JP6332946B2 - Information processing apparatus, information processing method, and program - Google Patents

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

  Conventionally, there is a card medium for qualification that proves the qualification of a doctor or the like (for example, see Patent Document 1).

JP 2007-226637 A

  However, with the conventional techniques including Patent Document 1, it has been difficult to effectively prevent “spoofing of a qualified person” due to loss or theft of a credential card medium.

  The present invention has been made in view of such a situation, and an object thereof is to effectively prevent “impersonation of a qualified person” due to loss or theft of a card medium for qualification.

In order to achieve the above object, an information processing apparatus of one embodiment of the present invention provides:
Storage control for executing control for associating and storing the credential information for certifying the qualification of the card holder holding the card medium and the holder confirmation information for the third party to confirm the card holder Means,
Authentication means for authenticating the cardholder according to a predetermined authentication method;
When there is an information presentation request from a third party, the holder confirmation information is first presented to the third party, and then the credential information is changed to the third information when the card holder is authenticated by the authentication means. Presentation control means for executing control to be presented to the person,
It is characterized by providing.

here,
The holder confirmation information is information including a question for the presenter of the card medium or a matter for a third party to generate the question.
be able to.

in this case,
An acquisition means for acquiring history information indicating a history of past actions of the cardholder;
The storage control means executes control to store the history information acquired by the acquisition means as the owner confirmation information.
be able to.

in this case,
The history information acquired by the acquiring means further comprises a disclosure setting means for setting permission of disclosure based on an instruction of the cardholder,
The storage control unit executes control to store, as the owner confirmation information, the history information whose disclosure is permitted by the disclosure setting unit.
be able to.

Also,
The holder confirmation information is information including data that a third party compares with the presenter of the card medium using the five senses.
be able to.

in this case,
The holder confirmation information is information including image data of a face photograph of the card holder.
be able to.

  An information processing method and program according to one embodiment of the present invention is a method and program corresponding to the above-described information processing device according to one embodiment of the present invention.

  According to the present invention, it is possible to effectively prevent “spoofing of qualified persons” due to loss or theft of a card medium for qualification.

1 is a block diagram illustrating an overall configuration of an information processing system according to an embodiment of the present invention. It is a block diagram which shows the hardware structure of a server among the information processing systems of FIG. It is a block diagram which shows the structure of the hardware of a medical institution terminal among the information processing systems of FIG. It is a functional block diagram which shows the functional structure for performing a doctor information registration process and a doctor information presentation process among the functional structures of the server of FIG. It is a schematic diagram explaining the outline | summary of the doctor information presentation process which the server of the functional structure of FIG. 4 performs. It is a flowchart explaining the flow of the doctor information registration process which the server of the functional structure of FIG. 4 performs. It is a flowchart explaining the flow of the doctor information presentation process which the server of the functional structure of FIG. 4 performs.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[overall structure]

  FIG. 1 is a block diagram showing an overall configuration of an information processing system S according to an embodiment of the present invention.

  In the present embodiment, a group that includes a plurality of doctors and n (n is an arbitrary integer value of 1 or more) medical institutions as members, and who provides various services (hereinafter referred to as “services”) The information processing system S in FIG. 1 is applied to a group managed by a “provider”. For convenience of explanation, FIG. 1 shows only the doctor D among a plurality of doctors, and the following explanation refers only to the doctor D, but it goes without saying that the same applies to other doctors as well. Absent.

As shown in FIG. 1, an information processing system S according to the present embodiment includes a server 1 managed by a service provider and medical institution terminals 2-1 to 2-n used for each of n medical institutions. have. The server 1 and each of the medical institution terminals 2-1 to 2-n are connected to each other via a network N.
In addition, when it is not necessary to distinguish each of the medical institution terminals 2-1 to 2-n, they are collectively referred to as “medical institution terminal 2”.

The doctor D is a card medium C issued by the service provider, and holds the card medium C that proves that the doctor is qualified. Therefore, the doctor D can prove to the medical institution that he / she has the qualification of the doctor by presenting the card medium C when visiting the medical institution. This proof technique will be described later with reference to FIG.
As the card medium C, any card medium such as an IC (Integrated Circuit) or a magnetic card can be adopted.

  FIG. 2 is a block diagram showing a hardware configuration of the server 1 according to an embodiment of the information processing apparatus of the present invention in the information processing system S of FIG.

  The server 1 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a bus 14, an input / output interface 15, an input unit 16, and an output unit 17. , R / W unit 18, storage unit 19, communication unit 20, and drive 21.

The CPU 11 executes various processes according to a program recorded in the ROM 12 or a program loaded from the storage unit 19 to the RAM 13.
The RAM 13 appropriately stores data necessary for the CPU 11 to execute various processes.

  The CPU 11, ROM 12, and RAM 13 are connected to each other via a bus 14. An input / output interface 15 is also connected to the bus 14. An input unit 16, an output unit 17, an R / W unit 18, a storage unit 19, a communication unit 20, and a drive 21 are connected to the input / output interface 15.

The input unit 16 includes a keyboard, a mouse, and the like, and inputs various types of information according to user instruction operations.
The output unit 17 includes a display, a speaker, and the like, and outputs images and sounds.
The R / W unit 18 has a reader / writer function for the card medium C. For example, by performing contact or non-contact communication with the card medium C, the R / W unit 18 reads information stored in the card medium C or stores various information on the card. Can be written to medium C.
The storage unit 19 is configured by a hard disk or a DRAM (Dynamic Random Access Memory) or the like, and stores various data.
The communication unit 20 controls communication performed with the medical institution terminal 2 via the network N (FIG. 1) including the Internet.

  A removable medium 31 made of a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is appropriately attached to the drive 21. The program read from the removable medium 31 by the drive 21 is installed in the storage unit 19 as necessary. The removable medium 31 can also store various data stored in the storage unit 19 in the same manner as the storage unit 19.

  FIG. 3 is a block diagram showing a hardware configuration of the medical institution terminal 2 in the information processing system S of FIG.

The medical institution terminal 2 includes a CPU 41, a ROM 42, a RAM 43, a bus 44, an input / output interface 45, an input unit 46, an output unit 47, an R / W unit 48, a storage unit 49, and a communication unit 50. And a drive 51.
Each of the CPU 41 to the removable medium 61 has basically the same configuration and function as each of the CPU 11 to the removable medium 31 in FIG. Therefore, these descriptions are omitted.

  FIG. 4 is a functional block diagram showing a functional configuration for executing the doctor information registration process and the doctor information presentation process in the functional configuration of the server 1 of FIG.

The doctor information registration process refers to a series of processes until the doctor information of the doctor D is registered.
The doctor information presentation process refers to a series of processes until doctor information of the doctor D is presented.
Doctor information refers to information including credential information and owner confirmation information.
The credential information refers to information for certifying that the doctor D has a doctor's qualification.
The holder confirmation information indicates whether or not the third party presented with the card medium C is a doctor D whose presenter is a valid holder of the card medium C (hereinafter referred to as “card holder”). This is information for confirming.

The qualification information may be any information that can prove that the doctor D has a doctor's qualification, but is stored in a predetermined storage medium (such as the card medium C or the storage unit 19 of the server 1). It must be possible electronic information goods.
For example, an actual doctor's license is generally a paper medium and cannot be used as it is as credential information. Therefore, in this embodiment, image data (hereinafter referred to as “doctor's license (copy)”) generated by scanning the doctor's license or taking a photo is adopted as qualification information.
Further, for example, medical register number data is also adopted as the qualification information of this embodiment.
Others For example, although not shown in the figure, when the doctor D performs insurance medical treatment, an insurance doctor registration card is required in addition to the doctor's license. It is adopted as information.
Also, for example, a university medical department graduation certificate (copy) is also adopted as qualification information in this embodiment.

The holder confirmation information may be any information that allows a third party to immediately confirm whether or not the presenter of the card medium C is the doctor D, but a predetermined storage medium (the storage of the card medium C or the server 1). Part 19 etc.) must be electronic information goods that can be stored.
For example, a third party can immediately confirm whether or not the doctor is D by looking at the face photograph of the doctor D. Therefore, in this embodiment, the image data of the face photograph of the doctor D is adopted as the owner confirmation information.
Further, for example, a third party can make an appropriate question based on the work history of the doctor D, and can immediately confirm whether or not the doctor D is based on whether or not an accurate answer is obtained. Specifically, for example, if the work history includes a work place three days ago, the third party will ask a question such as "Where did you work three days ago" and answer the work place immediately. Whether or not it is possible can immediately confirm whether or not it is a doctor D. Therefore, in the present embodiment, data including the work history of the doctor D (hereinafter “work history information”) is adopted as the owner confirmation information.

  When the doctor information registration process is executed, the doctor information generation unit 71, the storage control unit 72, and the card issuing unit 73 function in the CPU 11 of the server 1.

When registering the doctor D, the doctor information generation unit 71 generates the doctor information of the doctor D and supplies it to the storage control unit 72.
Here, the doctor information of the doctor D of the present embodiment includes a registration number of the doctor D and a password determined by the doctor D in addition to the above-described credential information and owner confirmation information. It shall be.

The storage control unit 72 stores the doctor information of the doctor D in the storage unit 19 and supplies the card issuing unit 73 with information to be recorded as initial information on the card medium C among the doctor information.
Here, the information recorded as the initial information on the card medium C is not particularly limited, but in the present embodiment, only the registration number of the doctor D is employed in order to prevent unnecessary information leakage when lost.

  The card issuing unit 73 executes various processes necessary for issuing the card medium C held by the doctor D, for example, a process for recording the registration number of the doctor D on the card medium C via the R / W unit 18. To do.

  When the doctor information presentation process is executed, the presentation request receiving unit 74, the presentation control unit 75, and the authentication unit 76 function in the CPU 11 of the server 1.

Here, the outline of the doctor information presentation process and each functional block that functions when the doctor information presentation process is executed will be described with reference to FIG.
FIG. 5 is a schematic diagram for explaining the outline of the doctor information presentation process executed by the server 1 having the functional configuration of FIG.

When visiting the medical institution, the doctor D proves that he is a doctor by presenting the card medium C to a third party such as a person in charge at the medical institution.
Here, since the person in charge at the medical institution has no direct contact with the doctor D, it cannot be determined whether or not the presenter of the card medium C is a doctor D who is qualified as a doctor. . In such a case, the person in charge of the medical institution can operate the medical institution terminal 2 to make a request for presentation of the doctor information of the doctor D to the server 1.
That is, when the medical institution terminal 2 reads the registration number from the card medium C by the R / W unit 48 (FIG. 3), the medical institution terminal 2 sends a presentation request together with the registration number to the server via the communication unit 50 and the network N (FIG. 1). 1 to send.
The presentation request reception unit 74 of the server 1 receives the presentation request when the communication unit 20 (FIG. 2) receives such a presentation request, and notifies the presentation control unit 75 together with the registration number.

  The presentation control unit 75 divides the owner confirmation information IO and the credential information IC associated with the registration number into two stages, and the medical institution terminal via the communication unit 20 (FIG. 2) and the network N (FIG. 1). 2, the doctor information associated with the registration number in the card medium C is presented to the person in charge of the medical institution (third party).

Specifically, when the presentation request is accepted by the presentation request acceptance unit 74, the presentation control unit 75 first extracts the owner confirmation information IO associated with the notified registration number from the doctor information DB 81, It transmits to the medical institution terminal 2 via the communication part 20 and the network N (FIG. 1).
The medical institution terminal 2 outputs the owner confirmation information IO from the output unit 47. In the present embodiment, face photographs and work history information are displayed on the display.
The person in charge (third party) at the medical institution confirms that the person who handed the card medium C is the card holder based on the face photograph and work history information displayed on the display.

When the person in charge of the medical institution (third party) confirms that the person who handed the card medium C is the card holder, the person who handed the card medium C (doctor D in the example of FIG. 5) Prompt for password.
Although the password input method is not particularly limited, in this embodiment, the person who handed the card medium C (doctor D in the example of FIG. 5) directly operates the input unit 46 (FIG. 3) of the medical institution terminal 2. Suppose you enter your password.
The medical institution terminal 2 transmits the input password (hereinafter referred to as “input password”) to the server 1 via the communication unit 50 and the network N (FIG. 1).
When such an input password is received by the communication unit 20 (FIG. 2), the authentication unit 76 of the server 1 extracts the password associated with the previously notified registration number from the doctor information DB 81 and extracts it. Authentication is attempted by determining whether the password and the input password match.
When the extracted password matches the input password, the authentication unit 76 of the server 1 notifies the presentation control unit 75 that the authentication has been successful.

When the authentication control unit 76 notifies that the authentication is successful, the presentation control unit 75 extracts the credential information IC associated with the previously notified registration number from the doctor information DB 81, and the communication unit 20 and It transmits to the medical institution terminal 2 via the network N (FIG. 1).
The medical institution terminal 2 outputs the qualification information IC from the output unit 47. In this embodiment, a medical register number, a doctor's license (copy), an insurance doctor registration certificate (copy), a medical school graduation certificate (copy), etc. are displayed on the display.
The person in charge of the medical institution (third party) can use the card based on the medical register number, doctor's license (copy), insurance doctor registration certificate (copy), medical school diploma certificate (copy), etc. displayed on the display. It is confirmed that the person who handed over the medium C is the doctor D.

In addition to those who belong to the medical institution or the like of the first visit shown in the example of FIG. 5 (the person in charge of the window, etc.), the flight attendant who is suddenly ill in the plane and requests emergency treatment In order to prove that you have a doctor's qualification to a third party that you do not know yet, presentation of a doctor's license, insurance doctor registration certificate (copy), medical school graduation certificate (copy) is necessary become.
However, since the actual doctor license, insurance doctor registration certificate (copy), medical school diploma certificate (copy), etc. are large-sized paper media, such actual doctor license, insurance doctor registration certificate (copy) It is difficult for doctor D to carry a medical school graduation certificate (copy).
On the other hand, in the present embodiment, the doctor D simply presents the card medium C that is easy to carry to the third party, and the third party obtains the credential information (doctor's license (copy), An insurance doctor registration certificate (copy), medical school graduation certificate (copy), etc.) can be easily obtained, so that it is possible to easily prove that the doctor is qualified.
However, there is a possibility that a person other than the doctor D may become “doctor's impersonation” due to the loss or theft of the card medium C.
Therefore, in the present embodiment, the owner confirmation information is first presented from the card medium C to a third party. Thereby, the third party can first confirm whether or not the person who handed the card medium C is the card holder. Then, the third party asks the person who has been confirmed to be the cardholder (the person who handed the card medium C) to enter the password, and as a result of successful authentication with the password, By receiving the presentation, it is possible to confirm that the person who handed the card medium C is a doctor D (has a doctor's qualification). In this way, “doctor's impersonation” can be more reliably prevented.

Next, the doctor information registration process and the doctor information disclosure process executed by the server 1 having the functional configuration shown in FIG. 4 will be described with reference to FIGS.
FIG. 6 is a flowchart for explaining the flow of the doctor information registration process executed by the server 1 having the functional configuration shown in FIG.
FIG. 7 is a flowchart for explaining the flow of the doctor information presentation process executed by the server 1 having the functional configuration shown in FIG.

First, regarding the doctor information registration process, in step S11 of FIG. 6, the doctor information generation unit 71 acquires the qualification information of the doctor D and the owner confirmation information.
In step S12, the doctor information generation unit 71 determines the registration number of the doctor D.
In step S <b> 13, the doctor information generation unit 71 acquires the password of the doctor D.
In step S14, the doctor information generation unit 71 generates doctor information including a registration number, a password, credential information, and owner confirmation information.
In step S15, the doctor information generation unit 71 stores the doctor information in the doctor information DB 81.
In step S16, the card issuing unit 73 issues the card medium C on which the registration number is recorded.
Thereby, the doctor information registration process is completed.

Next, regarding the doctor information presentation process, in step S21 of FIG. 7, the presentation request receiving unit 74 determines whether or not a doctor information presentation request has been made.
When the doctor information presentation request is not transmitted from the medical institution terminal 2, it is determined as NO in Step S21, and the process returns to Step S21. That is, until the doctor information presentation request is transmitted from the medical institution terminal 2, the determination process in step S21 is repeated, so that the doctor information presentation process is in a standby state.
When a doctor information presentation request is transmitted from the medical institution terminal 2, it is determined as YES in Step S21, and the process proceeds to Step S22.

  In step S22, the presentation request receiving unit 74 acquires the registration number of the card medium C.

  In step S <b> 23, the presentation control unit 75 presents the owner confirmation information by extracting the owner confirmation information corresponding to the registration number of the card medium C from the doctor information DB 81 and transmitting it to the medical institution terminal 2.

  In step S24, the authentication unit 76 determines whether a password has been input.

When the input password is not transmitted from the medical institution terminal 2, it is determined as NO in Step S24, and the process proceeds to Step S25.
In step S25, the authentication unit 76 determines whether a predetermined time has elapsed.
The predetermined time is not particularly limited, and is a time that can be arbitrarily set by an administrator (such as a service provider) of the server 1. If the predetermined time has not elapsed since the presentation of the owner confirmation information, it is determined as NO in step S25, and the process returns to step S24. That is, until the predetermined time elapses, the loop processing of steps S24NO and S25NO is repeated, and the apparatus enters a password input waiting state.
If the input password is not transmitted even after the predetermined time has elapsed, it is determined as YES in Step S25, and the process proceeds to Step S27. In step S27, the authentication unit 76 executes predetermined error processing. Thereby, the doctor information presentation process ends.
On the other hand, if the input password has been transmitted before the predetermined time has elapsed, it is determined as YES in Step S24, and the process proceeds to Step S26.

  In step S26, the authentication unit 76 determines whether or not the passwords match. That is, the authentication unit 76 extracts the password associated with the registration number acquired in the process of step S22 from the doctor information DB 81, and determines whether or not the extracted password matches the input password.

  If the extracted password and the input password do not match, it is determined NO in step S26, and the process proceeds to step S27. In step S27, the authentication unit 76 executes predetermined error processing. Thereby, the doctor information presentation process ends.

On the other hand, if the extracted password matches the input password, it is determined as YES in Step S26, and the process proceeds to Step S28.
In step S28, the authentication unit 76 determines that the authentication is successful, and notifies the presentation control unit 75 to that effect.
In step S29, the authentication unit 76 extracts the credential information corresponding to the registration number of the card medium C acquired in the process of step S22 from the doctor information DB 81 and transmits it to the medical institution terminal 2, so that the credential is obtained. Present information.

  As mentioned above, although embodiment of this invention was described, this invention is not restricted to embodiment mentioned above. Further, the effects described in the present embodiment are merely a list of the most preferable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the present embodiment.

  For example, in the above-described embodiment, the authentication method by the authentication unit 76 in FIG. 4 employs a method using a password, but is not particularly limited to this, and employs any method that can authenticate the cardholder. Can do.

For example, in the above-described embodiment, as the owner confirmation information, the image data of the photograph of the face of the doctor D and the work history information are employed, but the present invention is not particularly limited thereto.
Others: For example, driver's license (copy), passport (copy), health insurance card (copy), professional registration certificate (copy) for registering the specialty name of the clinical department, clinical resident certificate (copy), prescription Data of history (the history of issuing a prescription), drug handler license (copy), etc. can be adopted as the owner confirmation information.
Further, a part of the credential information, for example, an insurance doctor registration certificate (copy), a medical school graduation certificate (copy), etc. may be adopted as the owner confirmation information.
Here, (copy) means image data generated by scanning the actual object or taking a photograph.

Speaking more conceptually, for example, as the owner confirmation information, any electronic information goods including data that a third party compares with the presenter of the card medium C using the five senses can be adopted.
The data that the third party compares with the presenter of the card medium C using the five senses is the image data of the face photograph itself adopted in the present embodiment, the above-mentioned driver's license (copy), passport (copy), etc. This is image data that includes a face photograph in part. These representative examples are image data for confirming by using vision among the five senses.
Therefore, as a matter of course, any data for confirmation using other senses, for example, voice data that can be confirmed using hearing, more specifically, data recorded by the doctor D, etc. It is also possible to adopt information including the information as owner confirmation information.

As described above, when information including data to be compared with the presenter of the card medium C by the third party using the five senses is adopted as the owner confirmation information, the following effects can be obtained.
That is, the third party compares the presenter of the card medium C and the owner confirmation information using the five senses, for example, by comparing the actual face of the presenter of the card medium C with a facial photograph. It is possible to easily and reliably confirm whether or not the presenter of the card medium C is a card holder.

Here, there is a conventional card medium in which a photograph of the owner's face is pasted on the back surface or the like. When such a conventional card medium is adopted as a card for qualification of a doctor as it is, a person who wants to “spoof a doctor” may craft a facial photograph affixed to the conventional card medium. Easy to do. In this case, a third party mistakes a person who tries to “spoof a doctor” as a cardholder.
However, in the card medium C to which the present invention is applied, the owner confirmation information is recorded in the server 1 as an electronic information item. Therefore, it is not easy for a person who wants to “spoof a doctor” to know the fact that the image data of a facial photograph is stored. Is very difficult.
As will be described later, the storage location of the owner confirmation information is not particularly limited to the server 1 and may be in the card medium C. However, even in such a case, a face photograph is pasted (that Compared with a conventional card medium, it is not easy to know the fact that the image data of the face photograph is stored in the card medium C. However, there is no change in that it is difficult to process the image data.

  Further, for example, as the holder confirmation information, any electronic information goods including a question for the presenter of the card medium C or a matter for generating the question can be adopted.

  Typical examples of matters for generating a question for the presenter of the card medium C are the work history adopted in the present embodiment and the above-described prescription history. A typical example of these is a history of past actions of the doctor D, and a third party can easily generate a question based on a predetermined action included in the history. For example, based on the work location three days ago included in the work history, a third party can easily generate the question “Where was the work location three days ago”. Also, for example, based on the prescription contents three days ago included in the prescription history, a third party can easily generate the question “What prescriptions did you do three days ago”.

When such historical data of the cardholder (doctor D in the above example) is adopted as the holder confirmation information, the server 1 includes information including the cardholder's past action history ( Hereinafter, an acquisition unit (not shown) for acquiring “card holder history information” may be further provided.
In this case, the storage control unit 72 (FIG. 4) executes control to store the card holder history information (work history information in the above embodiment) acquired by the acquisition unit in the doctor information DB 81 as the holder confirmation information. To do.
Here, the cardholder history information may be acquired separately from the card medium C, but information related to the card medium C being held over the R / W unit 48 (FIG. 3) of the medical institution terminal 2. (The name of the medical institution, the date and time of being held, etc.) may be used.
As a result, as described above, the third party makes a question to the presenter of the card medium C based on the content included in the work history information (for example, if the history of the medical institution A is included) By asking “When did you go to the medical institution A?”, It is possible to easily and surely confirm whether or not you are a cardholder from the answer speed and answer contents.

However, since the cardholder history information is personal information of the cardholder, the cardholder may not like disclosure. Therefore, as a countermeasure for such a case, the server 1 can take the following configuration.
The server 1 can further include a disclosure setting unit (not shown) for setting permission / inhibition of disclosure based on the cardholder's instruction for the cardholder history information.
The unit of setting in this case may be the entire card holder history information or a part thereof. For some units, the cardholder can set the period as a unit (setting not to disclose on weekends, etc.), the setting based on location (setting not to disclose medical institution A, etc.), one full history It is possible to freely set in arbitrary units, such as setting in units of units.
In this case, the storage control unit 72 (FIG. 4) executes control for storing, in the doctor information DB 81, the owner history information whose disclosure is permitted by the disclosure setting unit.

  It should be noted that the card holder history information is an example of the holder confirmation information including matters for generating a question for the presenter of the card medium C. In other words, if the information can include information that can be answered immediately by the cardholder and that is difficult for others to respond immediately, it is a matter for generating a question for the presenter of the card medium C. Can be adopted as owner confirmation information including

Further, as described above, information including a question for the presenter of the card medium C can be adopted as the owner confirmation information.
As questions to the presenter of the card medium C, the card holder can answer immediately such as “What is the movie you saw for the first time” and it is difficult for others to answer immediately? Questions can be adopted. In this case, the cardholder's answer to the question may be acquired in advance, and a set of the question and answer may be adopted as the holder confirmation information.
Since such owner confirmation information is recorded in the server 1 as electronic information goods, it is easy for a person who wants to “spoof a doctor” to know the fact that a set of questions and answers is stored. In addition, it is difficult to know the contents of the questions and answers.

However, it is difficult to say that it is impossible for a person trying to “spoof a doctor” to know the contents of a set of questions and answers.
Therefore, it is more preferable to adopt information including matters for generating the question as the owner confirmation information than the question itself to the presenter of the card medium C.
The reason is as follows. In other words, the owner confirmation information itself does not include the question items themselves, but the third party can select any of various methods on the spot based on the items (history, etc.) included in the owner confirmation information. Will generate new questions. Since it is difficult for a person who wants to “spoof a doctor” to anticipate the question in advance, it is very difficult to answer immediately.
In addition, it is convenient for the cardholder because it is possible to easily look back on the history of his / her actions using the card medium C.

Further, for example, in the above-described embodiment, the card holder is a person who has a doctor's qualification, but may be a person who has other qualifications.
For example, the cardholder may be a nurse.
In this case, as the credential information, for example, a nurse license (copying) or the like can be employed. As the owner confirmation information, in addition to the owner confirmation information that can be adopted by the doctor D described above, for example, a certification (copy) of qualifications on the premise that the nurse is qualified can be adopted. In Japan, the qualifications that presuppose possession of nurses are: professional nurses by the Japan Nursing Association, certified nurses, or certified nurse managers, transplant coordinators by the Japan Tissue Transplant Society, care managers by each prefecture, There are occupational nurses by the Japan Society for Occupational Health.

  For example, in the above-described embodiment, the storage location of the owner confirmation information and the credential information is the server 1, but is not particularly limited thereto, and may be in the card medium C, for example. Further, the holder confirmation information and the credential information are not necessarily stored in the same place. For example, one is stored in the server 1 while the other is stored in the card medium C. Also good.

The series of processes described above can be executed by hardware or can be executed by software.
In other words, the functional configuration of FIG. 4 is merely an example, and is not particularly limited. That is, it is sufficient that the information processing system has a function capable of executing the above-described series of processing as a whole, and what functional block is used to realize this function is not particularly limited to the example of FIG. .
The information processing system here is not particularly limited to the example of FIG. 1, and a third party confirms the presenter of the card medium C as a cardholder who has a predetermined qualification. It is an arbitrary information processing system applicable to the system.
The medical institution terminal 2 in FIG. 1 is merely an example, and a terminal operated by a person who can be a third party (hereinafter referred to as “third party terminal”) may be included in the components of the information processing system.
In this case, one functional block may be constituted by hardware alone, software alone, or a combination thereof.
Each functional block does not need to be included in the server 1 and may be included in a third party terminal such as the medical institution terminal 2 or may be included in a card medium such as the card medium C.

When a series of processing is executed by software, a program constituting the software is installed on a computer or the like from a network or a recording medium.
The computer may be a computer incorporated in dedicated hardware. The computer may be a computer capable of executing various functions by installing various programs, for example, a general-purpose personal computer.

  The recording medium including such a program is not limited to the removable medium 31 shown in FIG. 2 and the removable medium 61 shown in FIG. 3 distributed separately from the apparatus main body in order to provide the program to the user. It is composed of a recording medium or the like provided to the user in a preinstalled state. The removable media 31 and 61 are constituted by, for example, a magnetic disk (including a floppy disk), an optical disk, a magneto-optical disk, or the like. The optical disk is composed of, for example, a CD-ROM (Compact Disk-Read Only Memory), a DVD (Digital Versatile Disk), or the like. The magneto-optical disk is configured by an MD (Mini-Disk) or the like. Further, the recording medium provided to the user in a state of being incorporated in the apparatus main body in advance is, for example, the ROM 12 in FIG. 2 or the ROM 42 in FIG. 3 in which the program is recorded, the storage unit 19 in FIG. The hard disk included in the unit 49 is configured.

  In the present specification, the step of describing the program recorded on the recording medium is not limited to the processing performed in time series along the order, but is not necessarily performed in time series, either in parallel or individually. The process to be executed is also included.

  DESCRIPTION OF SYMBOLS 1 ... Server, 2 ... Medical institution terminal, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... Bus, 15 ... Input / output interface, 16 ... Input unit 17 ... Output unit 18 ... R / W unit 19 ... Storage unit 20 ... Communication unit 21 ... Drive 31 ... Removable media 41 ... CPU, 42 ... ROM, 43 ... RAM, 44 ... bus, 45 ... input / output interface, 46 ... input unit, 47 ... output unit, 48 ... R / W unit 49 ... Storage unit, 50 ... Communication unit, 51 ... Drive, 61 ... Removable media, 71 ... Doctor information generation unit, 72 ... Storage control unit, 73 ... Card Issuing unit, 74 ... presentation request receiving unit, 75 ... presentation control unit, 76 ... authorization Part

Claims (8)

Storage control for executing control for associating and storing the credential information for certifying the qualification of the card holder holding the card medium and the holder confirmation information for the third party to confirm the card holder Means,
An authentication means for authenticating the cardholder according to a predetermined authentication method to determine whether or not to present the credential information to a third party;
When there is an information presentation request from a third party, the holder confirmation information is first presented to the third party, and after the card holder is confirmed, the card holder is authenticated by the authentication means. Presenting control means for executing control for presenting the credential information to the third party,
An information processing apparatus comprising: The holder confirmation information is information including a question for the presenter of the card medium or a matter for a third party to generate the question.
The information processing apparatus according to claim 1. An acquisition means for acquiring history information indicating a history of past actions of the cardholder;
The storage control means executes control to store the history information acquired by the acquisition means as the owner confirmation information.
The information processing apparatus according to claim 2. The history information acquired by the acquiring means further comprises a disclosure setting means for setting permission of disclosure based on an instruction of the cardholder,
The storage control unit executes control to store, as the owner confirmation information, the history information whose disclosure is permitted by the disclosure setting unit.
The information processing apparatus according to claim 3. The holder confirmation information is information including data that a third party compares with the presenter of the card medium using the five senses.
The information processing apparatus according to claim 1. The holder confirmation information is information including image data of a face photograph of the card holder.
The information processing apparatus according to claim 5. In the information processing method of the information processing apparatus,
The information processing apparatus includes:
Credential information for certifying the qualification of cardholder carrying card medium, and Ru in association with holder verification information for a third party to verify the cardholder is stored in a predetermined storage device Storage control means for executing control;
An authentication means for authenticating the cardholder according to a predetermined authentication method to determine whether or not to present the credential information to a third party;
When there is an information presentation request from a third party, the holder confirmation information is first presented to the third party, and after the card holder is confirmed, the card holder is authenticated by the processing of the authentication means. Presentation control means for executing control for presenting the credential information to the third party in the case of
With
The storage control means stores the credential information for certifying the qualification of the card holder holding the card medium and the holder confirmation information for the third party to confirm the card holder in association with each other. Execute control,
The authentication means authenticates the cardholder according to a predetermined authentication technique to determine whether to present the credential information to a third party;
The presentation control means first presents the holder confirmation information to the third party when there is a request for information presentation from a third party. After the card holder is confirmed, the card holder is authenticated. Control to present the credential information to the third party when
Information processing method. Credential information for certifying the qualification of cardholder carrying card medium, and Ru in association with holder verification information for a third party to verify the cardholder is stored in a predetermined storage device Storage control means for executing control;
An authentication means for authenticating the cardholder according to a predetermined authentication method to determine whether or not to present the credential information to a third party;
When there is an information presentation request from a third party, the holder confirmation information is first presented to the third party, and after the card holder is confirmed, the card holder is authenticated by the processing of the authentication means. Presentation control means for executing control for presenting the credential information to the third party in the case of
A computer for controlling an information processing apparatus Ru provided with
Control for storing the credential information for certifying the qualification of the card holder holding the card medium and the holder confirmation information for a third party to confirm the card holder in association with each other. A storage control step to be executed,
An authentication step for causing the authentication means to execute a process of authenticating the cardholder in accordance with a predetermined authentication method in order to determine whether or not to present the credential information to a third party;
When there is an information presentation request from a third party, the holder confirmation information is first presented to the third party, and after the card holder is confirmed, the credential is verified when the card holder is authenticated. A presentation control step for causing the presentation control means to execute control for presenting information to the third party;
A program that executes control processing including

Images