JP7540343B2 - Information management server, information management method, and program - Google Patents

Description

The present invention relates to an information management server, an information management method, and a program.

When moving, people need to individually notify various public and private institutions of their name, new address, and other information, which creates a burden for them each time they move. Furthermore, the procedures required vary from person to person, and there are a wide variety of institutions where procedures must be carried out. For this reason, people are unable to grasp the overall picture of the necessary procedures, and it is easy for procedures to be overlooked.

In response to these problems, services are being developed to reduce the burden of moving procedures and prevent oversight of procedures. In such services, for example, a user registers information to be used in the procedures associated with the move, such as their name and new address, on a site that provides a service for linking information. As a result, the information to be used in the procedures associated with the move is sent (linked) to each of multiple public and private institutions via the site, allowing the procedures associated with the move to be completed in one go. For example, Patent Document 1 discloses a technology that accepts notifications of changes to user information, such as name and address, registered with multiple businesses, such as public and private institutions, in one go, and provides the accepted information to each business.

JP 2002-215844 A

However, even if only the new address is notified, it may be difficult to determine which of the private company's customers' addresses have changed. Even in such cases, it is desirable to ensure that the procedures are carried out properly.

The present invention was made in consideration of these circumstances, and its purpose is to provide an information management server, information management method, and program that can transmit information related to a procedure to the institution where the procedure is to be carried out, so as to increase the reliability of the procedure.

In order to solve the above-mentioned problems, the information management server according to the present invention includes a procedure request information acquisition unit that acquires, via an information linking service provided via a message application that sends and receives messages addressed to a mobile phone number, procedure request information requesting a procedure associated with a change in basic information, which is at least one of the user's name, address, date of birth, and gender, among information embedded in a certification medium that certifies the identity of the user and is associated with personal identification information that uniquely identifies the user; a basic information acquisition unit that acquires, via the information linking service, the information embedded in the certification medium of the user; old information, which is information acquired from the certification medium before the basic information was changed; and The information linking unit links new information, which is information obtained from the certification medium after the basic information has been changed, based on the user's mobile phone number or an alternative key associated with the user's mobile phone number, and uses the linked old information and new information to extract old linking information, which is information before the basic information was changed, and new linking information, which is information after the basic information was changed, from linking information used in the procedure to change the basic information at the procedure destination institution where the procedure is requested in the procedure request information, generating group information that pairs the extracted old linking information with the new linking information, and transmitting the generated group information to the procedure destination institution based on the user's consent.

In addition, in the above-mentioned information management server, the present invention provides a method for obtaining information requesting a change procedure associated with a change in the user's address as the method request information, the information embedded in the certification medium becomes invalid if a moving-in notification is not submitted a predetermined number of days after the planned moving date, and is updated to information including the address of the new address when a moving-in notification is submitted and a procedure for updating the information embedded in the certification medium is performed, and the information linking unit regards information obtained from the certification medium before the information embedded in the certification medium becomes invalid as the old information, and regards information obtained from the certification medium after the information embedded in the certification medium is updated as the new information.

The present invention further includes a public procedure execution unit in the above-mentioned information management server that uses the procedure request information acquired by the procedure request information acquisition unit and the basic information acquired by the basic information acquisition unit to electronically submit a moving-out notification related to the user's change of address to the local government from which the user moved out.

In addition, in the above-mentioned information management server of the present invention, the certification medium is a certification card on whose face the personal identification information is written, and when the personal identification information is included in the linked information, the information linking unit acquires the personal identification information shown on the face of the certification card and transmits the acquired personal identification information together with the group information to the institution where the procedure is to be performed.

In addition, in order to solve the above-mentioned problems, the present invention provides an information management method performed by an information management server, in which a procedure request information acquisition unit acquires procedure request information for requesting a procedure associated with a change in basic information, which is at least one of the user's name, address, date of birth, and gender, among information embedded in a proof medium that proves the identity of the user and is associated with personal identification information that uniquely identifies the user, via an information linking service provided via a message application that sends and receives messages addressed to a mobile phone number, a basic information acquisition unit acquires the information embedded in the proof medium of the user via the information linking service, and an information linking unit acquires the information before the basic information is changed. The old information, which is information obtained from the certification medium, and the new information, which is information obtained from the certification medium after the basic information has been changed, are associated based on the user's mobile phone number or an alternative key associated with the user's mobile phone number, and the associated old information and new information are used to extract old linked information, which is the linked information before the basic information was changed, and new linked information, which is the linked information after the basic information was changed, from linked information that is information used for the procedure to change the basic information at the procedure destination institution where the procedure is requested in the procedure request information, and generate group information that pairs the extracted old linked information and new linked information, and transmit the generated group information to the procedure destination institution based on the user's consent.

In order to solve the above-mentioned problems, the present invention is a program for operating a computer as the information management server described above, and for causing the computer to function as each part of the information management server.

According to the present invention, information related to the procedure can be transmitted to the institution where the procedure is to be carried out, so as to increase the reliability of the procedure.

1 is a block diagram showing an example of the configuration of a moving procedure information linkage system 1 to which an information management server 20 according to an embodiment is applied. FIG. 2 is a block diagram showing an example of the configuration of an information management server 20 according to the embodiment. FIG. 2 is a diagram showing an example of the configuration of user information 220 according to the embodiment. A figure showing an example of the configuration of procedure information 221 related to the embodiment. FIG. 2 is a diagram showing an example of the configuration of linkage information 222 according to the embodiment. A sequence diagram showing the flow of processing performed by the moving procedure information linkage system 1 according to the embodiment. A sequence diagram showing the flow of processing performed by the moving procedure information linkage system 1 according to the embodiment. A sequence diagram showing the flow of processing performed by the moving procedure information linkage system 1 according to the embodiment. A sequence diagram showing the flow of processing performed by the moving procedure information linkage system 1 according to the embodiment. A sequence diagram showing the flow of processing performed by a moving procedure information linkage system 1 in a modified example of an embodiment. A sequence diagram showing the flow of processing performed by a moving procedure information linkage system 1 in a modified example of an embodiment.

One embodiment of the present invention will be described below with reference to the drawings. Below, a procedure for changing a user's address when the user moves will be described with an example of a case where the information used in the procedure is linked with multiple institutions. However, this is not limited to this. One embodiment of the present invention can be widely applied to cases where information used in a change procedure is linked when changing personal information such as a user's name, not limited to an address, is carried out.

Figure 1 is a block diagram showing an example of the configuration of a moving procedure information linkage system 1 to which a user terminal 10 according to an embodiment is applied. The moving procedure information linkage system 1 includes, for example, a user terminal 10, an information management server 20, a lifeline operator server 30, a financial institution server 40, a local government server 50, and a certification authority server 60. These components in the moving procedure information linkage system 1 (user terminal 10, information management server 20, lifeline operator server 30, financial institution server 40, local government server 50, and certification authority server 60) are communicatively connected via a communication network NW.

In the example shown in this figure, one user terminal 10 is connected to the moving procedure information linkage system 1, but the moving procedure information linkage system 1 is generally configured to include multiple user terminals 10. In addition, the moving procedure information linkage system 1 may be configured to include multiple lifeline operator servers 30, financial institution servers 40, or local government servers 50.

In the moving procedure information sharing system 1, personal information of a user used in procedures related to a user's change of address when moving is shared with multiple public and private institutions with the user's consent. In this way, the moving procedure information sharing system 1 executes various procedures that arise in conjunction with a move all at once.

The various procedures that arise when moving are procedures associated with a user's change of address, such as the procedure of submitting a moving out notification to a public institution such as a local government, the procedure of starting or stopping the use of lifelines such as water, electricity, and gas, and the procedure of changing the address registered in an account with a bank or other financial institution.

In response to a request from a user, the moving procedure information linkage system 1 performs procedures associated with a user's address change at multiple public and private institutions in a lump sum. Specifically, in response to a request from a user, the moving procedure information linkage system 1 acquires information used in procedures associated with the user's address change, such as the user's name, address, and date of birth, and transmits the acquired information to multiple public and private institutions with the user's consent, thereby linking the information used in procedures associated with the user's address change with the multiple public and private institutions. In the following explanation, such a mechanism for linking information used in procedures associated with a user's address change with multiple public and private institutions is referred to as an information linkage service. The moving procedure information linkage system 1 performs procedures associated with a user's address change at multiple public and private institutions in a lump sum via such an information linkage service.

In this embodiment, the information sharing service is provided via a message application (hereinafter, "message app"). The message app is an application program that sends and receives messages such as text, photos, still images, and video images to a mobile phone number.

The user terminal 10 is a computer device of a user who uses the moving procedure service. The user terminal 10 is, for example, a smartphone, a tablet terminal, a mobile phone, a PC, etc. The user terminal 10 includes, for example, a communication unit, a storage unit, a control unit, and a display unit. The communication unit communicates with an external device, such as the information management server 20, which is connected to the user terminal 10 via the communication network NW so that the user terminal 10 can communicate with the user terminal 10. The storage unit stores programs for executing various processes of the user terminal 10 and temporary data used when performing various processes. The storage unit stores programs downloaded when installing the message app. The control unit controls the user terminal 10 in an integrated manner. For example, the control unit accesses a specific URL (Uniform Resource Locator) corresponding to a site where an information linking service is provided in response to an input operation by the user. The control unit acquires a specific input form screen for requesting a procedure associated with a change of address from the accessed site via the information linking service, and displays the acquired screen on the display unit. The control unit transmits the information entered by the user through operations or the like on the displayed input form screen to the information management server 20.

The information management server 20 is a computer device that transmits information via the information linkage service. The information management server 20 receives information requesting procedures for a change of address from the user terminal 10 of a user registered with the information linkage service via the information linkage service. After obtaining the user's consent, the information management server 20 transmits information to be used in the procedures to the linked public or private institution, etc., and requests that the procedures be carried out at the linked public or private institution, etc. The information to be used in the procedures is, for example, information that needs to be filled in when submitting a change of address notification, such as the user's name, date of birth, sex, address from which the user moved, and address to which the user moved.

The information management server 20 obtains all or some of the information used in the procedure from a signature electronic certificate embedded in the user's My Number card (an example of a "certification medium" and an example of a "certification card"). The signature electronic certificate is an electronic certificate used, for example, when sending an electronic document over the Internet, to prove that the electronic document was sent by the user. The signature electronic certificate contains basic information about the user. The basic information is personal information about the user, and is information indicating any one of the user's name, address, date of birth, and gender.

The electronic signature certificate is managed by a certification authority, and becomes invalid if the user's basic information changes due to moving, marriage, etc. For example, if an address is changed due to moving, the electronic signature certificate becomes invalid if a moving-in notification is not submitted 30 days after the planned date of moving out or 14 days after the date of moving in. If a digital signature certificate is to be issued based on the changed basic information, the local government, etc. must go through the procedure of updating (or issuing a new) the digital signature certificate. In this way, the electronic signature certificate is managed so that the basic information is updated appropriately when it is changed. The moving procedure information linkage system 1 takes advantage of this property to utilize the basic information as information to be used in procedures accompanying a change of address.

Specifically, when the information management server 20 is requested by the user to carry out a procedure for a change of address, the information management server 20 acquires basic information from the user's My Number card before the address change. Furthermore, after the basic information of the user's My Number card is updated due to the address change, the information management server 20 again acquires basic information after the address change from the user's My Number card. The information management server 20 extracts information (linkage information) that links with the public institutions, private institutions, etc. of the linkage destination from the basic information before the address change, and sets it as the linkage information before the change (old linkage information). The information management server 20 extracts linkage information from the basic information after the address change, and sets it as the linkage information after the change (new linkage information). The information management server 20 generates group information that pairs (sets) the old linkage information and the new linkage information, and transmits the generated group information to the public institutions, private institutions, etc. of the linkage destination. Note that the information management server 20 does not necessarily need to transmit the group information to the linkage destination, and controls to transmit only the old linkage information or only the new linkage information depending on the public institutions, private institutions, etc. of the linkage destination. For example, if the connection destination is the local government from which the user moved, only the user's previous connection information would be sent, and if the connection destination is a company that provides a lifeline, only the user's new connection information would be sent.

In this embodiment, a set of old and new information can be sent to a public institution or private institution that cannot link the pre-change link information with the post-change link information. This allows the public institution or private institution to reliably carry out procedures related to the address change. This allows the public institution or private institution to update the user's address to the new address and store that information. Moreover, the post-change link information is obtained from the My Number card. This allows a new address to be sent that has been submitted to the local government as a change of address notification and that has been certified as having been reliably changed, allowing the public institution or private institution to carry out procedures related to the address change based on reliable information.

Which of the basic information is to be the linked information may be determined arbitrarily depending on the public or private institution with which the link is made. For example, in a procedure related to a change of address, if the link is made to a private institution that requires the user's address and name, the respective pieces of address and name information extracted from the basic information become the linked information. Alternatively, in a procedure related to a change of address, if the link is made to a public institution that requires the user's address, name, date of birth, and gender, the respective pieces of address, name, date of birth, and gender information extracted from the basic information become the linked information.

The configuration of the information management server 20 and the method of sharing information with partner public and private institutions will be explained in detail later.

The lifeline operator server 30 is a computer device that performs procedures when using lifelines such as water, electricity, and gas. The lifeline operator server 30 is, for example, a server device or a PC operated by a lifeline operator. The lifeline operator server 30 receives information used for procedures associated with a change of address of a user from the information management server 20, and performs procedures such as address change using the received information.

The financial institution server 40 is a computer device that performs procedures when using an account at a financial institution such as a bank. The financial institution server 40 is, for example, a server device or a PC operated by a financial institution. The financial institution server 40 receives information used for procedures related to a change of address of a user from the information management server 20, and performs procedures such as address change using the received information.

The local government server 50 is a computer device that handles procedures associated with moving at a public institution such as a local government. The local government server 50 is, for example, a server device or a PC operated by a local government. The local government server 50 receives information used for procedures associated with a user's change of address from the information management server 20, and uses the received information to handle procedures such as moving-out notifications.

The authentication authority server 60 is a computer device that determines whether or not the signature electronic certificate embedded in the My Number card is valid. The authentication authority server 60 is, for example, a server device or a PC operated by an authentication authority. The authentication authority server 60 receives information read from the user's My Number card using a card reader or the like from the information management server 20. The authentication authority server 60 uses the received information to determine whether or not the signature electronic certificate embedded in the My Number card is valid. If the authentication authority server 60 determines that the signature electronic certificate embedded in the My Number card is valid, it transmits to the information management server 20 a message indicating that the signature electronic certificate is valid, as well as basic information of the user indicated in the signature electronic certificate.

The configuration of the information management server 20 will now be described. FIG. 2 is a block diagram showing the configuration of the information management server 20 according to an embodiment. The information management server 20 includes, for example, a communication unit 21, a storage unit 22, and a control unit 23. The communication unit 21 communicates with the user terminal 10, the lifeline operator server 30, the financial institution server 40, the local government server 50, and the authentication institution server 60.

The storage unit 22 is configured with a storage medium, such as a hard disk drive (HDD), flash memory, electrically erasable programmable read only memory (EEPROM), random access read/write memory (RAM), read only memory (ROM), or any combination of these storage media. The storage unit 22 stores programs for executing various processes of the information management server 20, and temporary data used when performing various processes.

The storage unit 22 stores, for example, user information 220, procedure information 221, and linkage information 222. The user information 220 is information about a user who uses the information linkage service. The user information 220 is generated for each user. The user information 220 includes at least information indicating the user's mobile phone number (see FIG. 3). The user's mobile phone number is used as information to identify the user who sent the notification when, for example, a request for a procedure such as a change of address is received from the user via a message app in the information linkage service. In addition, instead of the user's mobile phone number, an alternative key associated with the user's mobile phone number may be used. In this case, the alternative key is used as information to identify the user who sent the notification when, for example, a request for a procedure such as a change of address is received from the user via a message app in the information linkage service. The alternative key is stored, for example, in the user information 220 in association with the user's mobile phone number.

Procedure information 221 is information on procedures associated with an address change requested by a user to the information management server 20. Procedure information 221 is generated for each procedure requested by a user. Procedure information 221 includes, for example, information indicating the content requested by the user (procedure request information), basic information of the user obtained before the address change (old basic information), and basic information of the user obtained after the address change (new basic information) (see Figure 4).

The linkage information 222 is information that the information management server 20 uses to link with public institutions, private institutions, etc. Linkage information 222 is generated for each public institution or private institution that carries out procedures at the user's request. Linkage information 222 includes linkage information (old linkage information) extracted from the user's basic information acquired before the address change, linkage information (new linkage information) extracted from the user's basic information acquired after the address change, etc. (see Figure 5).

The control unit 23 controls each component of the information management server 20. The control unit 23 is realized, for example, by the CPU (Central Processing Unit) of the information management server 20 executing a program pre-stored in the memory unit 52. The control unit 23 may also be realized as an integrated circuit such as an ASIC (Application Specific Integrated Circuit). The control unit 23 includes, for example, a procedure request information acquisition unit 230, a basic information acquisition unit 231, a public procedure execution unit 232, an information linkage unit 233, and a device control unit 234.

The procedure request information acquisition unit 230 acquires procedure request information according to instructions from the device control unit 234. The procedure request information is information requesting a change procedure associated with a change in the user's address, which is notified from the user terminal 10 to the information management server 20 via the information linkage service. The procedure request information acquisition unit 230 generates procedure information 221 in the memory unit 22 based on the acquired procedure request information, and stores the procedure request information notified from the user terminal 10 in the "procedure request information" column of the generated procedure information 221.

Here, the procedure request information is information notified from the user terminal 10 via the information linkage service. The information linkage service exchanges information using a message app. For this reason, the procedure request information acquisition unit 230 can acquire the mobile phone number of the user terminal 10 that notified the procedure request information along with the procedure request information. The procedure request information acquisition unit 230 refers to the user information 220 based on the acquired mobile phone number of the user terminal 10, and determines the mobile phone number of the user terminal 10 and its user. The procedure request information acquisition unit 230 stores the procedure request information notified from the user terminal 10 in the procedure information 221, as well as the mobile phone number of the user terminal 10 that notified the procedure request information.

The basic information acquisition unit 231 acquires basic information according to instructions from the device control unit 234. For example, the basic information acquisition unit 231 displays a reading screen on the user terminal 10 for reading information embedded in the My Number card, and displays a message urging the user to read the information embedded in the My Number card. The basic information acquisition unit 231 may display a message urging the user to connect a card reader to the user terminal 10 as necessary. The basic information acquisition unit 231 may also display a message urging the user to enter a password (PW) required to read the information embedded in the My Number card. The user performs an operation to read the information embedded in the My Number card according to the message. When the correct PW is entered, the information embedded in the My Number card is read, and the information is transmitted to the information management server 20.

The basic information acquisition unit 231 acquires information embedded in the My Number card from the user terminal 10. The basic information acquisition unit 231 transmits the acquired information to the authentication authority server 60 and notifies whether the signature electronic certificate embedded in the user's My Number card is valid or not. The authentication authority server 60 determines whether the signature electronic certificate is valid or not and transmits the determination result to the information management server 20. The authentication authority server 60 also transmits the basic information indicated in the signature electronic certificate together with the determination result to the information management server 20. The basic information acquisition unit 231 acquires from the authentication authority server 60 the determination result of whether the signature electronic certificate is valid or not and the basic information indicated in the signature electronic certificate. In this way, the basic information acquisition unit 231 acquires the user's basic information.

The basic information acquisition unit 231 stores the acquired basic information according to instructions from the device control unit 234. For example, the basic information acquisition unit 231 stores basic information acquired before the address embedded in the My Number card was changed in the "old basic information" field in the procedure information 221. Here, the basic information acquired from the My Number card before the address embedded in the My Number card was changed is an example of "old information".

The basic information acquisition unit 231 also stores the basic information acquired after the address embedded in the My Number card has been changed in the "new basic information" field in the procedure information 221. Here, the basic information acquired from the My Number card after the address embedded in the My Number card has been changed is an example of "new information."

Here, the basic information is information acquired from the user terminal 10 via the information linking service. Since the information linking service exchanges information using a message app, when acquiring the basic information, it is possible to acquire the mobile phone number of the user terminal 10 for the user associated with the basic information. When the user terminal 10 logs in to the information linking service, the basic information acquisition unit 231 acquires the mobile phone number of the user terminal 10 and identifies the user corresponding to the basic information based on the acquired phone number (or its alternative key). Alternatively, when acquiring the basic information, the basic information acquisition unit 231 may acquire the mobile phone number of the user terminal 10 that has notified the procedure request information and identify the user corresponding to the basic information based on the acquired phone number (or its alternative key). The basic information acquisition unit 231 stores the basic information in the procedure information 221 associated with the identified user. As a result, the procedure request information, old basic information, and new basic information related to the same user are stored in association with the procedure information 221 of the user.

The official procedure execution unit 232, following the instructions of the device control unit 234, transmits the procedure request information and the basic information acquired before the change to the local government server 50 of the original location, with the user's consent. This causes a notification of moving out to be submitted (electronic application) to the local government of the original location. This causes the local government server 50 to receive information used for the procedures associated with the user's change of address from the information management server 20, and uses the received information to carry out the procedures for accepting the notification of moving out, etc.

The information linking unit 233 transmits information used in procedures associated with a change in the user's address to the public or private institution of the linking destination in accordance with instructions from the device control unit 234. The information linking unit 233 generates group information. The information linking unit 233 refers to the procedure information 221, extracts information used in procedures at the public or private institution of the linking destination from the old basic information of the procedure information 221, and sets the extracted information as old link information. The information linking unit 233 also extracts information used in procedures at the public or private institution of the linking destination from the new basic information of the procedure information 221, and sets the extracted information as new link information. The information linking unit 233 generates group information by pairing the old link information with the new link information. The information linking unit 233 transmits the generated group information to the public or private institution of the linking destination as all or part of the information used in procedures associated with a change in the user's address.

The device control unit 234 controls the information management server 20 in an integrated manner. For example, the device control unit 234 outputs the procedure request information received by the communication unit 21 from the user terminal 10 to the procedure request information acquisition unit 230. The device control unit 234 also causes the basic information acquisition unit 231 to acquire old basic information before the address in the signature electronic certificate is changed. The device control unit 234 causes the basic information acquisition unit 231 to acquire new basic information after the address in the signature electronic certificate is changed.

The device control unit 234 may transmit a message to the user terminal 10 to prompt the user to change the electronic certificate for signing. The device control unit 234 acquires the planned date of the user's move based on, for example, the procedure request information. The device control unit 234 notifies the user terminal 10 of a message prompting the user to change the address in the electronic certificate for signing when a predetermined number of days have passed since the planned date of moving, such as the day after the planned date of moving. The message prompting the user to change the address in the electronic certificate for signing is, for example, a message such as "Please submit a moving-in notification to the local government of the moving destination. If the moving-in notification is not submitted within 14 days from the date of moving, the electronic certificate for signing will be invalidated." In addition, in the message prompting the user to change the address in the electronic certificate for signing, a message such as "When you have submitted a moving-in notification to the local government of the moving destination, please notify the information linkage service. With the user's consent, we will carry out the procedures associated with the address change at the public and private institutions of the linkage partner all at once" may be notified. The device control unit 234 may also send a message urging the user to change the address in the digital signature certificate the day after the planned date of the move, and if there is no notification from the user terminal 10 that a move-in notification has been submitted to the local government of the new location, send a reminder seven days after the planned date of the move.

FIG. 3 is a diagram showing an example of the configuration of user information 220 according to an embodiment. The user information 220 includes items such as a user information ID, a mobile phone number, a login ID/PW (password), and user attribute information. The user information ID is identification information that uniquely identifies the user information 220. The mobile phone number is the telephone number of the user terminal 10 registered in the information linking service. The login ID/PW is an ID and password for logging in to the information linking service. The user attribute information is attribute information of a user identified by the user information ID. The user attribute information is, for example, name, address, date of birth, driver's license number, etc. The user attribute information is information registered by the user when using the information linking service.

Figure 4 is a diagram showing an example of the configuration of procedure information 221 according to an embodiment. Procedure information 221 includes items such as procedure information ID, user information, procedure request information, old basic information, and new basic information. Procedure information ID is identification information that uniquely identifies procedure information 221. User information is information extracted from user information 220 of the user who requested the procedure, and is, for example, information indicating the user information ID, name, and mobile phone number of the user. Old basic information is basic information obtained before the address was changed in the electronic signature certificate. New basic information is basic information obtained after the address was changed in the electronic signature certificate.

FIG. 5 is a diagram showing an example of the configuration of the linkage information 222 according to the embodiment. The linkage information 222 includes items such as a linkage information ID, linkage destination information, procedure content, and group information (old linkage information and new linkage information). The linkage information ID is identification information that uniquely identifies the linkage information 222. The linkage destination information is information on a public institution or private institution that links information in a procedure, such as a trader name and identification information of a user at the linkage destination. The identification information of a user at the linkage destination is, for example, an account number of an account held by a user at a financial institution when the linkage destination is a financial institution. The procedure content is information indicating the content of a procedure to be performed using the linkage information identified by the linkage information ID. The group information is information that pairs the old linkage information and the new linkage information. The old linkage information is information used in a procedure at the linkage destination institution, extracted from basic information acquired before the address is changed in the electronic certificate for signing. The new linkage information is information used in a procedure at the linkage destination institution, extracted from basic information acquired after the address is changed in the electronic certificate for signing. In this example, the user's name, address, date of birth, and the date of filing the moving-in/out notification are used in the procedure.

Here, we will explain how the information management server 20 shares information with public institutions, private institutions, and other partners. Figures 6 to 9 are sequence diagrams showing the flow of processing performed by the moving procedure information sharing system 1 according to the embodiment.

Figure 6 shows the flow of processing that takes place from when a user terminal 10 requests the information management server 20 to carry out procedures for a change of address until a notification of moving out is submitted to the local government from which the user moved out.

The user terminal 10 logs in to the information linkage service (step S10), sends procedure request information to the information management server 20, and requests a procedure for the address change (step S11). The user terminal 10, for example, enters the necessary information according to an input form displayed on the screen, and sends the procedure request information to the information management server 20 by tapping the send button.

The information management server 20 receives the procedure request information from the user terminal 10 and stores the received procedure request information in the procedure information 221 (step S12). The information management server 20 displays a reading screen on the display screen of the user terminal 10 to read the information embedded in the My Number card (step S13).

The reading screen is displayed on the display screen of the user terminal 10, and the user operates to input a password according to the displayed instructions (step S14). When the correct password is entered, information such as the signature electronic certificate embedded in the My Number card is read, and the read information is sent to the information management server 20.

The information management server 20 receives the information embedded in the My Number card and notifies the certification authority server 60 of the received information to inquire whether the electronic certificate (electronic signature certificate) is valid (step S15).

The authentication authority server 60 receives the information embedded in the My Number card and uses the received information to determine whether the electronic certificate (digital signature certificate) is valid (step S16). The authentication authority server 60 transmits the determination result to the information management server 20 together with the basic information of the user contained in the digital signature certificate.

The information management server 20 receives the user's basic information from the authentication institution server 60, and stores the received basic information in the procedure information 221 as old basic information (step S17). The information management server 20 transmits the procedure information 221 to the local government server 50 of the original location. This links the information used in the procedure when submitting a moving-out notification (here, the procedure request information and the old basic information) to the local government server 50 of the original location.

The local government server 50 of the original location receives information used in the procedure when submitting a moving-out notification from the information management server 20. The local government server 50 of the original location checks the contents submitted in the moving-out notification based on the received information, and performs a process to accept the submitted moving-out notification (step S19).

The information management server 20 notifies the user terminal 10 that the information required for the moving out notification has been sent to the original local government server 50 (step S20). The user terminal 10 receives a message from the information management server 20 (step S21). This allows the user to recognize that the moving out notification has been submitted (electronic application). Note that the information management server 20 does not necessarily need to notify the user terminal 10 of the message that the information required for the moving out notification has been sent to the original local government server 50, and the notification of this message may be omitted. If the notification of this message is omitted, steps S20 and S21 are not performed.

Figure 7 shows the process flow in which the information management server 20 notifies the user terminal 10 of a message or reminder encouraging the user to submit a change of address notification. Note that the information management server 20 does not necessarily need to notify the user terminal 10 of a message or reminder encouraging the user to submit a change of address notification, and the notification of the message and reminder may be omitted. If the notification of the message and reminder is omitted, steps S30 to S35 are not performed.

The user moves on the scheduled moving date (step S30). Meanwhile, on the scheduled moving date, a process is performed to revoke the user's electronic signature certificate (step S31). This process of revoking the user's electronic signature certificate is, for example, a process of setting the user's electronic signature certificate to be revoked if a moving-in notification is not submitted to the local government of the new address within 14 days of the scheduled moving date.

The information management server 20 sends a message (request for moving-in procedure) to the user terminal 10 when a predetermined number of days have passed since the planned moving date, such as the day after the planned moving date, urging the user to submit a moving-in notification and change the address in the signature electronic certificate (step S32). The user terminal 10 receives the message (step S33). Furthermore, if the information management server 20 has not received a notification from the user terminal 10 that a moving-in notification has been submitted when a predetermined number of days have passed since the planned moving date, such as seven days after the planned moving date, the information management server 20 sends a message (remind for moving-in procedure) to the user terminal 10 to confirm whether the moving-in notification has been submitted (step S34). The user terminal 10 receives the reminder (step S35).

Figures 8 and 9 show the process flow in which a user submits a change of address notification, the user terminal 10 notifies the information management server 20 that the change of address notification has been submitted, and, in response to the notification, the information used in the address change procedure is sent to the linked financial institution server 40.

Please note that moving-in notifications cannot be submitted electronically and must be submitted in person. For this reason, the following shows the process for a user to visit the local government they are moving to and submit a moving-in notification at the counter.

The user visits the local government of the new address and submits a notification of moving in at the counter (step S40). In the local government of the new address, an employee or the like checks the details written on the submitted notification of moving in and processes the notification of moving in (step S41). When the notification of moving in is accepted, the user goes through the procedure to renew the electronic signature certificate at the counter (step S42). The local government of the new address checks the details written on the document submitted in the procedure to renew the electronic signature certificate (step S43), and if there are no errors in the details, the user's electronic signature certificate is updated (or a new one is issued) (step S44). Note that, depending on the local government, steps S41 and S42 may be carried out simultaneously.

If the information management server 20 has not received a notification from the user terminal 10 that a notification of moving in has been submitted by the time the user's electronic signature certificate expires, such as 14 days after the planned date of moving, the information management server 20 sends a message (moving-in procedure reminder) to the user terminal 10 to confirm whether the notification of moving in has been submitted (step S45). The user terminal 10 receives the reminder (step S46). In this sequence chart, it is assumed that the user has already submitted a notification of moving in at this point.

The user terminal 10 logs in to the information link service and notifies the user that a change of address notification has been submitted and that the electronic signature certificate has been updated (step S47). When the information management server 20 receives the notification from the user terminal 10, it causes the display screen of the user terminal 10 to display a reading screen that reads the information embedded in the My Number card, similar to step S13 in FIG. 6 (step S48).

The processing shown in steps S48 to S51 in FIG. 9 is similar to the processing shown in steps S13 to S16 in FIG. 6, so a description thereof will be omitted.

The information management server 20 receives the user's basic information from the authentication authority server 60, and stores the received basic information as new basic information in the procedure information 221 (step S52). The information management server 20 generates group information using the old basic information and new basic information stored in the procedure information 221 (step S53). The information management server 20 sets the linkage information extracted from the old basic information as old linkage information, sets the linkage information extracted from the new basic information as new linkage information, and generates group information by pairing the old linkage information and the new linkage information. The information management server 20 stores the generated group information in the linkage information 222.

The information management server 20 transmits the linking information 222 to the linked financial institution server 40 (step S54). This links the information used for the procedure (here, the procedure request information and group information) with the linked financial institution server 40.

The financial institution server 40 receives information to be used in the procedure from the information management server 20, and executes procedures such as address change based on the received information (step S55).

The information management server 20 notifies the user terminal 10 of the information used in the procedure by sending a message to the effect that the information has been linked to the financial institution server 40 (step S56). The user terminal 10 receives the message from the information management server 20 (step S57). This allows the user to recognize that the information used in the procedure, such as changing the address, has been submitted to the financial institution server 40. The information management server 20 may receive the execution result of the procedure, such as changing the address, from the financial institution server 40. In this case, the information management server 20 may notify the user terminal 10 of the message indicating the execution result received from the financial institution server 40. The information management server 20 may notify the message notification indicating the link with the financial institution server 40 and the message indicating the execution result received from the financial institution server 40 together in one message, or may notify them individually in separate messages.

As described above, the information management server 20 of the embodiment includes a storage unit 22, a procedure request information acquisition unit 230, a basic information acquisition unit 231, and an information linkage unit 233. The storage unit 22 stores user information 220. The user information 220 is information including the mobile phone number of the user who uses the information linkage service. The information linkage service is a service that links information used in a procedure by sending the information to the institution where the procedure is to be performed, which is provided by exchanging information via a message service. The procedure request information acquisition unit 230 acquires procedure request information via the information linkage service. The procedure request information is information requesting a procedure associated with a change in basic information. The basic information is at least one of the user's name, address, and date of birth. The basic information is information embedded in the My Number card. The My Number card is a card that certifies the user's identity and is associated with the user's personal number, and is an example of a "certification medium". The basic information acquisition unit 231 acquires information embedded in the My Number card via the information linkage service. The information linking unit 233 generates group information and transmits the generated group information to a linked public institution or private institution (an example of a "procedure destination institution") based on the user's consent. The group information is information that pairs old link information with new link information. The old link information is information used for procedures at a linked public institution or private institution, extracted from information read from the My Number card before the user's address embedded in the My Number card is changed due to a change in the user's address. The new information is information used for procedures at a linked public institution or private institution, extracted from information read from the My Number card after the user's address embedded in the My Number card is changed due to a change in the user's address.

In this way, the information management server 20 of the embodiment can transmit the group information to the public or private institution where the procedure is to be carried out. By being notified of such group information, the public or private institution where the procedure is to be carried out can know the address of the user that has been notified to the local government, both the address before the change and the address after the change, which was difficult to know unless the user notified them. This makes it possible to carry out a change of address of the user with greater certainty. For example, it is possible to check whether the address described in the old linkage information is registered, and if the address described in the old linkage information is not registered, it is possible to register the address described in the old linkage information once and then carry out the procedure to change the address from the address described in the old linkage information to the address described in the old linkage information. Alternatively, if the address described in the linkage information is not registered, it is also possible to confirm this with the user.

The information management server 20 of the embodiment further includes a public procedure execution unit 232, which electronically submits a moving-out notification related to the user's address change to the local government from which the user moved out. The public procedure execution unit 232 electronically submits a moving-out notification to the local government from which the user moved out, using the procedure request information acquired by the procedure request information acquisition unit 230 and the user's basic information acquired by the basic information acquisition unit 231. As a result, in the information management server 20 of the embodiment, the user does not need to visit the local government from which the user moved out to submit a moving-out notification. The user does not need to go through two procedures, a moving-out notification and a moving-in notification, at the counter, and only needs to submit a moving-in notification, which is required to be submitted at the counter, which reduces the burden on the user.

Currently, moving-in notifications must be submitted in person, but electronic submission may be permitted in the future. In this case, the information management server 20 may be configured to submit an electronic moving-out notification to the local government server 50 of the moving-in address.

(Modification of the embodiment)
Here, a modified example of the embodiment will be described with reference to Figs. 10 to 11. Figs. 10 to 11 are sequence diagrams showing the flow of processing performed by the moving procedure information linkage system 1 according to the modified example of the embodiment. This modified example differs from the above-described embodiment in that the user's My Number (individual number) is acquired as a My Number is required for the procedure at the public or private institution where the procedure is to be carried out. The My Number is an example of "personal identification information."

Figure 10 shows the process flow for obtaining the user's My Number (personal number) from the face of the My Number card and notifying the obtained My Number to the financial institution server 40 where the procedure is to be performed.

Note that this sequence chart assumes that the user has already logged in to the information link service using the user terminal 10.

The information management server 20 displays a card face reading screen on the display screen of the user terminal 10 to read the information written on the face of the My Number card (step S60). The card face reading screen is, for example, a screen that obtains the My Number written on the back of the My Number card as text information using the reading function of an IC chip embedded in the My Number card. Alternatively, the card face reading screen is a screen that obtains the My Number by performing image analysis on an image obtained by capturing an image of the card face using the camera function of the user terminal 10.

The card face reading screen is displayed on the display screen of the user terminal 10, and the user operates the card according to the displayed instructions (step S61). As a result, the personal number printed on the face of the My Number card is sent to the information management server 20.

The information management server 20 obtains the personal number by receiving the personal number printed on the face of the My Number card from the user terminal 10 (step S62).

The information management server 20 transmits the user's group information and My Number to the financial institution server 40. This allows the information used in the procedure (here, the group information and My Number) to be linked to the financial institution server 40 where the procedure is to be performed (step S63).

The financial institution server 40 receives information (including My Number) used in the procedure from the information management server 20, and performs procedures such as address change based on the received information (step S64).

The information management server 20 notifies the user terminal 10 of the information (including the My Number) used in the procedure by sending a message to the effect that it has been linked to the financial institution server 40 (step S65). The user terminal 10 receives the message from the information management server 20 (step S66). This allows the user to recognize that the information (including the My Number) used in the procedure, such as a change of address, has been submitted to the financial institution server 40.

Figure 11 shows the process flow for obtaining a user's My Number (personal number) through input operations by the user and notifying the obtained My Number to the financial institution server 40 where the procedure is to be performed.

Note that this sequence chart assumes that the user has already logged in to the information link service using the user terminal 10.

The information management server 20 displays an input screen on the display screen of the user terminal 10, which prompts the user to enter their My Number (step S70).

An input screen is displayed on the display screen of the user terminal 10, and the user inputs his/her My Number into the displayed input field (step S71). This causes the My Number to be sent to the information management server 20. The subsequent processing shown in steps S72 to S76 is similar to the processing shown in steps S62 to S66 in FIG. 10, and therefore a description thereof will be omitted.

As described above, in the information management server 20 according to the modified embodiment, the information linking unit 233 acquires the user's My Number shown on the face of the My Number card when the linking information includes a My Number (personal number). In this way, the information management server 20 controls whether or not to send the My Number to the linking destination depending on the linking destination public institution, private institution, etc. The information linking unit 233 transmits the acquired My Number of the user together with the group information to the linking destination public institution or private institution (procedure destination institution). In this way, in the information management server 20 according to the modified embodiment, it is possible to notify the procedure destination of the My Number required for the procedure even when a My Number is required for the procedure.

Furthermore, even if a financial institution requires a My Number when registering an account, for example, there may be cases where an account registered before the implementation of the My Number system does not have a My Number registered. In such cases, by making it possible for the financial institution to notify the user of the My Number, the financial institution will be able to register a previously unregistered My Number to the account along with a change of address.

In the above-mentioned embodiment and its modified example, the case where the basic information of the user is obtained from the My Number card has been described as an example. However, this is not limited to this. In the moving procedure information linkage system 1, instead of the My Number card, an official document from which the basic information of the user can be obtained, such as a driver's license or a resident registration card, may be used. In this case, the driver's license is an example of a "certification medium". Also, the resident registration card is an example of a "certification medium". Also, if the driver's license is a card on which the driver's license number (an example of "personal identification information") is written, the driver's license is an example of a "certification card". If the resident registration card is capable of reading the resident registration code (an example of "personal identification information") using an IC chip embedded in the card, the resident registration card is an example of a "certification card".

In the above-mentioned embodiment and its modified example, the case where the user's old basic information and new basic information are linked using the user's mobile phone number or its alternative key has been described as an example. However, this is not limited to this. The user's old basic information and new basic information may be linked based on any information that can identify the user. For example, the user's old basic information and new basic information may be linked using an ID or the like given by a service provider that provides various services used by the user, such as a login ID for an information linking service. In this case, instead of requesting a procedure via a message app, the user requests a procedure by, for example, logging in to a website provided by the service provider. Then, the information management server 20 links the user's old basic information and new basic information using a login ID or the like input when logging in to the website from the user terminal 10. In this case, it is not necessary to use a message app. Alternatively, the user's old basic information and new basic information may be linked using personal identification information such as the user's driver's license number or personal number. In this case, the information management server 20 links the user's old basic information and new basic information, for example, using the personal number obtained from the My Number card.

The above-mentioned embodiment and its modified examples have been described with reference to an example in which basic information of a user is obtained from a signature electronic certificate embedded in a My Number card. However, this is not limited to this. For example, basic information of a user may be obtained using information obtained by subjecting an image of the face of a My Number card, driver's license, or resident registration card, etc., to OCR (Optical Character Reader) processing.

The information management server 20 in the above-mentioned embodiment may be realized in whole or in part by a computer. In that case, a program for realizing this function may be recorded in a computer-readable recording medium, and the program recorded in the recording medium may be read into the computer system and executed to realize the function. Note that the term "computer system" here includes hardware such as an OS and peripheral devices. Furthermore, the term "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, and storage devices such as hard disks built into the computer system. Furthermore, the term "computer-readable recording medium" may include a medium that dynamically holds a program for a short period of time, such as a communication line when a program is transmitted via a network such as the Internet or a communication line such as a telephone line, and a medium that holds a program for a certain period of time, such as a volatile memory inside a computer system that is a server or client in such a case. Furthermore, the above-mentioned program may be a program for realizing a part of the above-mentioned function, or may be a program that can realize the above-mentioned function in combination with a program already recorded in the computer system, or may be a program that is realized using a programmable logic device such as an FPGA (Field Programmable Gate Array).

The above describes an embodiment of the present invention in detail with reference to the drawings, but the specific configuration is not limited to this embodiment, and includes designs that do not deviate from the gist of the present invention.

1...Moving procedure information linkage system, 10...User terminal, 20...Information management server, 21...Communication unit, 22...Storage unit, 220...User information, 221...Procedure information, 222...Linkage information, 23...Control unit, 230...Procedure request information acquisition unit, 231...Basic information acquisition unit, 232...Official procedure execution unit, 233...Information linkage unit, 234...Device control unit, 30...Lifeline operator server, 40...Financial institution server, 50...Local government server, 60...Authentication authority server

Claims (6)

a procedure request information acquisition unit that acquires procedure request information for requesting a procedure associated with a change in basic information, which is at least one of the user's name, address, date of birth, and gender, among information embedded in a proof medium that certifies the user's identity and which is associated with personal identification information that uniquely identifies the user;
a basic information acquiring unit for acquiring information embedded in the certification medium of the user;
an information linking unit that associates old information, which is information obtained from the certification medium before the basic information was changed, with new information, which is information obtained from the certification medium after the basic information was changed, based on the user's mobile phone number or an alternative key associated with the user's mobile phone number, and uses the associated old information and new information to extract, with respect to link information that is information used for the procedure to change the basic information at the procedure destination institution where the procedure is requested in the procedure request information, the old linking information, which is the linking information before the basic information was changed, and the new linking information, which is the linking information after the basic information was changed, to generate group information that pairs the extracted old linking information and the new linking information, and transmits the generated group information to the procedure destination institution based on the consent of the user;
An information management server comprising: The procedure request information acquisition unit acquires information requesting a change procedure associated with a change of address of the user as the procedure request information,
The information embedded in the certification medium becomes invalid if a notification of moving in is not submitted within a specified number of days from the planned moving date, and is updated to include the address of the new address when a notification of moving in is submitted and the procedure for updating the information embedded in the certification medium is carried out.
the information linking unit regards information acquired from the certification medium before the information embedded in the certification medium expires as the old information, and regards information acquired from the certification medium after the information embedded in the certification medium is updated as the new information.
2. The information management server according to claim 1. The method further includes a public procedure execution unit that uses the procedure request information acquired by the procedure request information acquisition unit and the basic information acquired by the basic information acquisition unit to electronically submit a moving-out notification related to a change of address of the user to a local government from which the user has moved out.
The information management server according to claim 2. the certification medium is a certification card on whose face the personal identification information is printed,
When the personal identification information is included in the linked information, the information linking unit acquires the personal identification information shown on the face of the certification card, and transmits the acquired personal identification information together with the group information to the procedure destination institution.
The information management server according to any one of claims 1 to 3. An information management method performed by an information management server, comprising:
A procedure request information acquisition unit acquires procedure request information for requesting a procedure associated with a change in basic information, which is at least one of the user's name, address, date of birth, and gender, among information embedded in a proof medium that certifies the user's identity and which is associated with personal identification information that uniquely identifies the user;
a basic information acquisition unit acquires information embedded in the certification medium of the user;
an information linking unit associates old information, which is information obtained from the certification medium before the basic information was changed, with new information, which is information obtained from the certification medium after the basic information was changed, based on the user's mobile phone number or an alternative key associated with the user's mobile phone number, and uses the associated old information and new information to extract, with respect to linking information which is information used for the procedure to change the basic information at the procedure destination institution for which the procedure is requested in the procedure request information, the old linking information, which is the linking information before the basic information was changed, and the new linking information, which is the linking information after the basic information was changed, from linking information which is information used for the procedure to change the basic information at the procedure destination institution for which the procedure is requested in the procedure request information, generate group information that pairs the extracted old linking information and the new linking information, and transmit the generated group information to the procedure destination institution based on the consent of the user.
How information is managed. A program for operating a computer as the information management server according to any one of claims 1 to 4, the program causing the computer to function as each unit of the information management server.

Images