JP3875225B2 - Communication control system, communication control method, and communication control program - Google Patents

Description

  The present invention relates to a communication control system, a communication control method, and a communication control program for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network.

  2. Description of the Related Art Conventionally, on the Internet, services in which a plurality of users participate, such as electronic bulletin boards, net auctions, reverse auctions (reverse auctions), mailing lists, matchmaking brokerage, and job hunting brokerage, have been provided. And in such services, not only communication between users is made possible by publishing a message of a certain user on the server (or through a mailing list), but also private communication only between specific users. There are also things that can be done.

  For example, in the auction system disclosed in Patent Document 1 (US Pat. No. 5,794,207) and Patent Document 2 (Japanese Patent Laid-Open No. 2001-22663), a server interposed between a seller and a buyer can A user identifier (user ID) is assigned, the user ID is disclosed, and the buyer and seller email addresses are managed in a database (DB) in association with the user ID. When a message addressed to the user ID is received from a certain seller or buyer, the mail address of the seller or buyer corresponding to the user ID is acquired with reference to the DB, and the message is transferred to this mail address.

  Further, for example, in the auction system disclosed in Patent Document 3 (Japanese Patent Laid-Open No. 2002-24620) and the above-mentioned Patent Document 1 (US Pat. No. 5,794,207), the purchase condition (offer of the buyer) is not the user ID. ), A case identifier (case ID) is assigned to each seller's offer response and seller's alternative, and the buyer and seller's mail addresses are managed in a database (DB) in association with the case ID. Then, when a message addressed to the case ID is received from a certain seller or buyer, the mail address of the seller or buyer corresponding to the case ID is acquired by referring to the DB, and the message is transferred to this mail address.

US Pat. No. 5,794,207 JP 2001-22663 A JP 2002-24620 A

  By the way, although the above-described conventional technology can conceal the user's real address itself, as described below, the user's privacy, the junk message, the user's credit history, the system transfer process, the database There was a problem from the viewpoint of resources.

  That is, among the above-described conventional techniques, in the conventional technique using the user ID (the technique disclosed in Patent Document 1 or Patent Document 2), the same user ID is known for different projects, and the user's privacy is completely protected. In addition to the problem of being unable to do so, there is a problem that spam messages such as SPAM mail addressed to the user ID are transferred or provided to the user. In order to solve this problem, the user ID may be frequently changed. However, since the user's credit history is lost, it is not an appropriate solution.

  Further, in the above-described conventional technology, it is necessary to refer to the database every time a message addressed to a user ID or a case ID is received, and there is a problem that transfer processing is delayed in addition to the problem that the database is burdened. there were. In particular, in the conventional technology for managing the mail address for each case ID in the database (the technique disclosed in Patent Literature 1 and Patent Literature 3), the database is proportional to the number of cases and transactions (inquiries and responses from each user). This is inconvenient for services on the Internet where many inquiries are made.

  Therefore, the present invention has been made to solve the above-described problems of the prior art, and eliminates annoying communication requests to users, protects user privacy, maintains user credit history, and requests for communication. An object of the present invention is to provide a communication control system, a communication control method, and a communication control program capable of reducing the load of transfer processing, reducing database resources, and speeding up communication request filtering.

  In order to solve the above-described problems and achieve the object, the invention according to claim 1 is a communication control system for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network. In connection with the provision of the service, while concealing the real address for communication possessed by the predetermined user, the real address or an address identifier that uniquely identifies the real address and the predetermined user Address generating means for generating an ad hoc address in which communication condition information indicating communication conditions is embedded, address disclosing means for disclosing the ad hoc address generated by the address generating means to other users, and the ad hoc A communication request having an address as a communication destination is received from the terminal of the other user, and the communication condition is determined from the ad hoc address. Filter processing means for acquiring information and extracting a communication request satisfying the communication condition indicated in the communication condition information; and when the communication request is extracted by the filter processing means, the ad hoc address or the address identifier Transfer processing means for acquiring a real address, replacing the communication destination of the communication request with the address, and transferring the communication request to the terminal of the predetermined user.

  In the invention according to claim 2, in the above invention, the address generation unit generates the ad hoc address using a predetermined key, and the filter processing unit uses the predetermined key to generate the ad hoc address. The communication request that satisfies the communication condition is extracted after verifying the validity.

  According to a third aspect of the present invention, in the above invention, the address generation unit manages the real address or address identifier and the communication condition information to provide the service, and the network via the network. The address management means receives the real address or address identifier and the communication condition information from the service providing apparatus, and uses the predetermined key. The ad hoc address is generated, and the filter processing unit manages the predetermined key in the same manner as the key management device and verifies the validity of the ad hoc address using the predetermined key. A communication request that satisfies the communication condition is extracted.

  According to a fourth aspect of the present invention, in the above invention, the address generation unit manages a master key for generating the predetermined key and generates the predetermined key, and the network And providing the service by managing the real address or address identifier and the communication condition information, and the address generation unit uniquely identifies the person who provides the service. Receiving the predetermined key generated from the issuer identifier and the master key to be generated from the master key management device, generating an ad hoc address in which the issuer identification information is embedded using the predetermined key, and performing the filtering process The means manages the master key in the same manner as the master key management device, and An issuer identifier is acquired, the predetermined key is generated from the issuer identification information and the master key, and the validity of the ad hoc address is verified using the predetermined key, and the communication condition is satisfied. It is characterized by extracting a communication request.

  In the invention according to claim 5, in the above invention, the filter processing unit further manages an issuer identifier that permits generation of the ad hoc address in association with the real address or the address identifier, and the ad hoc The issuer identifier and the real address or address identifier are acquired from an address, and a communication request satisfying the ad hoc address generation permission is extracted.

  According to a sixth aspect of the present invention, in the above-mentioned invention, a reply request for a communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, and a communication source of the reply request is set as the ad hoc It further comprises reply processing means for replacing the reply request with the address and transferring the reply request to the terminal of the other user.

  Further, in the invention according to claim 7, in the above invention, when a communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication actuality possessed by the other user is received. Communication that generates an ad hoc address in which the real address or an address identifier that uniquely identifies the real address and communication condition information indicating communication conditions when the other user is a communication destination are embedded while concealing the address Further comprising original address generation means, wherein the transfer processing means replaces the communication destination of the communication request with a real address acquired from the ad hoc address, and transfers the communication request to the terminal of the predetermined user. The communication source of the communication request is also transferred in place of the ad hoc address generated by the communication source address generation means.

  The invention according to claim 8 is the above invention, wherein the service is an intermediary service that mediates between a discloser who discloses predetermined information and a viewer who browses the information, wherein the address generation means , While concealing the real address for communication possessed by the disclosing person, the real address or an address identifier that uniquely identifies the real address and communication condition information indicating communication conditions when communicating from the viewer to the disclosing person It is characterized by generating an ad hoc address embedded with.

  The invention according to claim 9 is the mailing list service according to the above-mentioned invention, wherein the service is a mailing list service for delivering the contents of a speaker's mail sent to a predetermined mailing list to participants of the mailing list. Means for concealing a real address for communication possessed by the speaker, and indicating a communication condition for communicating the real address or the address identifier uniquely identifying the real address and the participant to the speaker An ad hoc address in which condition information is embedded is generated.

  The invention according to claim 10 is the above invention, wherein the service is an auction service for determining a winning bidder with respect to an exhibitor's listing conditions, and the address generating means is a communication that the winning bidder has. An ad hoc address in which the real address or the address identifier that uniquely identifies the real address and the communication condition information indicating the communication condition when communicating from the seller to the successful bidder are embedded. In addition to generating the communication real address for the seller, the real address or an address identifier for uniquely identifying the real address and communication conditions for communicating from the successful bidder to the seller are shown. An ad hoc address in which communication condition information is embedded is generated.

  The invention according to claim 11 is a communication control method for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network, and related to the provision of the service, Communication condition information that conceals the real address for communication possessed by the predetermined user and indicates the communication condition when the real address or the address identifier uniquely identifying the real address and the predetermined user is the communication destination An address generation step of generating an ad hoc address embedded with the address, an address disclosure step of disclosing the ad hoc address generated by the address generation step to other users, and a communication request with the ad hoc address as a communication destination The communication condition information is received from the user's terminal, acquired from the ad hoc address, and displayed in the communication condition information. A filtering process for extracting a communication request that satisfies a communication condition to be satisfied, and when the communication request is extracted by the filtering process, the real address is acquired from the ad hoc address or the address identifier, and a communication destination of the communication request And a transfer processing step of transferring the communication request to the predetermined user's terminal by replacing the address with the address.

  Further, in the invention according to claim 12, in the above invention, the address generation step generates the ad hoc address using a predetermined key, and the filtering step uses the predetermined key for the ad hoc address. The communication request that satisfies the communication condition is extracted after verifying the validity.

  The invention according to claim 13 is the above invention, wherein a reply request for a communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, and the communication source of the reply request is the ad hoc It further includes a reply processing step of replacing the reply request with the address and transferring the reply request to the other user's terminal.

  In the invention according to claim 14, in the above invention, when a communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication actuality of the other user is received. Communication that generates an ad hoc address in which the real address or an address identifier that uniquely identifies the real address and communication condition information indicating communication conditions when the other user is a communication destination are embedded while concealing the address An original address generation step, wherein the transfer processing step replaces the communication destination of the communication request with a real address acquired from the ad hoc address, and transfers the communication request to the predetermined user terminal. The communication source of the communication request is also transferred in place of the ad hoc address generated by the communication source address generation step.

  The invention according to claim 15 is a communication control program for causing a computer to execute a communication control method for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network, In connection with the provision of services, the real address for communication possessed by a predetermined user is concealed, and the real address or an address identifier that uniquely identifies the real address and the predetermined user as a communication destination Address generation procedure for generating an ad hoc address embedded with communication condition information indicating the communication condition, an address disclosure procedure for disclosing the ad hoc address generated by the address generation procedure to other users, and communicating the ad hoc address The communication request to be received is accepted from the other user's terminal, and the ad hoc address is used to Filter processing procedure for acquiring communication condition information and extracting a communication request satisfying the communication condition indicated in the communication condition information, and when the communication request is extracted by the filter processing step, the ad hoc address or the address identifier And a transfer processing procedure for transferring the communication request to the predetermined user terminal by replacing the communication destination of the communication request with the address, and causing the computer to execute the transfer request.

  In the invention according to claim 16, in the above invention, the address generation procedure generates the ad hoc address using a predetermined key, and the filtering procedure uses the predetermined key to generate the ad hoc address. The communication request that satisfies the communication condition is extracted after verifying the validity.

  The invention according to claim 17 is the above invention, wherein, in the above invention, a reply request to the communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, and the communication source of the reply request is set as the ad hoc A reply processing procedure for replacing the reply request with the address and transferring the reply request to the terminal of the other user is further executed by the computer.

  In the invention according to claim 18, in the above invention, when a communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication actuality of the other user is received. Communication that generates an ad hoc address in which the real address or an address identifier that uniquely identifies the real address and communication condition information indicating communication conditions when the other user is a communication destination are embedded while concealing the address A source address generation step is further executed by the computer, and the transfer processing procedure is performed when the communication destination of the communication request is replaced with a real address acquired from the ad hoc address and the communication request is transferred to the terminal of the predetermined user. In addition, the communication source of the communication request is also replaced with the ad hoc address generated by the communication source address generation procedure and transferred. The features.

  According to the first, eleventh, or fifteenth aspects of the present invention, it is possible to eliminate annoying communication requests to users, protect user privacy, maintain user credit histories, reduce communication processing load, and database resources. It is possible to realize a reduction in communication speed and a filtering process for communication requests.

  In addition, according to the invention of claim 2, 12 or 16, it is possible to make it difficult to illegally generate or falsify an ad hoc address, to eliminate annoying communication request to the user, to protect the privacy of the user, It is also possible to strengthen the maintenance of credit history.

  According to the invention of claim 3, the key can be updated easily and frequently, further eliminating annoying communication request to the user, protecting the user's privacy, and maintaining the user's credit history. It can also be strengthened.

  Further, according to the invention of claim 4, it is possible to issue an ad hoc address in a wide range, eliminating annoying communication requests to the user, protecting the privacy of the user, and maintaining the credit history of the user in a wide range. It can also be strengthened.

  According to the invention of claim 5, even if an actual address or an address identifier is obtained illegally, it is possible to exclude an ad hoc address issued by an issuer that is not permitted by the user.

  Further, according to the invention of claim 6, 13 or 17, it is possible to prevent a situation in which the real address of the reply source is disclosed in response to the reply to the communication request.

  According to the invention of claim 7, 14 or 18, it is possible to prevent a situation in which the real address of the communication source is disclosed with the use of the ad hoc address.

  According to the invention of claim 8, in an intermediary service performed on the Internet, the annoying communication request to the user is eliminated, the privacy of the user is protected, the user's credit history is maintained, and the communication request is transferred. Load reduction, database resource reduction, and speeding up of communication request filtering processing can be realized.

  According to the invention of claim 9, in a mailing list service performed on the Internet, it is possible to eliminate annoying communication requests to users, protect user privacy, maintain user credit history, and transfer communication requests. Load reduction, database resource reduction, and speeding up of communication request filtering processing can be realized.

  According to the invention of claim 10, in an auction service performed on the Internet, annoying annoying communication request to the user, protection of the user's privacy, maintenance of the user's credit history, transfer processing of the communication request Load reduction, database resource reduction, and speeding up of communication request filtering processing can be realized.

  Exemplary embodiments of a communication control system, a communication control method, and a communication control program according to the present invention will be described below in detail with reference to the accompanying drawings. In the following, after describing the main terms used in the present embodiment, the outline and features of the communication control system according to the present embodiment, various embodiments will be described, and finally, modifications to the present embodiment will be described. .

[Explanation of terms]
First, main terms used in this embodiment will be described. The “service” used in the present embodiment refers to a service provided on a network such as the Internet where a plurality of users participate. Specifically, an electronic bulletin board, an online auction, a reverse auction (reverse auction) ), Mailing lists, matchmaking brokerage, job hunting brokerage, and other services.

  In addition, the “real address” used in the present embodiment refers to a communication contact address originally possessed by a user who uses the above-mentioned service, and specifically, an e-mail address (Internet mail). , Address of mobile mail, etc.) and contact numbers such as telephone numbers (numbers of fixed telephone, IP telephone, mobile phone, PHS, etc.) correspond to this.

  In addition, “context condition (corresponding to“ communication condition ”described in claims”) used in this embodiment is communication when the above-mentioned user is a communication destination (email or telephone destination). Refers to conditions, and specifically, the address (mail address, telephone number) of the caller that is allowed to communicate with the communication destination, the originating domain (or city of the caller that is allowed to communicate with the communication destination) This is a condition that specifies an external area number), an expiration date of permission, an effective start date of permission, and the like.

  The “ad hoc address” used in this embodiment is generated by embedding the real address or an address identifier that uniquely identifies the real address and condition information indicating the context condition while keeping the real address confidential. Specifically, an ad hoc mail address (FIG. 10) that is generated by encoding the recipient's mail address and the context condition and then encrypting it with a predetermined key. Reference), an ad hoc mail address generated by combining an address identifier corresponding to the recipient mail address, a context condition, and a verification code (a code created by the context condition and a predetermined key) (see FIG. 29) , As well as these ad hoc generated using the recipient's phone number (or phone number identifier) Such as the telephone number corresponds to this.

[Overview and Features]
Next, the outline and features of the communication control system according to the present embodiment will be described. On the Internet, services that involve multiple users such as electronic bulletin boards, online auctions, reverse auctions, mailing lists, matchmaking brokerage, job hunting brokerage, etc. are provided. In addition to publishing a user's message on the server (or through a mailing list), there is also a method that allows private communication between specific users by email or telephone.

  In other words, for example, there are some services for matchmaking brokerage and job hunting brokerage that allow a viewer to contact a registered person of personal information published on a server by e-mail or telephone. Some mailing list services also allow mailing list participants to communicate via email or telephone to the speakers of mail delivered through the mailing list. Furthermore, some auction services not only allow sellers to contact the seller by telephone or email, but also allow sellers and successful bidders to communicate by telephone or email. is there.

  The communication control system according to the present embodiment generally controls communication between terminals of a plurality of users who participate in the above service. In particular, the specific user as described above. The main feature is the process of controlling communications by email and telephone that are performed only between users, eliminating annoying communication requests to users, protecting user privacy, maintaining user credit history, and transferring communication requests. Load reduction, database resource reduction, communication request filtering speed, etc. can be realized.

  Specifically, in the communication control system according to the present embodiment, the real address of the user is not disclosed, and the real address of the user and the user ID (or case ID) are associated with the database. In addition, the user ID (or case ID) is not disclosed, but an ad hoc address as described above is generated and disclosed in connection with the provision of the service.

  In other words, in the above-described example, in the mediation service, the registrant's real address is concealed, and an ad hoc address addressed to the registrant is generated from the real address and context conditions and disclosed to the viewer. In the mailing list, while concealing the speaker's real address, an ad hoc address addressed to the speaker is generated from the real address and context conditions and disclosed to the participants. Furthermore, in the auction, while concealing the real address of the seller, an ad hoc address addressed to the seller is generated from the real address and the context condition and disclosed to the winning bidder, and the real address of the winning bidder is concealed. An ad hoc address addressed to the winning bidder is generated from the real address and the context condition and disclosed to the seller.

  Following the generation and disclosure of such an ad hoc address, the communication control system according to the present embodiment accepts a communication request (email or telephone) with the ad hoc address as a communication destination, acquires a context condition from the ad hoc address, and obtains such a context. A communication request that satisfies the conditions is extracted. In other words, in the above example, the address of the caller (e-mail address, e-mail address, pre-designated by the user who is the destination of the ad hoc address, such as the intermediary service registrant, mailing list speaker, auction seller or successful bidder, etc. Only mails or telephones that satisfy the conditions such as the telephone number), the caller's originating domain (or calling area code), the expiry date of permission, and the effective start date of permission are extracted by filtering.

  Then, following this filtering, in the communication control system according to the present embodiment, the real address is acquired from the ad hoc address, or the address identifier is acquired from the ad hoc address, and then the address table (corresponding to the address identifier and the real address). The real address is acquired by referring to the attached table), the communication destination of the communication request extracted by filtering is replaced with the real address, and the communication request is transferred to the user terminal. In other words, in the above example, the mail and phone call extracted by filtering are addressed to real addresses owned by intermediary service registrants, real addresses owned by mailing list speakers, auction sellers and successful bidders. It is replaced with the real address it has and transferred. As a result, these registrants, speakers, exhibitors, and successful bidders accept only e-mails and telephone calls that satisfy the context conditions specified by the terminal.

  As described above, according to the communication control system of the present embodiment, the user's real address is kept secret, and only mails and telephones that satisfy the communication conditions specified by the user are filtered and transferred to the user. Therefore, it becomes possible to eliminate annoying mails and telephone calls to users.

  Also, according to the communication control system according to the present embodiment, the user's user ID is not disclosed as a destination, but an ad hoc address that is effective only when a certain communication condition is satisfied is disclosed as a destination. In addition to protecting the user's privacy, it is also possible to maintain the user's credit history.

  In addition, according to the communication control system according to the present embodiment, instead of acquiring a real address by referring to the database every time a communication request is received, only when a communication request satisfying the communication condition is received, the ad hoc address is acquired. Since the real address is obtained or the real address is obtained by referring to the address table (a table in which the address identifier and the real address are associated), it is possible to reduce the load of the communication request transfer process.

  Also, according to the communication control system of the present embodiment, the real address of the user is not managed in the database for each service item ID, but the real address is embedded in the ad hoc address, or the real address is assigned to each address identifier. Addresses are managed in a database (address table), so database resources do not increase in proportion to the number of issues and transactions (inquiries and responses from each user), and database resources can be reduced. It becomes possible.

  Further, according to the communication control system according to the present embodiment, filtering is not performed by referring to the communication condition registered in the database in association with the actual address, but by using the communication condition acquired from the ad hoc address. Thus, the communication request filtering process can be speeded up without causing a database management burden.

  In the first embodiment, a case where the present invention is applied to a so-called mediation service (partner search service) will be described. More specifically, in the first embodiment, the ad hoc address is generated in the ad hoc address issuing server that has received the ad hoc address issuing request from the partner search server. Also, in the first embodiment, an ad hoc address is generated by encoding an email address and a context condition of a registrant of personal information published on the partner search server, and then combining them and encrypting them with a predetermined key. This is disclosed to the viewer.

  In the first embodiment, the ad hoc mail addressed to the ad hoc address is filtered and the mail is transferred to the registrant. In the following, after describing the configuration of the communication control system according to the first embodiment, a processing procedure until disclosure of an ad hoc address, an ad hoc address generation processing, a processing procedure until ad hoc mail transfer, and a filtering process will be described in order. .

[Configuration of Communication Control System (Example 1)]
First, the configuration of the communication control system according to the first embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating the configuration of the communication control system according to the first embodiment. As shown in the figure, the communication control system according to the first embodiment includes a callee terminal 220, a caller terminal 320, a callee mail server 210, and a caller mail server 310 via the Internet 400 and the LAN 100. The partner search server 410, the ad hoc address issuing server 120, and the ad hoc mail transfer server 110 are connected to be communicable with each other.

  Among these, the callee terminal 220 and the caller terminal 320 are known personal computers and workstations, home game machines, Internet TVs, PDAs, mobile phones, and PHSs that have at least WEB browser software and e-mail software installed. Such as a mobile communication terminal. In the first embodiment, the receiver terminal 220 is a terminal in which personal information is registered in the partner search server 410 and is used by a member (information registrant) who will be a recipient 230 of an ad hoc mail. Reference numeral 320 denotes a terminal that accesses the partner search server 410 to browse personal information and is used by a viewer who is an ad hoc mail sender 330.

  The incoming side mail server 210 and the outgoing side mail server 310 are so-called known mail servers. In particular, in the first embodiment, the incoming side mail server 210 has a role of transferring ad hoc mail to the callee terminal 220, and The outgoing mail server 310 has a role of receiving ad hoc mail from the caller terminal 320.

  The partner search server 410 is a server that provides a partner search service to a user such as the sender 330 and requests the ad hoc address issuing server 120 to generate an ad hoc address of the receiver 230. The partner search server 410 is a device owned by a service provider that provides a partner search service.

  The ad hoc address issuing server 120 is a server that issues an ad hoc address in response to a request from the partner search server 410, and the ad hoc mail transfer server 110 receives ad hoc mail destined for the ad hoc address and filters it. It is a server that forwards to the called party 230. The ad hoc address issuing server 120 and the ad hoc mail transfer server 110 are devices possessed by an ad hoc address provider that manages ad hoc addresses. Hereinafter, the configurations of the partner search server 410, the ad hoc address issuing server 120, and the ad hoc mail transfer server 110 that bear the main characteristics of the first embodiment will be described in detail.

[Configuration of partner search server (first embodiment)]
As shown in FIG. 1, the partner search server 410 includes an HTTP communication unit 411, a member database 412, a search processing unit 413, a search result generation unit 414, a server authentication information storage unit 415, and an address proxy application unit 416. With. The partner search server 410 corresponds to the service providing apparatus of claim 3.

  Among these, the member database 412 is a means for storing various information related to registrants who are members. Specifically, as illustrated in FIG. 2, each member is associated with a user name and a password, In addition to personal information such as age, gender, and hobbies disclosed to the viewer, contact information such as e-mail address, telephone number, address disclosure condition, and ad hoc address use condition is stored. Here, the “address disclosure condition” is a condition that designates whether to disclose a mail address or a telephone number as it is or as an ad hoc address. The “ad hoc address use condition” refers to the above-described context condition. However, since the mediation service of the first embodiment is a service to which a condition limited to the caller is always applied, the caller is used here. Context conditions other than limitation are received from each member and stored.

  The server authentication information storage unit 415 is a means for storing authentication information necessary when requesting the ad hoc address issuing server 120 to issue an ad hoc address. Specifically, as illustrated in FIG. A server ID for uniquely identifying each of a plurality of requested servers and a password set for each server are stored in association with each other.

  The HTTP communication unit 411 controls the communication with other devices on the Internet 100 such as the ad hoc address issuing server 120 and clients (the callee terminal 220 and the caller terminal 320) according to a so-called HTTP communication protocol. It is.

  The search processing unit 413 is a means for processing an access request and a search request received from the caller terminal 320. Specifically, when an access request is received from the caller terminal 320, the user ID and password of the viewer (sender 330) who is a member are subsequently received, and user authentication is performed based on the member database 412. As a result, if the user authentication is successful, a search request is accepted from the caller terminal 320, a member (registrant) that satisfies this search request is searched from the member database 412, and this search result is sent to the search result generation unit 414. Deliver. Further, in response to this, when the search result generation information is received from the search result generation unit 414, the search result generation information is transmitted to the caller terminal 320.

  The search result generation unit 414 is a means for processing the search result received from the search processing unit 413. Specifically, when the search result is received from the search processing unit 413, the contact information (mail address, telephone number, address disclosure condition, ad hoc address use condition) of the member corresponding to the search result and the actual address of the caller 330 ( E-mail address) is read from the member database 412 and transferred to the address proxy application unit 413. In response to this, when an ad hoc address is received from the address proxy application unit 413, the contact information of the search result is replaced with the ad hoc address, and the search result generation information including the member's personal information and the ad hoc address is searched. Pass to.

  The address proxy application unit 416 is means for processing the contact information received from the search result generation unit 414. Specifically, the contact information (mail address, telephone number, address disclosure condition, ad hoc address use condition) of the member corresponding to the search result and the real address (mail address) of the caller 330 are received from the search result generation unit 414. Then, the server authentication information (server ID and password) is read from the server authentication information storage unit 415, and an address issue request including the contact information of the member, the real address of the caller 330, and the server authentication information is transmitted to the ad hoc address issuing server 120. To do. Further, in response to this, when an ad hoc address is received from the ad hoc address issuing server 120, the ad hoc address is transferred to the search result generation unit 414.

[Configuration of Ad Hoc Address Issuing Server (Example 1)]
As shown in FIG. 1, the ad hoc address issuing server 120 includes an HTTP communication unit 121, a server authentication information table 122, a server authentication unit 123, an encryption key table 124, a random number sequence table 125, and an ad hoc address generation unit 126. And a condition code table 126a. The ad hoc address issuing server 120 corresponds to the key management device of claim 3, the HTTP communication unit 121 corresponds to the address disclosure unit of claim 1, and the ad hoc address generation unit 126 corresponds to claim 1, 2, 3 or 8. Corresponds to the address generation means.

  The server authentication information table 122 is a means for storing authentication information that is the basis for authenticating a server that has requested ad hoc address issuance. Specifically, as illustrated in FIG. The password is stored in association with the server ID of each permitted server.

  The encryption key table 124 is a means for storing a key (secret key) used for generating an ad hoc address. Specifically, as illustrated in FIG. 5, a key ID for uniquely specifying each of a plurality of keys. Each key (K) is stored in association with (ID_K).

  The random number sequence table 125 is a means for storing a random number sequence used to generate an ad hoc address, and specifically corresponds to an index number for uniquely identifying each of a plurality of random number sequences as illustrated in FIG. In addition, each random number sequence is stored.

  The condition code table 126a is a means for storing communication condition type information to be embedded in an ad hoc address. Specifically, as illustrated in FIG. 7, each condition pattern is associated with a combination pattern of communication conditions. The encoded code (type information) shown is stored. Here, “S” corresponds to a communication condition for limiting a caller's address (mail address, telephone number), and “D” is a communication condition for limiting a caller's calling domain (or calling area code). “E” corresponds to a communication condition that limits the expiration date of the permission, and pattern “F” corresponds to a communication condition that limits the effective start date of the permission. That is, if the pattern is “S”, it means that the communication condition for limiting the caller's address is embedded in the ad hoc address. If the pattern is “SE”, the caller's address and the expiration date are limited. It means that the communication condition is embedded in the ad hoc address.

  The HTTP communication unit 121 is means for controlling communication with other devices on the Internet 100 such as the partner search server 410 according to a so-called HTTP communication protocol.

  The server authentication unit 123 is a means for processing an ad hoc address issue request received from the partner search server 410 or the like. Specifically, the contact information of the member from the partner search server 410 (email address, telephone number, address disclosure condition, ad hoc address use condition), the real address of the sender 330 and server authentication information (server ID and password) are included. When an address issuance request is received, it is authenticated whether or not the server ID and password corresponding to this request are stored in the server authentication information table 122. As a result, if the server authentication is successful, the contact information of the member and the real address of the sender 330 are passed to the ad hoc address generation unit 126. On the other hand, if the server authentication fails, a message to that effect is transmitted to the partner search server 410.

  The ad hoc address generation unit 126 is based on the contact information received from the server authentication unit 123 and the real address of the caller 330, and information stored in the encryption key table 124, the random number sequence table 125, and the condition code table 126a. A means for generating an ad hoc address. This ad hoc address generation process will be described in detail later.

[Configuration of Ad Hoc Mail Transfer Server (Example 1)]
As shown in FIG. 1, the ad hoc mail transfer server 110 includes a mail communication unit 111, an encryption key table 112, a random number sequence table 113, a filter processing unit 114, a condition code table 114a, and a transfer processing unit 115. Prepare. The filter processing unit 114 corresponds to the filter processing unit of claim 1, 2 or 3, and the transfer processing unit 115 corresponds to the transfer processing unit of claim 1.

  Among these, the encryption key table 112, the random number sequence table 113, and the condition code table 114a are communicated with the encryption key table 124, the random number sequence table 125, and the condition code table 126a provided in the above-described ad hoc address issuing server 120 via the LAN 110. The table is synchronized. That is, the same information as illustrated in FIGS. 5, 6, and 7 is stored.

  The mail communication unit 111 is a means for controlling communication with other mail servers on the Internet 100 such as the outgoing mail server 310 and the incoming mail server 210 in accordance with a so-called SMTP communication protocol.

  The filter processing unit 114 is a means for filtering ad hoc mail destined for an ad hoc address. Specifically, for a mail addressed to an ad hoc address, when a mail transmission request including the ad hoc address and the sender's mail address is received from the originating mail server 310 or the like, the mail is stored in the encryption key table 112 or the condition code table 114a. Based on the received information, a context condition is acquired from the ad hoc address, and whether or not the mail satisfies the context condition is filtered. As a result, when the context condition is satisfied (transfer is possible), based on the information stored in the random number sequence table 113, the real address (the mail address of the called party) is further acquired from the ad hoc address, and this real address is transferred. The data is transferred to the processing unit 135, and a mail transmission permission is transmitted to the originating mail server 310, and the mail data permitted to be transferred is transferred to the ad hoc mail transfer server 110. On the other hand, when the context condition is not satisfied (transfer is impossible), a mail reception rejection message is transmitted to the outgoing mail server 310. This filtering process will be described in detail later.

  The transfer processing unit 115 is a means for transferring ad hoc mail destined for an ad hoc address. Specifically, regarding the mail that is allowed to be transferred by the filter processing unit 114, when the data is received from the originating mail server 310 and the real address (the mail address of the called party) is received from the filter processing unit 114, the mail This address is transferred from the ad hoc address to the real address, and this mail is transferred to the destination mail server 210.

[Processing Procedure until Disclosure of Ad Hoc Address (Example 1)]
Next, with reference to FIG. 8, a processing procedure leading to the disclosure of an ad hoc address will be described. FIG. 8 is a sequence diagram illustrating a processing procedure until disclosure of an ad hoc address according to the first embodiment.

  As shown in the figure, upon receiving an access request in the HTTP request message format from the caller terminal 320 (step S801), the partner search server 410 sends an HTTP response message format user authentication form (page) to the caller terminal 320. Transmit (step S802). In contrast, when an authentication request in the HTTP request message format in which the user ID and password are input is received from the caller terminal 320 (step S803), the partner search server 410 performs user authentication based on the member database 412 (step S803). Step S804).

  As a result, if the user authentication is successful, the partner search server 410 transmits a search condition input form in the HTTP response message format to the caller terminal 320 (step S805). On the other hand, when a partner search request in the HTTP request message format in which search conditions such as age and hobbies are input is received from the sender terminal 320 (step S806), the partner search server 410 is a member that satisfies this partner search request. (Registrant) is searched from the member database 412 (step S807).

  Then, partner search server 410 reads member contact information (email address, telephone number, address disclosure condition, ad hoc address use condition) and real address of sender 330 corresponding to the search result from member database 412 (step S808). ). Further, the partner search server 410 reads the server authentication information (server ID and password) from the server authentication information storage unit 415, and issues an ad hoc address issuance request including the contact information of the member, the actual address of the sender 330, and the server authentication information. It transmits to the ad hoc address issuing server 120 (step S809).

  The ad hoc address issuance server 120 that has received the ad hoc address issuance request reads the server authentication information (server ID and password) included in the ad hoc address issuance request, and performs server authentication based on the server authentication information table 122 (step S810). . As a result, if the server authentication is successful, the ad hoc address issuance server 120 determines the contact information (mail address, telephone number, address disclosure condition, ad hoc address use condition) of the member included in the ad hoc address issuance request and the sender 330. , The ad hoc address is generated based on the encryption key table 124, the random number sequence table 125, and the condition code table 126a (step S811), and an ad hoc address issue response including the ad hoc address is sent to the partner search server 410. Transmit (step S812). This ad hoc address generation process will be described in detail later.

  The partner search server 410 that has received the ad hoc address issuance response reads the ad hoc address from the ad hoc address issuance response, and replaces the contact information with the ad hoc address for the search result of the member retrieved in step S807 described above (step S813). ). Then, partner search server 410 transmits a partner search result page including the member's personal information and ad hoc address to sender terminal 320 (step S814). Through a series of processes described above, an ad hoc address destined for a member published on the partner search server 410 is generated and disclosed to the viewer.

[Ad hoc address generation processing (first embodiment)]
Next, the ad hoc address generation process (step S811) shown in FIG. 8 will be described in detail with reference to FIG. 9 and FIG. In the ad hoc address generated by the ad hoc address generation process described below, the user name portion is a character string in which the recipient's mail address R and context condition C are embedded by encryption, and the domain portion is “adhoc .isp-A.ne.jp ". This domain name corresponds to the IP address of the ad hoc mail transfer server 110 according to the DNS setting.

  In the following description, expressing an integer value from 0 to (2 to the power of N−1) in an N-bit binary number is represented as “N-bit integer coding”. For example, the result of 3-bit integer encoding 7 is “111”, and the result of 5-bit integer encoding is “00111”. In the following, processing using a hash function will be described. However, it is sufficient that this function is shared between the ad hoc address issuing server 120 and the ad hoc mail transfer server 110, and a specific algorithm thereof is arbitrary. . Specific examples of such a function include MD5 and SHA-1.

  9 is a flowchart showing the flow of the ad hoc address generation process shown in FIG. 8, and FIG. 10 is a diagram showing a specific example of the ad hoc address generation process shown in FIG. As shown in the figure, the ad hoc address generation unit 126 of the ad hoc address issuing server 120 includes contact information (email address, telephone number, address disclosure condition, ad hoc address use condition) of the member (recipient 230), and the sender 330. The incoming mail address R of the callee 230 is read out from the ad hoc address issuance request including the real address and the server authentication information, and the incoming mail address R is compressed and encoded to generate “data B22.p” (step S901). ).

  However, for convenience of explanation, the domain name of the mail address of all the recipients to whom the ad hoc address is issued is “mail.isp-A.ne.jp”, and the user name is 6 characters. Assuming that the number is 22 or less, only the user name portion is encoded, not the entire incoming mail address R. That is, in the compression encoding of the incoming mail address R (step S901), a value obtained by subtracting 6 from the number of characters of the user name is 4-bit integer encoded (step S901.1), and each character is encoded by the Huffman code. Bit 0 is added so that the data is in byte units of 2 bytes or more (step S901.2). When the domain name of the recipient's mail address is not common, the entire incoming mail address R may be subject to compression encoding.

  Further, the ad hoc address generation unit 126 refers to the encryption key table 124, selects a predetermined encryption key K by a predetermined selection algorithm, and selects the selected encryption key K and the identifier ID_K (character string 1) of the encryption key K. Reading from the encryption key table 124 (step S902). This selection algorithm is arbitrary. For example, there are an algorithm for selecting at random, a method for selecting the same issue destination by round robin, and the like.

  Then, the ad hoc address generation unit 126 reads the context condition C (address disclosure condition, ad hoc address use condition, outgoing mail address of the caller 330) from the ad hoc address issuance request, and refers to the condition code table 126a while referring to the condition code table 126a. Is encoded to generate “data B21” (step S903).

  Specifically, the type and combination of the context condition C are encoded with reference to the condition code table 126a shown in FIG. 7 to generate “data B211” (step S903.1). Further, the hash value of the outgoing mail address of the sender 330 is obtained, and the lower 16 bits of the hash value are generated as encoded “data B212.S” (step S903.2.S). When the context condition C includes the originating domain designation, the number of words in the designated originating domain is 3-bit integer encoded, and the lower 13 bits of the hash value of the designated originating domain are added to this to add “data B212.D”. Is generated (step S903.2.D). Further, when the context condition C includes an expiration date specification or an effective start date specification, the number of days from January 1, 2000 to the specified date is 16-bit integer encoded to “data B212.E” or “data B212”. .F ”(step S903.2.E, step S903.2.F). Of these “data B212.S”, “data B212.D”, “data B212.E”, and “data B212.F”, only the data included in the context condition combination “data B212” is combined. To generate “data B212” (step S903.2). Then, after “data B211” indicating the type and combination of the context conditions C, “data B212” indicating the contents of each context condition C is concatenated to generate “data B21” (step S903.3).

  Subsequently, the ad hoc address generation unit 126 EXOR-adds a predetermined random number sequence “data B22.r” to “data B22.p” that is the encoded data of the incoming mail address R to generate “data B22”. (Step S904). Specifically, the random number sequence “data B22.r” is selected from the random number sequence table 125 using a selection function having “data B21” as an argument (step S904.1). That is, a random number sequence having an index number as a remainder obtained by dividing the hash value of “data B21” by 32 is acquired from the random number sequence table 125. Then, “data B22.p” and “data B22.r” are EXOR added to generate “data B22” (step S904.2).

  As described above, the EXOR addition of the random number sequence to the encoded data of the incoming mail address R is effective because the malicious user acquires the ad hoc addresses one after another while changing the expiration date, and performs the encryption key by the differential attack. The point is to make it difficult to perform analysis. The significance of using the selection algorithm based on “data B21” for selection of the random number sequence is to avoid a situation in which the data length becomes longer due to additional data for identifying the random number sequence.

  After that, the ad hoc address generation unit 126 concatenates “data B22” that is the encoded data of the incoming mail address R and “data B21” that is the encoded data of the context condition C, and encrypts the data with the encryption key K to “data”. B2 "is generated (step S905). Specifically, “data B21” and “data B22” are connected to generate “data B2p”, and when this is less than 32 bits, the remaining bits are filled with an appropriate random number (step S905.1). . If “data B2p” is less than 16 bytes, 16-byte “data B2pp” is generated by adding data generated by an arbitrary random number algorithm as a so-called padding process (step S905.2). ). Then, “data B2pp” is encrypted with the encryption key K acquired in step S902 to generate “data B2” (step S905.3).

  As described above, the significance of using the random number algorithm for the padding process is that it makes it difficult to analyze the encryption key by a known plaintext attack.

  Further, the ad hoc address generation unit 126 generates “data B1” by 7-bit integer encoding the identifier ID_K (character string 1) of the encryption key K acquired in step S902 (step S906). Then, the ad hoc address generation unit 126 connects “data B1”, which is the encoded data of the identifier of the encryption key K, to “data B2”, which is the encoded data of the incoming mail address R and the context condition C, and 135 Generate bit data, encode it with BASE32, convert it into a 27-character string, and add “@ adhoc.isp-A.ne.jp” to this string to generate an ad hoc address T (Step S907).

  Through the above-described series of processing, an ad hoc mail address encrypted with a predetermined key is generated by encoding and combining the mail address of the recipient and the context condition.

[Processing procedure until ad hoc mail transfer (Example 1)]
Next, a processing procedure leading to ad hoc mail transfer will be described with reference to FIG. FIG. 11 is a sequence diagram illustrating a processing procedure until ad hoc mail transfer according to the first embodiment.

  As shown in the figure, when receiving the ad hoc mail addressed to the ad hoc address of the callee 230 transmitted from the caller terminal 320 (step S1101), the outgoing mail server 310 receives the ad hoc address and the mail of the caller. A mail transmission request including the address is transmitted to the ad hoc mail transfer server 110 (step S1102).

  The ad hoc mail transfer server 110 that has received such a mail transmission request acquires a context condition from the ad hoc address based on information stored in the encryption key table 112 or the condition code table 114a, and determines whether the mail satisfies the context condition. Whether or not is filtered (step S1103). Further, when filtering satisfies the context condition (transfer is possible), based on the information stored in the random number sequence table 113, the real address (the mail address of the called party) is acquired from the ad hoc address. This filtering process will be described in detail later.

  In addition, when the context condition is satisfied (transfer is possible), the ad hoc mail transfer server 110 transmits a mail transmission permission to the originating mail server 310 (step S1104), and transfers the data of the mail that is permitted to be transferred to the ad hoc mail. Transfer to the server 110 (step S1105). If the context condition is not satisfied (transfer is impossible), a mail reception rejection message is transmitted to the originating mail server 310.

  Subsequently, the ad hoc mail transfer server 110 determines the transfer destination for the mail that can be transferred by the filter processing unit 114, and the destination of the mail transferred from the originating mail server 310 is acquired from the ad hoc address in step S1103. It is replaced with the address (mail address of the called party) (step S1106) and transferred to the destination mail server 210 (step S1107).

  The incoming mail server 210 that has received the mail from the ad hoc mail transfer server 110 temporarily stores the mail (step S1108), and receives the mail reception request from the callee terminal 220 (step S1109) and temporarily stores it. The mail is transmitted to the callee terminal 220 (step S1110). Through the series of processes described above, an ad hoc mail addressed to the ad hoc address is delivered from the sender terminal 320 to the receiver terminal 220.

[Filter processing (Example 1)]
Next, the filtering process (step S1103) shown in FIG. 11 will be described in detail with reference to FIGS. 12 is a flowchart showing the flow of the filtering process shown in FIG. 11, and FIG. 13 is a diagram showing a specific example of the filtering process shown in FIG.

  As shown in the figure, the filter processing unit 114 of the ad hoc mail transfer server 110 reads the ad hoc address T from the mail transmission request including the ad hoc address T and the sender mail address S, and the user name portion of the ad hoc address T BASE32 decoding is performed to convert the data into 135-bit data, which is separated into “data B2” of the first half 128 bits and “data B1” of the second half 7 bits (step S1201).

  Subsequently, the filter processing unit 114 refers to the encryption key table 112 using “data B1” as the identifier ID_K (character string 1) of the encryption key K, and reads the encryption key K corresponding to the identifier ID_K from the encryption key table 112 ( Step S1202). Further, the filter processing unit 114 decrypts “data B2” with the encryption key K to generate “data B2pp” (step S1203).

  Then, the filter processing unit 114 generates “data B22” by decoding “data B2pp” (step S1204). Specifically, the byte read position is set to the head in the initial state, and the read position is advanced by the read amount. First, one byte is read from “data B2pp”, the value read by referring to the condition code table 114a The condition combination corresponding to is acquired (step S1204.1). Then, the condition included in the acquired combination is decoded (step S1204.2). That is, when the calling address designation is included, 2 bytes are read as the calling address limit value (step S1204.2.S), and when the calling domain designation is included, 3 bits are read as the number of domain words Dw. The bit is read as the domain limit value Dh (step S1204.2.D), and if it includes an expiration date, 2 bytes are read as an integer N, and N days after January 1, 2000 are acquired as the expiration date (step S1204.2.E), if the effective start date is included, 2 bytes are read as an integer N, and N days after January 1, 2000 are acquired as the incoming call start date (step S1204.2.E). Further, the data immediately before the read position of “data B2pp” is acquired as “data B21”, and the data from the read position to the end is acquired as “data B22” (step S1204.3).

  Subsequently, the filter processing unit 114 determines whether or not transfer is possible based on each context condition C acquired in step S1204 (step S1205). Specifically, when the calling address designation is included, after the sender's mail address S is read from the mail transmission request, a hash value of the mail address S is obtained, and this hash value is obtained in step S1204.2. It is determined whether or not the source address limit value acquired in S matches, and if it does not match, “transfer is impossible” is set (step S1205.1). When the originating domain designation is included, after reading the sender's mail address S from the mail transmission request, the hash value of the Dw word sentence is obtained from the end of the domain name portion of the mail address S, and this hash value is obtained in step S1204. .2. It is determined whether or not it matches the domain limit value Dh acquired in D, and if it does not match, “transfer is impossible” is set (step S1205.2). When the expiration date designation is included, the current time t is read with reference to the clock in the system, and the current time t is determined in step S1204.2. It is determined whether or not the expiration date acquired in E has passed, and if it has passed, “transfer is not possible” is set (step S1205.3). If the effective start date is included, the current time t is read with reference to the clock in the system, and the current time t is determined in step S1204.2. It is determined whether or not the time is later than the incoming call start date acquired in F, and if it is the previous time, “transfer is not possible” is set (step S1205.4). If none of these determinations indicate “transfer impossible”, “transfer is possible” is set (step S1205.5).

  When “transfer impossible” is determined by the process of step S1205 described above (No at step S1206), the filter processing unit 114 ends the process, but when “transfer enabled” is determined (Yes at step S1206). The filter processing unit 114 generates “data B22.p” that is the encoded data of the incoming mail address R (step S1207). Specifically, the random number sequence “data B22.r” is selected from the random number sequence table 113 using a selection function having “data B21” as an argument (step S1207.1). That is, a random number sequence having the remainder obtained by dividing the hash value of “data B21” by 32 is acquired from the random number sequence table 113. Then, “data B22.p” is generated by performing an EXOR operation on “data B22” and “data B22.r” (step S1207.2).

  Then, the filter processing unit 114 decrypts the incoming mail address R (step S1208). Specifically, “data B22.p” is decrypted from the beginning, and the user name portion (RU) is acquired (step S1208.1). Then, “@ mail.isp-A.ne.jp” is added to the user name portion (RU) to generate an incoming mail address R (step S1208). When the ad hoc address is generated including the domain name of the recipient's mail address, it is only necessary to decrypt “Data B22.p” from the top, and it is not necessary to add the domain name. Through the series of processes described above, only mail satisfying the context condition is extracted, and further, the mail address of the recipient who is the true destination of the mail is acquired.

[Effect of Example 1]
As described above, according to the first embodiment, in an intermediary service performed on the Internet, it is possible to eliminate annoying communication requests to users, protect user privacy, maintain user credit history, It is possible to reduce the load of transfer processing, reduce database resources, and speed up the filtering processing of communication requests.

  In addition, according to the first embodiment, it is possible to make it difficult to illegally generate or falsify an ad hoc address by using a key, eliminate annoying communication request to the user, protect the privacy of the user, It is also possible to strengthen the maintenance of credit history.

  Further, according to the first embodiment, the keys are collectively managed by the ad hoc address issuing server 120, so that the key can be updated easily and frequently, eliminating annoying communication requests to the user, and the user. It is also possible to further strengthen privacy protection and maintenance of user credit history.

  In the second embodiment, a case where the present invention is applied to a so-called mailing list service will be described. More specifically, in the second embodiment, an ad hoc address is generated in a mailing list server that has received an address issuance key from an address issuance key generation server. Here, the address issuance key is adopted so that an ad hoc address can be generated for each proxy issuer (such as a mailing list server), and an address issue key can be generated and managed for each proxy issuer. And the issuer identifier for uniquely identifying the proxy issuer. In the second embodiment, the mail address of the mailing list speaker and the context condition are encoded and then combined and encrypted with the address issuing key to generate an ad hoc address, and the ad hoc address is disclosed to the mailing list participant through the mailing list. To do.

  In the second embodiment, the ad hoc mail addressed to the ad hoc address is filtered, and the mail is transferred to the mailing list speaker. In the following, after describing the configuration of the communication control system according to the second embodiment, the processing procedure until the issuance of the address issuance key, the processing procedure until the disclosure of the ad hoc address, and the processing procedure until the transfer of the ad hoc mail are sequentially performed. explain.

[Configuration of communication control system (second embodiment)]
First, the configuration of the communication control system according to the second embodiment will be described with reference to FIG. FIG. 14 is a block diagram illustrating the configuration of the communication control system according to the second embodiment. As shown in the figure, the communication control system according to the second embodiment includes a distribution destination user terminal 220, a distributor terminal 320, a distribution destination side mail server 210, and a distribution source side via the Internet 400 and the LAN 100. A mail server 310, a mailing list server 420, an address issuance key generation server 140, and an ad hoc mail transfer server 130 are connected to be communicable with each other.

  Among these, the delivery destination user terminal 220 and the distributor terminal 320 are terminals corresponding to the receiver terminal 220 and the sender terminal 320 described in the first embodiment. However, in the second embodiment, the distributor terminal 320 is a terminal (distributor) of a mailing list and is a terminal used by a mailing list participant who is an ad hoc mail recipient, and the distribution destination user terminal 220 is This is a terminal used by a mailing list participant who is a delivery destination user to which a speaker's mail is distributed and who is a sender of ad hoc mail.

  The delivery destination side mail server 210 and the delivery source side mail server 310 are terminals corresponding to the arrival side mail server 210 and the outgoing side mail server 310 described in the first embodiment. However, in the second embodiment, the distribution source side mail server 310 has a role of transferring ad hoc mail to the distributor terminal 320, and the distribution destination side mail server 210 accepts ad hoc mail from the distribution destination user terminal 220. Have a role.

  The mailing list server 420 is a server that distributes mail received from a mailing list speaker to mailing list participants and issues an ad hoc address using the address issuing key generated by the address issuing key generation server 140. The mailing list server 420 is a device owned by a service provider that provides a mailing list service.

  The address issuance key generation server 140 is a server that generates an address issuance key in response to a request from the mailing list server 420, and the ad hoc mail transfer server 130 accepts ad hoc mail destined for an ad hoc address and filters it. The server that forwards to the distributor 330. The address issuance key generation server 140 and the ad hoc mail transfer server 130 are devices possessed by an ad hoc address provider that manages ad hoc addresses. Hereinafter, the configuration of the mailing list server 420, the address issuing key generation server 140, and the ad hoc mail transfer server 130 that bear the main features of the second embodiment will be described in detail.

[Configuration of Mailing List Server (Example 2)]
As shown in FIG. 14, the mailing list server 420 includes an HTTP communication unit 421, an issuer authentication information storage unit 422, an address issue key acquisition unit 423, a mail communication unit 424, an address issue key storage unit 425, an ad hoc An address generation unit 426, a condition code table 426a, a transmission source address ad hoc conversion unit 427, a distribution destination database 428, and a distribution processing unit 429 are provided. The mailing list server 420 corresponds to the service providing apparatus according to claim 4, the distribution processing unit 429 corresponds to the address disclosure unit according to claim 1, and the ad hoc address generation unit 426 corresponds to the address according to claim 1, 2, 4, or 9. Corresponds to generating means.

  Among these, the issuer authentication information storage unit 422 is a means for storing authentication information necessary for requesting the address issuance key generation server 140 to generate an address issuance key, and is specifically exemplified in FIG. As described above, a server ID for uniquely specifying each of a plurality of servers permitted to issue an ad-hoc address as a proxy is associated with a password set for each server and stored.

  The address issue key storage unit 425 is a unit that stores an address issue key used for generating an ad hoc address, as illustrated in FIG. The address issue key Kg is generated by the address issue key generation server 140.

  The condition code table 426a is a means corresponding to the condition code table 126a described in the first embodiment. As illustrated in FIG. 7, a code indicating each combination pattern in association with the combination pattern of communication conditions. Stored in a storage code (type information).

  The delivery destination database 428 is a means for storing various types of information related to mailing list participants (mail delivery destinations). Specifically, as illustrated in FIG. 17, for each participant, a user name and a password are stored. Correspondingly, contact information such as a mail address, a telephone number, an address disclosure condition, and an ad hoc address use condition is stored.

  The HTTP communication unit 421 controls communication with other devices on the Internet 100 such as the address issuance key generation server 140 and clients (distribution destination user terminal 220, distributor terminal 320) according to a so-called HTTP communication protocol. It is means to do.

  The address issue key acquisition unit 423 is a unit that performs processing related to acquisition of an address issue key. Specifically, prior to the generation of an ad hoc address, issuer authentication information (server ID and password) is read from the issuer authentication information storage unit 422, and an address issuance key issuance request including this issuer authentication information is issued. Transmit to the key generation server 140. Further, in response to this, when an address issuance key issuance response including the address issuance key Kg is received from the address issuance key generation server 140, the address issuance key Kg is registered in the address issuance key storage unit 425.

  The mail communication unit 424 is means for controlling communication with other mail servers on the Internet 100 such as the distribution source side mail server 310 and the distribution destination side mail server 210 in accordance with a so-called SMTP communication protocol.

  The distribution processing unit 429 is a means for processing mail received from the distributor terminal 320. Specifically, when a mail is received from the distributor terminal 320, the real address of the distributor 330 is extracted from this mail, and contact information of the distributor 330 corresponding to this real address (the recipient mail address, telephone number, (Address disclosure condition, ad hoc address use condition) and the real address (sender mail address) of the distribution destination user 230 are read from the distribution destination database 428 and transferred to the transmission source address ad hoc conversion unit 427. Further, in response to this, when a mail in which the transmission source is replaced with the ad hoc address corresponding to each distribution destination user 230 is received from the transmission source address ad hoc unit 427, the distribution destination database 428 is referred to, and The transmission destination of the mail is replaced with the real address of each distribution destination user 230 and transmitted to the distribution destination side mail server 210.

  The sender address ad hoc unit 427 is means for ad hoc the sender address of the mail received from the distributor terminal 320. Specifically, when the contact information of the distributor 330 and the real address of the distribution destination user 230 are received from the distribution processing unit 429, they are transferred to the ad hoc address generation unit 426 to request generation of an ad hoc address. Correspondingly, when an ad hoc address corresponding to each delivery destination user 230 is received from the ad hoc address generation unit 426, the source address of the email received from the distributor terminal 320 is assigned to each delivery destination user 230. These are replaced with the ad hoc addresses, and these are transferred to the distribution processing unit 429.

  The ad hoc address generation unit 426 receives the contact information (distributor mail address, telephone number, address disclosure condition, ad hoc address use condition) of the distributor 330 and the real address of the distribution destination user 230 received from the transmission source address ad hoc unit 427. A means for generating an ad hoc address based on (sender mail address) and information stored in the address issuance key storage unit 425 and the condition code table 426a. Specifically, the ad hoc address generation processing is basically the same as the method described in the first embodiment with reference to FIGS. 9 and 10, except for the points described below.

  That is, in the second embodiment, the “incoming mail address R” corresponds to the mail address of the distributor 330, and the “sender address S” in the context condition C corresponds to the mail address of each distribution destination user 230. An ad hoc address is generated for each user 230. In the second embodiment, encryption is performed using the address issuance key Kg stored in the address issuance key storage unit 425 instead of the “encryption key K”. Furthermore, in the second embodiment, processing using the random number sequence table is not performed. As a result, in the second embodiment, the mail address R of the mailing list (distributor) and the context condition C (e.g., the mail address of each distribution destination user 230) are encoded and then combined and encrypted with the address issue key Kg. By adding the encoded data of the issuer ID “$ G”, an ad hoc address is generated for each distribution destination user 230. When a plurality of master keys are used, a key identifier that uniquely identifies the master key used for generating the address issuing key is also added.

[Configuration of Address Issue Key Generation Server (Example 2)]
As shown in FIG. 14, the address issuance key generation server 140 includes an HTTP communication unit 141, an issuer authentication information table 142, a proxy issuer authentication unit 143, a master key storage unit 144, and an address issuance key generation unit 145. With. The address issuing key generation server 140 corresponds to the master key management device according to claim 4.

  Of these, the issuer authentication information table 142 is a means for storing authentication information that is the basis for authenticating a server (proxy issuer) that has requested the generation of an address issuance key. As illustrated in FIG. 18, the password is stored in association with the issuer ID “$ G” of each server (proxy issuer) permitted to issue an ad hoc address.

  As illustrated in FIG. 19, the master key storage unit 144 is a unit that stores a master key Km used to generate an address issuance key.

  The HTTP communication unit 141 is a means for controlling communication with other devices on the Internet 100 such as the mailing list server 420 according to a so-called HTTP communication protocol.

  The proxy issuer authentication unit 143 is means for processing an address issue key issue request received from the mailing list server 420 or the like. Specifically, when an address issuance key issuance request including issuer authentication information (issuer ID and password) is received from the mailing list server 420, the corresponding issuer ID and password are stored in the issuer authentication information table 142. Authenticate whether or not As a result, if the issuer authentication is successful, the fact is output to the address issuance key generation unit 145. On the other hand, if the issuer authentication is unsuccessful, the fact is sent to the mailing list server 420.

  The address issue key generation unit 145 is means for generating an address issue key. Specifically, when the authentication success is received from the proxy issuer authentication unit 143, the issuer ID ($ G) is read from the address issue key issue request, and the master key Km is read from the master key storage unit 144. Then, the issuer ID “$ G” and the master key Km are input to the one-way function {Kg = F (Km, $ G)} to generate the address issuance key Kg, and the address issuance including the address issuance key Kg is issued. A key issuance response is transmitted to the mailing list server 420.

[Configuration of Ad Hoc Mail Transfer Server (Example 2)]
As shown in FIG. 14, the ad hoc mail transfer server 130 includes a mail communication unit 131, a master key storage unit 132, a filter processing unit 134, a condition code table 134 a, and a transfer processing unit 135. The filter processing unit 134 corresponds to the filter processing unit of claim 1, 2, or 4, and the transfer processing unit 135 corresponds to the transfer processing unit of claim 1.

  Among these, the master key storage unit 132 is a table that is synchronized with the master key storage unit 144 included in the address issuing key generation server 140 via the LAN 110. That is, the same information as illustrated in FIG. 19 is stored.

  The mail communication unit 131 is means for controlling communication with other mail servers on the Internet 100 such as the distribution source side mail server 310 and the distribution destination side mail server 210 in accordance with a so-called SMTP communication protocol.

  The filter processing unit 134 is a means for filtering ad hoc mail destined for an ad hoc address. Specifically, this filtering processing is basically the same as the method described in the first embodiment with reference to FIGS. 12 and 13, but differs in the points described below.

  That is, in the filtering process in the second embodiment, the mail address R (distributor) mail address R and context condition C are encoded and then combined and encrypted with the address issue key Kg, and the issuer ID ($ G) This is performed for the ad hoc address generated by adding the encoded data. In the second embodiment, instead of the “encryption key K”, the address issuing key Kg generated by the master key Km stored in the master key storage unit 132 is used for the filtering process. That is, an issuer ID ($ G) and a master key Km are input to a one-way function {Kg = F (Km, $ G)} to generate an address issue key Kg, and an ad hoc address is generated using this address issue key Kg. Is decrypted. In the second embodiment, the filtering process using the random number sequence table is not performed.

  The transfer processing unit 135 is a means for transferring ad hoc mail destined for an ad hoc address. Specifically, regarding the mail that can be transferred by the filter processing unit 134, when the data is received from the distribution destination side mail server 210 and the real address (the mail address of the distributor 330) is received from the filter processing unit 134. The mail address is replaced with the real address from the ad hoc address, and the mail is transferred to the distribution side mail server 310.

[Processing procedure up to issuance of address issue key (Example 2)]
Next, with reference to FIG. 20, the processing procedure leading to the issue of the address issuance key will be described. FIG. 20 is a sequence diagram illustrating a processing procedure up to issuance of an address issuance key according to the second embodiment.

  As shown in the figure, when the address issuance key generation server 140 receives an address issuance key issuance request including issuer authentication information (issuer ID and password) from the mailing list server 420 (step S2001), it responds to this request. Issuer authentication is performed by determining whether or not the issuer ID and password are stored in the issuer authentication information table 142 (step S2002).

  As a result, if the issuer authentication fails, the fact is transmitted to the mailing list server 420. On the other hand, if the issuer authentication is successful, the address issuance key generation server 140 reads the issuer ID ($ G) from the address issuance key issuance request and also reads the master key Km from the master key storage unit 144. An address issue key Kg is generated by the function {Kg = F (Km, $ G)} (step S2003).

  Then, the address issue key generation server 140 transmits an address issue key issue response including the address issue key Kg to the mailing list server 420 (step S2004). Through the series of processes described above, an address issuance key is generated for each server for each server (such as the mailing list server 420) that issues an ad hoc address on behalf of the server.

[Processing Procedure until Disclosure of Ad Hoc Address (Example 2)]
Next, with reference to FIG. 21, a processing procedure leading to the disclosure of an ad hoc address will be described. FIG. 21 is a sequence diagram illustrating a processing procedure until disclosure of an ad hoc address according to the second embodiment.

  As shown in the figure, when the distributor-side mail server 310 receives a mail addressed to the mailing list server 420 from the distributor terminal 320 (step S2101), the distributor-side mail server 310 transmits this mail to the mailing list server 420 (step S2102).

  The mailing list server 420 that has received such mail extracts the real address of the distributor 330 from this mail, and contacts information of the distributor 330 corresponding to this real address (the recipient mail address, telephone number, address disclosure condition, ad hoc) The address use condition) and the real address (sender mail address) of the delivery destination user 230 are read from the delivery destination database 428 (step S2103).

  The mailing list server 420 generates an ad hoc address based on the contact information of the distributor 330 and the real address of the distribution destination user 230 and the information stored in the address issue key storage unit 425 and the condition code table 426a. (Step S2104). That is, the mail address R of the mailing list speaker (distributor) and the context condition C (e.g., the mail address of each distribution destination user 230) are encoded and then combined and encrypted with the address issue key Kg, and the issuer ID ($ By adding the encoded data of G), an ad hoc address is generated for each distribution destination user 230.

  Subsequently, the mailing list server 420 replaces the transmission source address of the mail received from the distributor terminal 320 with an ad hoc address corresponding to each of the distribution destination users 230 (step S2105), and further changes the transmission destination of these mails to each distribution. It replaces with the real address of the destination user 230 and transmits it to the delivery destination side mail server 210 (steps S2106 and S2107).

  The distribution destination side mail server 210 temporarily stores the mail received from the mailing list server 420 (step S2108), and receives a mail reception request from each destination user terminal 220 (step S2109), distributes the temporarily stored mail. It transmits to the destination user terminal 220 (step S2110). Through the above-described series of processing, an ad hoc address destined for the mailing list speaker is generated and disclosed to the mailing list participant through the mailing list.

[Processing procedure until ad hoc mail transfer (Example 2)]
Next, with reference to FIG. 22, a processing procedure leading to ad hoc mail transfer will be described. FIG. 22 is a sequence diagram illustrating a processing procedure until ad hoc mail transfer according to the second embodiment. As shown in the figure, when the destination mail server 210 receives an ad hoc mail addressed to the distributor 330's ad hoc address transmitted from the destination user terminal 220 (step S2201), the ad hoc address and sender A mail transmission request including the mail address of the (destination user) is transmitted to the ad hoc mail transfer server 130 (step S2202).

  The ad hoc mail transfer server 130 that has received such a mail transmission request acquires a context condition from the ad hoc address based on information stored in the master key storage unit 132 or the condition code table 134a, and is a mail that satisfies this context condition. Is filtered (step S2203). Further, in this filtering, when the context condition is satisfied (transfer is possible), the real address (the mail address of the distributor 330) is acquired from the ad hoc address.

  In addition, when the context condition is satisfied (transfer is possible), the ad hoc mail transfer server 130 transmits a mail transmission permission to the distribution-destination mail server 210 (step S2204), and the data of the mail that has been transferred can be transferred to the ad hoc mail. The data is transferred to the transfer server 130 (step S2205). If the context condition is not satisfied (transfer is not possible), a mail reception rejection message is transmitted to the mail server 210 on the delivery destination side.

  Subsequently, the ad hoc mail transfer server 130 determines the transfer destination of the mail that can be transferred by the filter processing unit 134, and acquires the destination of the mail transferred from the distribution destination side mail server 210 from the ad hoc address in step S2203. The real address (the mail address of the distributor 330) is replaced (step S2206) and transferred to the distribution source mail server 310 (step S2207).

  Then, the distribution source mail server 310 that has received the mail from the ad hoc mail transfer server 130 temporarily stores the mail (step S2208), and receives the mail reception request from the distributor terminal 320 (step S2209), temporarily stores the mail. The e-mail is transmitted to the distributor terminal 320 (step S2210). Through the above-described series of processing, an ad hoc mail addressed to the ad hoc address is delivered from the distribution destination user terminal 220 (mailing list participant) to the distributor terminal 320 (mailing list speaker).

[Effect of Example 2]
As described above, according to the second embodiment, in the mailing list service performed on the Internet, it is possible to eliminate annoying communication request to the user, protect the privacy of the user, maintain the user's credit history, It is possible to reduce the load of transfer processing, reduce database resources, and speed up the filtering processing of communication requests.

  In addition, according to the second embodiment, since the service provider manages the key, it is possible to issue an ad hoc address in a wide range, eliminate annoying communication requests to the user, protect the privacy of the user, It is also possible to strengthen the maintenance of user credit history over a wide range.

  In the third embodiment, a case where the present invention is applied to a so-called auction service will be described. More specifically, in the third embodiment, an ad hoc address is generated in an auction server that receives an address issuance key from the address issuance key generation server, as in the second embodiment. However, in the third embodiment, the ad hoc mail user ID (address identifier that uniquely identifies the mail address of the auction seller) and the context condition are combined with the verification code generated from the address issuance key. By doing so, an ad hoc address is generated and disclosed to the successful bidder. Further, in the third embodiment, an ad hoc address is generated by combining the ad hoc mail user ID of the auction successful bidder and the context condition, and adding a verification code generated from the address issuing key to the auction seller. Disclose.

  In the third embodiment, the ad hoc mail addressed to the ad hoc address is filtered, and the mail is transferred to the exhibitor or the successful bidder. Further, in the third embodiment, when an exhibitor or a successful bidder transmits an ad hoc mail, a sender ad hoc address concealing the sender or successful bidder as the transmission source is generated, and the sender of the ad hoc mail is transmitted. Replace with the original ad hoc address and send. Further, in the third embodiment, when the exhibitor or the successful bidder receives the forwarded mail after filtering and sends a reply mail to the forwarded mail, the transmission that conceals the exhibitor or the successful bidder who is the reply source. An original ad hoc address is generated, and the sender of the reply mail is replaced with the sender ad hoc address for transmission. In the following, after describing the configuration of the communication control system according to the third embodiment, processing procedure until disclosure of an ad hoc address, ad hoc address generation processing, processing procedure until ad hoc mail transfer and reply, filter processing, transmission The original address generation process will be described in order.

[Configuration of communication control system (Example 3)]
First, the configuration of the communication control system according to the third embodiment will be described with reference to FIG. FIG. 23 is a block diagram illustrating the configuration of the communication control system according to the third embodiment. As shown in the figure, the communication control system according to the third embodiment includes an exhibitor terminal 220, a successful bidder terminal 320, a callee mail server 210, and a caller mail server 310 via the Internet 400 and the LAN 100. The auction management server 430, the address issuance key generation server 140, and the ad hoc mail transfer server 150 are connected to be communicable with each other.

  Among these, the exhibitor terminal 220 and the successful bidder terminal 320 are terminals corresponding to the receiver terminal 220 and the sender terminal 320 described in the first embodiment. However, in the third embodiment, the exhibitor terminal 220 is a terminal used by a user who is an auction seller 230 and can be a recipient or sender of an ad hoc mail, and the successful bidder terminal 320 is an auction. This terminal is used by a user who can be an ad hoc mail recipient or sender.

  The seller side mail server 210 and the successful bidder side mail server 310 are terminals corresponding to the arrival side mail server 210 and the outgoing side mail server 310 described in the first embodiment. However, in the third embodiment, the seller side mail server 210 has a role of receiving an ad hoc mail to be described later from the seller terminal 220 and forwarding the ad hoc mail to the seller terminal 220, and the successful bidder side mail server. 310 has a role of accepting an ad hoc mail from the successful bidder terminal 320 and transferring the ad hoc mail to the successful bidder terminal 320.

  The auction management server 430 provides auction services to users (exhibitors 230, successful bidders 330, bidders, etc.) and uses the address issue key generated by the address issue key generation server 140 to obtain an ad hoc address. Issuing server. Note that the auction management server 430 is a device owned by a service provider that provides auction services.

  The address issuance key generation server 140 is a server that generates an address issuance key in response to a request from the auction management server 430, and the ad hoc mail transfer server 150 accepts ad hoc mail addressed to the ad hoc address and filters it. Then, the server transfers the data to the winning bidder 330 or the exhibitor 230. The address issuance key generation server 140 and the ad hoc mail transfer server 150 are devices possessed by an ad hoc address supplier that manages ad hoc addresses. Hereinafter, the configurations of the auction management server 430, the address issuance key generation server 140, and the ad hoc mail transfer server 150 that bear the main features of the third embodiment will be described in detail.

[Configuration of Auction Management Server (Example 3)]
As shown in FIG. 23, the auction management server 430 includes an HTTP communication unit 431, an issuer authentication information storage unit 432, an address issue key acquisition unit 433, an address issue key storage unit 434, a user database 435, an auction, A management unit 436, an auction database 437, and an ad hoc address generation unit 438 are provided. The auction management server 430 corresponds to the service providing apparatus of claim 4, the auction management unit 436 corresponds to the address disclosure unit of claim 1, and the ad hoc address generation unit 438 corresponds to the claims 1, 2, 4, or 10. Corresponds to address generation means.

  Among these, the issuer authentication information storage unit 432 is a means corresponding to the issuer authentication information storage unit 422 described in the second embodiment, and as illustrated in FIG. 15, proxy issuance of an ad hoc address is permitted. The server ID for uniquely identifying each of the plurality of servers and the password set for each server are stored in association with each other.

  The address issuance key storage unit 434 corresponds to the address issuance key storage unit 425 described in the second embodiment, and stores an address issuance key Kg used for generating an ad hoc address as illustrated in FIG. Means.

  The user database 435 is a means for storing various information related to users of auctions and ad hoc mails. Specifically, as illustrated in FIG. 24, each user (actual information of each user) is stored for each user. In addition to a user name and password, a mail address or the like is stored in association with an ad hoc mail user ID that uniquely identifies an address.

  The auction database 437 is a means for storing various information related to the auction. Specifically, as illustrated in FIG. 25, the auction database 437 is associated with the exhibition ID, the exhibitor name, the exhibition deadline, and the exhibition information, and A user ID, a bid price, etc. are memorize | stored and comprised.

  The HTTP communication unit 431 controls communication with other devices on the Internet 100 such as the address issuance key generation server 140 and clients (exhibitor terminal 220, successful bidder terminal 320) according to a so-called HTTP communication protocol. Means.

  The address issuance key acquisition unit 433 is means for performing processing related to acquisition of an address issuance key. Specifically, prior to generation of an ad hoc address, issuer authentication information (server ID and password) is read from the issuer authentication information storage unit 432, and an address issuance key issuance request including this issuer authentication information is issued as an address. Transmit to the key generation server 140. In response to this, when receiving an address issuance key issuance response including the address issuance key Kg from the address issuance key generation server 140, the address issuance key Kg is registered in the address issuance key storage unit 434.

  The auction management unit 436 is means for performing processing related to the auction. Specifically, when receiving an exhibition request from the exhibitor terminal 220 of the exhibitor 230, after receiving user authentication, the auction exhibition information is received and registered in the auction database 437, and the user ( To the bidder). When a bid request is received from the bidder terminal 320 of the bidder (successful bidder 330), bid information is received after user authentication and registered in the auction database 437. Then, when the bid due date arrives, the exhibition information of the auction is not disclosed (deletion display is deleted), the winning bidder is determined, and the user ID of each seller and winning bidder is sent to the ad hoc address generation unit 438. Deliver. Correspondingly, the ad hoc address generation unit 438 sends the successful bidder's ad hoc address (destination address for sending an email from the successful bidder to the seller) and the seller's ad hoc address (email is sent from the seller to the successful bidder). For receiving the successful bidder result notification including the successful bidder ad hoc address to the successful bidder terminal 320 and the successful bidder result notification including the seller ad hoc address. The terminal 220 is notified.

  The ad hoc address generation unit 438 is a processing unit that generates an ad hoc address in accordance with the successful bidder determination of the auction. Specifically, when the user IDs of the exhibitor and the successful bidder are received from the auction management unit 436, based on the user IDs, the automatically set expiration date, and information stored in the address issuance key storage unit 434. Thus, an ad hoc address (ad hoc address for successful bidder, ad hoc address for exhibitor) is generated. This ad hoc address generation process will be described in detail later.

[Configuration of Address Issue Key Generation Server (Example 3)]
As shown in FIG. 23, the address issue key generation server 140 includes an HTTP communication unit 141, an issuer authentication information table 142, a proxy issuer authentication unit 143, a master key storage unit 144, and an address issue key generation unit 145. With. Note that these units are similar means corresponding to the units of the address issuing key generation server 140 described in the second embodiment.

  That is, as illustrated in FIG. 18, the issuer authentication information table 142 associates a password with an issuer ID ($ G) of each server (proxy issuer) that is permitted to issue an ad hoc address. Memorize and configure. Further, as illustrated in FIG. 19, the master key storage unit 144 is means for storing a master key Km used for generating an address issuance key.

  The HTTP communication unit 141 is means for controlling communication with other devices on the Internet 100 such as the auction management server 430 in accordance with a so-called HTTP communication protocol. The proxy issuer authentication unit 143 is means for performing issuer authentication based on an address issue key issue request received from the auction management server 430 or the like. Then, when the issuer authentication is successful, the address issue key generation unit 145 inputs the issuer ID ($ G) and the master key Km into the one-way function {Kg = F (Km, $ G)}, and issues the address issue key. This is means for generating Kg and transmitting an address issuance key issuance response including the address issuance key Kg to the auction management server 430.

[Configuration of Ad Hoc Mail Transfer Server (Example 3)]
As shown in FIG. 23, the ad hoc mail transfer server 150 includes a mail communication unit 151, a master key storage unit 152, a filter processing unit 154, a transfer processing unit 155, a real address table 156, and a sender address generation unit. 157. The filter processor 154 corresponds to the filter processor of claim 1, 2 or 4, the transfer processor 155 corresponds to the transfer processor of claim 1 or 7, and the caller address generator 157 is claimed in claim 6. The reply processing means and the reply source address generating means of claim 7.

  Among these, the master key storage unit 152 is a table that is synchronized with the master key storage unit 144 included in the address issuing key generation server 140 via the LAN 110. That is, the same information as illustrated in FIG. 19 is stored.

  The real address table 156 is a means for storing various types of information related to users of ad hoc mails. Specifically, as illustrated in FIG. 26, each user (actual address of each user). ) Is associated with an ad hoc mail user ID that uniquely identifies the mail address and stored. The ad hoc mail user ID and mail address are synchronized with those stored in the user database 435 of the auction management server 430.

  The mail communication unit 151 is means for controlling communication with other mail servers on the Internet 100 such as the seller-side mail server 210 and the successful bidder-side mail server 310 according to a so-called SMTP communication protocol.

  The filter processing unit 154 is a means for filtering ad hoc mail destined for an ad hoc address. Specifically, when an email addressed to an ad hoc address (ad hoc address for a successful bidder, ad hoc address for an exhibitor) is received from the seller side mail server 210, the successful bidder side mail server 310, or the like, it is stored in the master key 152. Based on the received information, a context condition (communication condition relating to caller designation and expiration date in the third embodiment) is acquired from the ad hoc address, and whether or not the mail satisfies the context condition is filtered. As a result, when the context condition is satisfied (transfer is possible), a user ID (user ID of the called party) is acquired from the ad hoc address, and the transfer processing unit 155 receives the user ID, the context condition, and the sender's mail address. hand over. On the other hand, when the context condition is not satisfied (transfer is impossible), a mail reception rejection message is transmitted to the seller side mail server 210 or the successful bidder side mail server 310. This filtering process will be described in detail later.

  The sender address generation unit 157 is a processing unit that converts the address of the sender of the ad hoc mail into an ad hoc and generates a sender ad hoc address. Specifically, when receiving the ad hoc mail user ID (the called party user ID), the context condition, and the sender mail address from the transfer processing unit 135, the real address table 156, the master key storage unit 152, and the condition code table A source ad hoc address is generated with reference to the information stored in 154a. The source ad hoc address generation process will be described in detail later, but basically the same process as the ad hoc address generation unit 438 in the auction management server 430 is performed.

  The transfer processing unit 155 is a means for transferring ad hoc mail destined for an ad hoc address. Specifically, for the ad hoc mail that is allowed to be transferred by the filter processing unit 154, when receiving the user ID of the callee, the context condition, and the mail address of the caller from the filter processing unit 154, these are sent to the caller address generation unit 157. And the corresponding real address is acquired from the real address table 156 based on the user ID of the callee. Then, the address of the ad hoc mail is replaced with the real address from the ad hoc address, and when the sender ad hoc address is received from the sender address generation unit 157, the sender of the ad hoc mail is replaced with the sender ad hoc address, and this mail is sent to the seller. It transfers to the side mail server 210 and the successful bidder side mail server 310.

[Processing Procedure until Disclosure of Ad Hoc Address (Example 3)]
Next, with reference to FIG. 27, a processing procedure leading to the disclosure of an ad hoc address will be described. FIG. 27 is a sequence diagram illustrating a processing procedure until disclosure of an ad hoc address according to the third embodiment. Here, it is assumed that the address issuance key Kg has already been generated, and that an auction has already been exhibited and a bid has already been made.

  As shown in the figure, the auction management server 430 periodically checks the arrival of the bid deadline for the exhibition information registered in the auction database 437 (step S2701), and determines that the bid deadline has expired ( In step S2702, the auction exhibition information is not disclosed (deletion display is deleted) (step S2703), and the winning bidder is determined (step S2704).

  Then, based on the user IDs of the seller and the successful bidder, the auction management server 430 uses the successful bidder ad hoc address T1 (the destination address for sending an email from the successful bidder to the seller) and the exhibitor ad hoc address T2 ( A destination address for sending an email from the exhibitor to the winning bidder is generated (step S2705). This ad hoc address generation process will be described in detail later.

  Subsequently, the auction management server 430 notifies the seller terminal 220 of a successful bid result notification including the seller's ad hoc address T2 (step S2706) and for the successful bidder including the successful bidder's ad hoc address T1. A successful bid result notification is sent to the successful bidder terminal 320 (step S2707). Through the series of processes described above, the successful bidder ad hoc address T1 and the seller ad hoc address T2 are generated and disclosed to the winning bidder and the seller, respectively.

[Ad hoc address generation processing (third embodiment)]
Next, the ad hoc address generation process (step S2705) shown in FIG. 27 will be described in detail with reference to FIG. 28 and FIG. Here, the description will be made assuming that an ad hoc address including the context condition C for designating the calling address and the context condition C for designating the expiration date automatically set by the auction management server 430 is generated.

  FIG. 28 is a flowchart showing the flow of the ad hoc address generation process shown in FIG. 27, and FIG. 29 is a diagram showing a specific example of the ad hoc address generation process shown in FIG. As shown in the figure, the ad hoc address generation unit 438 of the auction management server 430 encodes the context condition C to generate “character string W_CT” (step S2801). Specifically, “character string W_C.1” representing the type and combination of context condition C is generated with reference to condition code table 438a (step S2801.1). Also, each selected condition is encoded to generate “character string W_C.2”, but in the third embodiment, only the expiration date is encoded to generate “character string W_C.2.E”. This is defined as “character string W_C.2” (step S2801.2). Then, “character string W_C.1” and “character string W_C.2” are connected to generate “character string W_CT” (step S2801.3).

  Subsequently, the ad hoc address generation unit 438 generates “character string W_CV1” and “character string W_CV2” based on the context condition C (step S2802). Specifically, each condition selected for the seller is encoded to generate “character string W_CV1”. In the third embodiment, the value of the successful bidder's mail address (R2) is set to “W_CV.S. 1 ”and“ character string W_CV1 ”(step S2802.1). Similarly, each condition selected for the winning bidder is encoded to generate “character string W_CV2”. In the third embodiment, the value of the seller's email address (R1) is set to “W_CV. S.2 ”and“ character string W_CV2 ”(step S2802.2).

  Then, the ad hoc address generation unit 438 generates “verification code W_V1” and “verification code W_V2” (step S2803). Specifically, a character string obtained by concatenating the seller's ad hoc mail user ID “U1”, “character string W_CT”, and “character string W_CV1” with “.” Is generated, and the keyed hash function of this character string is generated. A value is obtained using the address issuance key Kg, and the lower 30 bits of this value are encoded with BASE32 to generate “character string W_V1” of 6 characters (step S2803.1). Similarly, a character string in which the successful bidder's ad hoc mail user ID “U2”, “character string W_CT”, and “character string W_CV2” are concatenated with “.” Is generated, and the keyed hash of this character string is generated. The function value is obtained by using the address issuance key Kg, and the lower 30 bits of this value are encoded by BASE32 to generate “character string W_V2” of 6 characters (step S2803.2).

  Subsequently, the ad hoc address generation unit 438 generates the successful bidder ad hoc address T1 and the seller ad hoc address T2 (step S2804). Specifically, a character string in which the ad hoc mail user ID “U1”, “character string W_CT”, and “character string W_V1” of the exhibitor are connected by “.” Is generated, and “//” is added after the character string. , “@”, Issuer ID “$ G”, and domain name “.adhoc.isp-A.ne.jp” are added to generate an ad hoc address T1 for the successful bidder (step S2804.1). Similarly, a character string obtained by concatenating the successful bidder's ad hoc mail user ID “U2”, “character string W_CT”, and “character string W_V2” with “.” Is generated, and “/ By adding “/”, “@”, issuer ID “$ G”, and domain name “.adhoc.isp-A.ne.jp”, an ad hoc address T2 for exhibitor is generated (step S2804.2).

  Note that “//” embedded in the ad hoc address is identified by the ad hoc mail transfer server 150 that the caller and the callee are mutually ad hoc mail users and the ad hoc address is generated under the same context conditions. Although it is a character string for enabling, it may be identified by a character string different from this. However, if the ad hoc mail transfer server 150 is set to process only the above-described ad hoc address (when the identification is not required), it is necessary to embed the identification character string in the ad hoc address. Instead, such an ad hoc address may be generated.

  Through the series of processes described above, the ad hoc address T1 for the successful bidder is generated by combining the ad hoc mail user ID of the auction seller and the context condition and adding the verification code generated from the address issuance key. Further, the ad hoc address T2 for exhibitor is generated by combining the ad hoc mail user ID of the auction successful bidder and the context condition and adding the verification code generated from the address issuance key.

[Processing procedure until ad hoc mail transfer and reply (Example 3)]
Next, with reference to FIG. 30, a processing procedure leading to ad hoc mail transfer and reply will be described. Here, the mail sent by the seller 220 using the seller's ad hoc address T2 is forwarded to the successful bidder 330, and the mail returned by the successful bidder 330 in response to this forwarded mail is returned to the seller 220. This will be described as an example.

  FIG. 30 is a sequence diagram illustrating processing procedures up to transfer and return of ad hoc mail according to the third embodiment. As shown in the figure, when the ad hoc mail transfer server 150 receives an ad hoc mail addressed to the seller's ad hoc address T2 from the seller terminal 220 via the seller side mail server 210 (step S3001), the transfer is performed. Judgment is made (step S3002). That is, based on the information stored in the master key 152, the context condition C and the successful bidder's ad hoc mail user ID “U2” are acquired from the ad hoc address T2, and only mail that satisfies this context condition is filtered. This filtering process will be described in detail later.

  In addition, when the context condition is satisfied (transfer is possible), the ad hoc mail transfer server 150 converts the address of the exhibitor who is the sender of the ad hoc mail to an ad hoc and generates a sender ad hoc address T1 (step S3003). That is, referring to information stored in the real address table 156 and the master key storage unit 152 based on the user ID “U2” of the winning bidder, the context condition C, and the mail address R1 of the exhibitor, the sender ad hoc address T1 Is generated. When the context condition is not satisfied (transfer is impossible), a mail reception rejection message is transmitted to the exhibitor terminal 220. The source ad hoc address generation process will be described in detail later.

  Subsequently, the ad hoc mail transfer server 150 transfers the ad hoc mail addressed to the ad hoc address T2 to the successful bidder mail server 310 (steps S3004 and S3005). That is, for the ad hoc mail permitted to be transferred, the corresponding real address R2 is obtained from the real address table 156 based on the user ID of the called party (successful bidder), and the destination of the ad hoc mail is changed from the ad hoc address T2 to the real address R2. Further, the sender of the ad hoc mail is replaced from the exhibitor mail address R1 to the sender ad hoc address T1, and this mail is transferred to the successful bidder mail server 310.

  When the successful bidder side mail server 310 that has received the mail from the ad hoc mail transfer server 150 receives a mail reception request (arrival mail confirmation) from the successful bidder terminal 320 (step S3006), the mail received from the ad hoc mail transfer server 150 Is transmitted to the successful bidder terminal 320 (step S3007).

  Subsequently, the ad hoc mail transfer server 150 receives an ad hoc mail addressed to the sender ad hoc address T1 (that is, a reply mail to the above ad hoc mail) from the successful bidder terminal 320 via the successful bidder side mail server 310. Then (step S3008), it is determined whether transfer is possible (step S3009). That is, the same filtering process as in step S3002 described above is performed.

  In addition, when the context condition is satisfied (transfer is possible), the ad hoc mail transfer server 150 converts the address of the successful bidder who is the sender of the ad hoc mail into an ad hoc and generates a source ad hoc address T2 (step S3010). That is, the same source ad hoc address generation processing as in step S3003 described above is performed.

  Subsequently, the ad hoc mail transfer server 150 transfers the ad hoc mail (reply mail) destined for the ad hoc address T1 to the seller side mail server 210 (steps S3011 and S3012). That is, the same transfer process as in steps S3004 and S3005 described above is performed.

  When the seller-side mail server 210 that has received the mail from the ad hoc mail transfer server 150 receives a mail reception request (arrival mail confirmation) from the seller terminal 220 (step S3013), the mail received from the ad hoc mail transfer server 150 Is transmitted to the seller terminal 220 (step S3014).

  Through the series of processes described above, the ad hoc mail addressed to the ad hoc address T2 is delivered from the exhibitor terminal 220 to the successful bidder terminal 320 with the sender ad hoc address T1 as the transmission source. Similarly, the reply mail addressed to the sender ad hoc address T1 is delivered from the successful bidder terminal 320 to the exhibitor terminal 220 with the sender ad hoc address T2 as the sender.

[Filter processing (Example 3)]
Next, the filtering process (step S3002) shown in FIG. 30 will be described in detail with reference to FIG. 31 and FIG. Note that the filtering process in step S3009 shown in FIG. 30 is performed in the same manner.

  FIG. 31 is a flowchart showing the flow of the filter processing shown in FIG. 30, and FIG. 32 is a diagram showing a specific example of the filter processing shown in FIG. As shown in the figure, the filter processing unit 154 of the ad hoc mail transfer server 150 reads the ad hoc address T2 from the mail transmission request including the ad hoc address T2 and the sender mail address R1, and the user name portion of the ad hoc address T2 From the successful bidder's ad hoc mail user ID “U2”, “character string W_CT (more specifically,“ character string W_C.1 ”and“ character string W_C.2 ”)” and “character string W_V2” (steps) S3101).

  Specifically, if it is defined that the “Nth dot character” indicates the Nth dot character counted from the end of the user name part, “U2” is from the beginning to the point immediately before the third dot character. Extraction is performed for “character string W_C.1” immediately after the third dot character to immediately before the second dot character, and for “character string W_C.2”, the first dot character immediately after the second dot character. The character string W_V2 is extracted from immediately after the first dot character to the end.

  Then, the filter processing unit 154 decodes “character string W_CT” (step S3102). Specifically, the byte read position is set to the beginning of “character string W_C.2” in the initial state, and the read position is advanced by the read amount. However, “S” is included in “character string W_C.1”. In particular, no reading is performed (step S3102.S), and when “D” is included in the “character string W_C.1”, the number of one character is read as the “word count D_N” of the domain (step S3102.D). ), When “E” is included in “character string W_C.1”, six characters are read as “character string W_C.2.E”, and the first character string “W_C.2.E” is read. Two digits are read as “year”, the next two digits are read as “month”, and the next two digits are read as “day”, which is set as the expiration date (step S3102.E).

  Subsequently, the filter processing unit 154 temporarily determines whether or not transfer is possible based on the “character string W_CT” that is the context condition C (step S3103). Specifically, when “E” is included in the “character string W_C.1”, the current time t is read with reference to the clock in the system, and the current time t is determined in step S3102. It is determined whether or not the expiration date acquired in E has passed. If “transfer is not possible”, “transfer is possible” is set.

  When “transfer is impossible” is determined by the process of step S3103 described above (No at step S3104), the filter processing unit 154 ends the process, but when “transfer is possible” is determined (Yes at step S3104). ), The filter processing unit 154 generates an address issuance key Kg (step S3105). Specifically, “/” is included in the user name portion of the ad hoc address T2, and the character string “/” or “@” is included in the character string immediately after the first “/”. In this case, a character string from the beginning of the domain name portion of the ad hoc address T2 to immediately before the first dot character is acquired as the issuer ID “$ G” (step S3105.1). Then, the master key Km is acquired from the master key storage unit 152, the value of the keyed hash function “$ G” is obtained as the master key Km, and this is used as the address issuance key Kg (step S3105.2).

  Then, the filter processing unit 154 generates “character string W_CV” based on “character string W_CT” that is the context condition C (step S3106). Specifically, the value of the sender's mail address R1 is “character string W_CV.S” (step S3106.S), and the D_N words from the end of the domain name of the mail address R1 are “W_CV.D” (step S3106.D), these character strings are concatenated to form “character string W_CT” (step S3106. Last).

  Following this, the filter processing unit 154 generates “comparison code W_T” (step S3107). Specifically, a character string obtained by concatenating “U2”, “character string W_CT”, and “character string W_CV” with “.” Is generated, and the value of the keyed hash function of this character string is set as the address issuance key Kg. Furthermore, the lower 30 bits of this value are encoded with BASE32 to generate a “character string W_T” of 6 characters.

  Thereafter, the filter processing unit 154 determines whether or not “comparison code W_T” and “verification code W_V” match. “Transfer impossible” is set (step S3108). Through the series of processes described above, only ad hoc mail that satisfies the context condition C is extracted.

[Source Ad Hoc Address Generation Processing (Example 3)]
Next, with reference to FIG. 33, the sender ad hoc address generation process (step S3003) shown in FIG. 30 will be described in detail. Note that the source ad hoc address generation processing in step S3010 shown in FIG. 30 is performed in the same manner.

  FIG. 33 is a flowchart showing the flow of the source ad hoc address generation process shown in FIG. As shown in the figure, the sender address generation unit 157 of the ad hoc mail transfer server 150 determines whether or not to convert the sender mail address R1 into an ad hoc address (step S3301). Specifically, when there are two “/” s in the user name portion of the ad hoc address T2, which is the destination address, and “@” follows the second “/”, it is shown in FIG. By the ad hoc address generation process, it is determined that the address limited to the other party has been issued for both parties. Note that the above-described determination is unnecessary when only the above-described ad hoc address is processed as the default operation of the ad hoc mail transfer server 150.

  Then, the sender address generation unit 157 acquires the sender's ad hoc mail user ID (U1) (step S3302). Specifically, referring to the real address table 156, a line that matches the selection index of the sender's mail address R1 is selected, and the ad hoc mail user ID of this line is acquired as “U1”.

  Subsequently, the sender address generation unit 157 generates “character string W_CV” based on “U2” included in the ad hoc address T2 (step S3303). Specifically, each of the context conditions C is encoded to generate “character string W_CV”. In the third embodiment, the value of “U2” is set to “W_CV.S” (step S3303.S). This is referred to as “character string W_CV” (step S3303.last).

  Thereafter, the sender address generation unit 157 generates “verification code W_V” (step S3304). Specifically, a character string obtained by concatenating the seller's ad hoc mail user ID “U1”, “character string W_CT”, and “character string W_CV” with “.” Is generated, and the keyed hash function of this character string is A value is obtained using the address issuance key Kg, and the lower 30 bits of this value are encoded with BASE32 to generate a 6-character “character string W_V”.

  Then, the sender address generation unit 157 generates a sender ad hoc address T1 (step S3305). Specifically, a character string in which the user ID “U1”, “character string W_CT”, and “character string W_V” are connected by “.” Is generated, and “//”, “@”, “ The sender ad hoc address T1 is generated by adding the issuer ID “$ G” and the domain name “.adhoc.isp-A.ne.jp”.

  Through the above-described series of processing, when an exhibitor or successful bidder sends or returns an ad hoc mail, a sender ad hoc address that conceals the sender or successful bidder who is the sender (reply source) is generated. Is done.

[Effect of Example 3]
As described above, according to the third embodiment, in an auction service performed on the Internet, it is possible to eliminate annoying communication requests to users, protect user privacy, maintain user credit history, It is possible to reduce the load of transfer processing, reduce database resources, and speed up the filtering processing of communication requests.

  Further, according to the third embodiment, even when an exhibitor or a successful bidder transmits an ad hoc mail, a sender ad hoc address that conceals the sender or successful bidder as the transmission source is generated. As a result, it is possible to prevent a situation where the real address of the communication source is disclosed.

  Further, according to the third embodiment, even when an exhibitor or a successful bidder replies to an ad hoc mail, a sender ad hoc address concealing the seller or successful bidder as a reply source is generated. It is also possible to prevent the situation where the real address of the reply source is disclosed in response to the reply to.

  According to the third embodiment, since the address identifier (user ID) is embedded in the ad hoc address instead of the real address, the data length of the ad hoc address can be definitely set to a certain length or less.

  In the above-described third embodiment, the case where ad hoc mail is filtered based on the context condition C has been described. In the fourth embodiment, in addition to filtering based on the context condition, filtering is performed based on the issuer group of the ad hoc address. The case will be described.

  FIG. 34 is a block diagram illustrating the configuration of the communication control system according to the fourth embodiment. As shown in the figure, the communication control system according to the fourth embodiment is different from the communication control system according to the third embodiment shown in FIG. 23 in that an ad hoc mail is used instead of the ad hoc mail transfer server 150 including the real address table 156. An ad hoc mail transfer server 160 having a user table 161 is provided.

  Here, the ad hoc mail user table 161 is a means for storing various types of information related to users of ad hoc mail, as with the real address table 156. Specifically, as shown in FIG. The mail address is stored in association with the mail user ID, and the ID of the issuer that allows each user to issue an ad hoc address is stored.

  In the fourth embodiment, when the ad hoc mail is transferred and returned, the transfer processing unit 155 of the ad hoc mail transfer server 160 (corresponding to the filter processing unit of claim 5) sets the ad hoc mail user table for the ad hoc mail that satisfies the context condition. Filtering based on 161 is performed. Specifically, based on the user ID (U2) and issuer ID ($ G) of the user who is the ad hoc mail recipient, the ad hoc mail issuer is allowed to issue by referring to the ad hoc mail user table 161. Whether or not the issuer ID ($ G) is included in the user's incoming call allowable issuer group indicated by U2 is determined. As a result, if it is a person who is permitted to issue, “transfer is possible”, but if it is not permitted, “transfer is impossible”.

  FIG. 36 is a sequence diagram showing processing steps up to forwarding and replying to an ad hoc mail according to the fourth embodiment. However, the filtering based on the above-described issuer group of the ad hoc address is based on the context condition C as shown in FIG. Subsequent filtering is performed (steps S3603 and 3611). Note that the processing in other steps in FIG. 36 is the same as the processing described with reference to FIG.

  As described above, according to the fourth embodiment, since filtering is also performed based on an issuer group of ad hoc addresses, even if a real address or an address identifier (user ID) is obtained illegally, the issuer is not allowed by the user. It is also possible to eliminate the ad hoc address issued by.

  Although the embodiments of the present invention have been described above, the present invention may be implemented in various different forms within the scope of the technical idea described in the claims other than the embodiments described above. It is. Accordingly, various different embodiments will be described as a fifth embodiment.

  For example, in the above-described embodiment, the case of generating an ad hoc address as a mail address has been described. However, the present invention is not limited to this, and the present invention is similarly applied to the case of generating an ad hoc address as a telephone number. can do.

  In the above-described embodiments, the case where various types of encoding and encryption are performed to generate an ad hoc address has been described. However, the present invention is not limited to this, and other encoding and encryption methods are used. The same can be applied to the case of adopting.

  In the above-described embodiment, the case where an ad hoc address in which a real address is encoded and embedded or an ad hoc address in which an address identifier is embedded is generated has been described, but the present invention is not limited to this, for example, The address identifier may be encoded and embedded, and can be similarly applied as long as the real address is concealed and the real address and the context condition can be obtained as a result.

  In addition, among the processes described in this embodiment, all or part of the processes described as being performed automatically can be performed manually, or the processes described as being performed manually can be performed. All or a part can be automatically performed by a known method. In addition, processing procedures, control procedures, specific names, and information including various data and parameters (particularly information related to context conditions) shown in the above documents and drawings are arbitrarily changed unless otherwise specified. can do.

  Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

  In the present embodiment, each device that implements the present invention has been described in terms of functions. However, each function of each device can also be realized by causing a computer such as a personal computer or a workstation to execute a program. That is, the various processing procedures described in the present embodiment can be realized by executing a program prepared in advance on a computer. These programs can be distributed via a network such as the Internet. Further, these programs can be recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD, and can be executed by being read from the recording medium by the computer. That is, for example, a CD-ROM (a separate CD for each device) storing the partner search server 410 program, the ad hoc address issuing server 120 program, and the ad hoc mail transfer server 110 program as shown in the first embodiment. -ROM may be distributed), and each computer may read and execute the program stored in the CD-ROM.

  As described above, the communication control system, the communication control method, and the communication control program according to the present invention are useful for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network. Yes, in particular, elimination of annoying communication requests to users, protection of user privacy, maintenance of user credit history, reduction of load of communication request transfer processing, reduction of database resources, filtering of communication requests Suitable for speeding up.

1 is a block diagram illustrating a configuration of a communication control system according to a first embodiment. It is a figure which shows the structural example of the information memorize | stored in the member database shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the server authentication information storage part shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the server authentication information table shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the encryption key table shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the random number sequence table shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the condition code table shown in FIG. It is a sequence diagram which shows the process sequence until disclosure of the ad hoc address by Example 1. It is a flowchart which shows the flow of the ad hoc address production | generation process shown in FIG. It is a figure which shows the specific example of the ad hoc address production | generation process shown in FIG. It is a sequence diagram which shows the process sequence until the transfer of the ad hoc mail by Example 1. FIG. 12 is a flowchart illustrating a flow of the filter process illustrated in FIG. 11. It is a figure which shows the specific example of the filter process shown in FIG. FIG. 10 is a block diagram illustrating a configuration of a communication control system according to a second embodiment. It is a figure which shows the structural example of the information memorize | stored in the issuer authentication information storage part shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the address issuing key memory | storage part shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the delivery destination database shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the issuer authentication information storage part shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the master key memory | storage part shown in FIG. FIG. 10 is a sequence diagram illustrating a processing procedure until an address issuance key is issued according to the second embodiment. It is a sequence diagram which shows the process sequence until disclosure of the ad hoc address by Example 2. FIG. 10 is a sequence diagram illustrating a processing procedure until ad hoc mail transfer according to the second embodiment. FIG. 10 is a block diagram illustrating a configuration of a communication control system according to a third embodiment. It is a figure which shows the structural example of the information memorize | stored in the user database shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the auction database shown in FIG. It is a figure which shows the structural example of the information memorize | stored in the real address table shown in FIG. It is a sequence diagram which shows the process sequence until disclosure of the ad hoc address by Example 3. It is a flowchart which shows the flow of the ad hoc address production | generation process shown in FIG. It is a figure which shows the specific example of the ad hoc address production | generation process shown in FIG. FIG. 11 is a sequence diagram illustrating a processing procedure until ad hoc mail transfer and reply according to a third embodiment. FIG. 31 is a flowchart showing a flow of filter processing shown in FIG. 30. FIG. It is a figure which shows the specific example of the filter process shown in FIG. It is a flowchart which shows the flow of a transmission origin ad hoc address production | generation process shown in FIG. FIG. 10 is a block diagram illustrating a configuration of a communication control system according to a fourth embodiment. It is a figure which shows the structural example of the information memorize | stored in the ad hoc mail user table shown in FIG. FIG. 10 is a sequence diagram illustrating a processing procedure until ad hoc mail transfer according to a fourth embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 110 Ad hoc mail transfer server 111 Mail communication part 112 Encryption key table 113 Random number sequence table 114 Filter process part 114a Condition code table 115 Transfer process part 120 Ad hoc address issuing server 121 HTTP communication part 122 Server authentication information table 123 Server authentication part 124 Encryption key Table 125 Random number sequence table 126 Ad hoc address generation unit 126a Condition code table 410 Partner search server 411 HTTP communication unit 412 Member database 413 Search processing unit 414 Search result generation unit 415 Server authentication information storage unit 416 Address proxy application unit

Claims (18)

A communication control system for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network,
In connection with the provision of the service, the real address for communication possessed by the predetermined user is concealed, and the real address or an address identifier for uniquely identifying the real address and the predetermined user as the communication destination Address generating means for generating an ad hoc address in which communication condition information indicating communication conditions at the time is embedded,
Address disclosing means for disclosing the ad hoc address generated by the address generating means to other users;
A communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication condition information is acquired from the ad hoc address, and a communication request satisfying the communication condition indicated in the communication condition information is extracted. Filtering means;
When a communication request is extracted by the filter processing unit, the real address is acquired from the ad hoc address or the address identifier, the communication destination of the communication request is replaced with the address, and the communication request is replaced with the predetermined user. Transfer processing means for transferring to the terminal,
A communication control system comprising: The address generation means generates the ad hoc address using a predetermined key,
The communication control system according to claim 1, wherein the filter processing unit extracts a communication request that satisfies the communication condition after verifying the validity of the ad hoc address using the predetermined key. The address generation unit is connected to a service providing apparatus that manages the real address or address identifier and the communication condition information to provide the service via the network, and manages a predetermined key. Prepared for
The address generation means receives the real address or address identifier and the communication condition information from the service providing device, generates the ad hoc address using the predetermined key,
The filter processing unit manages the predetermined key in the same manner as the key management device, and verifies the ad hoc address using the predetermined key, and then extracts a communication request that satisfies the communication condition. The communication control system according to claim 2. The address generation means is connected to a master key management device that manages a master key for generating the predetermined key and generates the predetermined key via the network, and also connects the real address or the address identifier and the Provided with a service providing device that manages communication condition information and provides the service,
The address generation means receives the predetermined key generated from the issuer identifier that uniquely identifies the person providing the service and the master key from the master key management device, and receives the predetermined key and the issuer. Using the identification information to generate the ad hoc address;
The filter processing means manages the master key in the same manner as the master key management device, acquires the issuer identifier from the ad hoc address, and generates the predetermined key from the issuer identification information and the master key The communication control system according to claim 2, wherein a communication request that satisfies the communication condition is extracted after verifying validity of the ad hoc address using the predetermined key.   The filter processing unit further manages an issuer identifier that permits generation of the ad hoc address in association with the real address or address identifier, and further determines the issuer identifier and the real address or address identifier from the ad hoc address. The communication control system according to claim 4, wherein the communication request is acquired and a communication request satisfying the ad hoc address generation permission is extracted.   A reply request for a communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, the communication source of the reply request is replaced with the ad hoc address, and the reply request is transferred to the terminal of the other user The communication control system according to any one of claims 1 to 5, further comprising reply processing means for transferring to the communication. When receiving a communication request with the ad hoc address as the communication destination from the other user's terminal, the real address or the real address is unique while concealing the real address for communication possessed by the other user. Further comprising a communication source address generating means for generating an ad hoc address embedded with an address identifier to be specified and communication condition information indicating a communication condition when the other user is a communication destination,
The transfer processing unit replaces the communication destination of the communication request with a real address acquired from the ad hoc address, and transfers the communication request to the terminal of the predetermined user. The communication control system according to any one of claims 1 to 6, wherein the transfer is performed by replacing the ad hoc address generated by the original address generation means. The service is an intermediary service that mediates between a discloser who discloses predetermined information and a viewer who browses the information,
The address generating means conceals a real address for communication possessed by the disclosing person, and an address identifier for uniquely specifying the real address or the real address and a communication condition when communicating from the viewer to the disclosing person The communication control system according to any one of claims 1 to 7, wherein an ad hoc address embedded with communication condition information indicating: The service is a mailing list service that distributes the content of a speaker's mail sent to a predetermined mailing list to participants of the mailing list,
The address generating means conceals a real address for communication possessed by the speaker, and an address identifier for uniquely identifying the real address or the real address and a communication condition when communicating from the participant to the speaker The communication control system according to any one of claims 1 to 7, wherein an ad hoc address embedded with communication condition information indicating: The service is an auction service for determining a successful bidder with respect to a seller's listing conditions,
The address generating means conceals a communication real address of the successful bidder, and communicates the real address or an address identifier uniquely identifying the real address and communication conditions when communicating from the seller to the successful bidder From the successful bidder and an address identifier that uniquely identifies the real address or the real address while concealing the real address for communication possessed by the seller The communication control system according to any one of claims 1 to 7, wherein an ad hoc address embedded with communication condition information indicating a communication condition when communicating with the exhibitor is generated. A communication control method for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network,
In connection with the provision of the service, the real address for communication possessed by a predetermined user is concealed, and the real address or an address identifier that uniquely identifies the real address and the predetermined user are set as communication destinations. An address generation step for generating an ad hoc address embedded with communication condition information indicating communication conditions at the time,
An address disclosure step of disclosing the ad hoc address generated by the address generation step to other users;
A communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication condition information is acquired from the ad hoc address, and a communication request satisfying the communication condition indicated in the communication condition information is extracted. Filtering process;
When a communication request is extracted by the filter processing step, the real address is acquired from the ad hoc address or the address identifier, the communication destination of the communication request is replaced with the address, and the communication request is replaced with the predetermined user. Transfer processing step to transfer to the terminal of
The communication control method characterized by including. The address generation step generates the ad hoc address using a predetermined key,
The communication control method according to claim 11, wherein the filtering process step extracts the communication request that satisfies the communication condition after verifying the validity of the ad hoc address using the predetermined key.   A reply request for a communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, the communication source of the reply request is replaced with the ad hoc address, and the reply request is transferred to the terminal of the other user The communication control method according to claim 11 or 12, further comprising a reply processing step of transferring to the network. When receiving a communication request with the ad hoc address as the communication destination from the other user's terminal, the real address or the real address is unique while concealing the real address for communication possessed by the other user. Further including a communication source address generation step of generating an ad hoc address in which communication condition information indicating a communication condition when the other user is set as a communication destination is embedded in the address identifier,
In the transfer processing step, when the communication destination of the communication request is replaced with the real address acquired from the ad hoc address and the communication request is transferred to the terminal of the predetermined user, the communication source of the communication request is also the communication The communication control method according to claim 11, wherein the transfer control method replaces the ad hoc address generated by the original address generation step and transfers the address. A communication control program for causing a computer to execute a communication control method for controlling communication between terminals of a plurality of users who use a predetermined service provided on a network,
In connection with the provision of the service, the real address for communication possessed by the predetermined user is concealed, and the real address or an address identifier for uniquely identifying the real address and the predetermined user as the communication destination An address generation procedure for generating an ad hoc address embedded with communication condition information indicating communication conditions at the time,
An address disclosure procedure for disclosing the ad hoc address generated by the address generation procedure to other users;
A communication request having the ad hoc address as a communication destination is received from the terminal of the other user, the communication condition information is acquired from the ad hoc address, and a communication request satisfying the communication condition indicated in the communication condition information is extracted. Filtering procedure,
When a communication request is extracted by the filter processing step, the real address is acquired from the ad hoc address or the address identifier, the communication destination of the communication request is replaced with the address, and the communication request is replaced with the predetermined user. Transfer procedure to transfer to your device,
A communication control program for causing a computer to execute. The address generation procedure generates the ad hoc address using a predetermined key,
The communication control program according to claim 15, wherein the filtering processing procedure extracts a communication request that satisfies the communication condition after verifying validity of the ad hoc address using the predetermined key.   A reply request for a communication request transferred after being replaced with the real address is received from the terminal of the predetermined user, the communication source of the reply request is replaced with the ad hoc address, and the reply request is transferred to the terminal of the other user The communication control program according to claim 15 or 16, further causing the computer to execute a reply processing procedure to be transferred to the computer. When receiving a communication request with the ad hoc address as the communication destination from the other user's terminal, the real address or the real address is unique while concealing the real address for communication possessed by the other user. And further causing the computer to execute a communication source address generation step of generating an ad hoc address in which communication address information indicating communication conditions when the other user is set as the communication destination is embedded,
In the transfer processing procedure, when the communication destination of the communication request is replaced with a real address acquired from the ad hoc address and the communication request is transferred to the terminal of the predetermined user, the communication source of the communication request is also the communication 18. The communication control program according to claim 15, 16 or 17, wherein the communication control program transfers the ad hoc address generated by the original address generation procedure.

Images