JP2013020643A - Personal information providing device and personal information providing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable personal information to be transmitted from a personal information holding organization to a third-party organization on the basis of intention of a person having the personal information.SOLUTION: A personal information providing device reads personal information corresponding to user identification information associated with identification information of an information provision source device from the information provision source device indicated by the identification information of the information provision source device according to an information acquisition request transmitted from a user terminal, stores the read personal information in an information temporary storage section, reads the personal information stored in the information temporary storage section according to an information provision request transmitted from the user terminal, and transmits the read personal information to an information provision destination device indicated by identification information of the information provision destination device corresponding to the user identification information.

Description

  The present invention relates to a personal information providing apparatus and a personal information providing method for providing personal information.

In the past, when the person himself / herself of the personal information intends to submit it to a third-party organization, the individual generally holds the personal information. Apply to the institution to issue a certificate of their personal information, and submit the personal information issued as a paper medium to a third party. For example, when moving and changing the address of a driver's license, a paper-based resident's card is obtained at a municipal office or the like and brought to the police, which is a third-party organization. Resident cards issued by such public institutions may be brought to a third party such as a bank for identification purposes.
By the way, in Patent Document 1, such personal information is generated and managed together with a disclosure usage rule indicating restrictions on the number of times of access to the personal information, a period, a time limit, and the like. A technique is shown for performing control so that disclosure based on the disclosure usage rules is performed when the product is circulated constantly. In Patent Document 2, a personal information management support apparatus operated by a third party whose high reliability has been authenticated by a predetermined certification authority is stored in a personal information management system of a plurality of contract companies such as a credit card company. Technology to mediate access to personal information is shown.

JP 2003-345931 A JP 2004-348700 A

  However, when submitting personal information held by a personal information holding organization to a third party, it is troublesome for the individual to receive the paper media personal information issued by the personal information holding organization and bring it to the third party. It is. Therefore, it is conceivable to transmit personal information from a personal information holding organization to a third party through an information communication network. In this case, the personal information holding organization or information providing destination of the information provider of the personal information is considered. It is desirable that the third-party organization is determined based on the will of the person and is carried out safely without threats such as leakage or impersonation. The technique described in the above-mentioned patent document does not transmit personal information from such a specific personal information holding organization to another specific third party organization.

  The present invention has been made in view of such a situation, and personal information that enables transmission of personal information from a personal information holding organization to a third party based on the intention of the individual of the personal information. A providing apparatus and a personal information providing method are provided.

  In order to solve the above-described problems, the present invention provides a plurality of information providing source devices each storing personal information of the user associated with user identification information for identifying a user, and the personal information A plurality of information providing destination devices, a personal information providing device connected to the user terminal of the user via a network, an information temporary storage unit for temporarily storing the personal information, In response to an information acquisition request transmitted from the user terminal, the user identification information associated with the identification information of the information providing source device from the information providing source device indicated by the identification information of the information providing source device The personal information corresponding to the information is read out, and the read personal information is stored in the information temporary storage unit, and the information provision request is transmitted from the user terminal in response to the information provision request. An information providing unit that reads the personal information stored in the temporary storage unit, and transmits the read personal information to the information providing destination device indicated by the identification information of the information providing destination device corresponding to the user identification information; It is characterized by providing.

  Further, the present invention provides an information provider identification information receiving unit that receives identification information of the information provider device that requests transmission of the personal information among the plurality of information provider devices from the user terminal, The information provision destination read from the information provision destination storage unit in which the identification information of the information provision destination device is stored as an information provision destination list in response to the transmission request of the information provision destination organization list transmitted from the user terminal An information providing destination identification information receiving unit that transmits a list to the user terminal and receives identification information of the information providing destination device selected from the transmitted information providing destination list from the user terminal; User identification information for identifying a user, identification information of the information providing source device received by the information providing source identification information receiving unit, and the information providing destination received by the information providing destination identification information receiving unit A user distribution information storage unit that stores user distribution information associated with device identification information, and the information provider management unit transmits an information acquisition request transmitted from the user terminal Accordingly, based on the user distribution information stored in the user distribution information storage unit, the information providing source device is identified from the information providing source device indicated by the identification information of the information providing source device. The personal information corresponding to the user identification information associated with the information is read out, the read personal information is stored in the information temporary storage unit, and the information providing unit is transmitted from the user terminal In response to the information provision request, based on the user distribution information stored in the user distribution information storage unit, the personal information stored in the information temporary storage unit is read, and the read personal information is , User knowledge And transmits to the information providing destination device indicated by the identification information of the information providing destination device corresponding to the information.

  Further, according to the present invention, the information provider identification information receiver receives the identification information of the information provider device as an information provider list in response to a transmission request for the information provider organization list transmitted from the user terminal. The information provider list read from the stored information provider storage unit is transmitted to the user terminal, and the identification information of the information provider device selected from the transmitted information provider list is sent to the user terminal. By receiving from the user terminal, the identification information of the information providing source device that requests transmission of the personal information among the plurality of information providing source devices is received from the user terminal.

  In addition, the present invention receives a usage registration application form from the information providing source device, transmits the received usage registration application form to the user terminal, and uses the input usage registration application form transmitted from the user terminal. A management unit that performs a formal check of information input in the received input registration application form and determines whether or not there is an illegal input. In the person distribution information storage unit, when the management unit determines that there is no unauthorized input, the user distribution information in which the user identification information and the identification information of the information providing source device are associated with each other is stored. It is memorized.

  Further, according to the present invention, the user distribution information storage unit associates the user identification information and the identification information of the information providing source device with the personal information of the user in the information providing source device. The information providing source unique identification information to be identified is stored, and the information providing source management unit is based on the information providing source unique identification information stored in the user distribution information storage unit, from the information providing source device. The personal information is read out.

  In the present invention, the information temporary storage unit may include a case where a predetermined period has passed, a case where the personal information is transmitted to a predetermined information providing destination device, and a predetermined number of times the personal information. The personal information stored in the personal information is deleted when at least one of the following is read and when the request for deleting the personal information is received from the user terminal. .

  The present invention further includes an electronic signature generation unit that generates and issues electronic certificates corresponding to each of the user terminal, the information providing source device, and the information providing destination device in advance. When communicating with any one of the user terminal, the information providing source device, and the information providing destination device via the network, the authentication determination process based on the electronic certificate is performed and the authentication is not performed. Does not communicate with the device.

  Further, the present invention provides a plurality of information providing source devices each storing personal information of the user associated with user identification information for identifying a user, and a plurality of information receiving the provision of the personal information A personal information providing method of a providing destination device and a personal information providing device connected to the user terminal of the user via a network, wherein the information is received in response to an information acquisition request transmitted from the user terminal. The personal information corresponding to the user identification information associated with the identification information of the information providing source device is read from the information providing source device indicated by the identification information of the providing source device, and the read personal information is In response to an information provision request transmitted from the user terminal, the personal information stored in the information temporary storage unit is read, and the read personal information is stored in the temporary storage unit. And transmits to the information providing destination device identification information indicates the use's corresponding to the identification information the information providing destination device.

  As described above, according to the present invention, in response to an information acquisition request transmitted from the user terminal, the personal information providing device provides the information provision from the information providing source device indicated by the identification information of the information providing source device. Read personal information corresponding to the user identification information associated with the identification information of the original device, store the read personal information in the information temporary storage unit, and respond to the information provision request transmitted from the user terminal The personal information stored in the information temporary storage unit is read out, and the read personal information is transmitted to the information providing destination device indicated by the identification information of the information providing destination device corresponding to the user identification information. The personal information can be transmitted from the information holding organization to the third party based on the intention of the personal information.

It is a block diagram which shows the structure of the personal information provision system by one Embodiment of this invention. It is a figure which shows the example of data memorize | stored in the personal information storage device by one Embodiment of this invention. It is a figure which shows the example of data memorize | stored in the user distribution information storage device by one Embodiment of this invention. It is a figure which shows the example of the pre-registration process of the information provision origin apparatus by one Embodiment of this invention. It is a figure which shows the example of the pre-registration process of the information provision destination apparatus by one Embodiment of this invention. It is a figure which shows the example of the pre-registration process of the user terminal by one Embodiment of this invention. It is a figure which shows the operation example in which an information provision origin apparatus is selected by the user terminal by one Embodiment of this invention. It is a figure which shows the operation example in which an information provision destination apparatus is selected by the user terminal by one Embodiment of this invention. It is a figure which shows the operation example by which personal information is acquired by one Embodiment of this invention. It is a figure which shows the operation example in which personal information is transmitted by one Embodiment of this invention.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a personal information providing system 1 according to this embodiment. The personal information providing system 1 includes a user management device 40, an information providing source management device 50, an information providing destination management device 60, an authorized user storage device 71, an authorized information provision source storage device 72, and a personal information storage. A device 73, an authorized information provision destination storage device 74, a user distribution information storage device 75, and a temporary information storage device 76 are provided. The personal information providing system 1 is connected to a user terminal 10, an information providing source device 20, and an information providing destination device 30 via a network. Here, the user terminal 10, the information providing source device 20, and the information providing destination device 30 are computer devices, each of which is illustrated and described. However, the personal information providing system 1 has the same configuration as these. May be connected to a plurality of computer devices.

  The user terminal 10 is a computer terminal used by a user whose personal information is stored in the personal information storage device 73 corresponding to the information providing source management device 50. The user terminal 10 is connected to the user management device 40 and the information providing destination management device 60 via a network and can perform information communication. The user terminal 10 communicates with other computer devices by using a function of an internet browser provided in advance. Specifically, the user terminal 10 is a computer device including an input unit, an output unit, a control unit, a calculation unit, and a storage unit, such as a personal computer (PC), a personal digital assistant (PDA), and a mobile phone terminal. Applied. Here, a display part, an audio | voice output part, etc. are applied to an output part.

  The information providing source device 20 is a computer device used by an information providing source organization that holds personal information of users. The information provider organization is a public or private personal information holding organization such as a national or local government, police or medical insurer. The information providing source device 20 is connected to the personal information storage device 73. The personal information storage device 73 stores in advance personal information held in the information providing source organization corresponding to the information providing source device 20. FIG. 2 is a diagram showing an example of personal information data stored in the personal information storage device 73. The personal information storage device 73 stores personal information in association with the information provider unique ID. The information provider unique ID is identification information for uniquely identifying a user by a specific information provider organization among a plurality of information provider organizations. Personal information is information that identifies an individual or information such as the attributes and characteristics of an individual. For example, name, age, address, occupation, assets held, income, place of employment, permanent address, family composition, hospital history, etc. Information on insurance, pensions, health checkup results, etc. When the information providing source device 20 receives a use request for transmission of personal information using the personal information providing system 1 from the user terminal 10 of the user who owns the personal information, the information providing source device 20 sends the information to the user terminal 10. The user registration form is transmitted to confirm the user's intention to use the personal information providing system 1. The usage registration form includes, for example, input items such as identification information of a user who can perform identity verification. The information providing source organization of the information providing source device 20 that has received the use registration form for which information has been input from the user terminal 10 examines the user based on the information entered in the use registration form, Authenticate that you want to register.

  The information provision destination device 30 is a computer device used by an information provision destination organization that is an information provision destination of personal information stored in the personal information storage device 73. The information providing organization may be a public or public organization such as a local government or the police, a private company such as a bank or a real estate company, or an educational organization such as a school.

  The user management device 40, the information providing source management device 50, and the information providing destination management device 60 are managed by a predetermined authorized organization. This authorized organization is an organization that is authorized to handle personal information by a public or public organization, and an information provider that uses the information provider device 20 and an information provider that uses the information provider device 30. For each of the institution and the user who uses the user terminal 10, a certification examination is performed as to whether or not the use of the personal information providing system 1 is permitted. Here, the certification examination of the information provider organization and the information provider organization is, for example, whether or not the organization is handling personal information appropriately against threats such as leakage in light of laws and customs, etc. In the case of satisfying the examination criteria, the accreditation body authorizes the information providing source organization or the information providing destination organization to be examined. The user's certification examination is to examine whether the personal information corresponding to the user is indeed the personal information of the user, and is certainly the personal information of the user. If so, authorize the user. Here, the information provider organization, the information provider organization, and the accreditation organizations that authorize users may be different accreditation organizations, but organizations that have been authorized to handle personal information by public or public institutions. It is desirable that

The user management device 40 is a computer device that is managed by an authorized organization and communicates with each computer device and the user terminal 10 provided in the personal information providing system 1, and includes a user authentication unit 41, a provider unique ID acquisition unit 42, an information collection request unit 43, an information provision request unit 44, and an information provision completion report unit 45.
When the user authentication unit 41 communicates with the user terminal 10, the user authentication unit 41 performs a user authentication determination process based on an electronic certificate previously issued to the user of the user terminal 10. The electronic certificate is information issued to the user based on PKI (Public Key Infrastructure), and is information for determining the validity of the user ID for identifying the user. Such an electronic certificate may be stored in an IC card or the like together with a user ID and shipped in advance to an authorized user. In the authentication determination process, the user authentication unit 41 determines whether or not the electronic certificate transmitted from the user terminal 10 together with the user ID is information generated based on the user ID. Judgment by When the user authentication unit 41 determines that the electronic certificate has been generated based on the user ID, the user authentication unit 41 determines that the user ID is valid and transmits the user ID and the electronic certificate. The person terminal 10 is authenticated. When the user authentication unit 41 determines that the electronic certificate is not generated based on the user ID, the user authentication unit 41 determines that the user ID is not valid and transmits the user ID and the electronic certificate. The user terminal 10 is not authenticated.

  The providing source unique ID acquisition unit 42 receives the user ID transmitted from the user terminal 10 and the information providing source organization ID for identifying the information providing source organization that requests transmission of personal information, and the user ID and The information provider original ID corresponding to the information provider organization ID is read from the user distribution information storage device 75. FIG. 3 is a diagram illustrating a data example of the user distribution information of the information provider organization stored in the user distribution information storage device 75. The user distribution information storage device 75 stores a user ID, an information providing source organization ID, and an information providing source unique ID in association with each other. The user ID is identification information for identifying the user by the user management device 40 regardless of the information providing source organization. The information provider organization ID is identification information for identifying a specific information provider organization among a plurality of information provider organizations. The information provider unique ID is identification information for uniquely identifying a user by a specific information provider organization among a plurality of information provider organizations.

The information collection request unit 43 transmits a provision request for personal information corresponding to the information provider unique ID read from the user distribution information storage device 75 by the provider unique ID acquisition unit 42 to the information provider management device 50.
The information provision request unit 44 transmits a personal information provision request to the information provision destination device 30 to the information provision destination management device 60 based on the information provision request transmitted from the user terminal 10.
The information provision completion report unit 45 sends a completion notification indicating that the provision of personal information from the information provision destination device 30 is completed after the information provision request unit 44 transmits the personal information provision request to the information provision destination device 30. When received, the completion notification is transferred to the user terminal 10.

  The information providing source management device 50 is a computer device that is managed by an authorized organization and communicates with each computer device and the information providing source device 20 provided in the personal information providing system 1. When the information provider management device 50 communicates with the information provider device 20, the information provider management device 50 performs an authentication determination process based on the electronic certificate transmitted to the information provider device 20 in advance, and performs communication when authentication is performed. Communication is not performed if authentication is not performed. The information provider management apparatus 50 includes an information collection unit 51, an information editing / processing unit 52, and an information storage unit 53.

When the information collection unit 51 receives the request for provision of personal information transmitted from the user management device 40, the information collection unit 51 transmits the request for provision of personal information to the information providing source device 20 and returns the personal information returned from the information providing source device 20. Receive.
The information editing / processing unit 52 performs processing for encrypting personal information received by the information collecting unit 51 to prevent falsification, attaching a digital signature, and the like, and generates an issuance certificate. As a result, it is possible to prevent personal information from being tampered with after being provided to the information providing destination organization.
The information storage unit 53 transmits the personal information acquired by the information collection unit 51 and the issued certificate generated by the information editing / processing unit 52 to the information temporary storage device 76.

  The information providing destination management device 60 is a computer device that is managed by an authorized organization and communicates with each computer device and the information providing destination device 30 provided in the personal information providing system 1. When the information providing destination management device 60 communicates with the information providing destination device 30, the information providing destination management device 60 performs authentication determination processing based on the electronic certificate transmitted to the information providing destination device 30 in advance, and performs communication when authenticated. Communication is not performed if authentication is not performed. The information provision destination management device 60 includes a stored information extraction / provision unit 61. The stored information extracting / providing unit 61 transmits the personal information stored in the information temporary storage device 76 to the information providing destination device 30 in response to a request for provision of personal information transmitted from the user management device 40.

The authorized user storage device 71 stores user information of a user who is authorized by an authorized organization. The user information may include information such as a user ID for identifying the user and a password for authenticating the user.
The authorized information providing source storage device 72 stores an information providing source organization list in which identification information of a plurality of information providing source organizations certified by an authorized organization is listed.
The personal information storage device 73 stores the personal information as described above.
The authorized information providing destination storage device 74 stores an information providing destination organization list in which identification information of a plurality of information providing destination organizations certified by an authorized organization is listed.

  In the user distribution information storage device 75, in addition to the user distribution information (information provider) of the information provider as described above, the user ID and personal information requested from the user terminal 10 are stored. User distribution information (information providing destination) of the information providing destination in association with the information providing destination ID for identifying the providing destination is stored.

  The temporary information storage device 76 stores personal information read from the personal information storage device 73 by the information providing source management device 50 via the information providing source device 20. Thus, since the personal information provided by the personal information providing system 1 is stored in the information temporary storage device 76, for example, when providing personal information to a plurality of information providing destination devices 30, the information provision The personal information stored in the temporary information storage device 76 can be provided to the plurality of information providing destination devices 30 without reading the personal information from the original device 20 a plurality of times. For this reason, the number of times personal information is read from the personal information storage device 73 can be reduced, the processing load on the network and the information providing source device 20 can be reduced, and the risk of leakage can be reduced. Further, the personal information stored in the information temporary storage device 76 is deleted by the information temporary storage device 76 when it is determined that the conditions defined after being stored are satisfied. The predetermined condition is, for example, when a predetermined period of time has passed after being stored, or when the information is transmitted to the information providing destination device 30 of the predetermined information providing destination organization, or when the predetermined number of personal information Or when an explicit request for deleting personal information is received from the user terminal 10.

Next, an example of operation in which personal information stored in the authorized information providing source storage device 72 is transmitted to the information providing destination device 30 by the personal information providing system 1 according to the present invention will be described with reference to the drawings.
FIG. 4 is a diagram illustrating pre-registration processing from the information providing source device 20 to the personal information providing system 1. First, the information providing source device 20 transmits an authorization request to the information providing source management device 50 (step S1). When the information providing source management device 50 receives the certification request transmitted from the information providing source device 20, the certification organization conducts certification examination of the information providing source organization. When the authorized organization authorizes the information providing source organization of the information providing source device 20 and information indicating that it has been authorized is input to the information providing source management device 50 (step S2), the information providing source management device 50 A request for registration of the information providing source device 20 is made to the information providing source storage device 72 (step S3). When receiving the registration request for the information providing source device 20 from the information providing source management device 50, the authorized information providing source storage device 72 stores an information providing source ID for identifying the information providing source device 20 in its own storage area. (Step S4).

  After storing the information provider ID, the authorized information provider storage device 72 transmits a registration completion notification to the information provider management device 50 (step S5). Upon receiving the registration completion notification transmitted from the authorized information provider storage device 72, the information provider management device 50 issues an electronic certificate that proves the validity of the information provider organization (step S6), and the information provider It transmits to the apparatus 20 and transmits a certification completion notification (step S7).

  FIG. 5 is a diagram showing a pre-registration process from the information providing destination device 30 to the personal information providing system 1. The pre-registration process from the information providing destination apparatus 30 to the personal information providing system 1 is the same as the pre-registration process from the information providing source apparatus 20 described with reference to FIG. Through the pre-registration process, the information providing destination device 30 is certified by the certification organization, and the information provision destination ID for identifying the certified information provision destination organization is stored in the certified information provision destination storage device 74 as an information provision destination list. In addition, an electronic certificate that proves its validity is issued to the authorized information providing destination organization and transmitted to the information providing destination management device 60.

  FIG. 6 is a diagram showing a pre-registration process from the user terminal 10 to the personal information providing system 1. The pre-registration process from the user terminal 10 to the personal information providing system 1 is the same as the pre-registration process from the information providing source device 20 described with reference to FIG. Through the pre-registration process, the user terminal 10 is authorized by an authorized organization, and a user ID for identifying the authorized user is stored in the authorized user storage device 71. An authorized user is issued an electronic certificate that proves its validity and is transmitted to the user terminal 10 together with the user ID.

FIG. 7 shows registration based on the user's intention to transmit personal information using the personal information providing system 1 to the information providing source management apparatus 50 of the information providing source organization that holds the personal information of the user. FIG.
First, the user terminal 10 is authorized and transmits an introduction request for an available information provider organization to the user management apparatus 40 (step S30). At this time, the user management device 40 performs an authentication determination process for the user terminal 10 based on the user ID and the electronic certificate transmitted to the user terminal 10 in steps S24 and S25 (step S31). When the user management apparatus 40 authenticates the user terminal 10 in the authentication determination process of the user terminal 10, the user management apparatus 40 transmits a transmission request for an available information provider organization list to the authorized information provider storage device 72 (step S32). ). The authorized information provider storage device 72 transmits the information provider organization list stored in step S4 to the user management device 40 in response to the transmission request of the information provider organization list from the user management device 40 (step S4). S33).

  The user management device 40 transfers the information provider organization list received from the authorized information provider storage device 72 to the user terminal 10 (step S34). The user terminal 10 displays the information provider organization list received from the user management device 40 on its display unit (step S35). The user of the user terminal 10 browses the information provider list displayed on the user terminal 10, and the personal information is provided by the personal information provider system 1 among the information provider organizations shown in the information provider list. An information provider organization that is permitted to transmit is selected and input to the user terminal 10. The user terminal 10 transmits an information provider organization ID corresponding to the information provider organization selected by the user to the user management apparatus 40 (step S36). Similarly to step S31, the user management apparatus 40 performs an authentication determination process for the user terminal 10 (step S37). When the user terminal 10 is authenticated, the user management apparatus 40 confirms the use registration application form with the information provider management apparatus 50. A transmission request is transmitted (step S38).

  When the information provider management device 50 receives the request for transmission of the usage registration application form from the user management device 40, the information provider management device 50 reads the user registration application form from the information provider device 20 (step S39, step S40), and manages the user. It transmits to the apparatus 40 (step S41). The user terminal 10 receives the user registration application form received by the user management device 40 from the information providing source management device 50 and displays it on the display unit (step S42). The user of the user terminal 10 inputs information corresponding to the item indicated on the user application form displayed on the display unit of the user terminal 10 to the user terminal 10. The user terminal 10 transmits the input user application form in which information is input to the user to the user management apparatus 40 (step S43). When the user management apparatus 40 receives the input user application form transmitted from the user terminal 10, the user management apparatus 40 performs user authentication determination processing in the same manner as in step S31, and is input to the input user application form. A formal check of information is performed to determine whether or not there is an unauthorized input (step S44). Here, the formal check is a determination process such as whether or not the number of input characters is within a predetermined limited number of characters.

  If the user management apparatus 40 authenticates the user terminal 10 and determines that there is no unauthorized input in the input user application form, the user management apparatus 40 transmits the input user application form to the information provider management apparatus 50 (step) S45). The information providing source management device 50 transfers the input user application form received from the user management device 40 to the information providing source device 20 (step S46). When the information providing source device 20 receives the input user application form, the information providing source institution examines the user based on the information input on the input user application form. When the usage information indicating that the user approves the use of the personal information providing system 1 is input to the information providing source device 20, the information providing source device 20 includes a user ID for identifying the user and a user. Use registration approval information in association with the information provider original ID for identifying its own information provider information organization corresponding to the ID is generated (step S47), and transmitted to the information provider management device 50 (step S48).

  The information provider management device 50 transmits the use registration approval information transmitted from the information provider device 20 to the user management device 40 (step S49). When the user management device 40 transfers the usage registration approval information transmitted from the information providing source management device 50 to the user distribution information storage device 75 (step S50), the user distribution information storage device 75 uses the usage information. The user distribution information (information providing source) in which the user ID and the information providing source unique ID are associated is stored in its own storage area (step S51). The user distribution information storage device 75 transmits a registration completion notification indicating that the storage of the user distribution information has been completed to the user management device 40 (step S52). The user management device 40 transfers the registration completion notification to the user terminal 10 (step S53). Thereby, based on the intention of the user of the user terminal 10, information indicating that the information providing source device 20 receives the personal information of the user via the personal information providing system 1 is distributed to the user. The information is stored in the information storage device 75 or the information providing source device 20.

FIG. 8 shows that registration for using personal information using the personal information providing system 1 is performed in the information providing destination management device 60 of the information providing destination organization that holds the personal information of the user based on the intention of the user. FIG.
First, the user terminal 10 transmits a request for introduction of an available information provider organization to the user management apparatus 40 after the validity is recognized (step S60). At this time, the user management apparatus 40 performs an authentication determination process similar to step S31 (step S61). When the user management apparatus 40 authenticates the user terminal 10 in the authentication determination process of the user terminal 10, the user management apparatus 40 transmits a transmission request for an available information providing destination organization list to the authorized information providing destination storage device 74 (step S62). ). The authorized information provision destination storage device 74 transmits the information provision destination organization list stored in step S13 to the user management device 40 in response to the transmission request of the information provision destination organization list from the user management device 40 (step S13). S63).

  The user management device 40 transfers the information provision destination organization list received from the authorized information provision destination storage device 74 to the user terminal 10 (step S64). The user terminal 10 displays the information providing destination organization list received from the user management apparatus 40 on its own display unit (step S65). The user of the user terminal 10 browses the information providing destination institution list displayed on the user terminal 10, and the personal information providing system provides the personal information of the information providing destination institution shown in the information providing destination institution list. 1 is selected and input to the user terminal 10. The user terminal 10 transmits an information providing destination ID corresponding to the information providing destination organization selected by the user to the user management apparatus 40 (step S66). The user management device 40 performs an authentication determination process for the user terminal 10 as in step S31 (step S67). When the user management device 40 authenticates the user terminal 10, the user ID of the user terminal 10 and the information providing destination ID selected by the user are transmitted to the user distribution information storage device 75 (step). S68). The user distribution information storage device 75 stores user distribution information (information providing destination) in which the user ID transmitted from the user management device 40 is associated with the information providing source unique ID in its own storage area. (Step S69). The user distribution information storage device 75 transmits a registration completion notification indicating that the storage of the user distribution information has been completed to the user management device 40 (step S70).

  Upon receiving the registration completion notification transmitted from the user distribution information storage device 75, the user management device 40 transmits a user information notification request to the information providing destination device 30 to the information providing destination management device 60. (Step S71). When receiving the notification request from the user management apparatus 40 to the information provision destination apparatus 30, the information provision destination management apparatus 60 requests a connection certificate from the information provision destination apparatus 30 (step S72). When the information provision destination device 30 transmits a connection certificate to the information provision destination management device 60 (step S73), the information provision destination management device 60 authenticates the received connection certificate (step S74), and information The arrival management information corresponding to the provision destination management device 60 is generated (step S75) and transmitted to the information provision destination device 30 (step S76). The information providing destination device 30 stores user information including the user ID (step S77), and transmits an arrival notification to the information providing destination management device 60 (step S78). The information providing destination management device 60 transmits a user information notification completion notification to the information providing destination to the user management device 40 (step S79). The user management device 40 transfers the completion notification received from the authorized information provision destination storage device 74 to the user terminal 10 (step S80). Thereby, based on the intention of the user of the user terminal 10, information indicating that the information providing destination apparatus 30 receives the personal information of the user via the personal information providing system 1 is distributed to the user. The information is stored in the information storage device 75 or the information providing destination device 30.

FIG. 9 is a diagram illustrating an operation example of the personal information providing system 1 that transmits the personal information held by the information providing source organization and stored in the personal information storage device 73 to the user terminal 10 used by the person of the personal information. It is.
First, the user terminal 10 transmits an acquisition request for own personal information stored in the information providing source device 20 to the user management device 40 (step S90). Here, the acquisition request includes an individual user ID from which personal information is acquired and an information provider ID of an information provider organization that holds the personal information. The user management device 40 performs an authentication determination process for the user terminal 10 (step S91). When the user authentication unit 41 of the user management apparatus 40 authenticates the user terminal 10, the provider unique ID acquisition unit 42 uses an information provider original ID acquisition request corresponding to the user ID of the user terminal 10. It transmits to person distribution information storage device 75 (step S92). The user distribution information storage device 75 reads out the information provider original ID corresponding to the user ID and the information provider organization ID included in the acquisition request from the user distribution information stored in step S51, and the user It transmits to the management apparatus 40 (step S93).

  When the user management device 40 receives the information provider original ID transmitted from the information provider management device 50, the information collection request unit 43 of the user management device 40 provides information to the information provider management device 50. A request for providing personal information corresponding to the original unique ID is transmitted (step S94). The information collecting unit 51 of the information providing source management device 50 transmits a request for providing personal information to the information providing source device 20 (step S95). The information providing source device 20 reads the personal information corresponding to the information providing source unique ID from the personal information storage device 73 and transmits it to the information providing source management device 50 (step S97). When receiving the personal information transmitted from the information providing source device 20, the information editing / processing unit 52 of the information providing source management device 50 performs an authentication determination process for the information providing source device 20, and authenticates 20, thereby preventing falsification. Therefore, an issuance certificate in which an electronic signature is added to the read personal information is generated (step S98). The information providing source management device 50 transmits the personal information read from the information providing source device 20 and the generated issuance certificate information to the information temporary storage device 76 (step S99). The information temporary storage device 76 stores the information received from the information providing source management device 50 in its own storage area (step S100), and transmits an information storage completion notification to the information providing source management device 50 (step S101). ). When the information provider management device 50 transfers the information storage completion notification to the user management device 40 (step S102), the user management device 40 transfers the information storage completion notification to the user terminal 10 (step S102). S103).

  Upon receiving the completion notification from the user management device 40, the user terminal 10 transmits a personal information browsing request to the user management device 40 (step S104). The user management device 40 performs an authentication determination process for the user terminal 10 (step S105), and when authenticated, transmits a request for transmission of personal information to the temporary information storage device 76 (step S106). The temporary information storage device 76 reads the personal information stored in step S100 in response to the request for transmission of personal information (step S107) and transmits it to the user management device 40 (step S108). The user management device 40 transmits the personal information received from the information temporary storage device 76 to the user terminal 10 (step S109). The user terminal 10 displays the personal information transmitted from the user management device 40 on the display unit (step S110). Thereby, the personal information stored in the personal information storage device 73 is transmitted only to the user terminal 10 whose validity is proved by an electronic certificate or the like.

FIG. 10 is a diagram illustrating an operation example in which the user's personal information stored in the information temporary storage device 76 in step S100 is transmitted to the information providing destination device 30 designated by the user.
The user terminal 10 transmits a request for providing personal information to the information providing destination device 30 to the user management device 40 (step S40). The user management device 40 performs an authentication determination process for the user terminal 10 and, when authenticated, inquires of the user distribution information storage device 75 whether or not the information providing destination device 30 is registered for use. The user distribution information storage device 75 reads the user distribution information (information provision destination) stored in step S69, and the user ID of the user terminal 10 and the information provision destination ID of the information provision destination device 30 correspond to each other. It is determined whether it is attached, and if it is associated, a notification indicating that information can be provided is transmitted to the user management device 40 (step S123). The user management device 40 transmits an information provision request to the information provision destination management device 60 (step S124). When receiving the information provision request from the user management device 40, the information provision destination management device 60 notifies the information provision destination device 30 of information provision (step S125). When the information provision destination device 30 transmits the connection certificate to the information provision destination management device 60 (step S126), the information provision destination management device 60 performs an authentication determination process for the information provision destination device 30 (step S127).

  The information providing destination management device 60 transmits a request for transmission of personal information corresponding to the user terminal 10 to the information temporary storage device 76 (step S128). The temporary information storage device 76 reads the personal information corresponding to the user terminal 10 stored in step S100 (step S129) and transmits it to the information providing destination management device 60 (step S130). The information provision destination management device 60 adds arrival management information to the personal information transmitted from the information temporary storage device 76 (step S131), and transmits the information to the information provision destination device 30 (step S132). When the information providing destination apparatus 30 receives the personal information transmitted from the information providing destination management apparatus 60, the information providing destination apparatus 30 transmits an arrival notification indicating that the information providing destination apparatus 30 has received the personal information to the information providing destination management apparatus 60 ( Step S133). The arrival notification includes, for example, the information providing destination ID of the information providing destination device 30 and the date and time when 30 received the personal information.

  The information provision destination management device 60 transfers the arrival notification transmitted from the information provision destination device 30 to the information temporary storage device 76 (step S134). The information temporary storage device 76 stores the arrival notification transmitted from the information provision destination management device 60 (step S135), and transmits a completion notification to the information provision destination management device 60 (step S136). The information providing destination management device 60 transmits the completion notification transmitted from the information temporary storage device 76 to the user management device 40 (step S137). The user management device 40 transfers the completion notification transmitted from the information providing destination management device 60 to the user terminal 10 (step S138).

  In this embodiment, the personal information providing system 1 includes a user management device 40, an information providing source management device 50, an information providing destination management device 60, an authorized user storage device 71, an authorized information providing source storage device 72, an individual. Although the information storage device 73, the authorized information providing destination storage device 74, the user distribution information storage device 75, and the information temporary storage device 76 are provided, the physical device configuration is limited to the above-described example. Depending on the environment, such as the network capacity and size of the network, the performance of each hardware, the number of connected user terminals, information providing source devices and information providing destination devices, and the amount of personal information handled It is good to take an appropriate device configuration. Each unit included in the user management device 40, the information providing source management device 50, and the information providing destination management device 60 is not limited to the above-described configuration. For example, each device included in all the devices included in the above-described personal information providing system 1 is provided. The functional unit may be configured to be provided in a single device.

As described above, according to the present invention, from a plurality of personal information holding organizations, a personal information holding organization certified as reliable to a third party certified as trustworthy, Based on the intention of the person who wishes to provide the information, original and authentic personal information can be provided as electronic information via a network through authentication using an electronic certificate. Here, since the personal information providing system performs authentication determination processing using an electronic certificate when communicating with the external user terminal 10, the information providing source device 20, and the information providing destination device 30, a third party illegally It is possible to reduce the risk of impersonating the person and acquiring information. In addition, since the information providing source device 20 and the information providing destination device 30 are organizations certified by an accrediting organization, the user can provide personal information with more peace of mind. Furthermore, it is possible to discover unauthorized use etc. by storing and analyzing operation logs for each processing operation of the user management device 40, the information providing source management device 50, and the information providing destination management device 60. .
As described above, according to the present invention, it is possible to build a secure distribution mechanism of personal information, and it is possible to efficiently, effectively and safely perform various services utilizing personal information.

  It is to be noted that a program for realizing the function of the processing unit in the present invention is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed to provide personal information. May be performed. Here, the “computer system” includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 Personal information provision system 10 User terminal 20 Information provision origin apparatus 30 Information provision destination apparatus 40 User management apparatus 41 User authentication part 42 Provider original ID acquisition part 43 Information collection request part 44 Information provision request part 45 Information provision completion Report unit 50 Information provider management device 51 Information collection unit 52 Information editing / processing unit 53 Information storage unit 60 Information provider management device 61 Stored information extraction / providing unit 71 Authorized user storage device 72 Authorized information provider storage device 73 Individual Information storage device 74 Authorized information providing destination storage device 75 User distribution information storage device 76 Information temporary storage device

Claims (8)

A plurality of information providing source devices each storing personal information of the user associated with user identification information for identifying a user; a plurality of information providing destination devices receiving the provision of the personal information; A personal information providing device connected to a user terminal of a user via a network,
An information temporary storage unit for temporarily storing the personal information;
In response to an information acquisition request transmitted from the user terminal, the user identification information associated with the identification information of the information providing source device from the information providing source device indicated by the identification information of the information providing source device An information provider management unit that reads the personal information corresponding to the information and stores the read personal information in the information temporary storage unit;
In response to an information provision request transmitted from the user terminal, the personal information stored in the temporary information storage unit is read out, and the personal information that has been read out corresponds to the user identification information. An information providing unit for transmitting to the information providing destination device indicated by the identification information;
A personal information providing apparatus comprising: An information provider identification information receiving unit that receives identification information of the information provider device that requests transmission of the personal information among the plurality of information provider devices from the user terminal;
The information provision destination read from the information provision destination storage unit in which the identification information of the information provision destination device is stored as an information provision destination list in response to the transmission request of the information provision destination organization list transmitted from the user terminal An information providing destination identification information receiving unit that transmits a list to the user terminal, and receives identification information of the information providing destination device selected from the transmitted information providing destination list from the user terminal;
User identification information for identifying the user, identification information of the information providing source device received by the information providing source identification information receiving unit, and information providing destination device received by the information providing destination identification information receiving unit A user distribution information storage unit for storing user distribution information associated with identification information;
With
The information provider management unit
In response to an information acquisition request transmitted from the user terminal, the information provision indicated by the identification information of the information providing source device based on the user distribution information stored in the user distribution information storage unit Read the personal information corresponding to the user identification information associated with the identification information of the information providing source device from the source device, store the read personal information in the information temporary storage unit,
The information providing unit
In response to an information provision request transmitted from the user terminal, the personal information stored in the information temporary storage unit is stored on the basis of the user distribution information stored in the user distribution information storage unit. The personal information providing apparatus according to claim 1, wherein the personal information providing apparatus transmits the read personal information to the information providing destination apparatus indicated by the identification information of the information providing destination apparatus corresponding to the user identification information. . The information provider identification information receiving unit
The information provider read from the information provider storage unit in which the identification information of the information provider device is stored as an information provider list in response to the transmission request of the information provider organization list transmitted from the user terminal By transmitting the list to the user terminal, and receiving from the user terminal identification information of the information providing source device selected from the transmitted information providing source list, from the user terminal, the user terminal The personal information providing apparatus according to claim 2, wherein identification information of the information providing source apparatus that requests transmission of the personal information among a plurality of information providing source apparatuses is received. A usage registration application form is received from the information providing source device, the received usage registration application form is transmitted to the user terminal, and the input usage registration application form transmitted from the user terminal is transmitted from the user terminal. A management unit that receives and performs a formal check of the information entered in the received input usage registration application form, and determines whether there is an unauthorized input;
With
In the user distribution information storage unit, when the management unit determines that there is no unauthorized input, the user distribution in which the user identification information is associated with the identification information of the information providing source device Information is remembered,
The personal information providing apparatus according to claim 2 or claim 3, wherein The user distribution information storage unit is associated with the user identification information and the identification information of the information providing source device, and is unique to the information providing source for identifying the personal information of the user in the information providing source device. Remember identification information,
The information provider management unit reads the personal information from the information provider device based on the information provider unique identification information stored in the user distribution information storage unit. The personal information providing apparatus according to any one of claims 1 to 4. The information temporary storage unit is
A case where a predetermined period has passed, a case where the personal information is transmitted to a predetermined information providing destination device, a case where the personal information is read a predetermined number of times, and The personal information stored in itself is deleted in at least one of cases where a request to delete the personal information is received. 6. The method according to claim 1, wherein the personal information stored in the personal information is deleted. The personal information providing device described. An electronic signature generation unit for generating and issuing electronic certificates corresponding to the user terminal, the information providing source device, and the information providing destination device in advance;
When communicating with any one of the user terminal, the information providing source device, and the information providing destination device via the network, authentication determination processing based on the electronic certificate is performed and authentication is not performed. In such a case, the personal information providing device according to any one of claims 1 to 6, wherein communication with the device is not performed. A plurality of information providing source devices each storing personal information of the user associated with user identification information for identifying a user; a plurality of information providing destination devices receiving the provision of the personal information; A personal information providing method of a personal information providing apparatus connected to a user terminal of a user via a network,
In response to an information acquisition request transmitted from the user terminal, the user identification information associated with the identification information of the information providing source device from the information providing source device indicated by the identification information of the information providing source device And reading the personal information corresponding to the information stored in the information temporary storage unit,
In response to an information provision request transmitted from the user terminal, the personal information stored in the temporary information storage unit is read out, and the personal information that has been read out corresponds to the user identification information. A method for providing personal information, comprising: transmitting to the information providing destination device indicated by the identification information.

Images