JP7574650B2 - Personal information management device, personal information management system, terminal, and terminal program - Google Patents

Description

The present invention relates to a personal information management device, a personal information management system, a terminal, and a terminal program.

Conventionally, a person wishing to use a certain service on the Internet would first access the service's website and register as a user, registering the necessary information including personal information such as the user's name, and setting a password. The user can then use the service by inputting into a terminal the user ID and password that the user has set himself or that has been assigned by the system. This system of registering and using various information required for each service is common.

However, it is troublesome for users to register information for each service.
Therefore, the present invention provides an attribute information disclosure system including a service providing device that provides a service via a network, a user device that uses a service provided by the service providing device, and an attribute information management device that manages personal attribute information composed of information on a plurality of attribute items related to a user of the user device, and controls disclosure of personal attribute information from the attribute information management device to the service providing device, the user device including: a setting means for setting, for each service providing device that is permitted to disclose personal attribute information, a permission attribute item for identifying personal attribute information that is permitted to be disclosed, to the attribute information management device; and a response reply means for replying, when a disclosure confirmation request for confirmation as to whether or not to permit disclosure of the permission attribute item is received from the attribute information management device, a response indicating whether or not to permit disclosure to the service providing device, the attribute information management device includes a disclosure policy management means for managing, for each user information that identifies a user of each user device, service providing device information for identifying a service providing device that is permitted to disclose personal attribute information and a disclosure policy including the permission attribute item, based on the setting received from the user of the user device. a disclosure policy determination means for, when a personal attribute information request including user information of a service requester is received from a service providing device, referring to a disclosure policy managed by the disclosure policy management means, determining and acquiring attribute items that match the attribute items targeted by the personal attribute information request among the permission attribute items corresponding to both the service providing device information for identifying the service providing device that is the sender of the personal attribute information request and the user information included in the personal attribute information request, by referring to a disclosure policy managed by the disclosure policy management means; a disclosure confirmation request transmission means for transmitting a disclosure confirmation request to a user device of a user corresponding to the user information of the service requester, requesting confirmation as to whether or not to permit disclosure of personal attribute information corresponding to the permission attribute items acquired by the disclosure policy determination means; and an attribute information providing means for providing the service providing device with personal attribute information corresponding to the permission attribute items based on a response indicating whether or not to permit disclosure of personal attribute information corresponding to the permission attribute items returned from the user device in response to the disclosure confirmation request transmitted by the disclosure confirmation request transmission means (for example, Patent Document 1).

JP 2009-199573 A

The personal attribute information provided by the system described in Patent Document 1 includes, for example, email address, address, gender, hobbies, etc., of the personal attribute information registrant. However, this information may change. For example, if the personal attribute information registrant moves, their address and telephone number may change, and their name may change due to marriage, etc. However, Patent Document 1 is based on the assumption that the personal attribute information is up to date.
Users' personal information is the basis for a variety of services. Therefore, it is necessary for the information to be reliable. In particular, when the service provider is, for example, a financial institution, a high degree of reliability is required for the information they handle.

The present invention aims to provide a personal information management device, a personal information management system, a terminal, and a terminal program that improve the convenience of reliable personal information.

The present invention solves the above problems by the following means. Note that, for ease of understanding, the following description will be given with reference symbols corresponding to the embodiments of the present invention, but the present invention is not limited to these. Furthermore, the configurations described with reference symbols may be modified as appropriate, and at least a portion of the configurations may be replaced with other configurations.

The first invention is a personal information management device (1) communicatively connected to a user terminal (4) and each of business operators' devices (9) that provide services to a user of the user terminal, the personal information management device comprising: a personal information database (8) that stores personal information of the user whose identity has been confirmed by an identity confirmation process performed with the user terminal; a notification receiving means (22) that receives an update occurrence notification related to the personal information from the business operator device; an information identification means (22) that identifies the personal information related to the update occurrence notification received by the notification receiving means from the personal information database; and a provision stopping means (23) that stops providing the personal information identified by the information identification means to each business operator.
A second invention is a personal information management device according to the first invention, comprising: a held information requesting means (22) for requesting the business device (9) of each business to provide held information held by each business for the items of personal information provided to each business; a held information receiving means (22) for receiving the held information from the business device of each business as a result of the request by the held information requesting means; and an information matching means (22) for matching the held information received by the held information receiving means with the personal information in the personal information database (8) corresponding to the held information, and the provision stopping means (23) is a personal information management device which, when the matching results by the information matching means are not the same, stops providing the personal information in the personal information database matched by the information matching means to each business.
A third invention is a personal information management device comprising: an availability memory unit (33) that stores availability information regarding whether the personal information can be provided to each business operator in correspondence with the user, a usage request receiving means (17) that receives a request to use the personal information from the business operator device (9), a provision status confirmation means (18) that confirms the usage provision status of the personal information that satisfies the usage request received by the usage request receiving means, an unavailability notification means (19) that notifies the business operator device (9) that the personal information cannot be provided when the result of confirmation by the provision status confirmation means shows that the provision of the personal information has been suspended, and a personal information providing means (19) that extracts the personal information that satisfies the usage request received by the usage request receiving means from the personal information database (8) by referring to the availability memory unit (33) when the result of confirmation by the provision status confirmation means shows that the provision of the personal information has not been suspended, and transmits the extracted personal information to the business operator device.
A fourth invention is a personal information management device, comprising, in a personal information management device (1) of any of the first to third inventions, a provision suspension notification means (23) for notifying the user terminal (4) of the user corresponding to the personal information identified by the information identification means (22) of the suspension of provision of the personal information to each business operator, an update request receiving means (24) for receiving an information update request from the user terminal that sent the provision suspension notification means, a personal information updating means (24) for updating the personal information database (8) using the personal information of the user included in the information update request received by the update request receiving means, and a suspension cancellation means (24) for canceling the suspension of provision of the personal information of the user in the personal information database updated by the personal information update means.
A fifth invention is a personal information management device in which, in the personal information management device (1) of the fourth invention, the personal information of each user registered in the personal information database (8) is authenticated by an authentication authority (6) that authenticates the personal information, and the device is provided with an authentication request means (24) that requests the authentication authority to authenticate the personal information of the user included in the information update request received by the update request receiving means (24), and the personal information update means (24) registers the personal information authenticated by the authentication authority requested by the authentication request means in the personal information database.
A sixth invention is a personal information management system (100) comprising a user terminal (4), a business device (9) of a business providing a service, and a personal information management device (1) communicatively connected to each of the user terminal and the business device, wherein the personal information management device comprises a personal information database (8) storing personal information of a user whose identity has been confirmed by an identity confirmation process performed with the user terminal, the business device comprises a notification sending means for sending an update occurrence notification related to the personal information, and the personal information management device comprises an information identification means (22) for identifying the personal information related to the update occurrence notification received from the business device from the personal information database, and a provision stopping means (23) for stopping the provision of the personal information identified by the information identification means to each business.
A seventh invention is a personal information management system (100) including a user terminal (4), a business device (9) of a business providing a service, and a personal information management device (1) communicably connected to each of the user terminal and the business device, the personal information management device including a personal information database (8) storing personal information of a user whose identity has been confirmed by identity confirmation processing performed with the user terminal, and a retained information request means for requesting the business device of each business to provide retained information held by each business for the items of the personal information provided to each business, and the business device of each business is provided with the personal information management system (100) including a personal information database (8) storing personal information of a user whose identity has been confirmed by identity confirmation processing performed with the user terminal, and a retained information request means for requesting the business device of each business to provide retained information held by each business for the items of the personal information provided to each business, and the business device of each business is provided with the personal information management system (100). the personal information management system further comprising: a held information transmitting means for transmitting the held information held by the business device to the personal information management device in response to a request from the business device, the personal information management device further comprising: held information receiving means for receiving the held information from the business device of each business; information matching means for matching the held information received by the held information receiving means with the personal information in the personal information database corresponding to the held information; and provision stopping means for stopping provision of the personal information in the personal information database matched by the information matching means to each business when a matching result by the information matching means is not the same.
An eighth invention is a terminal (4) communicatively connected to a personal information management device (1) that manages personal information of a user, the terminal comprising: a notification receiving means (46) for receiving a notification of the suspension of provision of the personal information to each business operator; and an update request sending means (48) for accepting input of new personal information based on the notification received by the notification receiving means, and sending an information update request including the accepted new personal information to the personal information management device.
A ninth invention is a terminal program (51a) that causes a computer, which is a terminal (4) communicatively connected to a personal information management device (1) that manages personal information of a user, to function as a notification receiving means for receiving a notification of the suspension of provision of the personal information to each business operator, and an update request sending means for accepting input of new personal information based on the notification received by the notification receiving means and sending an information update request including the accepted new personal information to the personal information management device.

The present invention provides a personal information management device, a personal information management system, a terminal, and a terminal program that improve the convenience of reliable personal information.

1 is a diagram showing an overall configuration of a personal information management system according to an embodiment of the present invention; FIG. 2 is a diagram showing functional blocks of a personal information management server according to the embodiment; 4 is a diagram illustrating an example of a storage unit of a personal information management server according to the embodiment; FIG. 2 is a diagram showing functional blocks of a user terminal according to the present embodiment. FIG. 4 is a diagram showing example items of a personal information DB according to the embodiment; 1 is a diagram for explaining a personal information registration process in the personal information management system according to the embodiment; 10 is a flowchart showing an identity verification request process of a user terminal according to the embodiment; FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. 10 is a flowchart showing an identity verification process of the personal information management server according to the embodiment; 10 is a flowchart showing personal information processing of the personal information management server according to the embodiment; FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. FIG. 2 is a diagram for explaining a transaction process in the personal information management system according to the embodiment. 10 is a flowchart showing an information use confirmation process of the personal information management server according to the embodiment; 1 is a diagram for explaining a personal information update process in the personal information management system according to the embodiment; 10 is a flowchart showing information provision stop processing of the personal information management server according to the embodiment;

Below, a description will be given of an embodiment of the present invention with reference to the drawings. Note that this is merely an example, and the technical scope of the present invention is not limited to this example.

(Embodiment)
FIG. 1 is a diagram showing the overall configuration of a personal information management system 100 according to this embodiment.
The personal information management system 100 is a platform system related to personal information in which a personal information management server 1 (personal information management device) performs identity verification of users on behalf of each business operator, thereby reducing the input burden on users and each business operator and managing reliable personal information.
The personal information management system 100 includes a personal information management server 1, a biometric authentication server 3, a user terminal 4 (terminal), a first authentication server 6, a second authentication server 7, a personal information DB (database) 8, and an operator server 9 (operator device). The personal information management server 1, the biometric authentication server 3, the first authentication server 6, the second authentication server 7, the personal information DB 8, and the operator server 9 are communicatively connected via a communication network N. In addition, the user terminal 4 can be connected to the communication network N via a base station R.

The personal information management server 1 is owned, for example, by a company that specializes in managing personal information, and is different from each business. The personal information management server 1 performs identity verification processing for the user on behalf of each business, and performs part of the identity authentication processing. The personal information management server 1 also registers the user's personal information acquired in the identity verification processing in the personal information DB 8. Furthermore, the personal information management server 1 manages the personal information registered in the personal information DB 8.

Here, we will explain the difference between identity verification and identity authentication in this specification. Identity verification refers to verification using an official certificate such as a driver's license or My Number card. On the other hand, identity authentication refers to verification that is performed at the time of a transaction, etc., when identity verification has already been completed, to prevent impersonation, etc.

The biometric authentication server 3 is a server used to confirm the identity of a user by using a facial image (biometric information) of the user acquired during the identity verification process and a facial photograph image on an identity verification document. Examples of identity verification documents include a My Number card and a driver's license. The biometric authentication server 3 verifies whether or not the users are the same person by using a facial image matching program that calculates the degree of match between the facial image and the facial photograph image as a score. The biometric authentication server 3 includes a control unit, a memory unit, a communication interface unit, etc., which are not shown in the figure.

The user terminal 4 is a terminal used by a user who wishes to use the services of each operator. The user terminal 4 is, for example, a mobile phone that also has computer functions, such as a smartphone. The user terminal 4 may also be a tablet, a personal computer (PC), etc.

The first authentication server 6 is a server of a first certification authority (certification authority) that authenticates personal information of a user confirmed by identity verification processing. The first certification authority is, for example, a third-party certification authority that assigns timestamps and issues electronic certificates. The first authentication server 6 includes a control unit, a memory unit, a communication interface unit, etc., which are not shown.

The second authentication server 7 is a server of the second authentication authority used to verify the existence of the identity document obtained from the user in the process of identity verification processing. In this example, the identity document is registered in the second authentication authority with identity identification information and password information associated with each other. If the identity document is a My Number card, the identity identification information is the My Number, and if the identity document is a driver's license, the identity identification information is the license number. The password is, for example, an 8-digit number determined and registered by the user when the identity document is issued to the user.
If the identity verification document is a My Number card, the second authentication authority corresponds to a server of the Japan-Lis (Japan Agency for Local Government Information Systems), and if the identity verification document is a driver's license, the second authentication authority corresponds to a server of a system such as the National Police Agency that manages driver's license information. As described above, the second authentication server 7 has an information DB that stores identity identification information and password information in association with each other. The second authentication server 7 also includes a control unit, a storage unit, a communication interface unit, and the like, which are not shown in the figure.

The personal information DB8 is a database that stores personal information of users managed by the personal information management server 1. As shown in FIG. 1, the personal information DB8 may be independent of the personal information management server 1, but may also be stored in the storage unit of the personal information management server 1, for example. The personal information DB8 may also be cloud-based.

The business server 9 is, for example, a server managed by each business. The business server 9 performs processing at each business. In the example of FIG. 1, the device managed by business A is described as business server 9A, and the device managed by business B is described as business server 9B, but this is just an example. In the following explanation, when the business is not specified, it will be simply described as business server 9. If the business is, for example, a bank, the business server 9 is a server that performs transaction processing such as account opening, transfer, and balance inquiry. Although not shown, the business server 9 is equipped with a control unit, a memory unit, a communication interface unit, etc.

The base station R is a base station for wireless communication, and relays communication between the user terminal 4 and the personal information management server 1 and the carrier server 9. The base station R is, for example, a base station for a wireless LAN (Local Area Network) or a base station for a mobile terminal communication network of a carrier.
The communication network N is a network between various servers or between various servers and the base station R, and is an Internet line, a mobile terminal communication network, or the like.

Next, the functional configuration of the personal information management server 1 will be described.
FIG. 2 is a diagram showing functional blocks of the personal information management server 1 according to this embodiment.
FIG. 3 is a diagram showing an example of the storage unit 30 of the personal information management server 1 according to this embodiment.

The personal information management server 1 shown in FIG. 2 includes a control unit 10, a storage unit 30, and a communication interface unit 39.
The control unit 10 is a CPU (Central Processing Unit) that controls the entire personal information management server 1. The control unit 10 appropriately reads and executes an operating system (OS) and various application programs stored in the storage unit 30, thereby cooperating with the above-mentioned hardware to realize various functions.
The control unit 10 includes a registration processing unit 11 , a utilization processing unit 16 , and an update processing unit 21 .

The registration processing unit 11 performs identity verification of the user. Then, when identity verification is successful, the registration processing unit 11 performs a process of registering the personal information of the user in the personal information DB 8. Furthermore, when identity verification is successful, the registration processing unit 11 performs a process of registering whether or not the personal information can be provided to each business operator.
The registration processing unit 11 includes an identity verification processing unit 12 (confirmation information receiving means, document verification means, identity verification processing means), a personal information processing unit 13 (authentication request means, personal information registration means), and a provision availability processing unit 14 (inquiry sending means, provision availability information receiving means, provision availability information registration means).

The identity verification processing unit 12 performs identity verification processing in response to receiving an identity verification request from the user terminal 4. More specifically, the identity verification processing unit 12 receives verification information including personal information entered by the user from the user terminal 4, password information related to the user's identity verification document, and an image of the identity verification document photographed by the user and an image of the user's face. The identity verification processing unit 12 then transmits the identity identification information and password information to the second authentication server 7 to request authentication in order to verify whether the user of the identity verification document actually exists. Here, the identity identification information can be obtained, for example, from the image of the identity verification document.

In addition, in order to confirm whether the face photo image included in the received image of the identification document and the user's own face image are the same person, the identity verification processing unit 12 sends the face photo image included in the image of the identification document and the user's own face image to the biometric authentication server 3 and requests a comparison.
The identity verification processing unit 12 determines that identity verification has been successful when it can verify the identity using the second authentication server 7 and confirm that the person is the same person by matching images using the biometric authentication server 3.

The personal information processing unit 13 is a process performed when the identity verification processing unit 12 has verified the identity of the user. More specifically, the personal information processing unit 13 requests the first authentication server 6 to authenticate the personal information of the user whose identity has been verified. Then, the personal information processing unit 13 registers the personal information verified by the first authentication server 6 in the personal information DB 8.
The provision permission processing unit 14 stores the user's registration information regarding whether or not to provide the personal information registered in the personal information DB 8 to each business operator in the provision permission storage unit 33. More specifically, the provision permission processing unit 14 inquires of the user terminal 4 about permission to provide the personal information for each business operator. Then, when the provision permission processing unit 14 receives provision permission information for each business operator from the user terminal 4 as a response to the inquiry, it registers the received provision permission information in the provision permission storage unit 33 in association with the user.

The usage processing unit 16 processes requests from businesses to use personal information of users.
The usage processing unit 16 includes a usage request receiving unit 17 (usage request receiving means), a status checking unit 18 (provision status checking means), and a result processing unit 19 (personal information providing means, provision unavailability notifying means, user notifying means).
The usage request receiving unit 17 receives a request to use personal information from the business server 9 so that the business server 9 can perform processing using the user's personal information. The usage request includes, for example, a user ID (IDentifier) and items. The user ID is identification information that identifies a user who wishes to use the personal information. The user ID may be uniquely assigned by the personal information management server 1, or may be the terminal ID of the user terminal 4, etc. The items are name, address, etc. Examples of items will be described later.

The status confirmation unit 18 confirms the usage provision status of the personal information of the target user of the usage request. Specifically, the status confirmation unit 18 refers to the provision status storage unit 34 and confirms whether the provision status corresponding to the user ID included in the usage request is available or not.

The result processing unit 19 performs processing according to the confirmation result of the usage provision status of the status confirmation unit 18. If the confirmation result of the usage provision status of the status confirmation unit 18 is "provision possible", the result processing unit 19 refers to the provision possibility storage unit 33 and extracts personal information of the user that satisfies the usage request from the personal information DB 8. Then, the result processing unit 19 transmits the extracted personal information to the business operator server 9. Note that, if the result processing unit 19 cannot extract personal information of the user that satisfies the usage request by referring to the provision possibility storage unit 33, it transmits a message to the business operator server 9 that there is no information to be provided.
On the other hand, if the status checking unit 18 checks the usage and provision status to indicate that the service cannot be provided, the result processing unit 19 transmits to the business server 9 a message indicating that the service has been stopped and the service cannot be provided.
Then, the result processing unit 19 notifies the user terminal 4 of the fact that a utilization request has been made and whether or not information has been provided.

The update processing unit 21 performs an update process for the personal information registered in the personal information DB 8 .
The update processing unit 21 includes an information identification unit 22 (contact receiving means, information identification means, held information request means, held information receiving means, information matching means), a provision suspension processing unit 23 (provision suspension means, provision suspension notification means), and an update information reception processing unit 24 (update request receiving means, authentication request means, personal information update means, suspension release means).

The information identification unit 22 performs a process of identifying personal information that is not up to date from the personal information of each user registered in the personal information DB 8. Specifically, when the information identification unit 22 receives an update occurrence notification related to personal information from the business server 9, it identifies the personal information related to the update occurrence notification from the personal information DB 8. The update occurrence notification includes at least the user ID, and may include the updated item and the content corresponding to the item.
Furthermore, for example, at a predetermined timing, the information identifying unit 22 requests the provision of held information including items and contents of personal information of each user held in the business entity server 9. Then, the information identifying unit 22 compares the held information received from the business entity server 9 with personal information in the personal information DB 8 corresponding to the held information, thereby identifying the contents of the mismatched items.

The provision suspension processing unit 23 suspends the provision of the personal information related to the update occurrence notification received by the information identification unit 22 to each business server 9 .
Furthermore, the provision suspension processing unit 23 suspends the provision to each business server 9 of personal information in the personal information DB 8 relating to the items with inconsistent contents identified by the information identifying unit 22 .
Here, the scope of the suspension of provision of personal information in the personal information DB 8 may be only the mismatched items, or may be all of the personal information of the user.
Then, the provision stop processing unit 23 updates the provision status storage unit 34. More specifically, the provision stop processing unit 23 changes the provision status of the user ID related to the user in the provision status storage unit 34 to "provision unavailable."
Furthermore, the provision suspension processing unit 23 notifies the user terminal 4 that the provision of the user's personal information to each business operator has been suspended.

When the update information reception processing unit 24 receives an information update request from the user terminal 4, it uses the user's personal information included in the information update request to update the personal information DB 8. At that time, the update information reception processing unit 24 requests the first authentication server 6 to authenticate the received personal information of the user. Then, the update information reception processing unit 24 updates the personal information DB 8 with the personal information authenticated by the first authentication server 6.
Then, the update information reception processing unit 24 cancels the suspension of provision of the personal information of the user. The update information reception processing unit 24 changes the provision status of the user ID related to the user in the provision status storage unit 34 to "provision available."

The storage unit 30 is a storage area such as a hard disk, a semiconductor memory device, etc. for storing programs, data, etc. required for the control unit 10 to execute various processes.
The storage unit 30 includes a program storage unit 31 , an item level storage unit 32 , a provision availability storage unit 33 , a provision status storage unit 34 , and a business operator information storage unit 35 .
The program storage unit 31 is a storage area for storing various programs. The program storage unit 31 stores, for example, programs for performing various functions executed by the control unit 10 of the personal information management server 1. The programs for performing various functions executed by the control unit 10 of the personal information management server 1 may be configured of multiple programs for each function.

The item level storage unit 32 stores the levels relating to the handling of personal information in association with each item of the personal information DB 8. An example of the item level storage unit 32 is shown in FIG.
The item level storage unit 32 shown in FIG. 3A has three security levels, from 1 to 3, with level 1 being the highest level of security. Level 1 requires personal information to be treated as the most confidential information. In the example of FIG. 3A, level 1 corresponds to items such as biometric information, terminal information, and a combination of a number and expiration date written on an identification document. On the other hand, level 3 corresponds to items with a relatively low level of confidentiality, including items such as purchase history and hobbies and preferences. The item level storage unit 32 shown in FIG. 3A is an example, and other items may or may not be included. The levels of each item are also an example.

The provision permission storage unit 33 stores permission information regarding the provision of personal information to a business operator for each user. An example of the provision permission storage unit 33 is shown in FIG.
The provision possibility storage unit 33 shown in FIG. 3B stores a user ID, a business ID, and a permission level in association with each other. In this example, the user can set the permission level for each business. The user ID is identification information for identifying the user. The business ID is identification information for identifying the business. The permission level corresponds to the level of the item level storage unit 32 and is for specifying the items of personal information to be provided. The permission level of "1, 2, 3" indicates that the contents of each item corresponding to levels 1, 2, and 3 of the item level storage unit 32 among the personal information stored in the personal information DB 8 can be provided to the business. The permission level of "2" indicates that the contents of each item corresponding to level 2 of the item level storage unit 32 among the personal information stored in the personal information DB 8 can be provided to the business. In this case, the personal information management server 1 does not provide the contents of each item corresponding to levels 1 and 3 of the item level storage unit 32 to the business. The permission level of the item level storage unit 32 of "None" indicates that no personal information is provided to the business.

The provision status storage unit 34 stores the provision status of personal information for each user to the business operator. An example of the provision status storage unit 34 is shown in FIG.
The provision status storage unit 34 shown in Fig. 3C stores a user ID and a provision status in association with each other. The user ID is identification information for identifying a user. The provision status is, for example, flag information indicating whether the content can be provided or not.
The business information storage unit 35 is a storage area for storing information related to each business. The business information storage unit 35 stores various information related to the business using a business ID that identifies the business as a key.
The communication interface unit 39 is an interface for communicating with various servers such as the personal information DB 8 and the business server 9, and the user terminal 4, etc. via the communication network N.

Next, the functional configuration of the user terminal 4 will be described.
FIG. 4 is a diagram showing functional blocks of the user terminal 4 according to this embodiment.
As shown in FIG. 4, the user terminal 4 includes a control unit 40, a storage unit 50, a camera 54, a touch panel display 55, and a communication interface unit 59.

The control unit 40 is a CPU that controls the entire user terminal 4. The control unit 40 appropriately reads and executes the OS and various application programs stored in the storage unit 50, thereby cooperating with the above-mentioned hardware and executing various functions.
The control unit 40 includes a registration processing unit 41 and an update processing unit 45 .
The registration processing unit 41 performs processing related to the registration of personal information. The registration processing unit 41 includes an identity verification request unit 42 (identification information transmission means), an identity verification result receiving unit 43 (result receiving means), and a provision availability request processing unit 44 (provision availability information transmission means).

The personal identification requesting unit 42 performs a process related to personal identification performed when registering personal information. The personal identification requesting unit 42 transmits confirmation information used for personal identification to the personal information management server 1 to request personal identification.
The identity verification result receiving unit 43 receives the result of identity verification executed by the personal information management server 1 from the personal information management server 1 .
When the processing result received by the identity verification result receiving unit 43 indicates that identity verification has been successful, the provision availability request processing unit 44 transmits provision availability information regarding whether or not personal information can be provided to each business operator to the personal information management server 1. Then, the provision availability request processing unit 44 receives the registration result regarding the provision availability information from the personal information management server 1.

The update processing unit 45 performs processing related to updating personal information, and includes a notification receiving unit 46 (notification receiving means), an update screen output unit 47, and an update request processing unit 48 (update request sending means).
The notification receiving unit 46 receives a notification from the personal information management server 1 to stop providing personal information to each business operator.
The update screen output unit 47 outputs an update screen for updating personal information based on the notification received by the notification receiving unit 46 .
The update request processing unit 48 transmits an information update request including new personal information that has been input as new personal information on the update screen to the personal information management server 1. The update request processing unit 48 also receives an update result related to the information update request from the personal information management server 1.

The storage unit 50 is a storage area such as a semiconductor memory element for storing programs, data, etc. required for the control unit 40 to execute various processes.
The storage unit 50 includes a program storage unit 51 .
The program storage unit 51 is a storage area for storing various application programs (hereinafter, the application programs are referred to as applications, apps, programs, etc.). The program storage unit 51 stores a personal information registration application 51a (terminal program) and a transaction application 51b.

The personal information registration application 51a and the transaction application 51b are installed in advance on the user terminal 4, or are downloaded to the user terminal 4 by communicating with an application distribution server (not shown) via the communication network N.
The personal information registration application 51a is a program for carrying out various functions executed by the control unit 40 of the user terminal 4. More specifically, the personal information registration application 51a is a program used, for example, when applying for personal information when opening an account or when registering a user to receive a service.
The transaction application 51b is a program for carrying out various transactions by the business server 9. More specifically, the transaction application 51b is a program used for, for example, financial transactions and settlement transactions. Here, one transaction application 51b is illustrated as an example, but the program storage unit 51 may store a plurality of transaction applications that differ for each business.

The camera 54 is an imaging device. The camera 54 has an in-camera 54a and an out-camera 54b. The in-camera 54a is a camera provided on the touch panel display 55 side of the user terminal 4. The out-camera 54b is a camera provided on the back side of the user terminal 4.
The touch panel display 55 functions as a display unit constituted by a liquid crystal panel or the like, and also functions as an input unit for inputting various operations using a user's finger.
The communication interface unit 59 is an interface for communicating with various servers via the communication network N, and serves as a transmitter and a receiver.

Next, examples of items of personal information stored in the personal information DB 8 will be described.
FIG. 5 is a diagram showing example items of the personal information DB 8 according to this embodiment.
The personal information DB 8 stores, for example, name, date of birth, address, document category, number, document image, face image, etc., using a user ID as a key.
The user ID is identification information for identifying a user.
The name is the name of the user. The name (hiragana) may be included as a separate item from the name.
The date of birth is the date of birth of the user, and the address is the address of the user. The postal code may be included as a separate item from the address. The address may also be included as a separate item for each division, such as prefecture, city, ward, town, or village.
The document type is the document used for identity verification, for example, a driver's license, My Number card, or other identification document type.
The number is obtained from a document, such as a driver's license number or a My Number.
The document image is the image of the identification document itself.
The face image is the user's face image itself.
In addition, the personal information DB 8 also has each item in the item level storage unit 32. The personal information of each user does not need to have data for all items.
Each item is stored in association with a date. The date is the most recent registration date. For example, if the personal information is registered immediately after identity verification, the date is the date the personal information was registered, and if the information for the item has been updated, the date is the date it was updated.

Here, a computer refers to an information processing device equipped with a control unit, a storage device, etc., and the personal information management server 1, the user terminal 4, the first authentication server 6, the second authentication server 7, and the business server 9 are each information processing devices equipped with a control unit, a storage device, etc., and are included in the concept of a computer.

Next, the processing of the personal information management system 100 will be described.
First, the flow of the process for registering personal information of a user will be described.
FIG. 6 is a diagram for explaining the personal information registration process in the personal information management system 100 according to this embodiment.
FIG. 7 is a flowchart showing the identity verification request process of the user terminal 4 according to this embodiment.
8 to 11 are diagrams showing examples of displays on the user terminal 4 according to this embodiment.
FIG. 12 is a flowchart showing the identity verification process of the personal information management server 1 according to this embodiment.
FIG. 13 is a flowchart showing personal information processing by the personal information management server 1 according to this embodiment.
14 and 15 are diagrams showing examples of displays on the user terminal 4 according to this embodiment.

First, a user who wishes to use a service provided by the personal information management system 100 starts up the personal information registration application 51 a already installed on the user terminal 4 .
Then, when the user selects to make a new registration from a menu screen not shown, in step S1 of FIG. 6 (hereinafter, "step S" will be simply referred to as "S"), the control unit 40 (registration processing unit 41) of the user terminal 4 performs identity verification request processing.
As the identity verification request process, the registration processing unit 41 outputs a guide screen (not shown) relating to personal information registration to the touch panel display 55. Thereafter, the user terminal 4 performs processes according to the guide screen.

Here, the identity verification request process of the user terminal 4 will be described with reference to FIG.
First, in S101 of Fig. 7, the registration processing unit 41 outputs a selection screen 60 of the identification document shown in Fig. 8 to the touch panel display 55. The selection screen 60 shown in Fig. 8 is a screen for selecting either a My Number card or a driver's license as the identification document. In the example of Fig. 8, the user has selected the selection area 60a for the driver's license. When selected by the user, a check is added to the selection area 60a indicating that the selection area 60a has been selected. In addition, a button 60b for transitioning to the next screen is displayed selectably.

When button 60b in FIG. 8 is selected, in S102 in FIG. 7, the registration processing unit 41 outputs a document shooting screen 61 for photographing an identification document shown in FIG. 9 to the touch panel display 55 and activates the outer camera 54b. In the example of FIG. 9, the document shooting screen 61 is displayed and the user is about to photograph the user's driver's license. The user adjusts the position of the user terminal 4 so that the driver's license fits within the frame of the document shooting screen 61. Then, when the user touches button 61a, which is the shutter button, in S103 in FIG. 7, the registration processing unit 41 controls the outer camera 54b to photograph the driver's license (identification document) and temporarily stores the obtained image of the driver's license in the memory unit 50.

7, the registration processing unit 41 reads the image of the driver's license and extracts the text. The registration processing unit 41 then outputs a read confirmation screen (not shown) for confirming the text of each item such as the name, date of birth, address, and license number to the touch panel display 55. The user checks the items that match while looking at the read confirmation screen.
Next, the registration processing unit 41 outputs an information input screen 62 shown in Fig. 10 to the touch panel display 55. In the example of Fig. 10, input of a name is shown, and characters read from the driver's license and confirmed by the user are shown in a manner that makes them clear. The user uses the information input screen 62 to input personal information to be registered in the personal information DB 8.

7, the registration processing unit 41 accepts the selection, outputs, for example, a face image capturing screen 63 shown in FIG. 11 to capture a face image of the user on the touch panel display 55, and activates the in-camera 54a. Then, the user aligns the position of his/her face with the face frame 63b on the through screen 63a while checking the touch panel display 55.
In S106 of FIG. 7, the registration processing unit 41 performs known face recognition processing on the captured image acquired from the inner camera 54a to detect the eyes.
In S107, the registration processing unit 41 judges whether or not a blink has been detected. If a blink has been detected (S107: YES), the control unit 40 moves the process to S108. On the other hand, if a blink has not been detected (S107: NO), the control unit 40 remains in this process until a blink is detected.
In S108, the registration processing unit 41 temporarily stores in the storage unit 50 the face image captured after detecting the blink.

When the user completes the series of inputs and performs an operation to proceed to the next process, the registration processing unit 41 accepts the confirmation and input information in S109 of Fig. 7. After that, in S2 of Fig. 6, the control unit 10 (identification requesting unit 42) requests identity verification by transmitting verification information to the personal information management server 1.
The order of guidance on the guidance screen described above is merely an example, and for example, the order of preceding and following processes may be changed.
In S3, when the control unit 10 (registration processing unit 11) of the personal information management server 1 receives the verification information from the user terminal 4, it performs identity verification processing.

Here, the identity verification process will be described with reference to FIG.
In S11 of FIG. 12, the control unit 10 (identification processing unit 12) of the personal information management server 1 transmits to the biometric authentication server 3 the face image included in the verification information and the face photograph image included in the driver's license image.
In S12, the control unit of the biometric authentication server 3 compares the received face image with the face photograph image. The control unit of the biometric authentication server 3 performs image matching processing by a face image matching program, and calculates the degree of match between the face image and the face photograph image as, for example, a score.
Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a result of identity, and ends this process.

In S<b>13 , the control unit 10 (personal information verification processing unit 12 ) of the personal information management server 1 transmits the personal identification information and the password information to the second authentication server 7 .
In S14, the control unit of the second authentication server 7 checks the existence of the received information. More specifically, it checks whether the received information combination is registered in an information DB (not shown) held by the second authentication server 7 to check whether the information actually exists. The control unit of the second authentication server 7 then transmits the check result to the personal information management server 1 and ends this process.

In S15, the control unit 10 (identification processing unit 12) judges whether or not the presence and identity of the person have been confirmed. For example, when the score received from the biometric authentication server 3 is equal to or greater than a predetermined value and the confirmation result received from the second authentication server 7 is indicative of the presence of the person, the control unit 10 (identification processing unit 12) judges that the presence and identity of the person have been confirmed. Here, the score received from the biometric authentication server 3 is expressed by a number ranging from 0 to 100, for example, and the higher the degree of match, the higher the number. If the score is equal to or greater than a predetermined value, the identification processing unit 12 judges that the person is the same. On the other hand, if either the presence or identity of the person has not been confirmed, the control unit 10 (identification processing unit 12) judges that the presence and identity of the person have not been confirmed.
If the control unit 10 is able to confirm the existence and identity of the person (S15: YES), the control unit 10 proceeds to S16. On the other hand, if the control unit 10 is unable to confirm the existence and identity of the person (S15: NO), the control unit 10 proceeds to S17.

If the score received from the biometric authentication server 3 is less than a predetermined value, the process of S13 may not be performed, and the process of S15 may be performed after receiving the process result of S12.
Furthermore, the order of the process of S11 and the process of S13 is not limited to this, and the process of S11 may be performed after the process of S13.

In S16, the control unit 10 (personal identification processing unit 12) determines that the person's identity has been identified, and the process proceeds to S4 in FIG.
On the other hand, in S17, the control unit 10 (identification processing unit 12) determines that identity verification has not been possible, and ends this process. The control unit 10 (identification processing unit 12) then transmits a message to the user terminal 4 indicating that identity verification has not been possible. This causes the control unit 40 (registration processing unit 41) of the user terminal 4 to output a message to the touch panel display 55 indicating that identity verification has not been possible, so that the user can take action such as performing the registration process again.

In S4 of FIG. 6, when the personal information management server 1 ends the identity verification process, the control unit 10 (registration processing unit 11) performs personal information processing.
Here, the personal information processing will be described with reference to FIG.
In S21 of FIG. 13, the control unit 10 (personal information processing unit 13) requests the first authentication server 6 to authenticate the personal information.

When the control unit of the first authentication server 6 receives the personal information, in S22, it adds authentication information to the received personal information.
In S23, the control unit of the first authentication server 6 transmits the personal information to which the authentication information has been added, to the personal information management server 1.
When the personal information processing unit 13 of the personal information management server 1 receives the personal information to which the authentication information has been added, in S24, it registers the received personal information in the personal information DB 8. Thereafter, the personal information processing unit 13 shifts the process to S5 in FIG.

In S5 of FIG. 6, the control unit 10 (registration processing unit 11) of the personal information management server 1 transmits the result of the identity verification request to the user terminal 4.
When the user terminal 4 receives a result from the personal information management server 1 indicating that the user's identity has been verified and that the personal information has been registered, the user terminal 4 outputs, for example, a completion screen 65 as shown in Fig. 14 on the touch panel display 55. The completion screen 65 is a screen indicating that the user's identity verification has been completed and that the personal information has been registered. When the user selects a button 65a for setting the business operator on the completion screen 65, the control unit 40 (provision availability request processing unit 44) performs provision availability request processing in S6 in Fig. 6.

The provision permission request processing unit 44 outputs the business setting screen 66 shown in FIG. 15 to the touch panel display 55. The business setting screen 66 is a screen where the user can set whether or not to provide personal information for each business. The user sets whether or not to provide the information by sliding the slide bar for each business shown in the setting area 66a to the left or right. Although not shown, a permission level setting screen may be output for each business set to provision permission, and the permission level may be set. Then, when the user selects the button 66b for registration, in S7 of FIG. 6, the control unit 40 (provision permission request processing unit 44) transmits the provision permission information to the personal information management server 1 and requests registration.

In S8, in response to receiving the provision availability information, the control unit 10 (provision availability processing unit 14) of the personal information management server 1 registers the provision availability information in the provision availability storage unit 33. Thereafter, the control unit 10 (provision availability processing unit 14) transmits to the user terminal 4 as a processing result that setting of the provision availability information has been completed, and ends this processing.
The control unit 40 (provision availability request processing unit 44) of the user terminal 4 outputs to the touch panel display 55 a message indicating that the provision availability information has been set, and ends this process.

In the above example, the user launches the personal information registration app 51a. However, this is not limited to this. If the user launches the trading app 51b, which will be described next, and personal information registration processing has not been performed, the user may launch the personal information registration app 51a from the trading app 51b.

Next, the flow of processing for using the user's personal information will be described.
FIG. 16 is a diagram for explaining a transaction process in the personal information management system 100 according to this embodiment.
FIG. 17 is a flowchart showing the information use confirmation process of the personal information management server 1 according to this embodiment.
Here, an example will be described in which the user uses the transaction application 51b to carry out transaction processing at business A. However, transactions at other businesses can also be carried out in the same manner.

First, the user launches the transaction application 51b installed on the user terminal 4. The user then performs an operation to request a transaction. In this example, to request a transaction, the user selects a transaction type and takes a picture of the user's own face for identity authentication. Then, in S31 of FIG. 16, the control unit 40 of the user terminal 4 sends a transaction request to the business server 9A of business A. The transaction request includes the transaction type and a facial image of the user.

When the business entity server 9 receives a transaction request from the user terminal 4, in S32, the control unit of the business entity server 9 performs a personal authentication request process.
In the personal authentication request process, the control unit of the business server 9 transmits a face image of the user to the personal information management server 1, thereby requesting the personal information management server 1 to perform personal authentication.
In S33, the control unit 10 of the personal information management server 1 performs identity authentication processing. More specifically, the control unit 10 of the personal information management server 1 transmits the face image of the user used in the identity verification processing (this face image is stored in the personal information DB 8) managed by the personal information management server 1 and the face image of the user received from the business server 9 to the biometric authentication server 3. In the biometric authentication server 3, the control unit compares the two received face images. The control unit of the biometric authentication server 3 performs image matching processing using a face image matching program and calculates the degree of match between the two face images as, for example, a score. Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a matching result, and the control unit 10 of the personal information management server 1 transmits the matching result to the business server 9.

If the business entity server 9 is able to authenticate the person based on the received comparison result, the control unit of the business entity server 9 transmits a request for use of information to the personal information management server 1 in S34.
In S35, the control unit 10 (use processing unit 16) of the personal information management server 1 performs information use confirmation processing.

Here, the information use confirmation process will be described with reference to FIG.
In S 41 of FIG. 17, the control unit 10 (use request receiving unit 17 ) of the personal information management server 1 receives a use request from the business server 9 .
In S42, the control unit 10 (status confirmation unit 18) checks the usage provision status of the personal information of the target user of the usage request by referring to the provision status storage unit 34.
In S43, the control unit 10 (status confirmation unit 18) judges whether the personal information can be provided as a result of the confirmation. If the personal information can be provided (S43: YES), the control unit 10 moves the process to S44. On the other hand, if the personal information cannot be provided (S43: NO), the control unit 10 moves the process to S48.

In S44, the control unit 10 (result processing unit 19) extracts personal information of the target user of the usage request from the personal information DB 8. At that time, the result processing unit 19 refers to the provision permission storage unit 33 and confirms the permission level of the target user for the business A. Then, the result processing unit 19 refers to the item level storage unit 32 to confirm the items corresponding to the permission level, and extracts the contents of the confirmed items from the personal information DB 8.
In S45, the control unit 10 (result processing unit 19) judges whether or not the specified personal information has been extracted. The specified personal information refers to the personal information of the items included in the usage request among the extracted personal information. Here, if the contents of even one of the items included in the usage request can be extracted, it is deemed that the specified personal information has been extracted. If the specified personal information has been extracted (S45: YES), the control unit 10 transfers the process to S46. On the other hand, if the specified personal information cannot be extracted (S45: NO), the control unit 10 transfers the process to S47.

In S46, the control unit 10 (result processing unit 19) transmits the predetermined personal information to the business server 9, and ends this process.
In S47, the control unit 10 (result processing unit 19) transmits to the business server 9 a message indicating that personal information could not be extracted, and ends this process.
On the other hand, in S48, the control unit 10 (result processing unit 19) transmits to the business server 9 a message to the effect that the provision of personal information has been stopped, and ends this process.
The control unit 10 (result processing unit 19) notifies the user terminal 4 of the fact that there has been a request to use the personal information and whether or not the information has been provided.

16, the control unit of the business entity server 9 receives the result of the utilization request from the personal information management server 1. When a flag indicating utilization is possible or personal information is received as the result of the utilization request, this means that the personal information has been provided, and in S36a, the control unit of the business entity server 9 performs transaction processing with the user terminal 4.
On the other hand, if a flag indicating that use is unavailable is received as a result of the usage request, or if no personal information is received, this means that no personal information was provided, and in S36b, the control unit of the business server 9 receives the necessary personal information individually and directly from the user terminal 4, and then performs transaction processing with the user terminal 4.

In the above example, a case where a transaction request is made from the user terminal 4 is described as an example, but the same applies when no transaction request is made from the user terminal 4. When the business server 9 performs processing using the user's personal information, for example, in batch processing, the control unit of the business server 9 may perform processing from S34 onwards. In that case, the transaction processing of S36a or S36b is performed only by the business server 9.

Next, the flow of processing related to updating the user's personal information will be described.
FIG. 18 is a diagram for explaining the personal information update process in the personal information management system 100 according to this embodiment.
FIG. 19 is a flowchart showing the information provision stop processing of the personal information management server 1 according to this embodiment.
For example, when the user terminal 4 sends a user's personal information to the business server 9A, in S61 of Figure 18, the control unit of the business server 9A updates the personal information of the user held by the business server 9A based on the personal information received from the user terminal 4.

The user's personal information here refers to personal information that has changed, such as a change in the user's address or email address.
The user terminal 4 may transmit the personal information to the business server 9A using the transaction application 51b, may transmit the personal information by e-mail, or may transmit the personal information by inputting the personal information from a website set up by the business of the business server 9A. This also includes the user sending the personal information by mail or fax on paper to the business server A.

In S62, the control unit (message sending means) of the business entity's server 9A sends a message of update occurrence regarding the personal information to the personal information management server 1.
In S63, the control unit 10 (update processing unit 21) of the personal information management server 1 performs information provision stop processing.

Here, the information provision stopping process will be described with reference to FIG.
In S71 of FIG. 19, the control unit 10 (information identifying unit 22) of the personal information management server 1 receives a notification of an update occurrence related to personal information from the business entity's server 9A.
In S72, the control unit 10 (information identification unit 22) identifies personal information in the personal information DB 8 related to the update occurrence notification.
In S73, the control unit 10 (provision stop processing unit 23) updates the provision status in the provision status storage unit 34 corresponding to the user of the identified personal information to provision unavailable.
In S74, the control unit 10 (provision suspension processing unit 23) notifies each business server 9 of the suspension of provision of the specified personal information.
In S75, the control unit 10 (provision suspension processing unit 23) transmits a request to the user terminal 4 corresponding to the personal information to stop the provision of the personal information to the business server 9, and ends this process.

When the control unit 40 (notification receiving unit 46) of the user terminal 4 receives a notification regarding the suspension of provision of personal information to the business server 9, the control unit 40 (update request processing unit 48) makes an information update request for the personal information to the personal information management server 1 in S64 of FIG. 18. Here, the control unit 40 (update screen output unit 47) of the user terminal 4 that has received the notification may automatically start the personal information registration app 51a and output an update screen (not shown) to the touch panel display 55. Then, when the user inputs the latest (new) personal information according to the update screen, the control unit 40 (update request processing unit 48) may send an information update request to the personal information management server 1.

In S65, when the control unit 10 (update information receiving processing unit 24) of the personal information management server 1 receives the information update request, it performs personal information processing. As the personal information processing, the update information receiving processing unit 24 updates the personal information DB 8 using the personal information of the user included in the information update request. Here, the information update request includes the user's facial image in addition to the personal information of the user. The update information receiving processing unit 24 first performs identity authentication processing using the received facial image of the user. In the identity authentication processing, the received facial image of the user and the facial image of the user used in the identity verification processing managed by the personal information management server 1 (this facial image is stored in the personal information DB 8) are transmitted to the biometric authentication server 3. In the biometric authentication server 3, the control unit compares the two received facial images and calculates the degree of match between the two facial images, for example, as a score. Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a comparison result. If the personal information management server 1 is able to authenticate the user based on the received matching result, the update information receiving processor 24 then requests the first authentication server 6 to authenticate the received personal information of the user. Then, if the user is authenticated by the first authentication server 6, the update information receiving processor 24 updates the authenticated personal information in the personal information DB 8.

Then, in S66, the control unit 10 (update information reception processing unit 24) of the personal information management server 1 lifts the suspension of provision of the personal information of the user. The update information reception processing unit 24 changes the provision status of the user ID related to the user in the provision status storage unit 34 to "available". In addition, the control unit 10 of the personal information management server 1 notifies each business server 9 of the resumption of provision of the personal information.
By doing so, the personal information of the user whose suspension of provision of personal information has been lifted can be provided to the business server 9 again.

In the above process, when an update occurs, the control unit 10 of the personal information management server 1 identifies the personal information related to the update notification and notifies each business server 9 of the suspension of provision, but this is not limited to the example. For example, when an update occurs, the control unit 10 of the personal information management server 1 may not notify each business server 9 of the suspension of provision, and may notify each business server 9 only when provision of the personal information is resumed.

As described above, according to this embodiment, the personal information management system 100 has the following advantages.
(1) The personal information management server 1 performs identity verification processing for the user, and registers the personal information of the user whose identity has been verified in the personal information DB 8. In addition, the personal information management server 1 registers whether or not personal information can be provided to each business for each user.
Therefore, since the user can decide whether or not to provide personal information to each business and register, a system can be constructed in which personal information can be provided only to businesses approved by the user. Also, since each business can receive personal information from the user by using the personal information management system 100, it is not necessary for each business to collect and manage personal information, which is convenient.
Such a mechanism of the personal information management system 100 makes it possible to provide a platform for personal information to each business operator.

(2) The personal information management server 1 receives the personal information of the user from the user terminal 4 and requests the first authentication authority to authenticate the personal information of the user whose identity has been confirmed, and registers the authenticated personal information in the personal information DB 8.
Therefore, if the personal information registered in the personal information DB 8 is tampered with or impersonated, it can be detected, and the information can be held as highly secure information.
(3) The personal information management server 1 transmits the identity identification information and password received from the user terminal 4 for identity verification processing to the second authentication authority, and verifies the existence of the user at the second authentication authority. If the existence of the user is verified, the personal information is registered in the personal information DB 8.
Therefore, the personal information registered in the personal information DB 8 is personal information authenticated by the second authentication authority, and the information stored as personal information becomes highly reliable.

(4) The personal information management server 1 can establish a system in which the user can register whether or not to provide personal information to each business. This allows the user to set whether or not to provide personal information to each business in a more detailed manner, which is convenient.
(5) The personal information management server 1 is provided with an item level memory unit 32 that associates each item of personal information with a level indicating the importance, and the user sets the level of personal information to be provided for each business when provision of personal information is permitted.
Therefore, by assigning levels to information stored as personal information, the personal information can be managed according to the level, making management easier.

(6) When the personal information management server 1 receives a request to use personal information from the business server 9 , it extracts personal information that is available from the personal information DB 8 and transmits it to the business server 9 .
Therefore, the business server 9 can compare the user's personal information held in its own server with the user's personal information stored in the personal information DB 8, and can obtain the latest information.
(7) When the personal information management server 1 receives notification of an update to personal information from the business server 9, it identifies the corresponding personal information in the personal information DB 8 and stops providing the identified personal information to the business server 9.
Therefore, when it is determined that the personal information is not up to date, the provision of the information to all business servers 9 is stopped, so that old information can be prevented from being used.

(8) If the personal information management server 1 determines that the personal information is not the latest, it notifies the user terminal 4 and requests the provision of personal information. Thus, a system can be constructed in which the latest personal information can be obtained from the user terminal 4.
(9) When the personal information management server 1 receives a request for use from the business server 9 while the provision of personal information is suspended, the personal information management server 1 notifies the business server 9 that the information cannot be provided. This makes it possible to prevent information that cannot be provided from being provided to the business server 9.
(10) When the personal information management server 1 receives a request to update personal information from the user terminal 4, it updates the personal information DB 8 and cancels the suspension of provision of the personal information. In addition, the personal information management server 1 updates the personal information DB 8 using personal information authenticated by the first authentication server 6. Therefore, even when updating personal information in the personal information DB 8, it is possible to update it using a highly secure mechanism.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-mentioned embodiments. Furthermore, the effects described in the embodiments are merely a list of the most favorable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the embodiments. Note that the above-mentioned embodiments and the modified forms described below can be used in appropriate combinations, but detailed explanations will be omitted.

(Modifications)
(1) In the present embodiment, each user is described as setting the permission level of personal information for each business operator, but this is not limited to the above. Each user may set the provision items of personal information for each business operator. By doing so, more detailed settings can be made. It is preferable that the setting of the provision items of personal information is a mechanism in which a permission level is set and items that can be provided and items that cannot be provided can be easily registered by checking or the like.

(2) In the present embodiment, an example has been described in which the user terminal registers in advance whether or not to provide personal information to the business server, but this is not limiting. The business server transmits items for which the user is requested to give permission to the personal information management server, and the query transmission means of the personal information management server queries the user terminal for permission to provide personal information, and obtains a response to the query from the user terminal to obtain the provision availability information from the user terminal.

(3) In this embodiment, an example has been described in which both authentication by the first certification authority and authentication by the second certification authority are performed, but this is not limiting. For example, if there is no system (mechanism) that corresponds to the second certification authority, processing by the second certification authority does not need to be performed.

(4) In this embodiment, an example has been described in which a notification of an update of personal information is received from the business server, but this is not limited to this. The retained information requesting means of the personal information management server 1 may request each business server 9 to provide retained information. In this case, the retained information transmitting means of each business server 9 transmits the retained information retained by the business server 9 to the personal information management server 1 in response to a request from the personal information management server 1. Then, when the retained information receiving means of the personal information management server 1 receives the retained information from each business server 9, the information matching means of the personal information management server 1 matches the retained information provided by the business server 9 with the personal information in the personal information DB 8. If the matching results in a mismatch, the provision stopping means of the personal information management server 1 may stop providing the personal information.

(5) In the present embodiment, the personal information DB 8 is described as a database. The personal information DB 8 may be provided as a database server, or may be distributed among multiple computers using blockchain technology.
(6) In the present embodiment, the biometric authentication server performs a process of confirming whether or not the user is the same person based on the image of the identification document and the user's own face image, but this is not limited to this. The personal information management server may have a face matching program, and the personal information management server may extract a face photo image from the image of the identification document and match it with the face image to confirm whether or not the person is the same. In addition, the matching result is obtained as a score indicating the degree of matching, but this is not limited to this, and the result may be obtained by other methods.

1 Personal information management server 3 Biometric authentication server 4 User terminal 6 First authentication server 7 Second authentication server 8 Personal information DB
9, 9A, 9B Business server 10, 40 Control unit 11, 41 Registration processing unit 12 Identity verification processing unit 13 Personal information processing unit 14 Provision availability processing unit 16 Usage processing unit 17 Usage request receiving unit 18 Status verification unit 19 Result processing unit 21, 45 Update processing unit 22 Information identification unit 23 Provision stop processing unit 24 Update information reception processing unit 30, 50 Memory unit 32 Item level memory unit 33 Provision availability memory unit 34 Provision status memory unit 42 Identity verification request unit 43 Identity verification result receiving unit 44 Provision availability request processing unit 46 Notification receiving unit 47 Update screen output unit 48 Update request processing unit 51a Personal information registration application 54a In-camera 54b Out-camera 55 Touch panel display 100 Personal information management system

Claims (9)

A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal,
a personal information database that stores personal information of the user whose identity has been confirmed by an identity confirmation process performed between the user terminal and the user;
a retained information requesting means for requesting the business device of each business to provide the retained information held by each business for the items of the personal information provided to each business;
a retained information receiving means for receiving the retained information from the business device of each business as a result of a request made by the retained information requesting means;
an information matching means for matching the retained information received by the retained information receiving means with the personal information in the personal information database corresponding to the retained information;
a provision suspension means for suspending provision of the personal information in the personal information database collated by the information collation means to each business operator when the collation result by the information collation means is a mismatch ;
A personal information management device comprising: 2. The personal information management device according to claim 1,
a provision stop notification means for notifying the user terminal of the user corresponding to the personal information in the personal information database matched by the information matching means of a stop of provision of the personal information to each business operator when a matching result by the information matching means is a mismatch;
an update request receiving means for receiving an information update request from the user terminal that has transmitted the provision suspension notification means;
a personal information update means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means;
a suspension cancellation means for cancelling the suspension of the provision of the personal information of the user in the personal information database updated by the personal information update means;
A personal information management device comprising: A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal,
a personal information database that stores personal information of the user whose identity has been confirmed by an identity confirmation process performed between the user terminal and the user;
a notification receiving means for receiving a notification of an update occurrence regarding the personal information from the business device;
an information identifying means for identifying the personal information related to the update occurrence notification received by the notification receiving means from the personal information database;
a provision stopping means for stopping the provision of the personal information identified by the information identifying means to each business operator;
a provision stop notification means for notifying the user terminal of the user corresponding to the personal information identified by the information identification means of a stop of provision of the personal information to each business operator;
an update request receiving means for receiving an information update request from the user terminal that has transmitted the provision suspension notification means;
a personal information update means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means;
a suspension cancellation means for cancelling the suspension of the provision of the personal information of the user in the personal information database updated by the personal information update means;
A personal information management device comprising: 4. The personal information management device according to claim 2 ,
The personal information of each user registered in the personal information database is authenticated by a certification authority that certifies the personal information,
an authentication request means for requesting the authentication authority to authenticate the personal information of the user included in the information update request received by the update request receiving means;
The personal information update means registers the personal information authenticated by the authentication authority requested by the authentication request means in the personal information database. 5. The personal information management device according to claim 1 ,
a provision possibility storage unit that stores provision possibility information regarding whether the personal information can be provided to each business operator in association with the user;
a utilization request receiving means for receiving a utilization request for the personal information from the business device;
a provision status confirmation means for confirming a provision status of the personal information that satisfies the use request received by the use request receiving means;
a provision impossible notification means for notifying the business device that the personal information cannot be provided when the provision of the personal information has been suspended as a result of confirmation by the provision status confirmation means;
a personal information providing means for extracting the personal information that satisfies the use request received by the use request receiving means from the personal information database by referring to the provision availability storage unit when the provision of the personal information has not been stopped as a result of checking by the provision status checking means, and transmitting the extracted personal information to the business device;
A personal information management device comprising: A user terminal;
A business device of a business providing a service;
a personal information management device communicably connected to each of the user terminal and the business device;
A personal information management system comprising:
The personal information management device includes:
a personal information database storing personal information of a user whose identity has been confirmed by an identity confirmation process performed between the user terminal and the personal information database;
The business device includes a notification sending means for sending an update occurrence notification regarding the personal information,
The personal information management device includes:
an information identification means for identifying the personal information related to the update occurrence notification received from the business device from the personal information database;
a provision stopping means for stopping the provision of the personal information identified by the information identifying means to each business operator;
a provision stop notification means for notifying the user terminal of the user corresponding to the personal information identified by the information identification means of a stop of provision of the personal information to each business operator;
an update request receiving means for receiving an information update request from the user terminal that has transmitted the provision suspension notification means;
a personal information update means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means;
a suspension cancellation means for cancelling the suspension of the provision of the personal information of the user in the personal information database updated by the personal information update means;
A personal information management system comprising: A user terminal;
A business device of a business providing a service;
a personal information management device communicably connected to each of the user terminal and the business device;
A personal information management system comprising:
The personal information management device includes:
a personal information database that stores personal information of a user whose identity has been confirmed by an identity confirmation process performed between the user terminal and the user;
a retained information requesting means for requesting the business device of each business to provide the retained information held by each business for the items of the personal information provided to each business;
Equipped with
the business device of each business includes a retained information transmission means for transmitting the retained information retained by the business device to the personal information management device in response to a request from the personal information management device;
The personal information management device includes:
a holder information receiving means for receiving the holder information from the business device of each business;
an information matching means for matching the retained information received by the retained information receiving means with the personal information in the personal information database corresponding to the retained information;
a provision suspension means for suspending provision of the personal information in the personal information database collated by the information collation means to each business operator when the collation result by the information collation means is a mismatch;
A personal information management system comprising: A terminal communicably connected to a personal information management device that manages personal information of a user,
A notification receiving means for receiving a notification of suspension of provision of the personal information to each business operator;
an update request sending means for receiving an input of new personal information based on the notification received by the notification receiving means, and sending an information update request including the received new personal information to the personal information managing device;
A terminal comprising: A computer that is a terminal connected to a personal information management device that manages personal information of users in a communicable manner,
A notification receiving means for receiving a notification of the suspension of provision of the personal information to each business operator;
an update request sending means for receiving an input of new personal information based on the notification received by the notification receiving means, and sending an information update request including the received new personal information to the personal information managing device;
Terminal program that acts as a

Images