terminal 300 among a plurality of items of personal information stored in the IC card 100. The request item is input in advance to the operator terminal 500 by the operator, transmitted to the IC reader 400 via the authentication server 600, and stored in the request item storage unit 430. When an IC license is applied as the IC card 100, the request item is, for example, information indicating a user's name, address, and date of birth.

The disclosed item input unit 440 receives input of disclosed items indicating items of personal information to be output to the personal information receiving terminal 300 among a plurality of items of personal information stored in the IC card 100. The disclosure item is input by the user.
The disclosure item storage unit 450 stores the disclosure item input to the disclosure item input unit 440. Disclosure items are read by the personal information output unit 460, and among personal information read from the IC card 100, items that are not indicated in the disclosure items are not output and are indicated in the disclosure items. It is controlled to output personal information only for the items.

  The personal information output unit 460 performs a filtering process of personal information that outputs only the personal information corresponding to the item specified by the request item or the disclosure item among the multiple items of personal information read by the personal information reading unit 420. Do. For example, the personal information output unit 460 detects the item indicated by the request item stored in the request item storage unit 430 from the plurality of items of personal information read by the personal information reading unit 420, and detects the detected item. Is transmitted to the personal information receiving terminal 300. In addition, the personal information output unit 460 detects items indicated by the disclosed items stored in the disclosed item storage unit 450 among the plurality of items of personal information read by the personal information reading unit 420, and detects the detected items. Is transmitted to the personal information receiving terminal 300.

The business operator terminal 500 is a computer terminal of a business operator that performs user identification based on the personal information received by the personal information receiving terminal 300. The business operator terminal 500 includes a business operator registration request unit 510 and an IC reader application request unit 520.
The business operator registration request unit 510 transmits a business operator registration request to the authentication server 600 and performs business operator registration in the personal information reading system 1. For example, the business operator registration request unit 510 accesses a business operator registration web page provided by the web server function of the authentication server 600 and includes a business operator registration request including business enterprise information input from the operator of the business operator. Is transmitted to the authentication server 600. The company information includes, for example, the company name, representative contact information, request item, personal information usage policy, ID (Identifier) of the IC reader 400, and the like. The request item is information indicating personal information of an item requested by the business operator to confirm the identity of the user among a plurality of items of personal information stored in the IC card 100. The personal information use policy is a character string that describes a policy defined for handling personal information. The ID of the IC reader 400 is identification information for identifying the IC reader 400.

The IC reader application request unit 520 requests the authentication server 600 to provide an IC reader application (IC reader application) program for operating the IC reader 400 and a request for providing information necessary for the IC reader application to operate. To the authentication server 600.
The authentication server 600 is a computer terminal of a third party that communicates with the IC reader 400 and the operator terminal 500, and includes a user registration unit 610, a user information storage unit 620, an operator registration unit 630, and operator information. A storage unit 640, an IC reader application providing unit 650, an authentication unit 660, and a mail transmission unit 670 are provided.

The user registration unit 610 causes the user information storage unit 620 to store user information included in the user registration request transmitted from the user registration request unit 210 of the portable information terminal 200.
The user information storage unit 620 stores user information transmitted from the user registration request unit 210 of the portable information terminal 200.
The business operator registration unit 630 stores business operator information included in the business operator registration request transmitted from the business operator registration request unit 510 of the business operator terminal 500 in the business operator information storage unit 640.
The company information storage unit 640 stores the company information transmitted from the company registration request unit 510 of the company terminal 500.

  The IC reader application providing unit 650 transmits an IC reader application program stored in advance in its own storage area and information necessary for the operation of the IC reader application to the IC reader 400. For example, the IC reader application providing unit 650 transmits the request item transmitted from the business operator terminal 500 to the IC reader 400. In the present embodiment, the IC reader application is controlled so as to operate only when information on the request item exists.

The authentication unit 660 generates an OTP (One Time Password) for performing user authentication and transmits the OTP (One Time Password) to the portable information terminal 200 by the mail transmission unit 670. The authentication unit 660 receives the OTP transmitted from the IC reader 400 and performs an authentication process based on the OTP.
The mail transmission unit 670 transmits an electronic mail including information such as a request item and OTP to the portable information terminal 200 according to the user's license number transmitted from the IC reader 400.

  Next, an operation example of the personal information reading system 1 according to the present embodiment will be described. FIG. 2 is a sequence diagram showing an operation example of user registration processing performed by the portable information terminal 200 and the authentication server 600. In this example, after temporary registration of user information including a mail address, a URL (Uniform Resource Locator) of user main registration is transmitted to the temporarily registered mail address, and the URL of the user main registration is transmitted. When the main registration request is transmitted, the user registration is completed. By performing registration processing by such a callback, user registration due to impersonation of a third party can be prevented.

  First, the portable information terminal 200 accesses the user temporary registration page of the authentication server 600 in accordance with operation information input from the user (step S1). Authentication server 600 transmits a user temporary registration page to portable information terminal 200 in response to access from portable information terminal 200 (step S2). The portable information terminal 200 displays the transmitted user temporary registration page on the display unit, and accepts input of user information from the user (step S3). The user information includes a license number and an e-mail address.

  The user registration request unit 210 of the portable information terminal 200 transmits user information input by the user to the authentication server 600 (step S4). Here, in transmitting user information, communication may be performed by HTTPS (Hypertext Transfer Protocol Security) in which transmitted information is encrypted. When the user registration unit 610 of the authentication server 600 receives the user information transmitted from the user registration request unit 210 of the portable information terminal 200, the user registration unit 610 transmits a reception notification of the user temporary registration request to the portable information terminal 200 (step S5). Further, the user registration unit 610 stores the received user information in the user information storage unit 620, and performs temporary registration of the user (step S6).

  The user registration unit 610 transmits the URL of the web page for performing user main registration to the portable information terminal 200 with the mail address received in step S4 as the destination (step S7). The portable information terminal 200 accesses the URL of the user main registration page transmitted from the authentication server 600 and transmits a user main registration request (step S8). The user registration unit 610 of the authentication server 600 performs the main registration of the user information in response to the user main registration request (step S9). For example, the user registration unit 610 adds flag information indicating that the main registration has been performed to the user information stored in the user information storage unit 620. When the user main registration is performed, the authentication server 600 transmits a notification indicating that the user main registration is completed to the portable information terminal 200.

FIG. 3 is a sequence diagram illustrating an operation example of the operator registration process performed by the operator terminal 500 and the authentication server 600.
The business operator registration request unit 510 of the business operator terminal 500 accesses the business operator temporary registration page of the authentication server 600 according to the operation information input from the operator of the business operator (step S21). The business operator registration unit 630 of the authentication server 600 transmits a business operator registration page to the business operator terminal 500 in response to access from the business operator terminal 500 (step S22). The business operator registration requesting unit 510 of the business operator terminal 500 displays the transmitted business operator registration page on the display unit, accepts input of business operator information from the operator of the business operator, and transmits it to the authentication server 600 (step S23). ). In transmission of business operator information, communication using HTTPS may be performed.

  Upon receiving the business operator information transmitted from the business operator registration request unit 510 of the business operator terminal 500, the business operator registration unit 630 of the authentication server 600 generates a business operator code that uniquely identifies the business operator. The company information associated with is stored in the company information storage unit 640 to perform provisional registration processing for company registration (step S24). The business entity registration unit 630 of the authentication server 600 transmits a notification indicating that the provisional registration of business operator information has been completed to the business operator terminal 500 (step S25). Thereafter, the business operator of the business operator terminal 500 mails an application form describing a business certificate (company seal), a reason for obtaining personal information, etc. to a third party that operates the authentication server 600. The third party inspects the business operator etc. based on the mailed application, and then performs the main registration of the business operator information. The third party mails a notice to the business operator indicating that the business operator has been registered.

  When the main registration of the business operator is performed, the IC reader application request unit 520 of the business operator terminal 500 transmits a download request for downloading the IC reader application or the like to the IC reader 400 to the authentication server 600 (step S26). The IC reader application providing unit 650 of the authentication server 600 transmits the information including the IC reader application, the request item registered in step S24, and the provider code to the provider terminal 500 (step S27). When receiving the information including the IC reader application transmitted from the authentication server 600, the IC reader application request unit 520 of the business entity terminal 500 transfers the information to the IC reader 400 (step S28). The IC reader 400 installs the received IC reader application and makes the IC reader application startable (step S29). The business entity terminal 500 transmits an IC reader application download completion notification to the authentication server 600 (step S30).

FIG. 4 is a sequence diagram illustrating an operation example in which the IC reader 400 reads personal information stored in the IC card 100.
First, the personal information receiving terminal 300 transmits an IC reader application activation request to the IC reader 400 (step S41). When receiving the IC application activation request transmitted from the personal information receiving terminal 300, the IC reader 400 activates the IC reader application installed in step S29, and configures the personal information reading unit 420 to the personal information output unit 460 ( Step S42). Upon receiving the license number input from the user (step S43), the personal information reading unit 420 of the IC reader 400 receives the input license number and the business operator transmitted in step S28 and stored in its own storage area. The code is transmitted to the authentication server 600 (step S44).

  The mail transmitting unit 670 of the authentication server 600 is stored in the business operator information storage unit 640 in association with the business name corresponding to the IC reader 400, the time when the license number is received from the IC reader 400, and the business. E-mail containing information on the requested item and personal information use policy and the OTP generated by the authentication unit 660, with the e-mail address associated with the license number stored in the user registration unit 610 as a destination It transmits to the information terminal 200 (step S45).

  The mail receiving unit 220 of the portable information terminal 200 displays the e-mail received from the authentication server 600 on the display unit (step S46). When the user of the portable information terminal 200 confirms the personal information use policy and the request item displayed on the display unit of the portable information terminal 200 and determines to disclose the personal information, the IC card 100 is brought close to the personal information receiving terminal 300. Let When the IC reader 400 detects the IC card 100 in its own communication area, the IC card 100 and the IC reader 400 start communication (step S47).

  When the personal information reading unit 420 of the IC reader 400 receives the OTP input from the user on the PIN pad provided therein (step S48), the personal information reading unit 420 transmits the OTP to the authentication server 600 (step S49). If the authentication server 600 performs an authentication process based on the OTP transmitted from the IC reader 400 and determines that the authentication is successful, the authentication server 600 transmits information indicating that the OTP authentication is successful to the IC reader 400 (step S50). When the personal information reading unit 420 of the IC reader 400 receives information indicating that the OTP authentication is successful from the authentication server 600, the personal information reading unit 420 receives the license PIN input from the user (step S51).

  The IC reader 400 transmits a personal information read request including the PIN input in step S51 to the IC card 100 via the communication unit 410 (step S52). The authentication unit 113 of the IC card 100 performs authentication processing by comparing the PIN transmitted from the IC reader 400 with the PIN stored in advance (step S53). If the authentication unit 113 determines that the authentication is successful, the personal information stored in the personal information storage unit 111 is read, and the read personal information is transmitted to the IC reader 400 via the communication unit 112 (step S54).

  The personal information reading unit 420 of the IC reader 400 receives the personal information transmitted from the IC card 100. Here, the personal information reading unit 420 displays the read personal information item on the display unit included in the IC reader 400, and the disclosure item input unit 440 selects an item to be disclosed to the operator from the personal information items. May be accepted. The input disclosure item is stored in the disclosure item storage unit 450 by the disclosure item input unit 440. The personal information output unit 460 performs a filtering process for detecting only the personal information indicated by the request item stored in the request item storage unit 430 or the disclosure item stored in the disclosure item storage unit 450 (step S55). The personal information reading unit 420 transmits only the personal information detected by filtering to the personal information receiving terminal 300.

  As described above, according to the present invention, when multiple items of personal information are stored in the IC card 100, the items required for identity verification by the operator are all of the multiple items of personal information. When it is not necessary, the operator's personal information receiving terminal 300 can read only the requested items. As a result, the user is released from the specification in which information to be read for each personal identification number in the conventional IC card is determined, and the information provided to the operator among the personal information stored in the IC card 100 of the user is himself / herself. This makes it possible to select and control in detail.

  For example, a computer terminal having an IC reader function compliant with NFC (Near Field Communication) standards may be applied as the portable information terminal 200 in the present embodiment. In this case, the portable information terminal 200 may have the functions of the personal information reading unit 420 to the personal information output unit 460 included in the IC reader 400. In this case, the request item is displayed on the display unit of the portable information terminal 200, and from the displayed request item, the user selects the disclosure item to be disclosed to the operator, and the personal information read from the IC card 100 is read. Of these items, only personal information corresponding to the selected item may be output to the IC reader 400.

  In addition, a plurality of request items constituted by combinations of different personal information items are input to the operator terminal 500 as request items for the operator to confirm the identity, and transmitted to the IC reader 400 via the authentication server 600. You may make it. For example, among the items stored in the IC license, the first request item that is a combination of the user's name, address, and date of birth, the date of license issuance, and the license number The second requirement item that is a combination may be presented to the user so that the requirement item disclosed to the operator can be selected. In this case, for example, the authentication server 600 may issue an OTP for each combination of request items, and the user may select a request item by selecting an OTP to be input to the IC reader 400. You may make it select by inputting the information which shows which request item is selected.

In addition, the IC card 100, the portable information terminal 200, the personal information receiving terminal 300, the IC reader 400, and the business terminal 500 store certificate information issued by the authentication server 600 in advance, When communicating with each other, an authentication request may be transmitted to the authentication server 600 and the process may be continued only when the authentication is successful.
In this embodiment, an IC license is described as an example of the IC card 100 including an IC chip in which personal information is stored. However, a basic resident register card, an IC passport, or the like may be applied.

  It should be noted that a program for realizing the function of the processing unit in the present invention is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by a computer system and executed to read personal information. May be performed. Here, the “computer system” includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, and a CD-ROM, and a storage device such as a hard disk built in the computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 Personal information reading system 100 IC card 110 IC chip 111 Personal information storage part 112 Communication part 113 Authentication part 114 Personal information reading part 200 Portable information terminal 210 User registration request part 220 Mail receiving part 300 Personal information receiving terminal 310 Personal information request part 320 Personal Information Receiving Unit 400 IC Reader 410 Communication Unit 420 Personal Information Reading Unit 430 Request Item Storage Unit 440 Disclosure Item Input Unit 450 Disclosure Item Storage Unit 460 Personal Information Output Unit 500 Business Operator Terminal 510 Business Operator Registration Request Unit 520 IC Reader Application Request unit 600 Authentication server 610 User registration unit 620 User information storage unit 630 Business operator registration unit 640 Business information storage unit 650 IC reader application provision unit 660 Authentication unit 670 Mail transmission unit

Claims (7)

A portable medium having an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request, and the portable medium A personal information output device that communicates with both information terminals that receive the personal information stored in
Of the plurality of items of personal information stored in the IC chip, a request item storage unit for storing a request item indicating an item of personal information requested by the information terminal;
A personal information reading unit that transmits a personal information reading request to the portable medium and reads the plurality of items of personal information stored in the portable medium;
Among the plurality of items of personal information read by the personal information reading unit, the item indicated by the request item stored in the request item storage unit is detected, and the personal information corresponding to the detected item is detected. A personal information output unit for transmitting to the information terminal;
A personal information output device comprising: Among the plurality of items of personal information stored in the IC chip, a disclosure item storage unit that stores disclosure items indicating items of personal information to be output to the information terminal;
The personal information output unit detects an item indicated by the disclosed item stored in the disclosed item storage unit among the plurality of items of personal information read by the personal information reading unit, and detects the detected item. The personal information output apparatus according to claim 1, wherein the personal information corresponding to is transmitted to the information terminal. A disclosure item input unit that accepts input of the disclosure item and stores it in the disclosure item storage unit;
The personal information output device according to claim 2, further comprising: The portable medium is an IC license in which personal information of the plurality of items including items of the user's name, address, and date of birth is stored in the IC chip,
The personal information output device according to any one of claims 1 to 3, wherein the request item indicates an item of a name, an address, and a date of birth of the user. A portable medium having an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request, and the portable medium An information terminal for receiving the personal information stored in the personal information; a personal information output device for communicating with the portable medium and the information terminal; and identification of the user based on the personal information received by the information terminal. A personal information reading system comprising a business operator terminal of the business operator performing the communication, an authentication server that communicates with the personal information output device and the business operator terminal,
The operator terminal is
Of the plurality of items of personal information stored in the IC chip, accepts an input of a request item indicating an item of personal information requested for identity verification, and transmits the input request item to the authentication server It has a business registration request department,
The authentication server is
The request item transmitted from the provider terminal is provided with a request item providing unit for transmitting to the personal information output device,
The personal information output device includes:
A request item storage unit for storing the request item transmitted from the authentication server;
A personal information reading unit that transmits a personal information reading request to the portable medium and reads the plurality of items of personal information stored in the portable medium;
Among the plurality of items of personal information read by the personal information reading unit, the item indicated by the request item stored in the request item storage unit is detected, and the personal information corresponding to the detected item is detected. A personal information output unit for transmitting to the information terminal;
A personal information reading system comprising: A portable medium having an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request, and the portable medium A request indicating an item of personal information requested by the information terminal among the plurality of items of personal information stored in the IC chip, in communication with both of the information terminals receiving the personal information stored in the IC chip A personal information output method of a personal information output device comprising a request item storage unit for storing items,
Transmitting a personal information read request to the portable medium, and reading the plurality of items of personal information stored in the portable medium;
A step of detecting an item indicated by the request item stored in the request item storage unit among the read personal information of the plurality of items, and transmitting the personal information corresponding to the detected item to the information terminal When,
A personal information output method comprising: A portable medium having an IC chip that stores personal information of a user associated with each of a plurality of predetermined items and outputs personal information in response to a transmitted personal information read request, and the portable medium A request indicating an item of personal information requested by the information terminal among the plurality of items of personal information stored in the IC chip, in communication with both of the information terminals receiving the personal information stored in the IC chip In a computer of a personal information output device comprising a request item storage unit for storing items,
Transmitting a personal information read request to the portable medium, and reading the plurality of items of personal information stored in the portable medium;
A step of detecting an item indicated by the request item stored in the request item storage unit among the read personal information of the plurality of items, and transmitting the personal information corresponding to the detected item to the information terminal When,
Personal information output program to execute.

Images