JP2020106927A - Information processing system, information processing program, information processing method, and information processing device - Google Patents

Abstract

To make a user not necessary to present personal information.SOLUTION: An information processing system includes: an information processing terminal having a receiving unit for receiving designation of information whose disclosure is permitted among information associated with a user, a generation unit for generating an identification code containing information of storage destination of the information whose designation is received by the receiving unit, a display input unit for displaying the generated identification code; an information reading terminal having an information reading unit for reading the identification code generated by the information processing terminal, and a transmission unit for transmitting the read information; and a server having a disclosure unit for disclosing the information associated with the user stored in a storage unit on the basis of the information on the storage destination contained in the identification code received from the information reading terminal.SELECTED DRAWING: Figure 2

Description

The present invention relates to an information processing system, an information processing program, an information processing method, and an information processing device.

The use of a service by a user may be subject to the registration of personal information by an organization or company that provides the service. In this way, the personal information of the user who is registered with the company or the like is managed in accordance with laws and regulations.

Japanese Patent Publication No. 2016-536702 JP2012-37961A

However, in the above technology, the user may have to present the personal information itself when registering the personal information.

In one aspect, an object of the present invention is to provide an information processing system, an information processing program, an information processing method, and an information processing device that can eliminate the need for the user to present personal information itself.

In one aspect, the information processing system includes an acceptance unit that accepts a designation of information that is permitted to be disclosed among information associated with a user, and an identification that includes information of a storage destination of the information that has been designated by the acceptance unit. An information processing terminal having a generation unit that generates a code and a display input unit that displays the generated identification code, an information reading unit that reads the identification code generated by the information processing terminal, and the read information. Disclosed is an information reading terminal having a transmitting unit for transmitting, and information stored in a storage unit and associated with the user, based on the information of the storage destination included in the identification code received from the information reading terminal. A server having a disclosure unit.

It is not necessary for the user to present the personal information itself.

FIG. 1 is a diagram illustrating a configuration example of the information bank system according to the first embodiment. FIG. 2 is a diagram showing an example of a code generation method. FIG. 3 is a block diagram illustrating an example of the functional configurations of the user terminal and the information bank server according to the first embodiment. FIG. 4 is a diagram showing an example of personal information. FIG. 5 is a flowchart illustrating a procedure of a two-dimensional code generation process according to the first embodiment. FIG. 6 is a flowchart illustrating the procedure of the personal information disclosure process according to the first embodiment. FIG. 7 is a diagram showing another example of the code generation method. FIG. 8 is a diagram illustrating a hardware configuration example of a computer that executes the information processing program according to the first and second embodiments.

An information processing system, an information processing program, an information processing method, and an information processing apparatus according to the present application will be described below with reference to the accompanying drawings. Note that this embodiment does not limit the disclosed technology. Then, the respective embodiments can be appropriately combined within the range in which the processing contents do not contradict each other.

[System configuration]
First, a configuration example of the information bank system according to the first embodiment will be described. FIG. 1 is a diagram illustrating a configuration example of the information bank system according to the first embodiment. The information bank system 1 shown in FIG. 1 provides a platform that allows companies and organizations to utilize user's personal information in a cross-cutting manner. This platform centrally manages the user's personal information from the aspect of realizing cross-utilization of the user's personal information, and also discloses the centrally managed user's personal information to a third party, for example, the corporate server 50. Control.

As shown in FIG. 1, the information bank system 1 may include a user terminal 10, a POS (Point Of Sales) terminal 30, a company server 50, and an information bank server 70. For convenience of description, FIG. 1 shows one user terminal 10 and one company server 50, but the number of users and companies using the above platform is not limited to one. In addition, a plurality of user terminals 10 or a plurality of company servers 50 may be used by one user or one company. The information bank system 1 corresponds to an example of an information processing system.

In the information bank system 1 shown in FIG. 1, the user terminal 10, the company server 50, and the information bank server 70 are communicably connected via a predetermined network such as the Internet. Further, in the information bank system 1, the POS terminal 30 and the company server 50 are also communicably connected via a predetermined network such as the Internet or a LAN (Local Area Network).

The user terminal 10, the POS terminal 30, the company server 50, and the information bank server 70 may be connected to a network via a LAN or the like regardless of whether they are wired or wireless. Further, the user terminal 10, the POS terminal 30, the company server 50, and the information bank server 70 should be connected to the network via a mobile network compatible with 3G (Generation), LTE (Long Term Evolution), 4G, 5G, and the like. It doesn't matter.

[Example of use case]
Here, in FIG. 1, as an example of a use case in which the above platform is implemented as a computer system, an example in which personal information of a user or a part thereof is disclosed in the following scenes is given. For example, as a condition that a company or the like provides a service to a user, an example in which the user's personal information or a part thereof is registered as customer information or member information, that is, so-called user registration or member registration of the user is given. In the following, customers and members may be referred to as “customers, etc.” and customer registration and member registration may be referred to as “customer registration, etc.”.

Under such conditions, in the above platform, the user registration is performed by linking the user terminal 10 with the POS terminal 30 installed in a store or the like and the POS system 3 including the company server 50 that manages the customer or the like. Etc. are realized. For example, the customer master information managed by the company server 50 uses the information read by the POS terminal 30 from a code displayed on the user terminal 10, for example, a bar code or a two-dimensional code, and the personal information of the user or a part of the personal information. Customer registration to be registered is taken as an example.

The user terminal 10 is a computer corresponding to an example of a client provided with the above platform. The user terminal 10 corresponds to an example of an information processing device or an information processing terminal. The “user terminal” mentioned here is a label given from the viewpoint of the user of the computer, and the hardware configuration and the type of software to be installed are not limited, and it may be any type of computer. .. For example, the user terminal 10 corresponds to all mobile terminal devices such as a smartphone, a mobile phone, a PHS (Personal Handyphone System), and a tablet terminal. These are merely examples, and the user terminal 10 may be a desktop computer such as a personal computer or any computer such as a laptop computer or a wearable terminal.

The POS terminal 30 corresponds to a client in which the POS function is incorporated. A company etc. are mentioned to the last as an example of the enterprise etc. which operate this POS terminal 30. The term "company" as used herein refers to all businesses that provide services, including the production, transfer, and rental of goods. In addition, a company is merely an example, and may be a sole proprietor, and may be a group other than a private company, such as a public office, a local public body, or a group equivalent thereto.

For example, as an example of the POS terminal 30, a POS cash register installed in a store operated by a company, such as a retail store, corresponds. An information reading unit (not shown) for reading a predetermined code is built in or attached to the POS terminal 30. An example of such an information reading unit is a reading device that optically reads a two-dimensional code, a so-called bar code reader. This bar code reader is used, as one side, for reading a bar code or a two-dimensional code printed on a product package or the like, and as another side, for reading a two-dimensional code displayed on the user terminal 10. Used. The POS terminal 30 corresponds to an example of an information reading terminal.

The company server 50 is a server device operated by a company that supports the above platform. Here, as an example, the server device is given as an example, but this is a label given to classify the functions, and the hardware configuration and the type of software to be introduced are not limited, and any type can be used. It can be any computer. As one aspect, the corporate server 50 incorporates a part of the functions of the POS, for example, a customer management function for managing a customer master.

The information bank server 70 is a server device that provides the above platform. Again, as an example, the server device has been given as an example, but this is a label given to classify the functions, and its hardware configuration and the type of software to be installed are not limited, and any type can be used. It can be any computer.

As one embodiment, the information bank server 70 can be implemented as package software or online software by installing an information bank program that realizes a function corresponding to the above platform on a desired computer. For example, the information bank server 70 may be implemented on-premises as a server that provides the above platform, or may be implemented as a cloud that provides the above platform by outsourcing.

[One aspect of the issue]
For example, when the user's customer registration or the like is performed in writing, the user must perform the customer registration or the like for each company. Further, when the customer registration or the like is performed through a document, the user is forced to fill in the items defined in the customer registration or the like, such as a name and an address, by handwriting. Therefore, the convenience of the user is impaired, and the user's motivation such as customer registration is impaired due to the time and effort required.

Further, from the aspect of reducing the work of the user in customer registration and the like, by generating the code in which the personal information input or stored in the user terminal 10 or a part thereof is encoded and displayed on the user terminal 10. It may be possible to present personal information to companies, etc.

However, if the above coding is performed, the risk of leaking the user's personal information increases. That is, the code displayed on the user terminal 10 includes the personal information itself. Therefore, if the staff member who handles the POS terminal 30 has malicious intent, the user's personal information may be acquired for purposes other than the original purpose such as customer registration. For example, a situation may occur in which the clerk is hidden by the user and reads the above code on a terminal other than the POS terminal 30 of the clerk or memorizes the personal information displayed on the POS terminal 30. In addition, personal information of a user may be inadvertently spread through an SNS (Social Networking Service) or the like even if the employee is not malicious.

[One aspect of approach to problem solving]
Therefore, the user terminal 10 according to the present embodiment does not adopt the approach of coding the personal information of the user itself. That is, the user terminal 10 according to the present embodiment receives a designation of information that is permitted to be disclosed among the personal information of the user, and generates a code including a disclosure source of the personal information of the user and information that permits the disclosure. Note that the disclosure source of the personal information of the user corresponds to an example of the storage destination of the information for which disclosure is permitted.

FIG. 2 is a diagram showing an example of a code generation method. FIG. 2 shows the domain of the information bank server 70 that manages the personal information of the user as an example of the source of disclosure of the personal information of the user, and the name of the item that permits the disclosure as an example of the information that permits the disclosure. The specified example is shown.

Here, it is assumed that an application program for a client, which realizes a front-end function for using the above platform, is installed as an information processing program in the user terminal 10. When the information processing program is started on the processor of the user terminal 10, a code used to disclose personal information from the information bank server 70 to the company server 50, here, a request to generate a two-dimensional code can be accepted. it can. When the request to generate the two-dimensional code is received, the two-dimensional code creation screen 21 shown in the first row from the top of FIG. 2 is displayed on the user terminal 10 according to the instruction of the above information processing program.

For example, the two-dimensional code creation screen 21 can include the following information. For example, as shown in FIG. 2, include the user name “XX” and include the account number “1234” as an example of identification information for identifying the account of the personal information deposited by the user on the above platform. You can

Further, the two-dimensional code creation screen 21 includes a GUI (Graphical User Interface) component that allows the user to specify the item name for which disclosure is permitted. For example, as shown in FIG. 2, in the two-dimensional code creation screen 21, a check box that can be selected by switching on and off by an operation such as clicking or tapping is an item name of personal information, that is, “name”, It is displayed for each "address", "age", and "sex". By switching on one or more of these check boxes, the user can specify the item name for which disclosure is permitted by the information bank server 70. Hereinafter, an item name that is permitted to be disclosed may be referred to as a “disclosure item name”. Further, as shown in FIG. 2, the two-dimensional code creation screen 21 includes a create button 21A for executing the creation of the two-dimensional code and a cancel button 21B for canceling the creation of the two-dimensional code.

Here, if the create button 21A is operated with the check boxes for the two item names of “name” and “address” among the four item names of personal information being switched on, the following URL ( Processing for generating a Uniform Resource Locator) is executed (step S1). For example, the domain part and the parameter part are embedded in the URL generated in step S1. In the example shown in the second row from the top in FIG. 2, the domain name “discloser” and the domain name “disclosure” are provided in the domain section as information for accessing the information bank server 70 that is the disclosure source of the user's personal information. Infobank.co.jp" is embedded. In addition, a query string or the like that specifies the account number “1234” of the personal information held by the user, the item names “name” and “address” of which disclosure is permitted is embedded in the parameter part.

The query part of the URL thus generated is encrypted according to the instruction of the above information processing program (step S2). For example, in the example shown in the third row from the top of FIG. 2, the parameter part is encrypted to “dff3d0da059d6f5bfabf”. Here, for the encryption of the parameter part, a common key encryption using a common key shared between the user terminal 10 and the information bank server 70 can be applied, or a public key published by the information bank server 70. It does not matter if the public key cryptography using is applied.

Then, a two-dimensional code is generated from the URL in which the parameter part is encrypted according to the instruction of the information processing program (step S3). The two-dimensional code generated here may be a stack type two-dimensional code or a matrix type two-dimensional code.

The two-dimensional code screen 22 including the two-dimensional barcode generated in this way is displayed on the user terminal 10. Here, the information of the two-dimensional code displayed on the user terminal 10, that is, the URL shown in the third row from the top of FIG. 2 can be read by a bar code reader built in or attached to the POS terminal 30. it can. As a result, the corporate server 50 connected to the POS terminal 30 can send an HTTP (HyperText Transfer Protocol) request to the information bank server 70 in which the personal information of the user is deposited, according to the domain portion of the URL. Further, the Web application running on the information bank server 70 can reply the following HTTP response to the corporate server 50 by decrypting the ciphertext of the parameter part embedded in the header of the HTTP request or the like. For example, since the parameter part includes designation of the account number, the account number “1234” of the user who discloses the personal information to the company server 50 can be identified. Further, since the parameter section includes designation of the item name of the personal information that is permitted to be disclosed, the item names “name” and “address” of the items included in the personal information, which are permitted to be disclosed to the company server 50. Can be identified. Therefore, the information bank server 70 can transmit the HTTP response including the item value corresponding to the item name of which the disclosure is permitted by the user in the personal information of the user who requests the disclosure to the enterprise server 50, to the enterprise server 50. As a result, the company server 50 can execute customer registration or the like by registering the item value included in the HTTP response from the information bank server 70 in the customer master or the like.

As described above, in the information bank system 1 according to the present embodiment, instead of causing the user terminal 10 to disclose the personal information itself, the personal information is transferred to the corporate server 50 via the information bank server 70 in which the personal information of the user is deposited. Disclose. From the aspect of realizing this, the user terminal 10 according to the present embodiment encodes not the personal information itself but the disclosure source of the personal information of the user and the information permitting the disclosure. Therefore, according to the user terminal 10 according to the present embodiment, when the user performs an operation related to the disclosure of personal information, it is not necessary to present the personal information itself to the staff involved in the operation. Along with this, the user terminal 10 according to the present embodiment can achieve the purpose of registering personal information with a company or the like.

Note that FIG. 2 shows an example in which the query string is embedded in the parameter part to pass the parameter to the Web application, but the present invention is not limited to this. For example, an API (Application Programming Interface) for allowing a Web application to access a database can be embedded in the parameter section. Further, FIG. 2 exemplifies the URL for issuing the HTTP request of the GET method to the company server 50, but the URL for issuing the HTTP request of another HTTP method, for example, the POST method may be generated. For example, in the case of the POST method, it is possible to embed a parameter designating the account number and the item name of the personal information in the body instead of the HTTP request header.

[Configuration of User Terminal 10]
Next, a functional configuration of the user terminal 10 according to the present embodiment will be described. FIG. 3 is a block diagram illustrating an example of functional configurations of the user terminal 10 and the information bank server 70 according to the first embodiment. As shown in FIG. 3, the user terminal 10 includes a display input unit 11, a reception unit 12, a first generation unit 13, an encryption unit 14, and a second generation unit 15.

Among the functional units shown in FIG. 3, functional units such as the reception unit 12, the first generation unit 13, the encryption unit 14, and the second generation unit 15 include a CPU (Central Processing Unit) and an MPU (Micro Processing Unit). Virtually realized by a hardware processor such as.

For example, the processor reads an OS (Operating System) and the above information processing program from an internal storage implemented as a flash memory typified by an EEPROM (Electrically Erasable Programmable Read-Only Memory) not shown. Then, the processor executes the above-mentioned information processing program to develop a process corresponding to the above functional unit in a memory such as a RAM (Random Access Memory). As a result, the above-mentioned functional unit is virtually realized as a process.

Here, the example in which the information processing program in which the set of functions for using the above-described platform is packaged is executed is described, but the implementation example is not necessarily limited to be realized as packaged software. For example, a program module may be executed or a library may be referenced in units such as the above code generation function.

Further, although the CPU and the MPU are illustrated as examples of the processor here, the above-described functional unit may be realized by any processor regardless of general-purpose type or specialized type. In addition to the above, the functional unit may be realized by a hard-wired logic such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The display input unit 11 is a functional unit that performs display and input.

As an embodiment, the display/input unit 11 can employ a touch panel in which a display device and an input device are integrated. For example, various screens such as the two-dimensional code creation screen 21 and the two-dimensional code screen 22 shown in FIG. 2 are displayed on the display input unit 11 according to the instructions of the information processing program. While such a display is performed, the display input unit 11 performs an operation on the screen displayed on the display input unit 11, for example, a tap operation for turning on or off a check box, a button pressing operation, or the like. It can also be accepted as input to the program.

Note that, here, the display input unit 11 is illustrated as an example, but it is not always necessary to have both the display and input functions, and functional units that can realize the display function or the input function may be individually mounted. I don't care.

The receiving unit 12 is a processing unit that receives information that permits disclosure.

As an embodiment, when the reception unit 12 receives a request to generate a two-dimensional code, the reception input unit 11 displays a two-dimensional code creation screen including a GUI component for selecting an item name of the personal information that is permitted to be disclosed. Let For example, in the example of the two-dimensional code creation screen 21 of FIG. 2, a check box is displayed for each item name of personal information. By switching one or more of these on, the user can specify the item name to be permitted to disclose to the information bank server 70.

The first generation unit 13 is a processing unit that generates a URL.

As one embodiment, the first generation unit 13 generates a URL including a parameter corresponding to the domain corresponding to the information bank server 70 that is the disclosure source of the user's personal information and the item name that the user is permitted to disclose. For example, as shown in the two-dimensional code creation screen 21 in FIG. 2, the create button with the check boxes of the two item names “name” and “address” among the four item names of the personal information turned on When 21A is operated, the following URL is generated. That is, the first generation unit 13 embeds the host name “discloser” and the domain name “Infobank.co.jp” in the domain part. Furthermore, the first generation unit 13 embeds a query string or the like that specifies the account number “1234” of the personal information held by the user and the item names “name” and “address” of which disclosure is permitted, in the parameter part.

The encryption unit 14 is a processing unit that encrypts the parameter part of the URL.

As an embodiment, the encryption unit 14 uses a common key shared between the user terminal 10 and the information bank server 70 or a public key disclosed by the information bank server 70 to encrypt the parameter part of the URL. .. For example, in the example shown in the third row from the top of FIG. 2, the query string of the parameter part is encrypted to “dff3d0da059d6f5bfabf”.

The second generation unit 15 is a processing unit that generates a two-dimensional code. The second generation unit corresponds to an example of the generation unit.

As one embodiment, the second generation unit 15 generates a two-dimensional code from the URL in which the parameter unit is encrypted by the encryption unit 14. At this time, the second generation unit 15 may generate a stack type two-dimensional code, or may generate a matrix type two-dimensional code. The two-dimensional code generated in this way is displayed on the display input unit 11. For example, as shown in the two-dimensional code screen 22 of FIG. 2, a matrix type two-dimensional code is displayed in an optically readable state.

In FIG. 3, the functional units corresponding to the above-described information processing program are excerpted and shown in the user terminal 10, but if the existing computer is a default or optional functional unit, the functional units other than those illustrated are shown. Is not included in the user terminal 10. For example, when the user terminal 10 is implemented as a tablet terminal, the functional units corresponding to the functions such as sensors, cameras, short-distance wireless communication, and the like equipped on a general-purpose tablet terminal may be incorporated. Further, when the user terminal 10 is implemented as a smartphone, a functional unit corresponding to a function such as mobile communication that a general-purpose smartphone has may be incorporated.

[Configuration of Information Bank Server 70]
Next, the functional configuration of the information bank server 70 according to the present embodiment will be described. As shown in FIG. 3, the information bank server 70 includes a communication I/F (InterFace) unit 71, a storage unit 73, and a control unit 75.

The communication I/F unit 71 corresponds to an interface that communicates with another device, such as the user terminal 10 or the company server 50.

As an embodiment, the communication I/F unit 71 corresponds to a network interface card such as a LAN card. For example, the communication I/F unit 71 receives an HTTP request from the company server 50 as an example of a request for requesting disclosure of personal information. Further, the communication I/F unit 71 outputs an HTTP response including the item value corresponding to the account and item name of the personal information specified in the HTTP request to the company server 50.

The storage unit 73 is a functional unit that stores data used for various programs such as an OS, which is executed by the control unit 75, an application program, for example, the above-mentioned information bank program, and middleware.

As an embodiment, the storage unit 73 can be implemented as an auxiliary storage device in the information bank server 70. For example, an HDD (Hard Disk Drive), an optical disk, an SSD (Solid State Drive), or the like can be used as the storage unit 73. The storage unit 73 does not necessarily have to be implemented as an auxiliary storage device, but can be implemented as a main storage device in the information bank server 70. In this case, various semiconductor memory elements such as RAM and flash memory can be adopted as the storage unit 73.

The storage unit 73 stores personal information 73A as an example of data used for a program executed by the control unit 75. As described above, in addition to the data shown in FIG. 3, the storage unit 73 may store other electronic data, such as an account of a company cooperating with the above platform. Note that the description of the personal information 73A illustrated in FIG. 3 will be given together with the description of the control unit 75 that refers to the personal information 73A.

The control unit 75 is a processing unit that controls the entire information bank server 70.

As one embodiment, the control unit 75 can be implemented by a hardware processor such as a CPU or MPU. Here, the CPU and MPU are illustrated as an example of the processor, but the processor may be implemented by any processor regardless of general purpose type or specialized type, for example, GPU or DSP, as well as DLU or GPGPU. In addition, the control unit 75 may be realized by hard-wired logic such as ASIC or FPGA.

The control unit 75 virtually realizes the following processing unit by developing the above information bank program on a work area of a RAM mounted as a main storage device (not shown). Note that FIG. 3 shows a functional unit in which the function corresponding to the disclosure of personal information is extracted from the functions corresponding to the above platforms, but it corresponds to the functions of other platforms and the functions of general-purpose Web applications. It does not prevent that the control unit 75 is provided with a function unit that operates.

As illustrated in FIG. 3, the control unit 75 includes a reception unit 75A, a decoding unit 75B, an extraction unit 75C, and a disclosure unit 75D.

The reception unit 75A is a processing unit that receives an HTTP request.

As one embodiment, the reception unit 75A receives an HTTP request in which a domain corresponding to the information bank server 70 is designated. For example, the information of the two-dimensional code displayed on the user terminal 10, that is, the URL shown in the third row from the top of FIG. 2 can be read via a bar code reader built in or attached to the POS terminal 30. .. The POS terminal 30 transmits the read information to the company server 50. As a result, the company server 50 connected to the POS terminal 30 sends an HTTP request to the information bank server 70 in which the personal information of the user is deposited, in accordance with the domain portion of the above URL. In this way, the HTTP request issued by the company server 50 is accepted by the accepting unit 75A as a request for disclosure of personal information.

The decryption unit 75B is a processing unit that decrypts the ciphertext.

As one embodiment, the decryption unit 75B decrypts the ciphertext of the parameter part embedded in the header or the like of the HTTP request accepted by the acceptance unit 75A. At this time, the decryption unit 75B executes decryption corresponding to the encryption method used by the encryption unit 14 of the user terminal 10, for example, public key encryption or secret key encryption. As a result, the ciphertext in the parameter part is decrypted into plaintext.

The extraction unit 75C is a processing unit that extracts personal information or a part thereof.

As one embodiment, the extraction unit 75C uses the account number specified in the parameter part decrypted from the header of the HTTP request by the decryption unit 75B in the personal information 73A in which the information related to the user is stored in the database and Extract the item value corresponding to the item name.

FIG. 4 is a diagram showing an example of the personal information 73A. The items included in the personal information 73A illustrated in FIG. 4 are merely examples, and other items of the personal information, such as the date of birth, are not prevented from being added according to the implementation scene. In the example of the personal information 73A shown in FIG. 4, the personal information 73A includes items such as account number, name, age, address and telephone number. The case where the item value of the personal information is extracted from such personal information 73A according to the parameter section in the second row from the top in FIG.

In this case, the parameter part included in the header of the HTTP request includes designation of the account number “1234”. Therefore, the personal information 73A includes records corresponding to the account number "1000" and the account number "1001", but the extraction unit 75C displays the account number "1234", that is, the reverse display in FIG. It is possible to identify a record that includes the above portion as the extraction target of the item value. Further, the parameter part included in the header of the HTTP request includes designation of the item names “name” and “address” of the personal information that are permitted to be disclosed. Therefore, although the personal information 73A also includes fields such as the item name "age" and the item name "phone number", the extraction unit 75C can extract the following item values of the personal information. That is, the extraction unit 75C has values included in the fields corresponding to the item names "name" and "address" in the record identified as the item value extraction target, that is, the item value "○" hatched in FIG. "○△△" and "Kanagawa XX city..." can be extracted.

The disclosure unit 75D is a processing unit that discloses personal information or a part thereof.

As one embodiment, the disclosure unit 75D discloses the item value of the personal information to the company server 50 by responding to the company server 50 with an HTTP response including the item value of the personal information extracted by the extraction unit 75C. That is, the disclosure unit 75D transmits information regarding the item value of the personal information to the company server 50, and the company server 50 receives the information. With such disclosure of the item value of the personal information, the company server 50 can execute the customer registration or the like by registering the item value included in the HTTP response from the information bank server 70 in the customer master or the like.

[Process flow]
Next, a processing flow of the information bank system according to the present embodiment will be described. Here, (1) a two-dimensional code generation process executed by the user terminal 10 will be described, and then (2) personal information disclosure process executed by the information bank server 70 will be described.

(1) Two-Dimensional Code Generation Process FIG. 5 is a flowchart showing the procedure of the two-dimensional code generation process according to the first embodiment. As an example, this processing is executed when a request to generate a two-dimensional code is received.

As shown in FIG. 5, the accepting unit 12 accepts the designation of the item name that the user permits to be disclosed among the item names included in the personal information on the two-dimensional code creation screen displayed on the display input unit 11 (step S101).

Subsequently, the first generation unit 13 generates a URL including a parameter corresponding to the domain corresponding to the information bank server 70, which is the source of disclosure of the user's personal information, and the item name for which the designation is accepted in step S101 (step). S102).

Then, the encryption unit 14 uses the common key shared between the user terminal 10 and the information bank server 70, or the public key disclosed by the information bank server 70, to set the parameter part of the URL generated in step S102. It is encrypted (step S103).

After that, the second generation unit 15 generates a two-dimensional code from the URL whose parameter part is encrypted in step S103 (step S104). Then, the second generation unit 15 causes the display input unit 11 to display the two-dimensional code screen including the two-dimensional code generated in step S104 (step S105), and ends the process.

By displaying such a two-dimensional code, the company server 50 connected to the POS terminal 30 transmits an HTTP request to the information bank server 70 according to the domain portion of the URL read via the barcode reader of the POS terminal 30. It is possible.

(2) Personal Information Disclosure Processing FIG. 6 is a flowchart of a procedure of personal information disclosure processing according to the first embodiment. As an example, this process is executed when an HTTP request issued by the company server 50 is accepted.

As shown in FIG. 6, the accepting unit 75A accepts the HTTP request issued by the company server 50 (step S301). The decryption unit 75B decrypts the ciphertext of the parameter part embedded in the header or the like of the HTTP request accepted in step S301 (step S302).

Subsequently, the extraction unit 75C extracts, from the personal information 73A stored in the storage unit 73, the item value corresponding to the account number and the item name specified by the parameter unit decrypted from the header of the HTTP request in step S302. It is extracted (step S303).

Then, the disclosing unit 75D discloses the item value of the personal information to the company server 50 by responding the HTTP response including the item value of the personal information extracted in step S303 to the company server 50 (step S304), and processing. To finish.

With such disclosure of the item value of the personal information, the company server 50 can execute the customer registration or the like by registering the item value included in the HTTP response from the information bank server 70 in the customer master or the like. ..

[One side of effect]
As described above, the user terminal 10 according to the present embodiment receives the designation of the information of which the disclosure is permitted among the user's personal information, and generates the code including the disclosure source of the user's personal information and the disclosure permission information. To do. Therefore, the source of disclosure of the personal information of the user and the information permitting the disclosure are encoded, not the personal information itself. Therefore, according to the user terminal 10 according to the present embodiment, it is possible to eliminate the need for the user to present the personal information itself. Along with this, the user terminal 10 according to the present embodiment can also achieve the purpose of registering personal information with a company or the like, for example, customer registration.

Although the embodiments of the disclosed device have been described above, the present invention may be implemented in various different forms other than the embodiments described above. Therefore, other embodiments included in the present invention will be described below.

[Specify disclosure level]
In the first embodiment described above, an example in which the designation of the item name is accepted has been described as an example of the information that permits disclosure, but the disclosure is not limited to this. For example, the user terminal 10 can also accept the specification of the disclosure level in which the amount or granularity of the item name of which disclosure is permitted in the personal information is set in stages.

FIG. 7 is a diagram showing another example of the code generation method. In FIG. 7, the domain of the information bank server 70 that manages the personal information of the user is shown as an example of the disclosure source of the personal information of the user, and the above-mentioned disclosure level is specified as an example of the information that permits disclosure. An example is shown.

Here, in FIG. 7, the following description will be made assuming that the four disclosure levels of disclosure level 1 to disclosure level 4 correspond to the following settings. For example, the disclosure level 1 corresponds to the setting that permits disclosure of only the item name “name”. Further, the disclosure level 2 corresponds to the setting for permitting disclosure of the item names “name” and “address”. Further, the disclosure level 3 corresponds to the setting for permitting disclosure of the item names “name”, “address” and “age”. Further, the disclosure level 4 corresponds to the setting for permitting disclosure of the item names “name”, “address”, “age” and “telephone number”.

If a request to generate a two-dimensional code is received under such a disclosure level setting, the two-dimensional code creation screen 23 shown in the first row from the top of FIG. It is displayed on 10.

For example, the two-dimensional code creation screen 23 can include the following information as an announcement for the user, similar to the two-dimensional code creation screen 21 shown in FIG. For example, as shown in FIG. 7, include the user name “XX” and include the account number “1234” as an example of identification information for identifying the account of the personal information deposited by the user on the above platform. You can

Further, the two-dimensional code creation screen 23 includes a GUI component that specifies the disclosure level of personal information. For example, as shown in FIG. 7, on the two-dimensional code creation screen 23, a pull-down menu capable of selecting one item from a plurality of items is used to specify the disclosure level. For example, when a menu is selected, a list of four disclosure levels of disclosure level 1 to disclosure level 4 is displayed, and by selecting one of the disclosure levels, the disclosure level can be specified.

Here, when the create button 21A is operated with the disclosure level 2 selected from the four disclosure levels, the following processing for generating a URL is executed (step S1). For example, the domain part and the parameter part are embedded in the URL generated in step S1. In the example shown in the second tier from the top of FIG. 7, the domain name “discloser” and the domain name “discloser” are provided in the domain section as information for accessing the information bank server 70 that is the disclosure source of the user's personal information. Infobank.co.jp" is embedded. In addition, a query string or the like that specifies the account number “1234” of the personal information held by the user and the item names “name” and “address” corresponding to disclosure level 2 is embedded in the parameter part.

The query part of the URL thus generated is encrypted according to the instruction of the above information processing program (step S2). For example, in the example shown in the third row from the top of FIG. 7, the parameter part is encrypted to “edb3d0da059d6f5bfabf”. Here, for the encryption of the parameter part, a common key encryption using a common key shared between the user terminal 10 and the information bank server 70 can be applied, or a public key published by the information bank server 70. It does not matter if the public key cryptography using is applied.

Then, a two-dimensional code is generated from the URL in which the parameter part is encrypted according to the instruction of the information processing program (step S3). The two-dimensional code generated here may be a stack type two-dimensional code or a matrix type two-dimensional code.

As described above, the processing shown in FIG. 7 allows the user terminal 10 to display the two-dimensional code screen 22 including the two-dimensional barcode similar to the example shown in FIG.

[Application example of information embedded in HTTP request]
For example, the user terminal 10 embeds other information other than the domain corresponding to the information bank server 70 and the item name for which disclosure is permitted in the URL, so that the HTTP request in which other information is embedded in the header or body is sent to the corporate server. 50 can be issued. As an example of other information, the user terminal 10 can also embed information such as a time stamp corresponding to the generation date and time of the URL, a one-time password dynamically generated from the time stamp, and an expiration date in the URL. In this case, by sharing the algorithm for generating the one-time password from the time stamp between the information processing program and the information bank program, the legitimacy of the HTTP request issued by the company server 50 on the information bank server 70 side. Can be authenticated. That is, the one-time password included in the HTTP request and the one-time password generated from the time stamp by the information bank server 70 are checked to see if they match. By verifying such a one-time password, it is possible to authenticate whether or not the HTTP request is issued based on the two-dimensional code generated by the information processing program. Further, the information bank server 70 can reject the response to the HTTP request whose expiration date has expired.

[Distribution and integration]
In addition, each component of each illustrated device may not necessarily be physically configured as illustrated. That is, the specific form of distribution/integration of each device is not limited to that shown in the figure, and all or part of the device may be functionally or physically distributed/arranged in arbitrary units according to various loads and usage conditions. It can be integrated and configured. For example, the reception unit 12, the first generation unit 13, the encryption unit 14, or the second generation unit 15 may be connected as an external device of the user terminal 10 via a network. In addition, another device has the reception unit 12, the first generation unit 13, the encryption unit 14, or the second generation unit 15, respectively, and the functions of the user terminal 10 described above are achieved by network connection and cooperation. May be realized. For example, the accepting unit 75A, the decrypting unit 75B, the extracting unit 75C, or the disclosing unit 75D may be connected as an external device of the information bank server 70 via a network. Further, another device has the receiving unit 75A, the decrypting unit 75B, the extracting unit 75C, or the disclosing unit 75D, respectively, and realizes the above-described function of the information bank server 70 by network connection and cooperation. May be.

[Information processing program]
Further, the various processes described in the above embodiments can be realized by executing a prepared program on a computer such as a personal computer or a workstation. Therefore, in the following, an example of a computer that executes an information processing program having the same functions as those in the above embodiments will be described with reference to FIG.

FIG. 8 is a diagram illustrating a hardware configuration example of a computer that executes the information processing program according to the first and second embodiments. As shown in FIG. 8, the computer 100 includes an operation unit 110a, a speaker 110b, a camera 110c, a display 120, and a communication unit 130. Further, the computer 100 has a CPU 150, a ROM 160, an HDD 170, and a RAM 180. Each unit of these 110 to 180 is connected via a bus 140.

In the HDD 170, as shown in FIG. 8, information processing that exhibits the same functions as the reception unit 12, the first generation unit 13, the encryption unit 14, and the second generation unit 15 described in the first embodiment. The program 170a is stored. The information processing program 170a may be integrated or separated similarly to each component of the reception unit 12, the first generation unit 13, the encryption unit 14, and the second generation unit 15 illustrated in FIG. In other words, the HDD 170 does not necessarily need to store all the data described in the first embodiment, and the data used for the processing may be stored in the HDD 170.

Under such an environment, the CPU 150 reads the information processing program 170a from the HDD 170 and loads it on the RAM 180. As a result, the information processing program 170a functions as the information processing process 180a as shown in FIG. The information processing process 180a expands various data read from the HDD 170 in an area allocated to the information processing process 180a in the storage area of the RAM 180, and executes various processes using the expanded various data. For example, the processing shown in FIG. 5 is included as an example of the processing executed by the information processing process 180a. Note that in the CPU 150, not all the processing units described in the above-described first embodiment may operate, and the processing unit corresponding to the processing to be executed may be virtually realized.

The information processing program 170a may not necessarily be stored in the HDD 170 or the ROM 160 from the beginning. For example, the information processing program 170a is stored in a “portable physical medium” such as a flexible disk inserted into the computer 100, a so-called FD, CD-ROM, DVD disk, magneto-optical disk, IC card, or the like. Then, the computer 100 may acquire and execute the information processing program 170a from these portable physical media. Further, the information processing program 170a is stored in another computer or a server device connected to the computer 100 via a public line, the Internet, a LAN, a WAN, etc., and the computer 100 acquires the information processing program 170a from these. You may make it execute.

The following supplementary notes will be further disclosed regarding the embodiments including the above-described examples.

(Supplementary Note 1) Of the information associated with the user, a reception unit that receives a designation of information whose disclosure is permitted,
A generation unit that generates an identification code that includes the information of the storage destination of the information that has been specified by the reception unit;
A display input unit for displaying the generated identification code,
An information processing terminal having
An information reading unit for reading the identification code generated by the information processing terminal,
A transmission unit that transmits the read information,
An information reading terminal having
A server having a disclosure unit for disclosing information associated with the user stored in a storage unit, based on information on the storage destination included in the identification code received from the information reading terminal;
An information processing system comprising:

(Supplementary Note 2) Of the information associated with the user, the designation of the information whose disclosure is permitted is accepted,
Generating and displaying an identification code including the information of the storage location of the information that has received the designation,
An information processing program that causes a computer to execute a process.

(Supplementary note 3) The information processing program according to Supplementary note 2, wherein the identification code does not include the information for which the designation is accepted, in the identification code.

(Supplementary note 4) The information processing program according to Supplementary note 3, wherein the information permitting the disclosure is an item name of which the disclosure is permitted among the item names included in the information associated with the user.

(Supplementary Note 5) The information permitting disclosure is a disclosure level in which the number of item names permitted to be disclosed among the item names included in the information associated with the user is set in stages. The information processing program according to attachment 3.

(Supplementary note 6) The information processing program according to Supplementary note 2, wherein the identification code includes an identifier that permits access to the storage destination of the information.

(Supplementary note 7) The information processing program according to Supplementary note 2, wherein the generating process generates the identification code from a URL generated from the information for which the designation is accepted and the information of the storage destination of the information. ..

(Supplementary Note 8) Of the information associated with the user, the designation of the information for which disclosure is permitted is accepted,
Generating an identification code including the information of the storage location of the information that has received the designation,
An information processing method characterized in that a computer executes a process.

(Supplementary note 9) The information processing method according to Supplementary note 8, wherein the identification code does not include the information for which the designation is accepted, in the identification code.

(Supplementary note 10) The information processing method according to supplementary note 9, wherein the information permitting the disclosure is an item name of which disclosure is permitted among the item names included in the information associated with the user.

(Supplementary Note 11) The information permitting the disclosure is a disclosure level in which the number of the item names permitted to be disclosed among the item names included in the information associated with the user is set in stages. The information processing method according to appendix 9.

(Supplementary Note 12) The information processing method according to Supplementary note 8, wherein the identification code includes an identifier that permits access to the storage destination of the information.

(Supplementary note 13) The information processing method according to supplementary note 8, characterized in that the generating process generates the identification code from a URL generated from the information for which the designation is accepted and the information of the storage destination of the information. ..

(Supplementary Note 14) Of the information associated with the user, a reception unit that receives the designation of information that is permitted to be disclosed,
A generation unit that generates an identification code that includes the information of the storage destination of the information that has received the designation;
An information processing device comprising:

(Supplementary note 15) The information processing apparatus according to supplementary note 14, wherein the identification code does not include the information for which the designation is accepted, in the identification code.

(Supplementary note 16) The information processing apparatus according to supplementary note 15, wherein the information permitting the disclosure is an item name of which the disclosure is permitted among the item names included in the information associated with the user.

(Supplementary Note 17) The information permitting disclosure is a disclosure level in which the number of item names permitted to be disclosed among the item names included in the information associated with the user is set in stages. The information processing apparatus according to attachment 15, wherein.

(Supplementary note 18) The information processing apparatus according to supplementary note 14, wherein the identification code includes an identifier that permits access to the storage location of the information.

(Supplementary note 19) The information processing apparatus according to supplementary note 14, wherein the generation unit generates the identification code from the URL generated from the information for which the designation is accepted and the information of the storage destination of the information.

1 Information Bank System 3 POS System 10 User Terminal 11 Display Input Unit 12 Reception Unit 13 First Generation Unit 14 Encryption Unit 15 Second Generation Unit 30 POS Terminal 50 Corporate Server 70 Information Bank Server 71 Communication I/F Unit 73 Storage unit 73A Personal information 75 Control unit 75A Reception unit 75B Decoding unit 75C Extraction unit 75D Disclosure unit

Claims (9)

Of the information associated with the user, a reception unit that accepts the specification of information that is permitted to be disclosed,
A generation unit that generates an identification code that includes the information of the storage destination of the information that has been specified by the reception unit;
A display input unit for displaying the generated identification code,
An information processing terminal having
An information reading unit for reading the identification code generated by the information processing terminal,
A transmission unit that transmits the read information,
An information reading terminal having
A server having a disclosure unit for disclosing information associated with the user stored in a storage unit, based on information on the storage destination included in the identification code received from the information reading terminal;
An information processing system comprising: Of the information associated with the user, accept the specification of information that is allowed to be disclosed,
Generating and displaying an identification code including the information of the storage location of the information that has received the designation,
An information processing program that causes a computer to execute a process. The information processing program according to claim 2, wherein the identification code does not include the information for which the designation is accepted in the identification code. The information processing program according to claim 3, wherein the information permitting the disclosure is an item name permitting the disclosure among the item names included in the information associated with the user. The information which permits the disclosure is a disclosure level in which the number of the item names permitted to be disclosed among the item names included in the information associated with the user is set in stages. The information processing program described in 3. The information processing program according to any one of claims 2 to 5, wherein the identification code includes an identifier that permits access to a storage destination of the information. 7. The process to generate generates the identification code from a URL generated from the information received the designation and the information of the storage destination of the information, The identification code according to any one of claims 2 to 6. Information processing program. Of the information associated with the user, accept the specification of information that is allowed to be disclosed,
Generating an identification code including the information of the storage location of the information that has received the designation,
An information processing method characterized in that a computer executes a process. Of the information associated with the user, a reception unit that accepts the specification of information that is permitted to be disclosed,
A generation unit that generates an identification code that includes the information of the storage destination of the information that has received the designation;
An information processing device comprising:

Images