JP7396704B2 - Information processing device and program - Google Patents

Description

The present invention relates to an information processing device and a program.

The formats for applications and notifications such as birth registration submitted to local governments generally differ from local government to local government, and even within the same local government, they may be updated from time to time.

On the other hand, in recent years, projects have been underway to digitize application procedures to local governments using My Number, and it is expected that this digitization will make procedures more efficient. Patent Document 1 discloses an example in which documents are easily moved by replacing items that have already been entered in a document or by converting formats when the formats are different.

Japanese Patent Application Publication No. 2004-213155

However, in the above-mentioned conventional digitization of applications and notifications, although conversion of formats is considered, the case where there is a change in the content of the service is not considered. For example, if you move from municipality A, which covers the cost of up to three regular newborn checkups, to municipality B, which covers the cost of up to two regular checkups, the services you applied for (or have already received) in municipality A will be transferred to municipality B. There has been no consideration given to converting the contents of the service to other services.

The present invention has been made in view of the above circumstances, and its purpose is to provide an information processing device and a program that can improve user convenience when services provided by organizations such as local governments are changed. Make it one.

One aspect of the present invention for solving the problems of the above-mentioned conventional example is an information processing device that stores information for each type of service as history information of a user who is a service beneficiary regarding the use of a service provided by an organization. a history management means for managing history information including a service identifier unique to the service, an organization identifier for identifying the organization that provides the service, and a user identifier unique to each user; a means for authenticating the user; service content information management means for managing service content information regarding the content of the service provided by the organization identified by the organization identifier in association with the organization identifier of the organization and the service identifier related to the type of service; means for providing service content information regarding the content of the service to be provided, the means for obtaining the history information including the user identifier of the authenticated user, and the service identifier included in the obtained history information and the service identifier of the predetermined organization. and providing means for acquiring service content information associated with the organization identifier and providing the acquired service content information to the authenticated user.

According to the present invention, it is possible to improve convenience for users when a service provided by an organization such as a local government is changed.

1 is a block diagram illustrating a configuration example of an information processing system including an information processing apparatus according to an embodiment of the present invention. FIG. 1 is a functional block diagram illustrating an example of an information processing device according to an embodiment of the present invention. FIG. 2 is an explanatory diagram illustrating an example of how history information is retained that is generated by the information processing device according to the embodiment of the present invention. FIG. 2 is an explanatory diagram illustrating an example of the content of history information generated by the information processing device according to the embodiment of the present invention.

Embodiments of the present invention will be described with reference to the drawings. As illustrated in FIG. 1, an information processing system including an information processing device 1 according to an embodiment of the present invention includes an information processing device 1, an information holding device 2 communicably connected to the information processing device 1, and a plurality of user sides. It is configured to include a terminal 3 and a plurality of organization side terminals 4. Here, the user-side terminal 3 is, for example, a smartphone or the like, and is held by each user who is a beneficiary (hereinafter simply referred to as beneficiary) of the service provided by the organization. The organization-side terminal 4 is a PC or the like disposed in a service providing organization (hereinafter simply referred to as an "organization") that provides services, such as a local government or a company.

The information processing device 1 also includes a control section 11, a storage section 12, and a communication section 13. Here, the control unit 11 is a program control device such as a CPU, and operates according to a program stored in the storage unit 12.

In this embodiment, the control unit 11 stores and manages user history information regarding the use of services provided by the organization in the information holding device 2. In one example of this embodiment, this user history information includes a service identifier unique to each type of service, an organization identifier that identifies the organization that is the provider of the service, and a unique identifier for each user who is the beneficiary. and a user identifier.

The control unit 11 also manages service content information regarding the content of the service provided by the organization identified by the organization identifier in association with the organization identifier and service identifier of the organization.

Specifically, in one example of this embodiment, this service content information is managed by dividing it into at least one information item. Here, it is assumed that standard information items are predetermined as information items for each type of service represented by a service identifier. Further, a unique item identifier is set for each information item.

For example, as part of the standard information items related to services provided by the local government after receiving the pregnancy notification, an item of information on the number of times the medical examination fee will be borne is set. Further, an item identifier (information item name, etc.) unique to this information item is set in this standard information item.

Note that the information items included in the service content information regarding one service may include not only standard information items but also additional information items. Additionally, this additional information item may be different for each organization. For example, in the service example above, in some organizations, in addition to the standard information item, which is the number of times the examination fee is covered, an additional information item is the number of times the service covers the cost of ultrasound examination. , may be included in the service content information separately from the standard service.

The control unit 11 then provides service content information regarding the content of the service provided by a predetermined organization. That is, the control unit 11 acquires history information including the user identifier of the authenticated user. The control unit 11 further acquires service content information associated with the service identifier included in the history information acquired here and the organization identifier of a predetermined organization. The control unit 11 then provides the acquired service content information to the authenticated user. The operation of this control section 11 will be described in detail later.

The storage unit 12 is a memory device or the like, and holds programs executed by the control unit 11. This program may be provided by being stored in a computer-readable non-transitory storage medium, and may be stored in this storage unit 12. This storage section 12 also operates as a work memory for the control section 11.

Further, in this embodiment, the storage unit 12 stores a user database that stores user identifiers, user contact information (email addresses, etc.), and authentication information such as user names and passwords in association with each other. ing.

The communication unit 13 is a network interface, etc., and sends information to the information holding device 2, user terminal 3, organization terminal 4, etc. connected via the network, according to instructions output by the control unit 11. . The communication unit 13 also receives information from the information holding device 2, the user terminal 3, the organization terminal 4, etc. via the network, and outputs the received information to the control unit 11.

The information holding device 2 holds history information and service content information under the control of the control unit 11. As mentioned above, the historical information held here is associated with at least a unique service identifier for each type of service, an organization identifier that identifies the organization that provides the service, and a unique user identifier for each user. It is something that This information holding device 2 holds the history information in chronological order. Specifically, the information holding device 2 associates history information with information on the date and time when the history information was stored, and holds the history information in a state that allows it to be rearranged in that order. This history information may be held in a database, or may be held in other ways, such as as a blockchain.

In the following example of this embodiment, the information holding device 2 stores and holds information regarding services performed between a user and an organization in information blocks connected in a line in chronological order (for example, (maintained as a so-called blockchain). In this example, individual information blocks hold historical information.

Next, the operation of the control unit 11 of the information processing device 1 of this embodiment will be explained. By executing the program stored in the storage unit 12, the control unit 11 functionally functions as an authentication processing unit 21, a history management unit 22, and a service content information management unit 23, as illustrated in FIG. , and an information providing section 24.

The authentication processing unit 21 receives access from the user terminal 3 and authenticates the user of the user terminal 3 . This authentication may be performed by a known method using authentication information (user name and password) held in a user database stored in the storage unit 12.

The authentication processing unit 21 also receives access from the organization-side terminal 4 and authenticates the organization-side user. This authentication may also be performed using a user name and password registered in advance for each user on the organization side.

The history management unit 22 accesses the information holding device 2 and stores and holds information regarding services performed between a user and an organization in a series of information blocks. In the present embodiment, the history management unit 22 executes at least (1) history registration, (2) information acquisition/reference, and (3) signature processing as history information management processing. Each process will be explained below.

[(1) History registration]
The history management unit 22 stores the contents of electronic applications and notification information (hereinafter referred to as "information") regarding services provided by the organization that the user of the authenticated user terminal 3 has made to the organization that the user desires to provide services to. , electronic application, etc.) and accept the registration request. The history management unit 22 also accepts a registration request from the authenticated user of the user terminal 3 or from the organization terminal 4 along with certification information indicating that the organization has provided a service.

The history management unit 22 stores the organization identifier of the organization that is the destination of the input electronic application or the issuer of the certification information, the user identifier of the authenticated user, the service identifier of the service related to the electronic application or certification information, An information block (temporary information block) is generated that includes history information in which date and time information representing the date and time and transaction information are associated with each other. The detailed contents of this transaction information will be described later.

Then, the history management unit 22 calculates block specific information (the hash value of the temporary information block may be sufficient) unique to the generated temporary information block, and adds the calculated block specific information to the generated temporary information block. include. In addition, the history management unit 22 further includes the block specifying information of the information block last stored in the information holding device 2 in the generated temporary information block as preceding block specifying information that specifies the immediately previous information block. (Figure 4).

In other words, as illustrated in FIG. 4(a), this information block includes block identification information 101 that identifies the information block itself, and the organization identifier of the organization that is the destination of the input electronic application or the issuer of the certification information. 102, the user identifier 103 of the authenticated user, the service identifier 104 of the service related to electronic application and certification information, date and time information 105 representing the date and time, transaction information 106, and preceding block identification information that identifies the immediately preceding information block. 107. The block specific information 101 is obtained as a hash value of information in which, for example, an organization identifier 102, a user identifier 103, a service identifier 104, date and time information 105, and transaction information 106 are concatenated.

The history management unit 22 stores the information block in the information holding device 2. Note that when there is no last stored information block, that is, when storing an information block for the first time, the history management unit 22 stores information indicating that the information block is the first one (for example, a value of "0"). The generated temporary information block is further included as preceding block specifying information for specifying the immediately preceding information block to form an information block, and the information block is stored in the information holding device 2.

In this way, each information block holds information that specifies the information block connected before it, thereby obtaining a blockchain of information blocks connected in a chronological order.

The history management unit 22 also accepts a registration request from the organization-side terminal 4 to the organization to which the organization-side terminal 4 is allocated, along with information on the contents of an electronic application submitted by the user for a service provided by the organization. It's okay. In this case, the history management unit 22 inputs the user identifier for identifying the user, the organization identifier of the organization, the application or notification information, and the service identifier of the service related to electronic application etc. to the organization terminal 4. Using each of the input identifiers, an information block is generated and stored in the same manner as described above.

[Example of transaction information]
Next, an example of the content of transaction information included in the history information will be explained. In the example of this embodiment, a user who makes an electronic application, etc. receives an electronic application, etc. format defined by the organization from an organization that wishes to provide a service, enters information according to this format, and applies electronically. etc. shall be carried out. Here, the format is a link between a specified item name, which is the name of an item of information necessary for a service request or certification, and an input field for the information represented by the specified item name. It can be expressed in a software data format (CSV, etc.).

The user enters the information (setting information) corresponding to each designated item name into the corresponding input field to perform electronic application or notification according to the format. Note that in the case of certification information, it is issued by the organization in a format that includes the setting information corresponding to the designated item name in advance, so there is no need to enter the setting information in the input field. Hereinafter, the electronic application data and certification information data generated according to this format will be referred to as original data (of the destination organization, etc.).

In one example of the present embodiment, the history management unit 22 executes a format conversion process that associates setting information included in original data such as an input electronic application with information items predetermined as standard information items. .

This format conversion method is performed by associating designated item names of original data with item identifiers (for example, information item names) of predetermined information items. Various methods can be used to make this association, such as a method of making the association in advance and a method of comparing character strings between the specified item name and the information item name, so a detailed explanation will be omitted here.

In this example of the present embodiment, the history management unit 22 extracts the setting information input in the input field associated with the specified item name of the original data, and extracts the information of the information item associated with the specified item name. , format conversion is performed by setting the extracted setting information as is.

For example, in the case of a birth notification, in some local governments that accept the birth notification, specified items such as the child's surname, first name, relationship to parents, time of birth, place of birth, etc., and the names of specified items corresponding to each. The input field will be included in the electronic application format. Therefore, when the user makes an electronic application for birth registration, the user inputs setting information corresponding to these designated item names and uses it as original data.

On the other hand, the administrator of the information processing device 1 according to the present embodiment associates the child's name, first name, relationship with the parents, date and time of birth, place of birth, etc. with the service identifier of the service related to the reception of "birth notification" in advance. Establish a list of standard information items including:

The history management unit 22, which has received the registration request for this electronic application, associates the "surname of the child born" among the setting information input by the user in the original data with the information item "surname of the child," Setting information related to the "birth name of the child" in the original data is set as information related to the "child's name" in the information item.

Hereinafter, the history management unit 22 extracts setting information in the electronic application format that corresponds to each standard information item, sets it as information related to the standard information item, and corresponds to the information item. Data associated with the setting information (hereinafter referred to as standard data) is generated.

The history management unit 22 then includes this standard data as part of the transaction information.

Note that if additional information items are separately defined in association with the organization identifier of the organization to which the electronic application is addressed and the above service identifier, the history management unit 22 Similarly, extract the setting information in the electronic application format that corresponds to each additional information item, set it as information related to the additional information item, and associate the information item with the corresponding setting information. Additionally, additional data may be generated. In this case as well, the history management unit 22 includes this additional data in the transaction information as part of the transaction information.

Furthermore, the history management unit 22 also includes original data, such as the original electronic application, in the transaction information as part of the transaction information.

The history management unit 22 also receives a registration request from the organization terminal 4 along with providing information about services provided by the organization to the user. In this case, the history management unit 22 includes the organization identifier of the organization that issued the information, the user identifier of the user who is the target of the service, the service identifier of the service to be provided, and date and time information indicating the date and time when the information was provided. and transaction information are mutually associated with each other, and a temporary information block containing the historical information is generated (the subsequent operation is the same as the example already described, so repeated explanation will be omitted). do).

In this example, the service content information included in the transaction information includes original data that specifies the format of the document that notifies service benefits for each local government (ward or city) that is the organization, as described above. .

Specifically, the original data regarding the type of service "assistance with medical examinations for pregnant women" is, for example,
In the case of Ward A, regular medical examinations: 14 times, ultrasound examinations: 3 times...
In the case of Ward B, infant medical examination: 14 times, ultrasound examination: once...
In the case of Ward C, regular medical examinations: 14 times, ultrasound examinations: 3 times...
…
For example, items designated by the local government for each specific service that users can receive are associated with setting information (information set by the local government, such as "14 times"), and each local government The specified item name may be different.

In addition, standard information items are set in advance in relation to service specific information for each service that can be provided, and the service content information includes information on standard information items set based on the above original data. Contains standard data.

For example, in relation to the service specific information of the type of service ``assistance with medical examinations for pregnant women'', the information item ``medical examination'' is included, and the specified item name in the original data of each local government is ``periodic medical examination'' and ``infant The setting information associated with "Medical Examination" is set as the information of the information item "Medical Examination" corresponding to the designated item name.

The information processing device 1 of this embodiment holds settings of information items corresponding to designated item names for each local government. Alternatively, it is connected so as to be accessible to a database that holds the settings.

In the above example, the information processing device 1 uses the original data of ward A's "regular medical examination: 14 times, ultrasound examination: 3 times..."
"Checkup: 14 times"
This standard data is generated together with the original data in the service content information of the information block related to the service of Ward A.

Furthermore, in an example of this embodiment, in Wards A and B, "ultrasound examination" is set as an additional information item in association with service specific information of a service of the type "assistance with examination for pregnant women". may be done. This additional information item is not indispensable; for example, district C does not need to set this additional information item. Regarding this additional information item, the information processing device 1 either holds the setting information of the specified item corresponding to the additional information item for each local government as the information of the additional information item, or It is connected in an accessible manner to a database that holds the information.

As already mentioned in this embodiment, when an additional information item is set, the setting information of the specified item corresponding to the additional information item among the specified items of the original data is The information is set as the information of the additional information item, and additional data is generated.

In other words, in the above example, from the original data of Ward A's "Regular medical examination: 14 times, ultrasound examination: 3 times...",
"Ultrasound examination: 3 times..."
This additional data is generated, and the service content information of the information block related to the service of Ward A includes this additional data along with the original data and standard data.

On the other hand, from the original data of Ward C, which does not specify additional information items, "Checkups: 14 times"
Although the standard data is generated, additional data is not generated. Therefore, the service content information of the information block related to the service of area C includes original data and standard data, but does not include additional data.

In this embodiment, by distinguishing between standard information items and additional information items, for example, when changing the organization of a service provider, standard data and additional data can be set to be different from each other. It becomes possible to submit it for processing. This point will be discussed later.

[encryption]
Further, the transaction information included in this history information may generally include information that identifies an individual. Therefore, in one example of the present embodiment, the history management unit 22 encrypts the transaction information in a state that can be decrypted by the organization that is the destination of the electronic application or the issuer of the certification information, and creates an information block. May be included. Specifically, each organization issues in advance a unique decryption key (private key) and an encryption key (public key) that pairs with this decryption key, and the user terminal 3 transmits transaction information. , it may be encrypted with the public key of the destination organization and then transmitted to the information processing device 1 together with the registration request.

Alternatively, when an organization makes a registration request, the transaction information is encrypted using the public key of the organization, and then the encrypted information is sent to the information processing device 1 via the organization terminal 4 along with the registration request. Just take it as a fact.

Alternatively, the information processing device 1 may generate the information block after encrypting the received transaction information using the public key of the organization serving as the destination. In this example, transaction information 106 among the information blocks illustrated in FIG. 4(a) is encrypted.

Note that the destination may be an individual (another user), and in this case, to perform encryption, the public key (encryption key corresponding to the private key held by the user) made public by the user who is the destination is used. Encryption may be performed using

[When allowing decryption to the administrator of the information processing device]
Further, it is preferable that the transaction information is not only decryptable by the destination organization, but also decryptable by the administrator of the information processing device 1. In this example, the administrator of the information processing device 1 also issues in advance a decryption key (private key) and an encryption key (public key) to be paired with this decryption key, as in each organization. Then, the user terminal 3 encrypts the transaction information using the public key of the destination organization, and then encrypts the same transaction information using the public key of the administrator of the information processing device 1. 2 encrypted information, and sends these first and second encrypted information to the information processing device 1 together with a registration request.

Alternatively, when an organization makes a registration request, the organization side encrypts the transaction information using the public key of the organization and the same transaction information with the public key of the administrator of the information processing device 1. The second encrypted information is generated. Then, these first and second encrypted information may be sent to the information processing device 1 via the organization side terminal 4 together with the registration request.

In this example, the history management unit 22 stores the organization identifier of the organization that is the destination of the input electronic application, the user identifier of the authenticated user, the service identifier of the service related to transaction information, and date and time information indicating the date and time. A temporary information block is generated that includes history information in which the transaction information and the transaction information are associated with each other.

In this example, the history management unit 22 accepts the first and second encrypted information, and uses the accepted first and second encrypted information as transaction information for electronic application, etc. related to the transaction information. History information is generated in association with the organization identifier of the organization that is the destination of the transaction, the user identifier of the authenticated user, the service identifier of the service related to the transaction information, and date and time information representing the date and time. The history management unit 22 then generates a temporary information block containing the history information. Note that the processing after generating the temporary information block is the same as the processing already described, so repeated explanation will be omitted.

Alternatively, the information processing device 1 generates first encrypted information by encrypting the received transaction information with the public key of the organization that is the destination, and also generates first encrypted information with the public key of the administrator of the information processing device 1. After generating the encrypted second encrypted information, an information block including the first and second encrypted information as transaction information may be generated instead of the plaintext transaction information.

In yet another example, the user uses the user terminal 3 to generate second encrypted information in which transaction information is encrypted using the public key of the administrator of the information processing device 1 and sends it to the information processing device 1. Good too. In this example, the information processing device 1 decrypts this second encrypted information using the private key of the administrator of the information processing device 1 to obtain plaintext transaction information. Then, the information processing device 1 generates first encrypted information by encrypting this plaintext transaction information with the public key of the organization that is the destination of the transaction information, and uses the generated first encrypted information as the first encrypted information. , and the received second encrypted information may be generated as transaction information instead of the plaintext transaction information.

[(2) Information acquisition/reference]
The history management unit 22 accepts a request to view history information from the user terminal 3 of the authenticated user, and executes processing related to information acquisition and reference. In this process, the history management unit 22 accesses the information holding device 2 and reads out the last stored information block among the information blocks recorded in the information holding device 2.

The history management unit 22 refers to the user identifier included in the read information block, and if it matches the user identifier of the authenticated user, records information specifying the information block. In addition, the history management unit 22 refers to the preceding block specifying information included in the read information block, and if the preceding block specifying information is not information indicating that it is the first information block, the history management unit 22 identifies the block using the preceding block specifying information. The process is repeated starting from reading out the information block and referring to the user identifier.

Furthermore, if the read preceding block specifying information is information indicating that it is the first information block, the history management unit 22 transmits the contents of the information block specified by the information recorded so far to the user who requested the viewing. Send to terminal 3.

Through this process, the history management unit 22 searches for history information related to the authenticated user from a series of information blocks and presents it.

Further, when the history management unit 22 receives a request to view history information from the organization terminal 4, it also executes the following processing related to information acquisition and reference. In this process, the history management unit 22 accesses the information holding device 2 and reads out the last stored information block among the information blocks recorded in the information holding device 2.

The history management unit 22 refers to the organization identifier included in the read information block, and if it matches the organization identifier of the organization of the organization terminal 4 that is the source of the viewing request, the history management unit 22 retrieves the information specifying the information block. Record. In addition, the history management unit 22 refers to the preceding block specifying information included in the read information block, and if the preceding block specifying information is not information indicating that it is the first information block, the history management unit 22 identifies the block using the preceding block specifying information. The information block is read out and the process is repeated starting from the process of referring to the organization identifier.

Furthermore, if the read preceding block identification information is information indicating that it is the first information block, the history management unit 22 transmits the contents of the information block specified by the information recorded so far to the organization that made the viewing request. Send to terminal 4.

Through this process, the history management unit 22 searches a series of information blocks for history information related to the organization that has made the viewing request and presents it.

[(3) Signature]
Furthermore, it may be possible for a related organization, user, or administrator of the information processing device 1 to set an electronic signature for history information. In this example, the history management unit 22 receives information specifying the information block from the user terminal 3 and electronic signature information (user signature information) as well as a request for a signature. The information that specifies the information block here is obtained, for example, by making a viewing request.

The history management unit 22 includes the user signature information received with the signature request in the information block specified by the information received with the request among the information blocks stored in the information holding device 2, and stores the contents of the information block. Update.

In addition, the history management unit 22 receives information specifying the information block from the organization side terminal 4 and electronic signature information (referred to as organization signature information) obtained by encrypting this information with a signature encryption key (private key) prepared by the organization side. ) and receive a request for signature. Again, the information specifying the information block can be obtained by, for example, making a viewing request.

The history management unit 22 includes the organization signature information received with the signature request in the information block specified by the information received with the request among the information blocks stored in the information holding device 2, and stores the contents of the information block. Update.

Further, the history management unit 22 stores administrator signature information for information blocks that do not include the electronic signature (referred to as administrator signature information) of the administrator of the information processing device 1 among the information blocks stored in the information holding device 2. may be generated and recorded.

For example, the history management unit 22 allows the administrator of the information processing device 1 to prepare information for identifying an information block that does not include administrator signature information at a predetermined timing (for example, at the time of registration). generates administrator signature information encrypted with the signature encryption key (private key), records the administrator signature information in the information block, and updates the contents of the information block stored in the information holding device 2. .

[Management of service content information]
The service content information management unit 23 associates the organization identifier of the organization with the service identifier related to the type of service, and stores information (format ). As already mentioned, the information regarding this list of specified items can be set as a spreadsheet software file (CSV file, etc.), for example. In this case, an input field for inputting setting information in association with each designated item may be included.

The service content information management unit 23 stores a service identifier representing the type of service provided by the organization from the organization side terminal 4 and information regarding a list of setting items related to the type of service identified by the service identifier. Accept input. Then, the service content information management unit 23 associates the organization identifier that specifies the organization in which the organization-side terminal 4 that inputs the information is located, the service identifier, and the information related to the list of setting items, and stores the information in the information holding device. Store in 2.

Furthermore, at the time of accepting the above input, the service content information management unit 23 has already stored in the information storage device 2 an organization identifier that identifies the corresponding organization, a service identifier, and information related to a list of setting items. In some cases, the stored information is overwritten with information related to the list of input setting items, an organization identifier that identifies the organization where the organization terminal 4 that entered the information is located, and a service identifier. are stored in the information holding device 2 in association with each other.

Furthermore, the service content information management unit 23 may accept settings of information items that the organization wants to manage as additional information items from the organization side terminal 4 in relation to the service identified by the input service identifier. good. In one example of the present embodiment, when the service content information management unit 23 receives input of a service identifier and information related to a list of setting items, the service content information management unit 23 stores standard information that is stored in advance in association with the service identifier. Refer to and compare the list of items and the list of setting items.

Then, if there is a corresponding standard information item for each setting item included in the list of setting items, the service content information management unit 23 presents the result of the association to the user of the organization-side terminal 4. Furthermore, for setting items included in the list of setting items that do not have corresponding standard information items, the service content information management unit 23 presents information to that effect to the user of the organization terminal 4.

Here, the user of the organization side terminal 4 confirms (or corrects) the setting items and the corresponding standard information items, and also adds additional information items for the setting items for which there is no corresponding standard information item. You may also give an instruction to the effect that .

Upon receiving this instruction, the service content information management unit 23 sets additional information items for the specified setting item and generates a list of additional information items.

The service content information management unit 23 associates information specifying standard information items that correspond to each setting item, and stores this as a standard correspondence table in the information holding device 2 together with information related to the list of setting items. I'll keep it. Furthermore, when a list of additional information items is generated, the additional information items included in the list are associated with the corresponding setting items and stored in the information holding device 2 as an additional correspondence table together with information related to the list of setting items. Store it.

These standard correspondence tables and additional correspondence tables can be used in the process of generating standard data and additional data from original data.

The information providing unit 24 executes the following process at a predetermined timing, for example, at the timing when the history management unit 22 accepts a request to view history information from the user terminal 3 of the authenticated user. That is, when the information providing unit 24 searches for and presents an information block of history information related to the user authenticated by the history management unit 22 in response to the above-mentioned viewing request from a series of information blocks, the information providing unit 24 displays the information block found in the search. At least the included organization identifier and service identification information are read. Further, at this time, the information providing unit 24 may also read transaction information.

The information providing unit 24 generates information regarding services that the authenticated user can receive based on the read service identification information, organization identifier, etc., and transmits the generated information to the user terminal 3 of the authenticated user. Send and display.

[Basic example of information provision]
Specifically, when the information providing unit 24 reads out the organization identifier and service identification information included in the information block of history information related to the user, it reads out the service content recorded in association with the read organization identifier and service identification information. Information is read from the information holding device 2.

Then, the information providing unit 24 sends the read service content information to the user terminal 3 of the corresponding user to display it as information regarding the service that the authenticated user can receive.

[Example of considering already provided services]
The information providing unit 24 also reads transaction information included in the information block of history information related to the user, and provides information on the service identifier and the remaining number of times each service item can be benefited for each service related to the authenticated user. It is also possible to perform a process of generating a tally result including the above information and provide the user with the tally result.

In this example, the information providing unit 24 sorts the organization identifier, service identification information, and transaction information included in the information block of history information related to the user in chronological order (the date and time indicated by the date and time information included in each information block is earliest). (in order).

If the transaction information is encrypted with a public key issued by the administrator of the information processing device 1, the information providing unit 24 decrypts the transaction information with a decryption key corresponding to the public key and converts the transaction in plain text. Get information.

The information providing unit 24 refers to the organization identifier, service identification information, and transaction information read out in chronological order, and transmits the service content information recorded in association with the read organization identifier and service identification information to the information holding device. Read from 2. The information providing unit 24 also provides information (hereinafter referred to as target person information) that identifies a service recipient (for example, a user's child) related to a service application based on transaction information, and a history of service applications and benefits. Retrieve information.

Here, the information providing unit 24 extracts service items that can be received for each target person information, totals the number of times, and records the result of the total as total information. Specifically, if the service identifier represents "assistance with medical examinations for pregnant women" and the transaction information represents a service application for target person a (assuming that the service identifier is X), If the organization identifier is City A, the corresponding service content information (here, "Organization identifier: Ward A, Service content: {Standard data: {Examination: 14 times, ...}, Additional data {Ultrasound examination: 3 times, ...}, original data: {...}), the information providing unit 24 provides the aggregated information,
・Target person: a, Organizational identifier: Ward A, Service identifier:
Record this.

Further, from the information included in the information block recorded after that, if the transaction information represents the use of the service item of the medical examination for the target person a, the information providing unit 24 calculates the count of the number of times of receiving the benefit from the aggregate information. Record as. That is, the information providing unit 24
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
Record aggregate information such as.

Thereafter, the information providing unit 24 records the number of corresponding service items according to a predetermined rule for each target person, while referring to the information blocks in chronological order. However, if the transaction information represents the use of a service, aggregate information is accumulated according to rules such as recording the number of times the corresponding service item has been received.

When the information providing unit 24 finishes the process of recording aggregate information for all information blocks of history information related to the authenticated user, it refers to the recorded aggregate information and records the information for each target person and the service identifier and service. Calculate the remaining number of times you can receive benefits for each item.

Specifically, as mentioned above,
・Target person: a, Organizational identifier: Ward A, Service identifier:
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
If such a record is included in the accumulated aggregate information, the information providing unit 24 aggregates the remaining number of times that the service item "Checkup" can be benefited for each subject a and service identifier X, and calculates 14-1=13. Find it by calculating.

The information providing unit 24 thus obtains a tally result that includes information on the remaining number of times the service can be benefited for each target person, service identifier, and service item included in the tally information.

Then, the information providing unit 24 sends the information on the obtained total results to the user terminal 3 of the authenticated user to display it as information regarding the services that the authenticated user can receive.

[Service benefits conditions]
Note that some services, such as vaccinations, indicate conditions such as the start date and time and end date and time of the benefit period. In this case, the information providing unit 24 obtains information on the current date and time (the point in time when the information providing unit 24 is performing processing) from a clocking means (not shown) such as an NTP server on the network, and , service items that have a benefit end date and time (service items that are no longer beneficial) may not be recorded as aggregate information.

In addition, when sending information on the obtained tally results to the user terminal 3 of the authenticated user, for service items for which the remaining number of times is "0" or less, the tally results to be displayed on the user terminal 3 will be It is also possible to exclude the information from the information and send it.

[Change of organization providing services]
When the history management unit 22 accepts a registration request, if the service related to the electronic application, etc. accepted along with the registration request satisfies predetermined conditions, the information provision unit 24 provides the information specified for each condition. The specified processing may be executed.

Here, the predetermined condition may be, for example, a condition such as "the service identifier related to the electronic application etc. represents a service for changing the organization that is the provider of the service". In this example, the information providing unit 24 determines whether the service identifier related to the electronic application etc. accepted by the history management unit 22 along with the registration request represents a service for changing the organization that is the provider of the service. to judge.

Here, the service for changing the organization that provides the service corresponds to, for example, a notification of change of address if the organization is a local government. In the following explanation, when the organization that provides a service is changed from Ward A to Ward B, Ward A (in the case of relocation, the local government before relocation) that was originally the provider will be referred to as the organization before the change. In addition, from now on, Ward B (in the case of relocation, the local government of the relocation destination) selected as the provider will be referred to as the post-change organization.

When the service identifier associated with the electronic application, etc. accepted along with the registration request indicates a service for changing the organization that provides the service, the information providing unit 24 performs the following predetermined process. Execute processing. For example, the information providing unit 24 may transfer transaction information included in the previously recorded information block, including the user identifier of the user who has made a registration request to change the organization (relocation, etc.), to the public key of the organization after the change. Execute the re-encryption process.

In this example, as the predetermined process, the information providing unit 24 first includes information on the service identifier and the remaining number of times each service item can be benefited for each service related to the user who has made the registration request. Perform processing to generate aggregation results.

The information providing unit 24 refers to the obtained total information to identify information blocks related to history information related to target persons and service items whose remaining number of times the benefit can be received is not "0". In addition, the information providing unit 24 sends the obtained aggregated information to the user terminal device 3 of the authenticated user to have it presented to the user, and also determines whether or not to present the history information for the post-change organization to the user. Inquire.

When the user responds to this inquiry by operating the user terminal device 3 and instructing the information processing device 1 to present history information to the organization after the change, the information providing unit 24 According to the instructions, for each of the information blocks identified earlier, the transaction information included in the information block (including information encrypted with the public key of the administrator of the information processing device 1) is transmitted to the administrator of the information processing device 1. The plaintext transaction information is decrypted with the private key of the user, and then the plaintext transaction information is encrypted with the public key of the user's changed organization, and the information block is updated by including it in the information block.

At this time, as illustrated in FIG. 4(b), the information block includes block identification information 101 that identifies the information block itself, which was included in the information block before the update, and an organization identifier 102 of the organization before the change. A user identifier 103, a service identifier 104, date and time information 105, transaction information 106 including information encrypted with the public key of the administrator of the information processing device 1 (shown as "encryption A"), and preceding information. The block identification information 107 is left as is, and additional information 108 (indicated as "encryption B") is included in which the plaintext transaction information is encrypted using the changed organization's public key.

Note that, as described above, the transaction information 106 here may include transaction information encrypted with the public key of the organization before change.

Also, at this time, the information providing unit 24 may notify the post-change organization of information specifying the updated information block.

Through this processing, for example, the local government where the user has moved becomes able to refer to the past procedures and service benefit history of the user who has moved, thereby ensuring efficient sharing of information. Also, at this time, since the user's transaction information is not provided to other organizations, there is no information leakage. Furthermore, in this example of the present embodiment, if the transaction information of the updated information block includes information encrypted with the public key of the organization before change, the information providing unit 24 deletes the information. However, it is not necessary to delete it.

[Change record of the organization providing the service]
Furthermore, the information providing unit 24 of the present embodiment reads out the organization identifier, service identification information, and transaction information included in the information block of history information related to the user in chronological order in the above-described process. When a change record of a provider organization, for example, service identification information related to a change of address notification, is found, the following process may be performed.

Here, the notification of change of address is submitted with the destination local government as the addressee, and the information block includes the organization identifier of the local government that is the new address.

When the information providing unit 24 finds a notification of change of address, it acquires an organization identifier included in the information block related to the notification of change of address. In addition, the information providing unit 24 provides, for each service identifier included in the aggregated information recorded until finding the information block of the change of address notification, the acquired organization identifier of the new address and service content information associated with the service identifier. is acquired from the information holding device 2.

Then, the information providing unit 24 calculates the total information that is "the total information based on the information block whose transaction information is the electronic application for the service" among the already recorded total information, that is, the number of service items that can be benefited. In place of the recorded summary information, record the corresponding summary information in the organization after the move.

Specifically, during the process of recording aggregate information,
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
・Target person: a, Organization identifier: Ward A, Service identifier: X, Service received: {Ultrasound examination: 1 time}
After recording aggregate information such as, when a notification of relocation to Ward B is found, the information providing unit 24 records the number of times the service item that can be benefited is recorded among the records of the aggregate information so far.
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
, as aggregate information based on service content information in Ward B related to the same service identifier X,
・Target person: a, Organizational identifier: Ward B, Service identifier: X, Service content: {Standard data: {Examination: 14 times}, Additional data: {Ultrasound examination: 1 time...}...}
Record aggregated information. In this example, since there is no original data submitted for District B, there is no need to include the original data in the tally information.

With this replacement, the record of aggregate information is
・Target person: a, Organizational identifier: Ward B, Service identifier: X, Service content: {Standard data: {Examination: 14 times}, Additional data: {Ultrasound examination: 1 time...}...}
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
・Target person: a, Organization identifier: Ward A, Service identifier: X, Service received: {Ultrasound examination: 1 time}
will be updated.

As a result of this update process, when the information providing unit 24 calculates a total result including information on the remaining number of times that benefits can be received for each target person included in the total information, as well as for each service identifier and service item, it is possible to receive benefits in Ward B. Information on the remaining possible number of times is requested.

In the above example, if there is no notification of change of address (if he continues to live in Ward A), the results of the aggregation for subject a and service identifier X will be 13 medical examinations and 2 ultrasound examinations. Since the person has moved to Ward B due to a change of address notification, the results of the tally for Subject A and Service Identifier X are 13 medical examinations and 0 ultrasound examinations, according to the service level in Ward B.

One of the characteristics of this example of the present embodiment is that information on standard information items can be accessed without any work by either the user or the organization. This means that the contents will be passed on to the changed organization (the local government after relocation).

On the other hand, regarding additional information items, the organization separately determines how to carry out the handover (rules may be determined in advance and the remaining number of times may be set in accordance with the rules).

In this example of this embodiment, standard information items and additional information items are subjected to different processing, so each organization It is only necessary to decide how to carry over information items, which can reduce the burden of work and procedures on organizations and users.

The information providing unit 24 sends the information on the obtained total results to the user terminal 3 of the authenticated user to display it as information regarding the services that the authenticated user can receive. Note that, here as well, service items for which the remaining number of times is "0" or less may be excluded from the total result information displayed on the user terminal 3 and sent.

In addition, if there is a move, the information provision unit 24 displays a text string such as "The remaining number of services is estimated. Please contact the ward office for details" along with the tally results. An instruction to that effect may be sent to the user.

[motion]
This embodiment basically has the above configuration and operates as follows. In addition, in the following operation example, user a who initially lives in ward A operates his own user terminal 3,
・Pregnancy notification (service identifier: P)
・Application for medical examination assistance (service identifier X)
・Electronic applications for notification of medical examination, notification of ultrasound examination, and notification of moving to Ward B shall be submitted in sequence.

In addition, the local governments of Ward A and Ward B each provide the following services related to service identifier X:
Organizational identifier: Ward A, Service identifier: X, Service content: {Regular checkups: 14 times, Ultrasound checkups: 3 times...}...
Organizational identifier: Ward B, Service identifier: X, Service content: {Infant examination: 14 times, Ultrasound examination: 1 time...}...
It is assumed that the following service content information has been registered.

In addition, the service content related to the service with service identifier X in Ward A includes a standard correspondence table with standard information items.
Regular checkup: Checkup...
The information related to the service with service identifier X in Ward B is recorded as a standard correspondence table with standard information items.
Infant checkup: Checkup...
The information shall be recorded.

Additionally, in both Wards A and B, additional information items regarding ultrasound examinations are set, and an additional correspondence table between additional information items and setting information names is provided.
Ultrasound examination: Ultrasound examination...
Information such as this is recorded.

In the example below, for the application for pregnancy notification (service identifier: P), (1) application (2) acquisition of electronic document format (3) submission of electronic document (sent to local government system)
(4) It is assumed that four pieces of history information of service benefit reports are generated. (4) There may be a plurality of service benefit reports for each service item, the number of which is equal to or less than the number of times the service can be benefited, as determined by the organization. Note that the number and contents of generated history information may differ depending on the service.

User a obtains the electronic application format for Ward A via Myna Portal (https://myna.go.jp/), enters the setting information for each setting item name included in this format, and creates the original. Generate data.

The information processing device 1 receives the access from the user terminal 3 of the user a, and authenticates the user a of the user terminal 3. Then, the information processing device 1 accepts the registration request from the authenticated user a along with the original data of the pregnancy notification (service identifier: P) addressed to the organization A-ward.

In an example of the present embodiment, the information processing device 1 may send the received original data directly to the destination organization via a Mynaportal or the like. In another example, a copy of the original data submitted to an organization may be accepted together with a registration request from the organization to which it was addressed or the user who submitted the data.

The information processing device 1 identifies the organization identifier: A-ward of the organization (A-ward) that is the destination of the original data accepted along with the registration request, the user identifier: a of the authenticated user a, and the service related to electronic application and certification information. A temporary information block is generated that includes history information in which the service identifier: P, date and time information representing the date and time, and transaction information are associated with each other.

Here, the information processing device 1 includes original data in which user a's name, application date and time, etc. are written in the transaction information. In addition, the information processing device 1 refers to standard information items that are preset in association with the service identifier P, and for each setting item name included in the original data, the information processing device 1 stores standard information corresponding to the setting item name. If there is an item, setting information associated with the setting item name is set in association with the corresponding standard information item to generate standard data. The information processing device 1 then includes this standard data in the transaction information.

Furthermore, if the destination organization (here, District A) has set additional information items in relation to the service with the service identifier P, the information processing device 1 will Among the item names, extract the setting information associated with the setting item name that corresponds to this additional information item, associate it with the corresponding additional information item, set the extracted setting information, and add Generate data. The information processing device 1 also includes this additional data in the transaction information.

Specifically, in this example, regarding user a's application for medical examination assistance to Ward A (service identifier X), the information processing device 1:
Original data: {user: a, date and time: bbbb, regular medical examination: 14 times, ultrasound examination: 3 times...}...
Include the original data with the transaction information.

Furthermore, the information processing device 1 uses the original data as standard data.
Standard data: {Examination: 14 times}
generate data. Also, as additional data,
Additional data: {Ultrasound examination: 3 times}
data is generated and included in the transaction information along with the original data. For example, transaction information is
Service details: {Standard data: {Checkups: 14 times}, Additional data: {Ultrasound checkups: 3 times...}, Original data: {...}...}
The information will be something like this.

The information processing device 1 calculates block specific information (a hash value of the temporary information block may be sufficient) unique to the generated temporary information block, and includes the calculated block specific information in the generated temporary information block. . The information processing device 1 further includes the block specifying information of the information block last stored in the information holding device 2 in the generated temporary information block as preceding block specifying information that specifies the immediately previous information block, and then sets the information block as an information block. do. The information processing device 1 then stores the information block in the information holding device 2.

Thereafter, when the electronic document format is provided by the organization side (ward A side) and the user a acquires it, the information processing device 1 accepts the registration request along with information that the electronic document format has been received, and Even when a person submits a request for registration, the request for registration is accepted along with the electronic application information to that effect, and so on.

Every time this registration request is received, the information processing device 1 generates an information block and performs a process of linking it to an already recorded information block.

As a result of this processing, as conceptually illustrated in FIG. The information blocks are connected in this order. Note that not only user a's information blocks but also other users' historical information blocks related to electronic applications, etc. are also linked, so there may be other information between user a's application (a1) and format acquisition (a2). Information blocks related to user's history information can be connected (FIG. 3: Y).

Note that although the transaction information is expressed in plain text in FIG. 3 for the sake of explanation, as already mentioned, this transaction information may be encrypted using at least the public key of the administrator of the information processing device 1. good. Further, this transaction information may include information encrypted with the public key of the destination organization. When transaction information is encrypted, the block identification information is obtained by including the plaintext transaction information before encryption (if available) in a temporary information block that is the source of the block identification information, and then encrypted. Alternatively, the block identification information may be obtained by including encrypted transaction information in a temporary information block.

Below, user a, as already mentioned,
・Application for medical examination assistance (service identifier X)
・Similar procedures are performed for notifications of medical examinations, notifications of ultrasound examinations, and notifications of moving to Ward B, and the information processing device 1 also responds to requests for registration of history information related to these procedures. This process generates an information block and connects it to the previously recorded information blocks.

Thereafter, when the user a accesses the information processing device 1 and requests to view the history information, the information processing device 1 accesses the information storage device 2 and selects the last information block recorded in the information storage device 2. Reads the information block stored in .

The information processing device 1 refers to the user identifier included in the read information block, and if it matches the user identifier of the authenticated user, records information specifying the information block. In addition, the information processing device 1 refers to the preceding block specifying information included in the read information block, and if the preceding block specifying information is not information indicating that the information block is the first information block, the information processing device 1 identifies the block using the preceding block specifying information. The process is repeated starting from reading out the information block and referring to the user identifier.

Then, the information processing device 1 executes the above processing up to the first information block, and sends the contents of the information block specified by the information recorded up to that point to the user terminal 3 that is the source of the viewing request. The user terminal 3 accepts the contents of the information block related to the user's history information and displays the contents of the information block as a list. This allows the user to view a list of his/her own history information.

Furthermore, at this time, the information processing device 1 sorts the organization identifier, service identification information, transaction information, etc. included in each of the information blocks specified by the recorded information in chronological order (the date and time information included in each information block represents (from earliest date and time).

Then, the information processing device 1 refers to the organization identifier, service identification information, and transaction information read in chronological order, and stores the service content information recorded in association with the read organization identifier and service identification information. Read from device 2.

The information processing device 1 also extracts information on the service beneficiary (in this example, user a himself) related to the service application and the history of service applications and benefits from the transaction information. At this time, if the transaction information is encrypted, the information processing device 1 decrypts it using the private key of the administrator of the information processing device 1 and extracts the information.

The information processing device 1 extracts service items that can be received for each subject information, totals the number of times, and records the result of the total as total information.

According to the example above,
…
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
・Target person: a, Organization identifier: Ward A, Service identifier: X, Service received: {Ultrasound examination: 1 time}
…
The total information is recorded as follows.

Further, the information processing device 1 finds an information block related to the notification of change of address to Ward B during this process. Then, the information processing device 1 replaces the total information recorded so far with that recording the number of service items that can be benefited, and replaces the total information recorded so far with the total information based on the service content information in Ward B related to the same service identifier. Record.

Specifically, in this example,
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
but,
・Target person: a, Organizational identifier: Ward B, Service identifier: X, Service content: {Standard data: {Examination: 14 times}, Additional data: {Ultrasound examination: 1 time...}...}
It will be replaced by As already explained, there is no need to include original data as the aggregated information here.

Then, the information processing device 1 calculates a total result including information on the remaining number of times the service can receive benefits for each target person, service identifier, and service item included in the total information. In the above example, there is history information showing that out of 14 checkups in Ward B, one checkup was received in Ward A, so the remaining number of checkups that can be benefited in Ward B is calculated as 13. be done.

Furthermore, for one ultrasound examination in Ward B, since one ultrasound examination has already been conducted in Ward A, the remaining number of ultrasound examinations in Ward B that can benefit is 0.

The information processing device 1 excludes service items for which the remaining number of times is "0" or less from the total result information, and sends other total result information to the user terminal 3 of the user a. The user terminal 3 then displays information on the total results.

This allows the user to obtain information about the content of services available in Ward B.

As described above, according to the present embodiment, it is possible to improve convenience for users when a service provided by an organization such as a local government is changed.

In addition, here, when there is a notification of a change of address, part of the history information is replaced with information based on the service content information of the organization to which the person has moved, but even if the user does not move, there may be a change in the service content information. Since the above-mentioned history information is generated based on the changed service content information, it is possible to obtain information regarding the content of the services that can be received in accordance with the changed service content.

[Example of use in support work]
Note that the beneficiary may confirm historical information, aggregated results, etc. with the person in charge of the organization. In addition, at this time, the beneficiary does not necessarily need to access the information processing device 1 from the user side terminal 3; for example, the beneficiary can access the information processing device 1 using the organization side terminal 4 deployed at the organization that is the service provider. May be accessed.

In such cases, the person in charge of the organization should check the beneficiary's historical information and aggregation results with the beneficiary, enter information into the information input screen (ledger) for the actual service, and provide the service to the beneficiary. Design a plan. The information processing device 1 may record the ledger information related to this service plan as history information.

The information in this ledger differs in content depending on the type of administrative service, and generally includes at least one information item. As an example, the information in this ledger is
・Pregnancy notification date, Maternal and Child Health Handbook publication date,
・Date of birth, age, area of residence,
・Marital status,
·Family structure,
・Employment status of the person and their partner/husband,
・Birth planning institution,
·medical history,
・Interview date,
・Whether support is required...
Information items such as:

In addition, the information in the ledger of "Administrative Services for Infants and Young Children" includes:
・Age (age in months),
・Circumstances at birth,
・Interview date,
・Whether support is required...
Information items such as the following are recorded.

According to this example of the present embodiment, the service plan created by the person in charge of the organization etc. is recorded as historical information, so even if the beneficiary moves later, the information of the beneficiary can be easily inherited. It can increase the likelihood that beneficiaries will receive appropriate services.

Additionally, in this case, the organization's personnel may complete the actual service application (which may be electronic or paper) together with the beneficiary. When creating application documents electronically, they may be output in a file format such as PDF and sent to the department that will actually provide the service.

Further, history information indicating that electronic application documents have been created may be registered in the information processing device 1. This historical information includes a unique service identifier for each type of service, an organization identifier that identifies the organization that provides the service, and a unique user identifier for each beneficiary user. Include information. The application documents attached to this historical information can then be used to apply for a service by printing or sending them when the beneficiary wishes to receive the service.

Further, the information processing device 1 of the present embodiment authenticates the user of the organization-side terminal 4 of the organization that is the service provider, and allows the authenticated user to benefit from the service provided by the organization to which the user belongs. It may also be possible to edit the user's history information and the like. Specifically, if the organization is a local government such as a ward, the information processing device 1 sends the user of the organization terminal 4 of the ward, that is, an employee of the ward (or a person entrusted by the ward) with the relevant information. Edit history information of users who are beneficiaries and live in the ward.

Specifically, an example of referring to the history information of a user who became a beneficiary who underwent one medical examination and ultrasound examination in Ward A after pregnancy and subsequently moved to Ward B will be described.

As already mentioned, in this case, the information processing device 1, as the aggregated information,
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
・Target person: a, Organization identifier: Ward A, Service identifier: X, Service received: {Ultrasound examination: 1 time}
…
This information was recorded, and from this information a tally was obtained showing that the number of ultrasound examinations that could be benefited in Ward B was ``0''.

However, if the principles in this example are applied too strictly, there may be cases where they are inappropriate in light of individual, specific circumstances. Therefore, in an example of this embodiment, when a person in charge of an organization judges that a beneficiary should receive an ultrasound diagnosis number of times at the current gestational week by referring to the past medical history of the beneficiary, etc. In order to accommodate this, the information processing device 1 may store edited information in which the remaining number of beneficiary ultrasound examinations in Ward B is edited to "one time", etc., in accordance with the instructions of the user who is the person in charge of the organization. .

The information processing device 1 includes this edited information in the time series of historical information, associates it with a user identifier that identifies the user who is the beneficiary, and identifies the target person, the organization identifier of the organization providing the service, the service identifier, and information specifying the service that can be benefited (such as "additional data: {ultrasound examination: once}") are recorded as mutually associated information.

Even if the transaction information is encrypted, as illustrated in Figure 4(b), at the time of relocation to Ward B, the transaction information regarding the services received in Ward A is transferred to Ward B due to the user's operation. It is assumed that the data has been re-encrypted and recorded in the information block so that it can be referenced by the person in charge of the ward ("encryption B" in FIG. 4(b)).

In addition, in this example, transaction information is included in an information block and recorded as a blockchain, but instead of this example, if transaction information is stored in the storage of each service provider, it is necessary to store transaction information in district B. At the time of relocation, transaction information related to the services received in Ward A (stored in storage in Ward A) is re-encrypted so that it can be referenced by the person in charge in Ward B, etc., by the user's operation. It will be accumulated in the ward's storage. At this time, the past transaction information stored in the storage in Ward A remains unchanged.

From then on, the information processing device 1 refers to the organization identifier, service identification information, and transaction information read out in chronological order, and selects the service content information recorded in association with the read organization identifier and service identification information, and Read editing information.

The information processing device 1 also extracts information on the service beneficiary (in this example, user a himself) related to the service application and the history of service applications and benefits from the transaction information.

Then, the information processing device 1 extracts service items that can be received for each target person information, totals the number of times, and records the result of the total as total information. For example, if editing information to the effect that ultrasound diagnosis will be provided once in Ward B is registered following the history information representing the history as described above, the information processing device 1, as the aggregate information,
・Target person: a, Organizational identifier: Ward A, Service identifier: …}
・Target person: a, Organizational identifier: Ward A, Service identifier: X, Service received: {Checkup: 1 time}
・Target person: a, Organization identifier: Ward A, Service identifier: X, Service received: {Ultrasound examination: 1 time}
・Target person: a, Organization identifier: Ward B, Service identifier: Y, Notification of change of address from Ward A ・Target person: a, Organization identifier: Ward B, Service identifier: X, Service provided: {Ultrasound examination: 1 times}
…
Record information such as:

Then, the information processing device 1 calculates a total result that includes information on the remaining number of times that benefits can be received for each target person, service identifier, and service item included in the total information. In the above example, there is history information showing that out of 14 checkups in Ward B, one checkup was received in Ward A, so the remaining number of checkups that can be benefited in Ward B is calculated as 13. be done.

In addition, for one ultrasound examination in Ward B, one ultrasound examination has already been performed in Ward A, so at the time of notification of relocation to Ward B, the remaining number of ultrasound examinations that can be benefited is 0 times. However, according to the edited information recorded after that, the number of beneficial ultrasound examinations is set to 1, so the information processing device 1 determines that the remaining number of beneficial ultrasound examinations in Ward B is 13. Information on the total result indicating that the number of ultrasound examinations that can be benefited is one is sent to the user terminal 3 of user a. The user terminal 3 then displays information on the total results.

In other words, in this example, the information processing device 1, which is requested by the user for history information and aggregation results after editing, refers to the history information and editing information stored in chronological order for each service content, and calculates the number of medical examinations and The number of ultrasound examinations is totaled, and if the number is "1" or more, a process is performed to guide the user through the application procedure.

The information processing device 1 according to the present embodiment may search for services that can be applied for based on information obtained as a tally result. That is, the information processing device 1 selects the specified items in the original data of the service provider to the target person (in the above example, Ward B after moving) that corresponds to the information items represented by the standard data included in the obtained aggregate information. Get a name. As described above, this designated item name is obtained by referring to the settings that define the association between information items of standard data for each service provider, such as a local government, and the designated item name.

The information processing device 1 searches for the format of the electronic application to the service provider, including the obtained designated item name. In the above example, the information processing device 1 searches for a format that includes an input field for the designated item name obtained above from among the electronic application formats defined by District B.

The information processing device 1 presents the format of the electronic application found as a result of the search to the user a, the person in charge of the organization, and the like. As a result, in this embodiment, it is also possible to easily make an electronic application.

[Protection of personal information]
Furthermore, in this embodiment, transaction information can be encrypted in a state that can be decrypted using a decryption key unique to the destination organization, and in this case, the unencrypted information only includes the user identifier. Therefore, even if the contents of the information holding device 2 are obtained illegally, the user's personal information will not be leaked.

1 Information processing device, 2 Information holding device, 3 User side terminal, 4 Organization side terminal, 11 Control unit, 12 Storage unit, 13 Communication unit, 21 Authentication processing unit, 22 History management unit, 23 Service content information management unit, 24 Information provision department.

Claims (7)

History information of users who are service beneficiaries regarding the use of services provided by organizations includes a unique service identifier for each type of service, an organization identifier that identifies the organization that provides the service, and information for each user. a history management means for managing history information including a unique user identifier;
a means of authenticating a user;
a service content information management means for managing service content information regarding the content of a service provided by an organization identified by the organization identifier in association with an organization identifier of the organization and a service identifier related to the type of service;
Means for providing service content information regarding the content of a service provided by a predetermined organization, the means for acquiring the history information including a user identifier of the authenticated user, and the service identifier included in the acquired history information; providing means for acquiring service content information associated with the organization identifier of the predetermined organization and providing the acquired service content information to the authenticated user;
including;
The history information further includes transaction information representing a processing status of the service identified by the service identifier, for the user identified by the user identifier, by the organization identified by the organization identifier,
The service content information managed by the service content information management means includes information on the number of times the service has been received as the content of the service provided by the organization identified by the organization identifier;
The providing means refers to the history information related to the authenticated user, records the number of times the service has been received when the transaction information represents the use of the service, and is managed by the record and the service content information management means. An information processing device that uses the service content information to generate total information that totals the remaining number of times a service identified by a service identifier can be benefited, and provides the generated total information to the authenticated user. The information processing device according to claim 1,
When the providing means finds a change record of an organization that serves as a service provider, the information processing device replaces the generated total information with the generated total information to generate corresponding total information for the organization after the change. The information processing device according to claim 1,
The service content information managed by the service content information management means further includes information on a period during which the service can be benefited as the content of the service provided by the organization identified by the organization identifier;
The providing means is an information processing device that excludes, from the information provided to the authenticated user, services that are no longer available for benefit based on the information on the period during which the service can be benefited, from among the acquired service content information. The information processing device according to any one of claims 1 to 3,
The history information further includes transaction information representing a processing status of the service identified by the service identifier, for the user identified by the user identifier, by the organization identified by the organization identifier,
An information processing device that encrypts and transmits the transaction information when transmitting information including the transaction information. The information processing device according to claim 4,
The information processing apparatus performs the encryption using a public key corresponding to a private key issued by a destination to which information including the transaction information is transmitted and held by the destination. The information processing device according to claim 5,
When transmitting information including the transaction information, the transaction information is encrypted using a public key corresponding to a private key issued by the destination to which the information including the transaction information is transmitted and held by the destination. First encrypted information and second encrypted information are generated by encrypting the transaction information with a public key that is issued by an administrator of the information processing device and corresponds to a private key held by the administrator, and 1. An information processing device that transmits second encrypted information. computer,
History information of users who are service beneficiaries regarding the use of services provided by organizations includes a unique service identifier for each type of service, an organization identifier that identifies the organization that provides the service, and information for each user. a history management means for managing history information including a unique user identifier;
a means of authenticating a user;
a service content information management means for managing service content information regarding the content of a service provided by an organization identified by the organization identifier in association with an organization identifier of the organization and a service identifier related to the type of service;
Means for providing service content information regarding the content of a service provided by a predetermined organization, the means for acquiring the history information including a user identifier of the authenticated user, and the service identifier included in the acquired history information; providing means for acquiring service content information associated with the organization identifier of the predetermined organization and providing the acquired service content information to the authenticated user;
function as
The history information further includes transaction information representing a processing status of the service identified by the service identifier, for the user identified by the user identifier, by the organization identified by the organization identifier,
The service content information managed by the service content information management means includes information on the number of times the service has been received as the content of the service provided by the organization identified by the organization identifier;
When functioning as the providing means, the computer is made to refer to the history information related to the authenticated user, and when the transaction information represents the use of a service, the computer is made to record the number of times the service has been received, and the computer is made to refer to the history information related to the authenticated user, record the number of times the service has been received when transaction information indicates the use of the service, and make the computer refer to the history information related to the authenticated user. A program that uses the service content information managed by a content information management means to generate total information that totals the remaining number of times a service identified by a service identifier can be benefited, and provides the generated total information to the authenticated user.

Images