JP7552905B2 - System, terminal, personal certificate generation method and program - Google Patents

Description

The present invention relates to a system, a terminal, a personal certificate generation method, and a storage medium.

There are information distribution systems that provide personal information held by hospitals and other institutions to information recipient devices such as businesses with the consent of the individuals. For example, Patent Literature 1 and Patent Literature 2 disclose technologies related to information distribution systems.

For example, Patent Document 1 describes that a personal information system that performs strict identity verification serves as a hub, and provides a system that can utilize a huge amount of accumulated personal information by associating it with an actual individual. The personal information management server of Patent Document 1 holds the user's electronic certificate, and when it receives a login request from the user, it uses the electronic certificate to determine whether or not the authentication of the user has been successful. When the personal information management server receives a license registration request entered by the user that permits the first business entity to provide the user's personal information held by the first business entity to the second business entity, it stores license information that associates the user, the first business entity, and the second business entity. When the personal information management server receives a request to use the second business entity's service, it requests the first business entity to provide the user's personal information based on the license information. The personal information management server provides the second business entity with the user's personal information received from the first business entity, and requests the second business entity to provide the service to the user.

Patent document 2 describes that an information processing system and a control method for the information processing system are provided that are capable of sharing medical information among multiple medical facilities. The information processing system of Patent document 2 includes a consenter information storage unit, a medical information storage unit, a consenter information extraction unit, and a medical information transmission unit. The consenter information storage unit stores consenter information, which is extracted from an information storage device accessible to a terminal of the medical facility and is linked to medical facility information and patient identification information. The medical information storage unit is a medical information storage unit accessible to a terminal of a medical-related service providing facility that has been requested by a medical facility to provide a medical-related service, and stores medical information, which is linked to medical facility information, patient identification information, and information on the requested medical-related service. The consenter information extraction unit extracts consenter information having medical facility information stored in the medical information storage unit from the consenter information stored in the consenter information storage unit. The medical information transmission unit transmits a consenter information identification unit that identifies medical information having patient identification information of the extracted consenter information from the medical information, and transmits the identified medical information to the information storage device.

JP 2020-181275 A JP 2020-038715 A

In recent years, the lifetime employment system has collapsed and the number of people changing jobs has been increasing. When changing jobs or looking for a job, job seekers are required to submit their own qualifications and work history to companies that are hiring. Companies that are hiring will refer to the submitted qualifications and work history to decide whether to hire the candidate, but this decision is based on the assumption that the submitted qualifications and work history are legitimate. More specifically, there is a presumption that the qualifications and work history listed on resumes etc. have not been falsified. In other words, job seekers are required to submit qualifications and work history whose legitimacy is guaranteed.

The primary objective of the present invention is to provide a system, terminal, personal certificate generation method, and storage medium that contribute to proving the legitimacy of an individual's educational history, work history, qualifications, etc.

According to a first aspect of the present invention, there is provided a system including a terminal, at least one or more data holding servers that correspond and store an individual ID for a data holder that is related or has been related to a user to identify the user and individual data related to the user, and a management server that corresponds and stores a master ID of the user and the at least one or more individual IDs, wherein the terminal transmits the master ID to the management server, the management server transmits the at least one or more individual IDs corresponding to the master ID to the terminal, the terminal transmits the at least one or more individual IDs to the at least one or more data holding servers, the at least one or more data holding servers assign a digital signature to the individual data corresponding to the at least one or more individual IDs and transmit the individual data with the digital signature to the terminal, and the terminal generates a personal certificate for the user using the individual data with the digital signature.

According to a second aspect of the present invention, there is provided a system including a terminal, at least one or more data holding servers that correspond and store an individual ID for a data holder related or having a relationship with a user to identify the user and individual data related to the user, a management server that corresponds and stores a master ID of the user and the at least one or more individual IDs, and a recruiting company server of a recruiting company, wherein the terminal transmits the master ID to the recruiting company server, the recruiting company server transmits the master ID to the management server, the management server transmits the at least one or more individual IDs corresponding to the master ID to the recruiting company server, the recruiting company server transmits the at least one or more individual IDs to the at least one or more data holding servers, the at least one or more data holding servers assign a digital signature to the individual data corresponding to the at least one or more individual IDs and transmit the individual data with the digital signature assigned to the recruiting company server, and the recruiting company server uses the individual data with the digital signature assigned to generate a personal certificate for the user.

According to a third aspect of the present invention, a system includes a terminal, at least one or more data holding servers that store an individual ID for a data holder who is related or has been related to a user to identify the user and individual data related to the user in association with each other, a management server that stores a master ID of the user and the at least one or more individual IDs in association with each other, and an agent server of a recruitment agency, and the terminal transmits the master ID to the agent server, and the agent server transmits the master ID to the management server, and the management server transmits the at least one or more individual IDs corresponding to the master ID to the agent server. the at least one or more data holding servers attach a digital signature to the individual data corresponding to the at least one or more individual IDs and transmit the individual data with the digital signature attached to the agent server, and the agent server uses the individual data with the digital signature to generate a personal certificate for the user and obtains recruitment requirements from companies hiring, and determines companies to introduce to the user using the generated personal certificate and the recruitment requirements.

According to a fourth aspect of the present invention, there is provided a terminal that is connected to at least one or more data holding servers that correspond to and store an individual ID used by a data holder that is or has been related to a user to identify the user and individual data related to the user, and a management server that corresponds to and stores a master ID of the user and the at least one or more individual IDs, and that receives the at least one or more individual IDs corresponding to the master ID by transmitting the master ID to the management server, receives the individual data with a digital signature corresponding to the at least one or more individual IDs by transmitting the at least one or more individual IDs to the at least one or more data holding servers, and generates a personal certificate for the user using the individual data with the digital signature.

According to a fifth aspect of the present invention, there is provided a personal certificate generation method in a terminal connected to at least one or more data holding servers that correspond to and store an individual ID for a data holder that is related or has been related to a user to identify the user and individual data related to the user, and a management server that corresponds to and stores a master ID of the user and the at least one or more individual IDs, the method transmitting the master ID to the management server to receive the at least one or more individual IDs corresponding to the master ID, transmitting the at least one or more individual IDs to the at least one or more data holding servers to receive the individual data with a digital signature corresponding to the at least one or more individual IDs, and generating a personal certificate for the user using the individual data with the digital signature.

According to a sixth aspect of the present invention, there is provided a computer-readable storage medium storing a program for causing a computer mounted on a terminal connected to at least one or more data holding servers that correspond to and store an individual ID for identifying the user by a data holder that is or has been related to the user, and individual data related to the user, to execute the following processes: a process of receiving the at least one or more individual IDs corresponding to the master ID by transmitting the master ID to the management server; a process of receiving the individual data with a digital signature corresponding to the at least one or more individual IDs by transmitting the at least one or more individual IDs to the at least one or more data holding servers; and a process of generating a personal certificate for the user using the individual data with the digital signature.

According to each aspect of the present invention, a system, a terminal, a personal certificate generation method, and a storage medium are provided that contribute to proving the validity of an individual's educational history, work history, qualifications, etc. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

FIG. 1 is a diagram for explaining an overview of an embodiment. FIG. 2 is a diagram showing an example of a schematic configuration of a personal certification system according to the first embodiment. FIG. 3 is a diagram for explaining the operation of the personal certification system according to the first embodiment. FIG. 4 is a diagram for explaining the operation of the personal certification system according to the first embodiment. FIG. 5 is a diagram for explaining the operation of the personal certification system according to the first embodiment. FIG. 6 is a diagram illustrating an example of a processing configuration of the management server according to the first embodiment. FIG. 7 is a diagram for explaining the operation of the user registration unit according to the first embodiment. FIG. 8 is a diagram illustrating an example of a user information database according to the first embodiment. FIG. 9 is a diagram illustrating an example of a processing configuration of the data holding server according to the first embodiment. FIG. 10 is a diagram illustrating an example of the individual information database according to the first embodiment. FIG. 11 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. FIG. 12 is a diagram for explaining the operation of the personal certificate generating unit according to the first embodiment. FIG. 13 is a diagram illustrating an example of a processing configuration of the server of a hiring company according to the first embodiment. FIG. 14 is a sequence diagram showing an example of the operation of the personal certification system according to the first embodiment. FIG. 15 is a diagram for explaining the operation of the personal certification system according to the second embodiment. FIG. 16 is a diagram illustrating an example of a processing configuration of a terminal according to the second embodiment. FIG. 17 is a diagram illustrating an example of a processing configuration of a server of a hiring company according to the second embodiment. FIG. 18 is a sequence diagram showing an example of the operation of the personal certification system according to the second embodiment. FIG. 19 is a diagram for explaining the operation of the personal certification system according to the third embodiment. FIG. 20 is a diagram illustrating an example of a processing configuration of an agent server according to the third embodiment. FIG. 21 is a diagram illustrating an example of a hardware configuration of a management server according to the present disclosure. FIG. 22 is a diagram showing an example of a personal certificate according to a modification of the present disclosure.

First, an overview of one embodiment will be described. The reference numbers in the drawings are added to each element for convenience as an example to aid in understanding, and the description of this overview is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to show the main signal (data) flow diagrammatically, and do not exclude bidirectionality. In this specification and drawings, elements that can be described in the same way may be given the same reference numbers to avoid duplicated explanations.

A system according to one embodiment includes a terminal 101, a data holding server 102, and a management server 103 (see FIG. 1). The data holding server 102 stores an individual ID for identifying the user by a data holder who is or has been related to the user, and individual data related to the user, in association with each other. The management server 103 stores a master ID of the user and at least one or more individual IDs in association with each other. The terminal 101 transmits the master ID to the management server 103. The management server 103 transmits at least one or more individual IDs corresponding to the master ID to the terminal 101. The terminal 101 transmits at least one or more individual IDs to at least one or more data holding servers 102. The at least one or more data holding servers 102 assign a digital signature to the individual data corresponding to the at least one or more individual IDs, and transmit the individual data with the digital signature to the terminal 101. The terminal 101 generates a personal certificate for the user using the individual data with the digital signature.

In the above personal certification system, a user operates the terminal 101 to generate a personal certificate for proving his/her own career (educational history, work history, qualifications, etc.). Specifically, the terminal 101 obtains individual data with a digital signature (educational history information, work history information, qualifications information, etc.) from the data holding server 102, and generates a personal certificate using the individual data. The validity of the individual data contained in the personal certificate generated in this way is guaranteed by the data holder. In other words, there is no room for fraudulent acts such as tampering with the individual data contained in the personal certificate or listing false information that does not exist (for example, falsifying educational history). In other words, the user can prove the validity of his/her own educational history, work history, qualifications, etc. using the personal certificate.

Specific embodiments are described in further detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System Configuration]
Fig. 2 is a diagram showing an example of a schematic configuration of the personal certification system according to the first embodiment. As shown in Fig. 2, the personal certification system includes a management center and at least one data holder.

The Management Center is the entity responsible for various management and control activities related to users (system users). The Management Center manages and controls users' personal information and various types of identification information (ID; IDentifier).

The management center includes a management server 10. The management server 10 performs the main functions of the management center. The management server 10 may be installed in the building of the management center, or on a network (on the cloud).

A data holder is an entity that holds various information (data) about a user. For example, examples of data holders include educational institutions such as high schools and universities, private companies, public institutions, and other groups and organizations, as well as associations that conduct tests related to languages and qualifications. A data holder is a business operator, company, or organization that has a relationship with a user. Or, a data holder is a business operator, company, organization, etc. that had a relationship with a user.

Each data holder manages and operates a server. Figure 2 illustrates a university server 20-1 operated by a university, a corporate server 20-2 operated by a company, and an association server 20-3 operated by an association.

Unless there is a particular reason to distinguish between the university server 20-1, the corporate server 20-2 and the association server 20-3, they will be referred to as the "data possessing server 20."

The data holder (data holding server 20) holds data on each user. For example, the university server 20-1 stores the names, student ID numbers and academic information (year of enrollment, year of graduation, department graduated, etc.) of students (current students and graduates) in association with each other. The corporate server 20-2 stores the names, employee numbers and work history information (department, period of affiliation, etc.) of employees (current and former employees) in association with each other. The association server 20-3 stores the names, examination numbers and qualification information (scores, qualification names) of test takers (past test takers) in association with each other.

In the following explanation, the ID used to identify users who are or have been related to each data holder (current students, graduates, currently employed, unemployed, qualified persons) will be referred to as "individual IDs." Individual IDs are identification information used by each data holder to identify users who are or have been related to the above. For example, student ID numbers, employee numbers, examination numbers, etc. correspond to individual IDs. An individual ID is at least one of student ID numbers, employee numbers, and examination numbers.

Information held by each data holder about users who are or have been related to the data holder (e.g., educational history information, work history information, qualification information, etc.) is referred to as individual data. Individual data is at least one of educational history information, work history information, and qualification information.

The data holder (data holder server 20) associates the user's personal information (name, date of birth, etc.), individual ID (student ID number, employee ID number, etc.) and individual data (educational history information, work history information, etc.) and stores them in an individual information database. Details of the individual information database will be described later.

The servers shown in FIG. 2 (management server 10, data holding server 20) are configured to be able to communicate with each other via a network. For example, the management server 10 and the university server 20-1 are connected by wired or wireless communication means and are configured to be able to communicate with each other.

Figure 2 is an example and is not intended to limit the configuration of the personal authentication system disclosed in the present application. For example, the management center may include two or more management servers 10.

[Operation Overview]
Next, an outline of the operation of the personal authentication system according to the first embodiment will be described.

<User registration>
Users who wish to use the personal authentication system must register in advance with the system (user registration) (see Figure 3). Users can register their user information, such as their name, date of birth, and contact details, to the management center using any method.

For example, the user operates the terminal 30 owned by the user to register as a user. For example, the user operates the terminal 30 to access the management server 10. More specifically, the user accesses a WEB page provided by the management server 10.

The user information registered in the management server 10 includes the user's biometric information (e.g., facial image), name, gender, address, date of birth, contact information (telephone number, email address that can be received by the terminal 30, etc.).

Furthermore, the user registers an identification document in the management server 10 so that the management center can verify the user's identity (personal identity verification). More specifically, the user registers a document (a photographed image of the document) containing biometric information (e.g., a facial image), such as a passport or driver's license, in the management server 10 as the identification document.

The management server 10 performs identity verification using the user's biometric information and the biometric information recorded on the identity document. Specifically, the management server 10 performs one-to-one matching using the two pieces of biometric information. If the matching is successful, the management server 10 proceeds with the user registration procedure.

If identity verification is successful, the management server 10 generates identification information (ID) for uniquely identifying the user in the system. Specifically, the management server 10 generates a master ID for identifying the user. The management server 10 associates the generated master ID with user information (biometric information, name, contact information, etc.) and stores them in a user information database. Details of the user information database will be described later.

The management server 10 issues the generated master ID to the user. More specifically, the management server 10 transmits the generated master ID to the terminal 30. The terminal 30 stores the master ID internally.

<Individual ID registration>
The management server 10 acquires the individual ID held by each data owner. In other words, the data owner registers the individual ID in the management center (management server 10). The system operation relating to individual ID registration will be described with reference to FIG.

The management server 10 periodically or at a predetermined timing transmits an "individual ID transmission request" to each data possessing server 20. More specifically, the management server 10 transmits an individual ID transmission request including identification information for identifying a user (hereinafter referred to as user identification information) to the data possessing server 20.

Examples of user identification information include "name" or "combination of name and date of birth." User identification information is identification information that is used by the management server 10 and the data holding server 20 to identify the user.

The data possessing server 20 searches for the user based on the user identification information. If the data possessing server 20 is successful in searching for the user, it notifies the management server 10 of the individual ID of the user (student ID number, employee number, etc.). Specifically, the data possessing server 20 sends an affirmative response including the individual ID to the management server 10.

If the search for the user fails (if there is no information corresponding to the acquired user identification information), the data holding server 20 notifies the management server 10 that it does not hold the individual data for the requested user. Specifically, the data holding server 20 sends a negative response to the management server 10.

If a positive response is received, the management server 10 extracts the individual ID from the positive response. The management server 10 associates the user's master ID with the individual ID and stores them in the user information database.

<Use of personal certificates>
A user (system user) can use the personal certification system to generate a "personal certificate" for verifying the user's own career history (educational background, work history, qualifications, skills). The user can use the personal certificate in various situations. For example, the user can submit the personal certificate as a resume to a company seeking employment. The use of the personal certificate will be described with reference to FIG. 5.

The user operates the terminal 30 to request the management server 10 to provide an individual ID. Specifically, the terminal 30 sends an "individual ID provision request" including the master ID to the management server 10 (S1).

The management server 10 searches the user information database using the master ID as a key to identify the corresponding user (entry). The management server 10 reads out from the user information database the individual IDs (at least one individual ID) stored in association with the master ID of the user.

The management server 10 notifies the user of the read individual ID. Specifically, the management server 10 transmits a positive response including the individual ID to the terminal 30 (S2). Note that if there is no individual ID corresponding to the acquired master ID, the management server 10 transmits a negative response indicating that to the terminal 30.

The terminal 30 requests each data holder to provide individual data. Specifically, the terminal 30 transmits an "individual data provision request" including at least one individual ID to each of the data holder servers 20 (S3).

The data holding server 20 searches the individual information database using each individual ID included in the individual data provision request as a key to identify the corresponding entry. If a corresponding entry exists, the data holding server 20 reads out the corresponding individual data (educational history information, work history information, qualification information, etc.) from the individual information database. The data holding server 20 transmits a positive response including the read individual data to the terminal 30 (S4). If a corresponding entry does not exist, the data holding server 20 transmits a negative response indicating that to the terminal 30.

Here, the data holding server 20 attaches a signature (digital signature) to the individual data to be provided to the terminal 30 and transmits the individual data to the terminal 30. For example, the university server 20-1 attaches a digital signature to educational history information and transmits the educational history information with the digital signature attached to the terminal 30. Similarly, the corporate server 20-2 transmits work history information with the digital signature attached to the terminal 30, and the association server 20-3 transmits qualification information with the digital signature attached to the terminal 30.

The terminal 30 generates a "personal certificate" using the individual data (individual data with a digital signature) obtained from the data owner. The user operates the terminal 30 to utilize the generated personal certificate. For example, the user submits the personal certificate to a company that is hiring and to which the user wishes to transfer (S5).

The hiring company (hiring company server 40) verifies the digital signature of each individual data included in the personal certificate. If the hiring company server 40 is successful in verifying the digital signature, it treats the individual data as authentic data (data guaranteed by the data owner). The hiring company server 40 provides the individual data (educational background information, work history information, qualification information, etc.) to the recruiter. The recruiter decides whether to hire the candidate based on the individual data, etc., and notifies the user of the result. The hiring result may be notified to the user via the hiring company server 40 (S6).

In addition, the recruiting company server 40 may notify the terminal 30 that the personal certificate obtained from the applicant was legitimate, either before notifying the applicant of the hiring result or instead of notifying the applicant of the hiring result.

Next, we will explain in detail each device included in the personal certification system of the first embodiment.

[Administration Server]
Fig. 6 is a diagram showing an example of a processing configuration (processing module) of the management server 10 according to the first embodiment. Referring to Fig. 6, the management server 10 includes a communication control unit 201, a user registration unit 202, an individual ID management unit 203, and a storage unit 204.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the data holding server 20. The communication control unit 201 also transmits data to the data holding server 20. The communication control unit 201 passes the data received from the other devices to the other processing modules. The communication control unit 201 transmits data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data with the other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from the other devices and a function as a transmitting unit that transmits data to the other devices.

The user registration unit 202 is a means for realizing the above-mentioned user registration. For example, the user registration unit 202 displays a GUI (Graphical User Interface) and an input form for user registration on the terminal 30, and acquires user information, identification documents, etc. For example, the user registration unit 202 displays a GUI such as that shown in FIG. 7 on the terminal 30.

The user operates the terminal 30 to input personal information (e.g., name, date of birth, gender, address, contact information, etc.) and biometric information (e.g., facial image). The user also operates the terminal 30 to select the identity document to be submitted. When the user has completed entering the information, he or she presses the "Send" button. In response to pressing the button, the biometric information, personal information (name, contact information, etc.) and identity document are sent to the management server 10.

Upon acquiring user information and an identification document, the user registration unit 202 verifies the identity of the user. The user registration unit 202 performs one-to-one matching using the biometric information on the identification document and the biometric information acquired from the user. If the matching is successful, the user registration unit 202 proceeds with the process (procedure) related to user registration. Note that the matching process using biometric information can be performed using features generated from a facial image. Existing technology can be used for the matching process, and as it is different from the spirit of the present disclosure, a detailed explanation is omitted.

When the user registration unit 202 has successfully verified the identity of the user (when one-to-one matching has been successful), it generates a master ID for identifying the user. The master ID may be any information that can uniquely identify the user. For example, the user registration unit 202 may assign a unique value each time a user is registered as the master ID.

The user registration unit 202 registers the generated master ID and personal information in a user information database (see FIG. 8). As shown in FIG. 8, the user information database stores the master ID, personal information such as name and gender, and individual ID in association with each other. Note that the user information database shown in FIG. 8 is an example and is not intended to limit the items to be stored. For example, biometric information (e.g., a facial image or features generated from the facial image), identification documents, etc. may be registered in the user information database.

The user registration unit 202 issues the generated master ID to the user. The user registration unit 202 transmits the generated master ID to the terminal 30.

In this manner, the user registration unit 202 acquires the user's first biometric information and an identification document on which the user's second biometric information is recorded. The user registration unit 202 performs one-to-one matching using the first biometric information and the second biometric information. If the one-to-one matching is successful, the user registration unit 202 generates a master ID for the user and transmits the generated master ID to the terminal 30.

In addition, the user registration unit 202 transmits data holding server address information to the terminal 30 at the time of user registration or periodically. The data holding server address information includes address information (e.g., IP (Internet Protocol) address) of the data holding server 20 of each data holder. In the example of Figure 5, the IP addresses of the university server 20-1, the company server 20-2, and the association server 20-3 are transmitted to the terminal 30 as data holding server address information.

The individual ID management unit 203 is a means for managing the individual IDs held by each data holder. The individual ID management unit 203 accesses the user information database periodically or at a predetermined timing, and acquires user identification information (e.g., name). The individual ID management unit 203 transmits an individual ID transmission request including the acquired user identification information to each data holding server 20.

It should be noted that, over time, the number of data holders storing individual data may increase. Therefore, it is preferable that the individual ID management unit 203 periodically acquires the individual ID of a user who has already acquired an individual ID, and transmits a request to transmit the individual ID.

The individual ID management unit 203 receives a response (positive response, negative response) from each data holding server 20.

If a negative response is received, the individual ID management unit 203 does not take any special action. The fact that a negative response has been received indicates that the data holder that sent the response does not hold the corresponding individual data.

If a positive response is received, the individual ID management unit 203 stores the individual ID contained in the positive response in the user information database.

In this way, the individual ID management unit 203 transmits user identification information (e.g., name, etc.) to the data holding server 20, thereby acquiring an individual ID from the data holding server 20. The individual ID management unit 203 associates the acquired individual ID with the master ID of the user (the user who transmitted the user identification information) and stores it in the user information database.

Furthermore, the individual ID management unit 203 processes a request for the provision of an individual ID from a user. Specifically, the individual ID management unit 203 processes a request for the provision of an individual ID received from the terminal 30. The individual ID management unit 203 searches the user information database using the master ID included in the request for the provision of an individual ID as a key.

If a corresponding entry does not exist (if the search fails), the individual ID management unit 203 sends a negative response to the terminal 30 indicating that (the user is not registered).

If a corresponding entry exists (if the search is successful), the individual ID management unit 203 transmits an affirmative response including each individual ID of the entry identified by the search to the terminal 30. For example, in the example of FIG. 8, when the individual ID management unit 203 acquires "mID01" as the master ID, it transmits an affirmative response including "kID01" and "kID02" to the terminal 30.

The memory unit 204 stores information necessary for the operation of the management server 10. A user information database is constructed in the memory unit 204.

[Data holding server]
Fig. 9 is a diagram showing an example of a processing configuration (processing module) of the data retaining server 20 according to the first embodiment. Referring to Fig. 9, the data retaining server 20 includes a communication control unit 301, an individual information acquisition unit 302, an ID transmission request processing unit 303, a data provision request processing unit 304, and a storage unit 305.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the management server 10. The communication control unit 301 also transmits data to the management server 10. The communication control unit 301 passes the data received from the other devices to the other processing modules. The communication control unit 301 transmits data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data to and from the other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to the other devices.

The individual information acquisition unit 302 is a means for acquiring personal information (name, date of birth, etc.), individual ID (student ID number, employee number, etc.) and individual data (educational history information, work history information, etc.) of a user (a user related to the data holder; for example, a student, employee) using any means.

The staff of the data holder inputs the user's personal information, individual ID and individual data into the data holder server 20. At that time, the individual information acquisition unit 302 may display a GUI on an LCD panel or the like for the staff to input the above information, or may acquire the personal information from an external storage device (e.g., a USB (Universal Serial Bus) memory) in which the above information is stored.

The individual information acquisition unit 302 stores the acquired personal information, individual ID, and individual data in an individual information database (see Figure 10). Note that the individual information database shown in Figure 10 is an example, and is not intended to limit the items to be stored. Also, Figure 10 illustrates educational background information as individual data, but the individual data changes depending on the data holder. Also, each piece of educational background information shown in Figure 10 includes specific information about the user, such as the year of enrollment, year of graduation, and department of graduation.

The ID transmission request processing unit 303 is a means for processing an individual ID transmission request transmitted from the management server 10. The ID transmission request processing unit 303 extracts user identification information from the individual ID transmission request. The ID transmission request processing unit 303 searches the individual information database using the extracted user identification information as a key.

If a corresponding entry does not exist (if the search fails), the ID transmission request processing unit 303 sends a negative response to that effect to the management server 10.

If a corresponding entry exists (if the search is successful), the ID transmission request processing unit 303 reads out the individual ID of the entry identified by the search. The ID transmission request processing unit 303 transmits an affirmative response including the read out individual ID to the management server 10.

When sending a response (positive or negative response), the ID transmission request processing unit 303 may include in the response the user identification information contained in the received individual ID transmission request. The management server 10 may use the user identification information to identify the user corresponding to the received response (the user who was the target of the individual ID transmission request). Alternatively, the management server 10 may match the transmitted individual ID transmission request with its response using a serial number or the like that is set in common to the individual ID transmission request and its response.

The data provision request processing unit 304 is a means for processing a provision request for individual data from a user. The data provision request processing unit 304 receives an individual data provision request from the user's terminal 30.

The data provision request processing unit 304 extracts at least one individual ID from the individual data transmission request. The data provision request processing unit 304 searches the individual information database using the extracted individual ID as a key.

If a corresponding entry does not exist (if the search fails), the data request processing unit 304 sends a negative response to that effect to the terminal 30.

If a corresponding entry exists (if the search is successful), the data provision request processing unit 304 reads out the individual data (educational history information, work history information, etc.) of the entry identified by the search. The data provision request processing unit 304 assigns a signature (digital signature) to the read out individual data.

Note that existing technology can be used to generate a digital signature, so a detailed explanation will be omitted. The data provision request processing unit 304 inputs the individual data into a hash function to generate a digest. The data provision request processing unit 304 encrypts the generated digest with a private key. The data provision request processing unit 304 attaches the encrypted digest to the individual data as a digital signature.

The data provision request processing unit 304 sends an affirmative response (an affirmative response to the individual data provision request) including signed individual data (signed educational history information, work history information, etc.) to the terminal 30.

The memory unit 305 stores information necessary for the operation of the data holding server 20. The individual information database is constructed in the memory unit 305.

[Device]
Examples of the terminal 30 include a mobile terminal device such as a smartphone, a mobile phone, a game machine, a tablet, or a computer (personal computer, notebook computer), etc. The terminal 30 can be any equipment or device that can accept user operations and communicate with the management server 10, etc.

Fig. 11 is a diagram showing an example of a processing configuration (processing module) of the terminal 30 according to the first embodiment. Referring to Fig. 11, the terminal 30 includes a communication control unit 401, a registration unit 402, an individual ID request unit 403, a personal certificate generation unit 404, a personal certificate utilization unit 405, and a memory unit 406.

The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the management server 10. The communication control unit 401 also transmits data to the management server 10. The communication control unit 401 passes the data received from the other devices to the other processing modules. The communication control unit 401 transmits data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data with the other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to the other devices.

The registration unit 402 is a means for registering user information in the management server 10. By receiving data from the management server 10, the registration unit 402 displays a GUI such as that shown in FIG. 7. The registration unit 402 acquires user information (name, sex, date of birth, contact information, biometric information, etc.) and identification documents in response to user operations. When the user presses the "Send" button, the registration unit 402 transmits the user information and identification documents to the management server 10.

The registration unit 402 receives a master ID from the management server 10. The registration unit 402 stores the received master ID in the memory unit 406. In addition, when the registration unit 402 acquires data-holding server address information from the management server 10, the registration unit 402 stores the address information in the memory unit 406.

The individual ID request unit 403 is a means for requesting the management server 10 to provide an individual ID. The individual ID request unit 403 transmits an individual ID provision request to the management server 10 in response to a predetermined action by the user (e.g., pressing a personal certificate generation button displayed on a menu screen). More specifically, the individual ID request unit 403 transmits an individual ID provision request including a master ID to the management server 10.

The individual ID request unit 403 receives a response (positive response, negative response) to the individual ID provision request.

If a negative response is received, the individual ID request unit 403 notifies the user that an individual ID corresponding to the user's master ID is not registered in the management server 10.

When a positive response is received, the individual ID request unit 403 extracts at least one individual ID contained in the positive response and stores the extracted individual ID in the memory unit 406.

The personal certificate generation unit 404 is a means for creating a personal certificate. Specifically, the personal certificate generation unit 404 generates an individual data provision request including the individual ID stored in the memory unit 406. For example, when two individual IDs are acquired from the management server 10, the personal certificate generation unit 404 generates an individual data provision request including these two individual IDs. The personal certificate generation unit 404 transmits the generated individual data provision request to each data possession server 20.

In the example of Figure 5, the personal certificate generation unit 404 sends individual data provision requests to each of the university server 20-1, the corporate server 20-2, and the association server 20-3.

The personal certificate generation unit 404 receives a response (positive response, negative response) from each data holding server 20.

If all responses received are negative responses, the personal certificate generation unit 404 notifies the user that a personal certificate cannot be generated.

When at least one positive response is received, the personal certificate generation unit 404 stores in the memory unit 406 the individual data (educational history information, work history information, qualification information) with the digital signature of each data holder from the positive response.

The personal certificate generation unit 404 arranges the acquired individual data in a predetermined order and generates a personal certificate. For example, the personal certificate generation unit 404 arranges the individual data in the order of educational background information, work history information, and qualification information, and generates a personal certificate (see Figure 12). Note that a personal certificate is a collection of individual data and is a certificate on electronic media. For example, if a user graduated from university and worked for a company, a personal certificate is generated that includes the educational background information of the university and the work history information of the company.

Note that the personal certificate generation unit 404 may generate a personal certificate including not only the individual data but also basic information of the user (e.g., name, age, etc.) as shown in Fig. 12. That is, the personal certificate generation unit 404 may generate a personal certificate using the individual data to which a digital signature has been added and the personal information of the user.

The personal certificate utilization unit 405 is a means for utilizing the personal certificate. For example, the personal certificate utilization unit 405 provides the generated personal certificate to the hiring company to which the employee wishes to transfer. The personal certificate utilization unit 405 transmits the personal certificate to the hiring company server 40.

If necessary, the personal certificate utilization unit 405 notifies the user of the results from the recruiting company server 40.

The memory unit 406 stores information necessary for the operation of the terminal 30.

[Recruiting company server]
Fig. 13 is a diagram showing an example of a processing configuration (processing module) of the hiring company server 40 according to the first embodiment. Referring to Fig. 13, the hiring company server 40 includes a communication control unit 501, a personal certificate processing unit 502, and a storage unit 503.

The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the terminal 30. The communication control unit 501 also transmits data to the terminal 30. The communication control unit 501 passes the data received from the other device to the other processing module. The communication control unit 501 transmits data acquired from the other processing module to the other device. In this way, the other processing module transmits and receives data to and from the other device via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from the other device and a function as a transmitting unit that transmits data to the other device.

The personal certificate processing unit 502 is a means for performing processing related to personal certificates. The personal certificate processing unit 502 receives a personal certificate from the terminal 30. The personal certificate processing unit 502 verifies the digital signature attached to the individual data included in the received personal certificate.

Since existing technology can be used to verify the digital signature, a detailed explanation will be omitted. The personal certificate processing unit 502 inputs the individual data into a hash function to generate a digest. The personal certificate processing unit 502 decrypts the digital signature using the public key of the signer (data owner). The personal certificate processing unit 502 verifies the digital signature by comparing the generated digest with the decrypted digest.

If the digital signature attached to each individual data is successfully verified, the personal certificate processing unit 502 treats the received personal certificate as genuine. If any individual data is included that fails to verify the digital signature, the personal certificate processing unit 502 treats the received personal certificate as non-genuine (unauthorized, false).

The personal certificate processing unit 502 presents the authentic personal certificate to the recruiter, etc. The personal certificate processing unit 502 may also obtain the hiring result from the recruiter and notify the terminal 30 of the hiring result.

The memory unit 503 stores information necessary for the operation of the recruiting company server 40.

[System Operation]
Next, the operation of the personal certification system according to the first embodiment will be described. Note that a description of the operation related to user registration will be omitted. The operation of the personal certification system related to the creation of a personal certificate will be described with reference to FIG.

The terminal 30 transmits the master ID stored therein to the management server 10. Specifically, the terminal 30 transmits an individual ID provision request including the master ID to the management server 10 (step S101).

The management server 10 transmits at least one individual ID corresponding to the master ID to the terminal 30. Specifically, the management server 10 identifies a user based on the master ID and notifies the terminal 30 of the individual ID of the user. The management server 10 transmits an affirmative response including the individual ID to the terminal 30 (step S102).

The terminal 30 transmits the at least one or more acquired individual IDs to the at least one or more data holding servers 20. Specifically, the terminal 30 transmits an individual data provision request including the at least one or more individual IDs to the data holding server 20 (step S103).

Each data retaining server 20 assigns a digital signature to individual data corresponding to an individual ID stored in its own device's individual information database from among at least one individual ID notified from the terminal 30, and transmits the individual data with the digital signature to the terminal 30. Specifically, the data retaining server 20 identifies the user's individual data (educational history information, work history information, qualification information) based on the acquired individual ID. The data retaining server 20 assigns a digital signature to the individual data. The data retaining server 20 transmits an affirmative response including the individual data with the digital signature to the terminal 30 (step S104).

The terminal 30 generates a personal certificate using the individual data (educational history information, work history information, and qualification information with digital signature) obtained from each data holding server 20 (step S105).

The terminal 30 then transmits the generated personal certificate to the hiring company's recruiting company server 40. The recruiting company server 40 verifies the digital signature attached to the individual data included in the personal certificate, and treats the individual data that has been successfully verified as legitimate data.

Next, we will explain examples of applications in which the personal authentication system disclosed in this application can be suitably used.

<Application Example 1>
The personal certification system disclosed in this application is suitable for job seekers, particularly those seeking employment in the construction industry (construction companies), etc. Many workers at construction sites are skilled workers, and it is difficult for them to objectively prove their own skills, experience, etc. However, by using the personal certification system disclosed in this application, the skills, experience, etc. of workers can be properly certified by the company to which they belong or by companies to which they have previously belonged. In other words, workers can objectively prove their own skills, careers, etc. As a result, the right personnel are placed at the right site, and human resource optimization is achieved.

<Application Example 2>
The personal certification system disclosed in this application is beneficial for job seekers, particularly elderly job seekers. Many elderly job seekers have long work histories and a variety of skills and backgrounds. It can be difficult for job seekers themselves to manage such long work histories and many skills. However, by using the personal certification system disclosed in this application, the work history and qualifications (skills) of elderly people are recorded in a personal certificate without omission, and the work history, etc. of elderly people are properly certified. As a result, the abilities of elderly people are properly and accurately evaluated in the labor market, which leads to the promotion of employment of elderly people.

As described above, the personal certification system according to the first embodiment generates and manages a personal certificate (digital resume) for a user to certify his/her career (educational history, work history, qualifications, etc.). That is, the personal certificate is generated based on the user's will, and the personal certificate is utilized (for example, submitted to a company recruiting) based on the user's will. In this way, the personal certification system according to the first embodiment realizes self-sovereign data provision that enables the user to control information related to his/her career. In addition, the validity of the individual data (educational history information, work history information, qualification information) contained in the personal certificate is guaranteed by the data owner. That is, there is no room for fraud such as tampering with the individual data contained in the personal certificate or listing false information that does not exist (for example, misrepresentation of educational history). This fact means that companies recruiting do not need to doubt the contents (listed items) of the personal certificate submitted by the user, and smooth recruitment activities are realized. In this way, the personal certification system according to the first embodiment can visualize an individual's career. In addition, when users are job hunting, they can provide companies with information about their educational background, work history, qualifications, etc., with the information's validity guaranteed. Furthermore, users can provide companies with information that is difficult to include in a normal resume (for example, work experience at a construction site), which further enhances their ability to correctly prove their own careers.

Furthermore, in the personal certification system according to the first embodiment, the management server 10 only stores the user's master ID and individual ID, and does not hold the individual data (specific data) of that user. The personal certification system realizes a distributed ID model in which individual data distributed among multiple data holders is linked using a master ID and individual IDs. This distribution of data and ID linkage eliminates the need for the management server 10 to store individual data, improving the security of the entire system.

Second Embodiment
Next, the second embodiment will be described in detail with reference to the drawings.

In the first embodiment, a personal certificate is submitted from the user's terminal 30 to the recruiting company server 40. In the second embodiment, a case is described in which the recruiting company server 40 directly acquires a personal certificate.

Note that the basic configuration of the personal certification system in the second embodiment can be the same as that of the first embodiment, so the explanation corresponding to Figure 2 will be omitted.

Below, we will mainly explain the differences between the first and second embodiments.

Figure 15 is a diagram for explaining the general operation of the personal certification system relating to the second embodiment.

The user applies for a job at the hiring company server 40 of the company to which the user wishes to transfer. At that time, the terminal 30 transmits the master ID issued by the management server 10 to the hiring company server 40 (S10).

The recruiting company server 40 sends an individual ID provision request including the acquired master ID to the management server 10 (S11).

The management server 10 sends at least one individual ID corresponding to the master ID included in the request to the recruiting company server 40 (S12).

The recruiting company server 40 sends a request for individual data including at least one of the acquired individual IDs to each data holding server 20 (S13).

If each data holding server 20 holds corresponding individual data, it attaches a digital signature to the individual data and transmits it to the recruiting company server 40 (S14).

The recruiting company server 40 generates a personal certificate for the user based on the individual data acquired from each data holding server 20. The recruiting company server 40 presents the generated personal certificate to the recruiting officer. The recruiting company server 40 notifies the user (terminal 30) of the hiring result as necessary (S15). Before sending the hiring result or instead of the hiring result, the recruiting company server 40 may notify the terminal 30 of the verification result of the personal certificate acquired from the user (whether the personal certificate is valid or invalid).

Next, we will explain in detail each device for realizing the operation of the personal certification system related to the second embodiment above.

The processing configuration of the management server 10 according to the second embodiment can be the same as the processing configuration of the management server 10 according to the first embodiment shown in FIG. 6. In the second embodiment, the individual ID management unit 203 only needs to process an individual ID provision request received from the recruiting company server 40.

The processing configuration of the data possessing server 20 according to the second embodiment may be the same as the processing configuration of the data possessing server 20 according to the first embodiment shown in FIG. 9. In the second embodiment, the data provision request processing unit 304 only needs to process an individual data provision request received from the recruiting company server 40.

Figure 16 is a diagram showing an example of a processing configuration (processing module) of a terminal 30 according to the second embodiment. Referring to Figure 16, a master ID providing unit 407 has been added to the configuration of the terminal 30 according to the first embodiment. Note that while Figure 16 illustrates a terminal 30 including an individual ID request unit 403, a personal certificate generating unit 404, and a personal certificate utilizing unit 405, these processing modules are not necessary if the terminal 30 does not generate a personal certificate.

The master ID providing unit 407 transmits the master ID stored in the memory unit 406 to the recruiting company server 40 in response to a specified action by the user (for example, the action of applying for a job posting on a website operated by a recruiting company).

When the terminal 30 receives the hiring result from the hiring company server 40, the terminal 30 may display the hiring result. Alternatively, the user may be notified of the hiring result on a website operated by the hiring company.

Figure 17 is a diagram showing an example of the processing configuration (processing module) of the recruiting company server 40 according to the second embodiment. Referring to Figure 17, in the recruiting company server 40 according to the second embodiment, an individual ID request unit 504 and an individual data request unit 505 are added to the configuration of the recruiting company server 40 according to the first embodiment.

The operation of the individual ID request unit 504 can be the same as the operation of the individual ID request unit 403 of the terminal 30 described in the first embodiment, so detailed explanation will be omitted.

The operation of the individual data request unit 505 can be the same as the individual data acquisition function in the personal certificate generation unit 404 of the terminal 30 described in the first embodiment, so a detailed description will be omitted. The individual data request unit 505 integrates the acquired individual data (such as educational history information with a digital signature) and formats it into the "personal certificate" described above.

The individual data request unit 505 passes the personal certificate to the personal certificate processing unit 502.

[System Operation]
Next, a description will be given of the operation of the personal certification system according to the second embodiment. Fig. 18 is a sequence diagram showing an example of the operation of the personal certification system according to the second embodiment.

The recruiting company server 40 obtains the master ID from the terminal 30 (step S201).

The recruiting company server 40 sends an individual ID provision request including the master ID acquired from the terminal 30 to the management server 10 (step S202).

The management server 10 identifies the user based on the master ID and notifies the hiring company server 40 of the individual ID of the user. The management server 10 sends a positive response including the individual ID to the hiring company server 40 (step S203).

The recruiting company server 40 sends a request for individual data including at least one of the acquired individual IDs to the data holding server 20 (step S204).

The data holding server 20 identifies the user's individual data (educational history information, work history information, qualification information) based on the acquired individual ID. The data holding server 20 transmits an affirmative response including the individual data with a digital signature to the recruiting company server 40 (step S205).

The recruiting company server 40 generates a personal certificate using the individual data (digitally signed educational history information, work history information, and qualification information) obtained from each data holding server 20 (step S206).

After the generation of the personal certificate is completed, the recruiting company server 40 deletes the master ID obtained from the user. Alternatively, the recruiting company server 40 returns the master ID obtained from the user to the user.

As described above, in the personal certification system according to the second embodiment, the user passes a master ID to the recruiting company server 40 and gives permission to the recruiting company server 40 to obtain a personal certificate (obtain personal data). Having obtained the master ID, the recruiting company server 40 determines that the user's permission has been obtained upon obtaining the master ID, and obtains the individual data necessary to evaluate the user. This operation of the system allows the recruiting company to easily obtain a personal certificate to fairly evaluate the user.

[Third embodiment]
Next, a third embodiment will be described in detail with reference to the drawings.

In the second embodiment, a case where the terminal 30 transmits a master ID to a recruiting company (recruiting company server 40) is described. In the third embodiment, a case where the terminal 30 transmits a master ID to a recruitment agency (recruitment agent; agent server 50) is described.

Note that the basic configuration of the personal certification system in the third embodiment can be the same as that of the first embodiment, so the explanation corresponding to Figure 2 will be omitted.

The following will focus on the differences between the first to third embodiments.

Figure 19 is a diagram for explaining the general operation of the personal certification system relating to the third embodiment.

The user registers a desire to change jobs with a recruitment agency. More specifically, together with registering the desire to change jobs, the terminal 30 transmits the master ID issued by the management server 10 to the agent server 50 (S20).

After acquiring the master ID, the agent server 50 operates in the same manner as the recruiting company server 40 described in the second embodiment to acquire individual data with a digital signature from the data holding server 20 (S21 to S24 in Figure 19).

The agent server 50 also acquires recruitment requirements from the hiring company. The agent server 50 generates a personal certificate based on the individual data acquired from the data holder. The agent server 50 presents the personal certificate and the recruitment requirements to the hiring manager.

The recruiter selects companies offering jobs that match the job seeker's needs and notifies the user (job seeker). The notification may be made via the agent server 50 (S25 in FIG. 19; Company introduction). That is, the agent server 50 may use the generated personal certificate and the recruitment requirements obtained from the companies offering jobs to determine which companies to introduce to the user.

Next, we will explain in detail each device for realizing the operation of the personal certification system related to the third embodiment above.

The processing configuration of the management server 10 and the data possessing server 20 according to the third embodiment can be the same as the processing configuration of the management server 10 and the data possessing server 20 according to the second embodiment. Therefore, the description of the processing configuration of the management server 10 and the data possessing server 20 according to the third embodiment will be omitted.

The processing configuration of the terminal 30 according to the third embodiment can be the same as the processing configuration of the terminal 30 according to the second embodiment. The master ID providing unit 407 according to the third embodiment transmits the master ID stored in the memory unit 406 to the agent server 50 in response to a predetermined operation of the user (for example, an operation of registering a job seeker on a website operated by a recruitment agency).

Figure 20 is a diagram showing an example of a processing configuration (processing module) of the agent server 50 according to the third embodiment. Referring to Figure 20, the processing configuration of the agent server 50 according to the third embodiment can be the same as the processing configuration of the recruiting company server 40 according to the second embodiment.

The personal certificate processing unit 502 of the agent server 50 presents to the recruiting officer a personal certificate generated based on individual data from the data holder and the recruitment requirements obtained from the company offering the job.

Alternatively, the personal certificate processing unit 502 may match the personal certificate with the recruitment requirements and present the result to the hiring manager. Alternatively, the personal certificate processing unit 502 may transmit the matching result to the terminal 30 of the user (job seeker).

Alternatively, the personal certificate processing unit 502 may extract candidate hiring companies to present to the job seeker, and transmit a list of the extracted candidates (at least one or more candidate hiring companies) to the terminal 30. The user may select a hiring company from the list obtained by the terminal 30. In this manner, the selection (matching) of the hiring company may be performed by the recruiter, by the agent server 50, or by the user selecting from among multiple candidates.

As described above, in the personal certification system according to the third embodiment, the agent server 50 of the recruitment agency matches companies offering jobs with job seekers using a personal certificate that serves as the user's resume. Since the agent server 50 can perform matching using highly reliable resumes, it can introduce companies suitable for the job seeker to the job seeker. As a result, the job-changing market is revitalized.

Next, we will explain the hardware of each device that makes up the personal certification system. Figure 21 is a diagram showing an example of the hardware configuration of the management server 10.

The management server 10 can be configured by an information processing device (so-called a computer) and has the configuration shown in Fig. 21. For example, the management server 10 has a processor 311, a memory 312, an input/output interface 313, a communication interface 314, etc. The components such as the processor 311 are connected by an internal bus or the like and are configured to be able to communicate with each other.

However, the configuration shown in FIG. 21 is not intended to limit the hardware configuration of the management server 10. The management server 10 may include hardware not shown, and may not include an input/output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the management server 10 is not intended to be limited to the example shown in FIG. 21, and for example, the management server 10 may include multiple processors 311.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs including an operating system (OS).

Memory 312 is a RAM (Random Access Memory), a ROM (Read Only Memory), a HDD (Hard Disk Drive), a SSD (Solid State Drive), etc. Memory 312 stores an OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

The functions of the management server 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium that stores the program. The processing modules may also be realized by a semiconductor chip.

In addition, the data holding server 20, terminal 30, etc. can also be configured using information processing devices in the same way as the management server 10, and since their basic hardware configuration is no different from that of the management server 10, a description thereof will be omitted.

The management server 10, which is an information processing device, is equipped with a computer, and the functions of the management server 10 can be realized by having the computer execute a program. The management server 10 also executes a personal certificate generation method using the program.

[Modification]
The configuration, operation, etc. of the personal authentication system described in the above embodiment are merely examples, and are not intended to limit the system configuration, etc.

In the above embodiment, the operation of the personal certification system has been described using "universities," "companies," and "associations" as examples of data holders. However, it is not intended to limit the data holders to the above organizations, etc. For example, a medical institution such as a hospital may participate in the system as a data holder. In this case, the user may obtain individual data held by the medical institution (e.g., health check results; health information) from the medical institution and create a personal certificate. In other words, a personal certificate containing health information guaranteed by the medical institution (health information with a digital signature) is generated, and the personal certificate may be submitted to the hiring company, etc., as necessary.

In the above embodiment, a case has been described in which a user information database is configured within the management server 10, but the database may also be constructed in an external database server or the like. That is, some of the functions of the management server 10 may be implemented in another server. More specifically, the above-described "user registration unit (user registration means)", "individual ID management unit (individual ID management means)", etc. may be implemented in any of the devices included in the system.

In the above embodiment, the case where the management server 10 requests the data holding server 20 to transmit an individual ID has been described. However, the data holding server 20 may voluntarily notify the management server 10 of the individual ID. Specifically, the data holding server 20 transmits the user identification information (e.g., name) and the individual ID to the management server 10 periodically or at the timing of adding a new user (addition of an individual ID and individual data). The management server 10 uses the user identification information to identify the user's master ID and stores the master ID and the individual ID in association with each other. In this way, when the data holding server 20 acquires new information (e.g., educational history information, work history information, etc.) (when new information is added to the data holding server 20), it may transmit the individual ID of the corresponding user to the management server 10.

In the above first embodiment, the case where the terminal 30 acquires individual data from the data holding server 20 has been described. However, the terminal 30 may acquire individual data (individual data with a digital signature) via the management server 10. In this case, when the management server 10 acquires the master ID from the terminal 30, it identifies the individual ID corresponding to the master ID and transmits the identified individual ID to the data holding server 20. In response to the transmission of the individual ID, the management server 10 acquires individual data with a digital signature from the data holding server 20. The management server 10 transmits the acquired individual data to the terminal 30. Alternatively, the data holding server 20 that has received the individual ID from the management server 10 may transmit the individual data with a digital signature directly to the user's terminal 30. In this way, the user sends the master ID to the management server 10. The management server 10 transmits the individual ID to the data holder. The data holder may transmit the individual data with a digital signature directly or indirectly to the user's terminal 30.

In the above first embodiment, the terminal 30 transmits an individual data provision request including an individual ID to each data holding server 20 included in the system. However, the terminal 30 may transmit the individual data provision request to some of the data holding servers 20. Specifically, the terminal 30 does not need to transmit an individual data provision request to a data holding server 20 that clearly does not hold the user's individual data. In this case, the terminal 30 may display a GUI or the like that allows the user to select a data holder from which to request the provision of individual data. The terminal 30 may transmit an individual data provision request to the data holding server 20 corresponding to the data holder acquired by the GUI.

The terminal 30 may generate the personal certificate using a GUI that allows the user to select the items to be included in the personal certificate. For example, the terminal 30 may display a GUI that allows the user to select qualifications held by the user that are not to be included in the personal certificate (such as the organization or association that sponsors the qualifications). In the example of FIG. 5, if the user determines that the qualifications stored in the association server 20-3 do not need to be included in the personal certificate, the terminal 30 does not need to send an individual data provision request to the association server 20-3.

In the above embodiment, it has been described that the user information database stores the master ID and the individual ID in association with each other. However, the user information database may store the master ID, the individual ID, and a set of the data owner's ID (data owner ID) in association with each other. More specifically, information identifying the data owner who is the sender of the individual ID may be stored in the user information database. In response to a request from the terminal 30, the management server 10 may transmit the individual ID and the data owner ID corresponding to the master ID to the terminal 30. The terminal 30 may use the data owner ID to identify the data owner server 20 that stores the individual data corresponding to the individual ID, and transmit an individual data provision request to the data owner server 20. In the example of FIG. 5, when the terminal 30 acquires the individual ID held by the university server 20-1 and the data owner ID of the university server 20-1, it may transmit an individual data provision request to the university server 20-1.

The management server 10 may store the type of individual data stored in each data holding server 20 together with the individual ID, etc. For example, the management server 10 may store the individual ID stored in the university server 20-1 in association with the data type "educational history information". In this case, the terminal 30 may transmit the master ID and the data type to be acquired to the management server 10 to identify the data holder (data holding server 20) that stores the data type. The terminal 30 acquires the individual ID stored in the data holding server 20 from the management server 10 and transmits the individual ID to the data holding server 20 to acquire the required individual data. For example, in the above example, the terminal 30 inputs the master ID and the data type "educational history information" to the management server 10. The management server 10 uses the master ID and the data type to search the user information database and identify the corresponding individual ID. The management server 10 notifies the terminal 30 of the identified individual ID. The terminal 30 transmits the acquired individual ID to the university server 20-1, thereby acquiring educational background information with a digital signature from the university server 20-1.

When generating a personal certificate, the terminal 30 may generate a personal certificate that includes biometric information (e.g., a facial image) of the user (see Figure 22).

In the third embodiment, a case has been described in which a recruitment agency (agent server 50) introduces a company offering a job to a user. However, the agent server 50 may also introduce a user who is suitable for the recruitment requirements of the company offering a job to the company offering a job. In other words, in the personal certification system disclosed in the present application, information with guaranteed reliability may be provided to a business, or information (e.g., recruitment introduction) may be provided based on information with guaranteed reliability (personal certificate).

In the second and third embodiments described above, it was explained that the user provides a master ID to a recruiting company or a recruitment agency, and these companies acquire individual data. At that time, the recruiting company or the recruitment agency may acquire the individual data after authenticating the user. Specifically, the recruiting company server 40 or the agent server 50 stores the user's master ID and password in association with each other. When the recruiting company server 40 or the agent server 50 acquires a correct combination of master ID and password, it may determine that there has been access by a legitimate user, send the master ID to the management server 10, and acquire an individual ID. By taking such measures, the recruiting company server 40 or the agent server 50 can prevent fraud caused by impersonation by another person.

The recruiting company server 40 and the agent server 50 may authenticate the user by biometric authentication using biometric information (e.g., facial authentication using a facial image) or authentication using an ID other than the master ID and a password. Similarly, the management server 10 may also perform authentication using an ID or biometric authentication using biometric information when the user uses the system.

As described above, the personal certificate shown in Fig. 12 may include a facial image of the user. Alternatively, the personal certificate may include the date and time when the individual data (educational history information, work history information, qualification information, etc.) was acquired, or information regarding the provider of the individual data (e.g., the name of the university, company, or association).

In the second and third embodiments, the master ID and the individual ID may be identification information with a limited number of uses (identification information similar to a one-time password). Alternatively, the master ID and the individual ID may be identification information with an expiration date that can be used only for a specified period of time (e.g., a few days or a few weeks). For example, the user may set the number of uses and the expiration date for the management server 10 and the data holding server 20, thereby realizing the above-mentioned restrictions based on the number of uses and the expiration date.

The user may provide the hiring company or recruitment agency with the corresponding password along with the master ID. More specifically, the terminal 30 held by the user transmits the master ID and the corresponding password to the hiring company server 40 or agent server 50 at the same time as or at a different time from the transmission of the master ID. The hiring company server 40 or agent server 50 transmits the master ID and password to the management server 10 or data holding server 20. In this way, it may be impossible to obtain information (individual ID, individual data) from the management server 10 or data holding server 20 unless the hiring company server 40 or agent server 50 transmits not only the master ID but also the password corresponding to the master ID. In this case, the management server 10 or data holding server 20 stores the corresponding password along with the master ID.

In the above second and third embodiments, a case has been described in which a recruiting company or a recruitment agency acquires a user's personal information (individual ID, individual data). In such cases, it is of course assumed that the user's consent has been obtained for these entities to acquire the personal information. In other words, when the recruiting company server 40 or the agent server 50 acquires an individual ID or individual data, a procedure is required to obtain "the user's consent."

The form of data transmission and reception between each device (management server 10, data holding server 20, terminal 30, etc.) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Educational history information, employment history information, etc. are transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

In the flow diagrams (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the order of execution of the steps performed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the diagrams can be changed to the extent that does not interfere with the content, such as by executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of an embodiment with other configurations.

The above explanation makes clear the industrial applicability of the present invention, and the present invention is particularly applicable to personal certification systems that provide a means to certify a user's educational background, work history, qualifications, etc.

A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.
[Appendix 1]
A terminal,
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
Including,
The terminal transmits the master ID to the management server;
the management server transmits to the terminal the at least one individual ID corresponding to the master ID;
The terminal transmits the at least one individual ID to the at least one data holding server;
the at least one data holding server assigns a digital signature to the individual data corresponding to the at least one individual ID, and transmits the individual data with the digital signature to the terminal;
The terminal generates a personal certificate for the user using the individual data to which the digital signature has been added.
[Appendix 2]
2. The system of claim 1, wherein the terminal transmits the generated personal certificate to a recruiting company server of a recruiting company.
[Appendix 3]
The system described in Appendix 2, wherein the recruiting company server verifies the digital signature attached to the individual data contained in the personal certificate, and treats the individual data that is successfully verified as legitimate data.
[Appendix 4]
4. The system according to claim 1, wherein the terminal generates the personal certificate using the individual data to which the digital signature has been added and personal information of the user.
[Appendix 5]
The management server acquires the first biometric information of the user and an identification document on which the second biometric information of the user is recorded,
A system described in any one of appendix 1 to 4, which performs one-to-one matching using the first biometric information and the second biometric information, and if the one-to-one matching is successful, generates a master ID for the user and transmits the generated master ID to the terminal.
[Appendix 6]
the at least one data retaining server stores the individual ID, the individual data, and user identification information for identifying the user commonly used by the management server and the at least one data retaining server in association with each other;
The system according to any one of claims 1 to 5, wherein the management server stores the master ID, the at least one individual ID, and the user identification information in association with each other.
[Appendix 7]
The system described in Appendix 6, wherein the management server obtains the individual ID from the data possessing server by transmitting the user identification information to the data possessing server.
[Appendix 8]
The system described in any one of appendix 1 to 7, wherein the individual ID is at least one of a student ID number, an employee ID number, and an examinee number.
[Appendix 9]
The system according to any one of claims 1 to 8, wherein the individual data is at least one of educational history information, work history information, and qualification information.
[Appendix 10]
The system described in Appendix 1, wherein the management server, instead of sending the master ID to the terminal, sends the master ID to the at least one data possessing server, thereby receiving individual data to which the digital signature has been attached, and generates a personal certificate for the user using the individual data to which the digital signature has been attached, and sends the generated personal certificate to the terminal.
[Appendix 11]
The system described in Appendix 1, wherein the terminal selects a data possessing server that possesses the user's individual data from among the at least one data possessing server, and transmits the at least one individual ID to the selected data possessing server.
[Appendix 12]
The management server stores the master ID of the user, the at least one individual ID, and a data owner ID for identifying the at least one data owner in association with each other,
In response to a request from the terminal, transmit an individual ID corresponding to the master ID and a data holder ID to the terminal;
The system described in Appendix 1, wherein the terminal uses the data owner ID to identify the data owner server that stores individual data corresponding to the individual ID, and transmits the individual ID to the identified data owner server.
[Appendix 13]
The management server stores the type of the individual data stored in the data holding server in association with the individual ID,
The system according to claim 1, wherein the terminal identifies the data possessing server that stores the data type to be acquired by transmitting the master ID and the data type to be acquired to the management server.
[Appendix 14]
A terminal,
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
A recruiting company server of a recruiting company;
Including,
The terminal transmits the master ID to the hiring company server,
The hiring company server transmits the master ID to the management server,
The management server transmits the at least one individual ID corresponding to the master ID to the hiring company server,
The recruiting company server transmits the at least one individual ID to the at least one data holding server,
The at least one data holding server assigns a digital signature to the individual data corresponding to the at least one individual ID, and transmits the individual data with the digital signature to the recruiting company server;
The system wherein the recruiting company server generates a personal certificate for the user using the individual data to which the digital signature has been applied.
[Appendix 15]
A terminal,
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
An agent server of a recruitment agency,
Including,
The terminal transmits the master ID to the agent server;
The agent server transmits the master ID to the management server;
the management server transmits the at least one individual ID corresponding to the master ID to the agent server;
The agent server transmits the at least one individual ID to the at least one data holding server;
the at least one data holding server assigns a digital signature to the individual data corresponding to the at least one individual ID, and transmits the individual data with the digital signature to the agent server;
The agent server generates a personal certificate for the user using the individual data to which the digital signature has been attached, obtains recruitment requirements from companies offering jobs, and uses the generated personal certificate and the recruitment requirements to determine companies to introduce to the user.
[Appendix 16]
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
Connected to
Transmitting the master ID to the management server to receive the at least one individual ID corresponding to the master ID;
Transmitting the at least one individual ID to the at least one data holding server, and receiving the individual data with a digital signature corresponding to the at least one individual ID;
A terminal that generates a personal certificate for the user using the digitally signed individual data.
[Appendix 17]
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
On the device connected to
Transmitting the master ID to the management server to receive the at least one individual ID corresponding to the master ID;
Transmitting the at least one individual ID to the at least one data holding server, and receiving the individual data with a digital signature corresponding to the at least one individual ID;
a personal certificate generating method for generating a personal certificate for the user using the digitally signed individual data;
[Appendix 18]
At least one data holding server that stores an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with the individual ID;
a management server that stores a master ID of the user and the at least one individual ID in association with each other;
The computer installed in the terminal connected to
transmitting the master ID to the management server to receive the at least one individual ID corresponding to the master ID;
a process of receiving the individual data with a digital signature corresponding to the at least one individual ID by transmitting the at least one individual ID to the at least one data holding server;
generating a personal certificate for the user using the digitally signed individual data;
A computer-readable storage medium that stores a program for executing the above.

The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas.

10 Management server 20 Data holding server 20-1 University server 20-2 Company server 20-3 Association server 30 Terminal 40 Recruiting company server 50 Agent server 101 Terminal 102 Data holding server 103 Management server 201 Communication control unit 202 User registration unit 203 Individual ID management unit 204 Storage unit 301 Communication control unit 302 Individual information acquisition unit 303 ID transmission request processing unit 304 Data provision request processing unit 305 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface 401 Communication control unit 402 Registration unit 403 Individual ID request unit 404 Personal certificate generation unit 405 Personal certificate utilization unit 406 Storage unit 407 Master ID provision unit 501 Communication control unit 502 Personal certificate processing unit 503 Storage unit 504 Individual ID request unit 505 Individual data request unit

Claims (10)

A terminal,
A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
Including,
The terminal transmits the master ID to the management server;
the management server transmits the plurality of individual IDs corresponding to the master ID to the terminal;
The terminal transmits the plurality of individual IDs to each of the plurality of data holding servers,
each of the plurality of data holding servers, when the stored individual ID is included in the plurality of received individual IDs, attaches a digital signature to the individual data corresponding to the stored individual ID, and transmits the individual data with the digital signature attached to the terminal;
The terminal generates a personal certificate for the user using the individual data to which the digital signature has been added that is received from each of the plurality of data holding servers . The system of claim 1, wherein the terminal transmits the generated personal certificate to a recruiting company server of the recruiting company. The system of claim 2, wherein the recruiting company server verifies a digital signature attached to the individual data included in the personal certificate, and treats the individual data that has been successfully verified as valid data. The system according to any one of claims 1 to 3, wherein the terminal generates the personal certificate using the individual data to which the digital signature is attached and personal information of the user. The management server acquires the first biometric information of the user and an identification document on which the second biometric information of the user is recorded,
The system according to any one of claims 1 to 4, further comprising: a one-to-one matching step of performing a one-to-one matching using the first biometric information and the second biometric information; and if the one-to-one matching is successful, generating a master ID for the user; and transmitting the generated master ID to the terminal. A terminal,
A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
A recruiting company server of a recruiting company;
Including,
The terminal transmits the master ID to the hiring company server,
The hiring company server transmits the master ID to the management server,
The management server transmits the plurality of individual IDs corresponding to the master ID to the hiring company server,
The recruiting company server transmits the plurality of individual IDs to each of the plurality of data holding servers,
each of the plurality of data holding servers, when the stored individual ID is included in the plurality of received individual IDs, attaches a digital signature to the individual data corresponding to the stored individual ID, and transmits the individual data with the digital signature attached to the recruiting company server;
The system wherein the recruiting company server generates a personal certificate for the user using the individual data with the digital signature attached received from each of the plurality of data holding servers . A terminal,
A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
An agent server of a recruitment agency,
Including,
The terminal transmits the master ID to the agent server;
The agent server transmits the master ID to the management server;
the management server transmits the plurality of individual IDs corresponding to the master ID to the agent server;
the agent server transmits the plurality of individual IDs to the plurality of data holding servers,
each of the plurality of data holding servers, when the stored individual ID is included in the plurality of received individual IDs, attaches a digital signature to the individual data corresponding to the stored individual ID, and transmits the individual data with the digital signature attached to the agent server;
The agent server generates a personal certificate for the user using the individual data with the digital signature attached received from each of the multiple data holding servers, obtains recruitment requirements from companies offering jobs, and uses the generated personal certificate and the recruitment requirements to decide which companies to introduce to the user. A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
Connected to
Transmitting the master ID to the management server to receive the plurality of individual IDs corresponding to the master ID;
transmitting the plurality of individual IDs to the plurality of data retaining servers, respectively, to receive , from each of the plurality of data retaining servers, the individual data with a digital signature corresponding to the individual ID stored in each of the data retaining servers ;
A terminal that generates a personal certificate for the user using the digitally signed individual data. A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
On the device connected to
Transmitting the master ID to the management server to receive the plurality of individual IDs corresponding to the master ID;
transmitting the plurality of individual IDs to the plurality of data retaining servers, respectively, to receive , from each of the plurality of data retaining servers, the individual data with a digital signature corresponding to the individual ID stored in each of the data retaining servers ;
a personal certificate generating method for generating a personal certificate for the user using the digitally signed individual data; A plurality of data holding servers that store an individual ID for identifying a user by a data holder who is or has been related to the user, and individual data related to the user in association with each other;
a management server that stores a master ID of the user and a plurality of individual IDs stored in each of the plurality of data retention servers in association with each other;
The computer installed in the terminal connected to
transmitting the master ID to the management server to receive the plurality of individual IDs corresponding to the master ID;
a process of transmitting the plurality of individual IDs to the plurality of data retaining servers, respectively, and receiving , from each of the plurality of data retaining servers, the individual data with a digital signature corresponding to the individual ID stored in each of the data retaining servers ;
generating a personal certificate for the user using the digitally signed individual data;
A program for executing.

Images