JP7636151B2 - Information processing device, information processing system, information processing method, and program - Google Patents

Description

The present disclosure relates to an information processing device, an information processing system, an information processing method, and a program.

When providing services to a user, a service with higher added value may be provided to the user depending on the user's attributes, such as date of birth, age, address, and gender. One conventional example is a service that applies a discount on the fee (so-called fare) for using public transportation such as a train or bus if the user is a child under a certain age. Another example is a service that applies a specific service to the residents of a local government such as a city, ward, town, or village.

In recent years, systems have been introduced that use cards (e.g., IC cards) that can be used as documents to prove personal numbers, such as the so-called My Number Card, or as official identification for identity verification, and are also used to receive various government services. With the introduction of such systems, it has become possible to authenticate individual users based on more reliable personal information protected by advanced security technology when providing various services to the users.

In light of this, particularly in recent years, the use of information about users (so-called personal information) to provide various services to users has been attracting attention. For example, Patent Literature 1 discloses an example of a system in which a user's personal information is registered in advance through a procedure at a counter, and then the personal information is used to provide services to the user.

JP 2003-256879 A

On the other hand, in conventional systems, in order to enable the use of a user's personal information in providing a service to the user, for example, the user may be required to go through cumbersome procedures, such as inputting personal information, as a preliminary procedure.

The present invention was made in consideration of the above problems, and aims to realize a more suitable way of utilizing a user's personal information in providing services to the user.

The information processing device of the present invention includes an acquisition unit that acquires at least a part of personal information used for providing a predetermined service from a series of personal information related to an individual to whom first identification information is assigned, a storage unit that previously stores the acquired personal information in association with second identification information related to the provision of the service, and a determination unit that, when the service is provided, receives designation of a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition, wherein the first identification information is information associated with a first recording medium, and the second identification information is assigned to a second recording medium that is different from the first recording medium on which the first identification information is recorded and is used for providing the service. the second recording medium is an IC chip capable of communicating with a reading device by contactless communication, and when a first communication is established between the second recording medium and the reading device, the determination unit receives a condition related to the personal information from the reading device and determines whether the personal information associated with the second identification information satisfies the condition, and when a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on a result of the determination, and information read from the second recording medium when the service is provided is limited to information used for the provision of the service .

Moreover, an information processing device of the present invention includes an acquisition unit that acquires, when providing a predetermined service, a result of a judgment as to whether or not at least a part of a series of personal information relating to an individual to whom first identification information is assigned, the personal information pre-stored in association with second identification information relating to the provision of the service, satisfies a predetermined condition relating to the provision of the service, and a control unit that controls a process relating to the provision of the service according to the personal information based on the acquired result of the judgment, wherein the first identification information is information associated with a first recording medium, and the second identification information is different from the first recording medium on which the first identification information is recorded and is used for the provision of the service. the personal information is identification information assigned to a second recording medium to be read by the user, the second recording medium being an IC chip capable of communicating with a reading device by non-contact communication, the acquisition unit acquires a result of the determination based on the second identification information when a first communication is established between the second recording medium and the reading device, and the control unit controls a process related to the provision of the service according to the personal information based on the acquired result of determination when a second communication is established between the second recording medium and the reading device after the first communication is established, and limits information read from the second recording medium when providing the service to information to be used for providing the service.

Further, an information processing system of the present invention includes a first information processing device and a second information processing device connected via a network, the first information processing device includes a first acquisition unit that acquires at least a part of personal information used for providing a predetermined service from a series of personal information related to an individual to whom first identification information is assigned, a storage unit that previously stores the acquired personal information in association with second identification information related to the provision of the service , and a determination unit that, when providing the service, receives designation of a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition. The second information processing device includes a second acquisition unit that, when providing the service, acquires a result of the determination, and a control unit that controls processing related to the provision of the service according to the personal information based on the acquired result of the determination . The first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from the first identification information recorded on the first recording medium and is used to provide the service, the second recording medium is an IC chip capable of communicating with a reading device via contactless communication, the second acquisition unit acquires the result of the judgment based on the second identification information when a first communication is established between the second recording medium and the reading device, and the control unit controls the processing related to the provision of the service according to the personal information based on the acquired result of the judgment when a second communication is established between the second recording medium and the reading device after the first communication is established, and limits the information read from the second recording medium when providing the service to information used in providing the service.

According to the present invention, it is possible to realize a more suitable manner of utilizing a user's personal information in providing services to the user.

FIG. 1 illustrates an example of a system configuration of an information processing system. FIG. 2 is a diagram illustrating an example of a hardware configuration of an information processing device. FIG. 2 is a block diagram illustrating an example of a functional configuration of an information processing system. FIG. 2 is a sequence diagram showing an example of processing of the information processing system. FIG. 2 is a sequence diagram showing an example of processing of the information processing system. FIG. 2 is a sequence diagram showing an example of processing of the information processing system. FIG. 2 is a sequence diagram showing an example of processing of the information processing system.

A preferred embodiment of the present disclosure will be described in detail below with reference to the attached drawings. Note that in this specification and drawings, components having substantially the same functional configuration are designated by the same reference numerals to avoid redundant description.

<Introduction>
When providing a service to a user, a service with higher added value may be provided to the user depending on the user's attributes such as date of birth, age, address, and sex.
Furthermore, in recent years, various technologies have been considered for managing personal information of residents by linking it to identification information uniquely assigned to each resident, such as a so-called My Number, and making the personal information available for authentication, etc. of the individual resident. As a specific example, with the introduction of systems using My Number cards, it has become possible to authenticate individual users based on highly reliable personal information protected by advanced security technology when providing various services to users.
Against this background, there are hopes, particularly in recent years, for the introduction of mechanisms that use My Number cards and other devices to protect users' personal information with a high level of security while enabling that personal information to be used when providing various services to users.

On the other hand, under conventional systems, in order to enable the utilization of a user's personal information when providing a service to the user, for example, the user may be required to go through cumbersome preliminary procedures, such as inputting personal information.
As a specific example, in order to issue an IC card such as a transportation IC card called a "Children's Suica (Suica is a registered trademark)" that allows children of elementary school age or younger to receive discounts on fares for using transportation such as buses and trains, procedures such as the submission of documents and identification to a designated sales office may be required.
Furthermore, in a situation where personal information is registered based on input by the user himself/herself, it is conceivable that a situation may occur in which the personal information of the user is erroneously registered due to erroneous input or the like.

In contrast, personal information managed in association with the My Number is based on management by public institutions (e.g., local governments such as cities, towns, and villages) and is protected by high levels of security, so it tends to be more trustworthy than other personal information (especially personal information registered by user input).
On the other hand, there are also issues with the utilization of personal information managed in association with the My Number. Specifically, media used for authentication based on personal information protected by high security, such as My Number cards, have a high risk of being lost, and the procedures required for reissuance are complicated, which tends to be a burden on users. In this context, for example, it is conceivable that situations will arise where users avoid carrying media such as My Number cards when going out, which will become a factor that hinders the promotion of the utilization of personal information in the provision of services to users.

In consideration of the above problems, this disclosure proposes a mechanism for more optimally utilizing a user's personal information in providing services to the user.

<System Configuration>
An example of a system configuration of an information processing system 1 according to the present embodiment will be described with reference to FIG.
The information processing system 1 according to the present embodiment is a system that realizes the provision of various services to a user based on electronic processing, such as electronic payment using a so-called IC card represented by "Suica". In addition, the information processing system 1 utilizes the characteristic of realizing the provision of various services to a user through electronic processing to control processing related to the provision of services to the user according to the attributes of the user, such as age, date of birth, address, and gender. At this time, the information processing system 1 uses personal information managed by a predetermined institution (e.g., a public institution), such as personal information managed in association with the My Number, to determine the attributes of the user. With this mechanism, the information processing system 1 according to the present embodiment prevents the procedures for the user to use the service from becoming complicated, and makes it possible to guarantee the reliability of the service provided according to the attributes of the user.

As shown in FIG. 1, the information processing system 1 includes a front-end server 110, a business server 130, an account management server 150, a personal information management server 190, a personal information holding server 170, a terminal device 210, and a reading device 250. The various information processing devices included in the information processing system 1 illustrated above are connected to each other via a network N1 so as to be able to send and receive information to each other.

The type of the network N1 is not particularly limited. As a specific example, the network N1 may be configured with the Internet, a dedicated line, a LAN (Local Area Network), or a WAN (Wide Area Network). The network N1 may be configured with a wired network, or may be configured with a wireless network such as a network based on a communication standard such as 5G, LTE (Long Term Evolution), or Wi-Fi (registered trademark). The network N1 may include multiple networks, and a network of a different type from the other networks may be applied as a part of the network. In addition, it is sufficient that the communication between the various information processing devices described above is logically established, and the communication between the various information processing devices may be physically relayed by another communication device, etc.

The terminal device 210 is a schematic representation of a terminal device used to access various servers (e.g., the front-end server 110, the account management server 150, etc.) via the network N1 when a user uses various services. The terminal device 210 can be realized by an information processing device having a communication function, such as a so-called smartphone, a tablet terminal, or a PC (Personal Computer), etc.

The terminal device 210 according to this embodiment also has a function of reading information stored in an IC chip provided in an IC card. As long as it is possible to read information stored in an IC chip, the method is not particularly limited. As a specific example, the terminal device 210 may have various configurations for realizing short-distance wireless communication, such as so-called non-contact communication. In this case, the terminal device 210 may read information stored in the IC chip by establishing short-distance wireless communication (non-contact communication) with the IC chip. As another example, a configuration may be applied in which a reading device such as a so-called IC card reader is externally attached to the terminal device 210, and the terminal device 210 reads information stored in the IC chip via the reading device.

The terminal device 210 uses the above configuration to read information used for authenticating an individual user and accessing personal information of the user, which is stored in an IC chip of an IC card, such as a so-called My Number card. For example, the IC card 230 shown in Fig. 1 is a schematic diagram of a card that stores information used for authenticating an individual user and accessing personal information of the user. As a specific example, the IC card 230 has an IC chip, and the above information is stored in the IC chip.
The information used for the authentication of the individual user and access to the personal information of the user may be, for example, identification information individually assigned to each user, such as a so-called My Number, or may be information such as an electronic certificate issued in association with the identification information and assigned to the user. In the following description, the information used for the authentication of the individual user and access to the personal information of the user is also referred to as "first identification information" for convenience. The first identification information may be, for example, information individually assigned to each user by a predetermined institution (for example, a public institution that manages My Number, etc.) (for example, My Number, or an electronic certificate issued in association with the My Number, etc.).
Also, IC card 230 (or an IC chip included in IC card 230) corresponds to an example of a "first recording medium". Note that, although the example shown in FIG. 1 shows a case where an IC card is applied as the first recording medium, the medium applied as the first recording medium is not necessarily limited. For example, in recent years, some mobile terminals such as so-called smartphones are equipped with IC chips, and such mobile terminals (or IC chips included in such mobile terminals) can also be applied as the first recording medium. In this way, any medium equipped with an IC chip (or an IC chip included in such medium) can be applied as the first recording medium.

The terminal device 210 may notify a desired server (for example, the personal information holding server 170 described below) of the first identification information read from the IC chip of the IC card 230. This enables the server to use the first identification information notified from the terminal device 210 to authenticate the individual user and access the personal information of the user. Details of this process will be described separately below.

The front-end server 110 is a schematic representation of a server also known as a front-end server that receives various requests for providing various services to users and presents a UI (User Interface) and various information related to the provision of the services. For example, the front-end server 110 may receive a request for providing a service to a user from the terminal device 210, and in response to the request, request the business server 130 (described below) to execute a process related to the provision of the service. The front-end server 110 may also receive information related to the results of the process executed in response to the request from the business server 130, and present the information to the user via the terminal device 210 that is the sender of the request.

The business server 130 is a schematic representation of a server, also called a back-end server, that executes actual processing related to the provision of various services to users. For example, the business server 130 may execute processing related to the provision of services to users (e.g., actual processing related to electronic payment) in response to a request received by the front-end server 110. The business server 130 may also notify the front-end server 110 of information related to the results of the processing executed in response to the request received by the front-end server 110. This enables the front-end server 110 to present information related to the results of the processing executed by the business server 130 to the user via the terminal device 210 that is the sender of the request. The business server 130 corresponds to an example of a "second server."

The account management server 150 is a schematic representation of a server that manages accounts (in other words, membership information) for users to use various services. In response to requests received by the front-end server 110, the account management server 150 creates or updates accounts, manages created accounts, and so on. The account management server 150 may also issue access tokens for accessing information managed in association with an account, based on identification information, passwords, and so on specified when creating or updating an account.

The personal information management server 190 manages a series of personal information of the user (e.g., date of birth, age, address, sex, etc.) in association with identification information individually assigned to each user, such as a so-called My Number. The personal information management server 190 has a function of authenticating the individual user based on a predetermined authentication method. As a specific example, the personal information management server 190 may authenticate the individual user using an electronic certificate individually issued to each user. Furthermore, the personal information management server 190 may use the personal information of the target user when performing the above authentication. This makes it possible, for example, to prove whether the user is an adult or not through the above authentication.
Furthermore, the personal information management server 190 according to this embodiment may output at least a part of the set of personal information of the user that it manages. In addition, at this time, the personal information management server 190 may allow the output of the personal information of the user on the premise of authentication of the individual user. This allows an information processing device (e.g., the personal information holding server 170 described later, etc.) that receives the output of the personal information to use the personal information of the user, for example, when providing a service to the user.

In addition, a server related to a public institution that has jurisdiction over management of identification information (such as My Number) assigned to each user and management of the user's personal information associated with the identification information may be applied as the personal information management server 190. By applying such a configuration, it is possible to realize the provision of services that require higher reliability for the personal information used, such as services related to public institutions such as local governments and financial institutions such as banks.
In this disclosure, a server related to a public institution corresponds to a server for implementing various management functions under the jurisdiction of the public institution. As a specific example, a server related to a public institution may be a server managed by the public institution, or may be a server managed by another institution or another company based on a contract with the public institution.

The personal information holding server 170 manages the identification information related to the provision of various services to the user in association with the personal information (for example, date of birth, age, address, sex, etc.) of the user to whom the identification information is assigned.
Specifically, the personal information holding server 170 requests the personal information management server 190 to authenticate the target user (user to whom the first identification information is assigned). Based on this request, the personal information management server 190 described later executes a process related to the authentication of the target user according to the reading result of the IC card 230 (My Number card, etc.) between the target user's terminal device 210 and the target user's terminal device 210. Then, the personal information holding server 170 acquires at least a part of the personal information of the user managed by the personal information management server 190 from the personal information management server 190 according to the result of the authentication. The personal information management server 190 then manages the acquired personal information in association with the identification information related to the provision of various services to the user.
In the following description, the above-mentioned identification information related to the provision of various services to the user is also referred to as "second identification information" for convenience. An example of the second identification information is identification information (identification number) assigned to an IC card used for electronic payment, such as Suica. As another example, identification information assigned to the user in order to provide the user with services via a network (e.g., identification information associated with an account, etc.) may be used as the second identification information. Of course, the above is merely an example, and the information used as the second identification information is not particularly limited as long as it is identification information that can uniquely identify the user himself or a medium owned by the user and is used to provide various services to the user.

In addition, the personal information holding server 170 receives the specification of a condition related to the personal information and determines whether the personal information associated with the specified second identification information satisfies the condition. For example, the personal information holding server 170 may determine whether the address of the user associated with the specified second identification information is included in a specified area (e.g., a prefecture, city, town, or village). As another example, the personal information holding server 170 may determine whether the age of the user associated with the specified second identification information is below a threshold (e.g., whether the user is a minor). The personal information holding server 170 may then notify the requester of the determination of the result of the determination. The personal information holding server 170 corresponds to an example of a "first server."

The reading device 250 reads information used to provide a service to a user from a card that holds the information, and executes various processes related to the provision of the service based on the read information. For example, the reading device 250 may be realized by a so-called IC card reader or the like, and may read information held in an IC chip provided in an IC card. The IC card 270 shown in Fig. 1 is a schematic diagram of a card that holds information used to provide a service to a user.
As a more specific example, the reading device 250 may read information stored in an IC chip of an IC card 270 used for electronic payment, such as Suica, and execute a process related to the electronic payment based on the information. At this time, for example, the reading device 250 may access a server (e.g., the business server 130) related to management of electronic money charged to each IC card 270, and request the server to execute substantial processes related to the electronic payment, such as managing the balance, based on the read information. As another example, the reading device 250 itself may execute substantial processes related to the electronic payment based on information read from the IC card 270.
It should be noted that IC card 270 (or an IC chip included in IC card 270) corresponds to an example of a "second recording medium". It should be noted that, although the example shown in FIG. 1 shows a case where an IC card is applied as the second recording medium, this does not necessarily limit the medium applied as the second recording medium. For example, similar to the first recording medium described above, a mobile terminal equipped with an IC chip (or the IC chip included in the mobile terminal) can also be applied as the second recording medium. In this way, any medium equipped with an IC chip (or the IC chip included in the medium) can be applied as the second recording medium.

Furthermore, the reading device 250 may request the personal information holding server 170 to determine whether or not the personal information associated with the second identification information satisfies a predetermined condition by specifying the second identification information read from the IC card 270. Then, the reading device 250 may control the execution of various processes related to the provision of the above-mentioned services to the user according to the result of the determination.
As a specific example, when the address of the target user is included in a predetermined area (in other words, when the user is a resident of a predetermined area), the reading device 250 may apply a discounted fee as a fee for using the service and then execute a process related to electronic payment of the fee. As another example, when the target user is a minor, the reading device 250 may restrict the execution of a process related to the sale of products and provision of services aimed at adults.

Note that the configuration shown in FIG. 1 is merely an example and does not necessarily limit the system configuration of the information processing system 1 according to this embodiment. As a specific example, the functions of two or more of the various servers shown in FIG. 1 (e.g., the front-end server 110, the business server 130, the account management server 150, and the personal information holding server 170, etc.) may be realized by one server. As another example, the load associated with the execution of processing by at least some of the various servers shown in FIG. 1 may be distributed to multiple servers.

An example of the system configuration of the information processing system 1 according to this embodiment has been described above with reference to FIG. 1.

<Hardware Configuration>
An example of a hardware configuration of an information processing device 100 applicable as various information processing devices constituting the information processing system 1 according to the present embodiment shown in Fig. 1 will be described with reference to Fig. 2. The information processing device 100 includes a CPU (Central Processing Unit) 101, an interface device 102, a HD (Hard Disk) 103, a ROM (Read Only Memory) 108, and a RAM (Random Access Memory) 109. The information processing device 100 may also include at least one of an input device 104 and an output device 105. The information processing device 100 may also include a recording medium drive device 106.

The CPU 101 controls various operations of the information processing device 100. The ROM 108 stores control programs, boot programs, and the like that can be executed by the CPU 101. The RAM 109 is the main memory of the CPU 101, and is used as a work area or a temporary storage area for expanding various programs. The HD 103 stores various data and various programs.
The CPU 101 reads out a program stored in the HD 103, loads it into the RAM 109, and executes the program, thereby realizing various functions to be described later with reference to Figs. 5 and 6 and processes to be described later with reference to Fig. 7.
Instead of the HD 103 or together with the HD 103, a storage device other than the HD 103, such as a non-volatile memory typified by an SSD (Solid State Drive), may be used.

The interface device 102 is an interface that connects the information processing device 100 to various networks such as the network N1. The device applied as the interface device 102 may be changed as appropriate depending on the type of network N1 and the communication method applied. As a specific example, if the network N1 is a wired network, the interface device 102 may include a connector that connects a cable used as a transmission path, a device involved in receiving data via the cable, and a device involved in transmitting data via the cable. As another example, if the network N1 is a wireless network, the interface device 102 may include various devices for achieving wireless communication such as an antenna device and an RF circuit.

The input device 104 is a device for receiving instructions from an administrator of the information processing device 100. The input device 104 may be realized by, for example, an operating device such as a mouse, a keyboard, a touch panel, a button, a switch, a lever, or a pedal. Furthermore, the device applied as the input device 104 may be changed as appropriate depending on the method by which the user gives instructions to the information processing device 100 (in other words, the method of operating the information processing device 100). For example, when the information processing device 100 receives instructions from the user by voice input, the input device 104 may be realized by a sound collection device that receives voice input, such as a microphone.

The output device 105 is a device for presenting various information to the user of the information processing device 100. The output device 105 may be realized, for example, by a display device such as a display that presents information to the user by displaying various display information, screens, etc. Furthermore, the device applied as the output device 105 may be changed as appropriate depending on the method of presenting information to the user. For example, when information is presented to the user by sound such as voice or electronic sound, the output device 105 may be realized by an audio output device that outputs sound such as a speaker.

The program for the information processing device 100 is provided to the information processing device 100 by a recording medium 107 such as a CD-ROM, or is downloaded via a network, etc. When the program for the information processing device 100 is provided by the recording medium 107, the recording medium 107 is set in the recording medium drive device 106, and the program recorded on the recording medium 107 is installed in the HD 103 via the recording medium drive device 106.

The configuration shown in FIG. 2 is merely an example, and does not necessarily limit the hardware configuration of the information processing device constituting the information processing system 1 according to this embodiment. As a specific example, some components such as the input device 104 and the output device 105 may not be included. As another example, a configuration according to the functions realized by the information processing device 100 may be added as appropriate. As a specific example, the information processing device 100 may have a function of reading information from an IC chip and writing information to the IC chip by establishing short-range wireless communication, typically so-called non-contact communication, with the IC chip. In this case, the information processing device 100 may be equipped with a communication device for realizing the short-range wireless communication.

<Functional configuration>
3, the functional configuration of the information processing system 1 according to this embodiment will be described below, particularly the functional configuration of the personal information management server 190, the personal information holding server 170, the terminal device 210, and the reading device 250. In addition, in FIG. 3, the same reference numerals as those in FIG. 1 indicate the same objects as those in FIG. 1.

(Personal Information Management Server 190)
The following describes an example of the functional configuration of the personal information management server 190. The personal information management server 190 includes a communication unit 191, an authentication processing unit 192, an access control unit 193, and a storage unit 194.

The communication unit 191 is an interface that enables each unit in the personal information management server 190 to send and receive information with other devices via the network N1. The communication unit 191 can be realized, for example, by the interface device 102. In the following explanation, when each unit in the personal information management server 190 sends and receives information with other devices, it is assumed that the information is sent and received via the communication unit 191 unless otherwise specified.

The storage unit 194 is a schematic representation of a storage area for storing various data. For example, the storage unit 194 may store data and programs for each unit in the personal information management server 190 to execute processing.
In addition, the memory unit 194 stores the personal information of each user in association with a first identification information assigned to the user (e.g., identification information such as a My Number, or a certificate issued in association with the identification information).
The hardware configuration for realizing the storage unit 194 is not particularly limited. For example, the storage unit 194 may be realized by a storage device built into the personal information management server 190. As another example, the storage unit 194 may be realized by an external storage device different from the personal information management server 190. As a specific example, the storage unit 194 may be realized by a storage device external to the personal information management server 190, or may be realized by a storage device connected to the personal information management server 190 via a network. As the storage unit 194, a so-called database system may be applied.

Furthermore, the type of personal information stored in the storage unit 194 is not particularly limited. For example, the storage unit 194 may store personal information of a type predetermined by a specified public institution, or may store personal information of a type other than the type determined by the public institution. The type of personal information stored in the storage unit 194 may be determined according to the scene in which the information processing system 1 according to this embodiment is applied, or may be determined according to laws and regulations related to the management of personal information.

The authentication processing unit 192 executes a process related to authentication of an individual user to whom the first identification information is assigned, upon receiving a direct or indirect designation of the first identification information, i.e., designation of the first identification information itself or designation of other information capable of uniquely identifying the first identification information (e.g., electronic certificate, etc.). Note that as long as it is possible to authenticate the user to whom the first identification information is assigned based on the direct or indirect designation of the first identification information, the method is not particularly limited.
As a specific example, the authentication processing unit 192 may receive a designation of an electronic certificate issued in association with identification information such as a My Number, and perform authentication of an individual user to whom the electronic certificate (and thus the identification information) is assigned. As another example, the authentication processing unit 192 may receive a designation of identification information such as a My Number and a password registered in advance in association with the identification information, and perform authentication of an individual user to whom the identification information is assigned.
Furthermore, the authentication processing unit 192 may use personal information stored in association with the first identification information to authenticate the individual user to whom the first identification information is assigned. As a specific example, the authentication processing unit 192 may authenticate whether or not the user associated with the first identification information is an adult based on the date of birth and age of the user.
Furthermore, instead of identification information such as My Number, other information (e.g., electronic certificate, etc.) that is issued in association with the identification information may be used as information for uniquely identifying each individual user (in other words, information for managing personal information). In this case, the other information may be used as the first identification information.
The manner in which the authentication processing unit 192 authenticates the individual user may be selectively switched. As a specific example, the manner in which the authentication processing unit 192 authenticates the individual user may be selectively switched depending on the purpose of the authentication, the use of the result of the authentication, etc.

The access control unit 193 controls access to the personal information stored in the storage unit 194. For example, the access control unit 193 may permit a device that has specified the first identification information (such as the personal information holding server 170 described later) to access the personal information of the user, depending on the result of the authentication of the individual user by the authentication processing unit 192 based on the first identification information. As a specific example, when the authentication processing unit 192 has successfully authenticated the individual user based on the first identification information, the access control unit 193 may issue an access token for accessing the personal information of the user to the device that has requested the authentication or the device that has directly or indirectly specified the first identification information. In addition, the access control unit 193 may transmit at least a part of the personal information of the user that has been specified by the device, out of the set of personal information of the user stored in the storage unit 194, to the device that uses the access token to access the personal information.

(Personal information holding server 170)
The following describes an example of the functional configuration of the personal information holding server 170. The personal information holding server 170 includes a communication unit 171, a personal information management unit 172, a determination unit 173, and a storage unit 174.

The communication unit 171 is an interface that enables each unit in the personal information holding server 170 to send and receive information with other devices via the network N1. The communication unit 171 can be realized, for example, by the interface device 102. In the following explanation, when each unit in the personal information holding server 170 sends and receives information with other devices, it is assumed that the information is sent and received via the communication unit 171 unless otherwise specified.

The storage unit 174 is a schematic representation of a storage area for storing various data. For example, the storage unit 174 may store data and programs for each unit in the personal information holding server 170 to execute processing.
Furthermore, the storage unit 174 stores the personal information of the user in association with the second identification information in response to an instruction from the personal information management unit 172 described later. As a specific example, the storage unit 174 may store the personal information of the target user acquired from the personal information management server 190 in association with the second identification information used for providing a service to the user.
In addition, the storage device for realizing the memory unit 174 is not particularly limited, similar to the memory unit 194 described above, and may be built into the personal information holding server 170 or may be provided outside the personal information holding server 170.

The personal information management unit 172 associates the second identification information, which is specified for each user by another device (e.g., the terminal device 210, the front-end server 110, etc.) and is used to provide services to the user, with information about the user (e.g., a user account, etc.) and stores the second identification information in the storage unit 174. In this way, the personal information management unit 172 manages the second identification information by registering the second identification information used to provide services to the user for each user.

The personal information management unit 172 requests the personal information management server 190 to authenticate the target user in response to an instruction from another device (for example, the terminal device 210, the front-end server 110, etc.). At this time, the personal information management unit 172 may present information for accessing the terminal device 210 used by the target user to the personal information management server 190. Based on this request, the personal information management server 190 executes a process related to the authentication of the target user in response to the reading result of the IC card 230 (My Number card, etc.) between the personal information management server 190 and the terminal device 210 of the target user. In addition, as another example, the personal information management unit 172 may receive a designation of first identification information corresponding to the reading result of the IC card 230 from another device and request the personal information management server 190 to authenticate the user to whom the first identification information is assigned. In this way, as long as the process related to the authentication of the target user in response to the reading result of the IC card 230 is executed based on the request from the personal information management unit 172, there is no particular limitation on the flow of the procedure related to the authentication and the process for realizing the procedure. In addition, the type of information (particularly, information used for the authentication) transmitted and received between each device according to the flow of the authentication procedure is not particularly limited as long as it is information that can realize the procedure.
Then, in response to the result of the authentication, the personal information management unit 172 acquires at least a part of the personal information to be used for providing the service to the user from among the series of personal information of the user to whom the first identification information is assigned, which is stored in the personal information management server 190. The type of personal information acquired from the personal information management server 190 may be determined in advance or may be determined in response to an instruction from another device, etc.
The personal information management unit 172 then stores the acquired personal information of the user in the storage unit 174 in association with second identification information that is used to provide a service to the user and that has been registered in advance.

The determination unit 173 determines whether or not the personal information of the user, which is associated with the second identification information for each user and stored in the storage unit 174, satisfies a desired condition.
For example, the determination unit 173 may receive second identification information from another device (e.g., the terminal device 210, the front-end server 110, the reading device 250, etc.) and determine whether or not the personal information associated with the second identification information satisfies a predetermined condition. In this case, the determination unit 173 may notify the other device that requested the determination of information according to the determination result.
The conditions for the above-mentioned judgment may be determined in advance, or may be specified by another device that requests the judgment.

(Terminal device 210)
The following describes an example of the functional configuration of the terminal device 210. The terminal device 210 includes a communication unit 211, a reading unit 212, an input unit 213, an output unit 214, a control unit 215, and a storage unit 216.

The communication unit 211 is an interface that enables each unit in the terminal device 210 to send and receive information with other devices via the network N1. The communication unit 211 can be realized, for example, by the interface device 102. In the following explanation, when each unit in the terminal device 210 sends and receives information with other devices, it is assumed that the information is sent and received via the communication unit 211 unless otherwise specified.

The reading unit 212 reads information stored in a recording medium held by the user (e.g., IC card 230 shown in FIG. 1, etc.) in a manner corresponding to the recording method of the information. As a specific example, the reading unit 212 may read information stored in an IC chip provided in an IC card such as a My Number card by establishing short-range wireless communication, typified by non-contact communication, with the IC chip.

In particular, in the information processing system 1 according to this embodiment, the reading unit 212 reads, from at least the IC card 230 shown in FIG. 1, information stored in the IC card 230 and used to authenticate the individual user to whom the first identification information is assigned. Examples of the information used to authenticate the individual user include the first identification information itself and an electronic certificate issued in association with the first identification information. The reading unit 252 also outputs the information read from the IC card 230 to the control unit 215 described below. This enables the control unit 215 to request authentication of the individual user to a desired server based on the information read from the IC card 230 by the reading unit 212.

The reading unit 212 may also have the function of writing information to the recording medium and updating the information stored in the recording medium.

The storage unit 216 is a schematic representation of a storage area for storing various data. For example, the storage unit 216 may store data and programs for each unit in the terminal device 210 to execute processing.
In addition, the storage device for realizing the memory unit 216 is not particularly limited, similar to the memory unit 194 described above, and may be built into the terminal device 210 or may be provided outside the terminal device 210.

The input unit 213 is a schematic representation of an input interface that allows the control unit 215 (described later) to receive various instructions from a user. The input unit 213 can be realized by the input device 104, for example.
The output unit 214 is an output interface that allows the control unit 215 (described later) to present various information to the user. The output unit 214 can be realized by the output device 105, for example.

The control unit 215 controls various processes related to the realization of the functions provided by the terminal device 210 .
For example, in response to instructions from a user via the input unit 213, the control unit 215 may access a specific server (e.g., the front-end server 110, etc.) via the network N1, and present the UI to the user by having the output unit 214 output a UI for the server to provide various services.
The control unit 215 may also transmit a request for execution of a process for providing a service to the user to a predetermined server, and obtain information according to the execution result of the process as a response to the request. In this case, the control unit 215 may present the information obtained as the response to the user via the output unit 214.

The control unit 215 may also obtain information read from the IC card 230 by the reading unit 212 from the reading unit 212, and use the information for various processes (e.g., authentication of the individual user, etc.). As a specific example, the control unit 215 may transmit a request for authentication of the individual user to the personal information management server 190 based on the information used for authentication of the individual user read from the IC card 230 by the reading unit 212, to a desired server (e.g., personal information holding server 170).

(Reading device 250)
The following describes an example of the functional configuration of the reading device 250. The reading device 250 includes a communication unit 251, a reading unit 252, and a control unit 253. The reading device 250 may also include a storage unit 254.

The communication unit 251 is an interface that enables each unit in the reading device 250 to send and receive information with other devices via the network N1. The communication unit 251 can be realized, for example, by the interface device 102. In the following explanation, when each unit in the reading device 250 sends and receives information with other devices, it is assumed that the information is sent and received via the communication unit 251 unless otherwise specified.

The storage unit 254 is a schematic representation of a storage area for storing various data. For example, the storage unit 254 may store data and programs for each unit in the reading device 250 to execute processing.
In addition, the storage device for realizing the memory unit 254 is not particularly limited, similar to the memory unit 194 described above, and may be built into the reading device 250 or may be provided outside the reading device 250.

The reading unit 252 reads information stored in a recording medium held by the user (e.g., IC card 270 shown in FIG. 1, etc.) in a manner corresponding to the recording method of the information. As a specific example, the reading unit 252 may read information stored in an IC chip provided in an IC card used to provide services such as electronic payment by establishing short-range wireless communication, typically contactless communication, with the IC chip. The reading unit 252 may output the information read from the recording medium to the control unit 253, which will be described later.

In particular, in the information processing system 1 according to this embodiment, the reading unit 252 reads, from at least the IC card 270 shown in FIG. 1, the second identification information (identification information assigned to the IC card 270) held in the IC card 270. The reading unit 252 also outputs the second identification information read from the IC card 270 to the control unit 253 described below. This enables the control unit 253 to execute various processes (for example, processes related to the provision of a service based on the designation of the second identification information) based on the second identification information read by the reading unit 252.

The reading unit 252 may also have the function of writing information to the recording medium and updating the information stored in the recording medium.

The control unit 253 controls various processes related to the realization of the functions provided by the reading device 250 .
For example, the control unit 253 may transmit a request for executing a process for providing a service to the user to a predetermined server, and obtain information corresponding to the execution result of the process as a response to the request. As another example, the control unit 253 itself may execute the actual process for providing the service to the user. At this time, the control unit 253 may apply the information read by the reading unit 252 to the process exemplified above.

For example, the control unit 253 may acquire second identification information read from the IC card 270 by the reading unit 252 from the reading unit 252, and perform processing related to providing a service to the user based on the second identification information.
As a specific example, the control unit 253 may specify the acquired second identification information to a server (e.g., the business server 130, etc.) that executes processing related to electronic payment and request processing related to payment of fees. In this case, the server may execute processing related to electronic payment, such as settling the fee based on the balance managed in association with the second identification information. As another example, the control unit 253 itself may execute substantial processing related to electronic payment, such as settling the fee based on the balance managed in association with the specified second identification information.

The control unit 253 may also specify the second identification information acquired from the reading unit 252 and request the personal information holding server 170 to determine whether the personal information stored in association with the second identification information satisfies a predetermined condition (condition related to the personal information). In this case, the control unit 253 may acquire the result of the determination from the personal information holding server 170 and control the processing related to the provision of the service to the user according to the result of the determination.

As a specific example, the control unit 253 may request the personal information holding server 170 to determine whether or not the address of the user associated with the second identification information is included in a predetermined area. In this case, the control unit 253 may apply a discounted rate when electronically paying for various fees (e.g., transportation fees, etc.) if the address is included in the predetermined area. This makes it possible to realize, for example, an operation in which a discount is applied to the fee for various services provided to residents of a predetermined area (e.g., a prefecture or a city, town, or village).
In addition, the results of the determination on other personal information such as the date of birth, age, and sex, not limited to the address, may be used to control the process related to the provision of services to the user. Note that an example of the control of the process related to the provision of services to the user using the results of the determination on such personal information will be described in detail separately using a specific example as an embodiment.

<Processing>
An example of the processing of the information processing system 1 according to this embodiment will be described below with reference to Figures 4 to 7. For convenience, in the examples shown in Figures 4 to 7, an example of the processing of the information processing system 1 will be described with a focus on a procedure for providing a service that applies a discount to residents of a specific area in a situation where an IC card is used to pay for transportation fees (fares) for trains, buses, and other means of transport.

(Registration procedures for starting to use the service)
First, an example of a process flow relating to a registration procedure for a user to start using a service will be described with reference to FIG.

In S101a, the front-end server 110, which serves as a window for receiving various instructions related to the provision of the service, receives a request for registering an account for using the service, based on an instruction from a user via the terminal device 210. Specifically, the front-end server 110 displays a UI related to account registration on the terminal device 210, and receives an instruction related to account registration from the user via the UI. At this time, the front-end server 110 may present the terms of use of the service, request the user to agree to the terms, and start the process related to account registration when the user agrees to the terms.
When the front-end server 110 receives a request for account registration from a user via the terminal device 210, in S101b, it instructs the account management server 150 to start the procedure for registering the user's account. At this time, the front-end server 110 may notify the account management server 150 of information regarding the terminal device 210 that will be the other party in the procedure for registering the account. This allows the account management server 150 to access the terminal device 210 that will be the other party in the procedure for registering the account, based on the information notified from the front-end server 110.

In S103, the account management server 150, based on an instruction from the front-end server 110, executes processing corresponding to the procedure for registering the account of the target user between the terminal device 210 of the target user and the account management server 150.
As a specific example, the account management server 150 displays a UI on the terminal device 210 presenting an input form for various information related to account registration (e.g., email address, password, etc.), and accepts input of the various information from the user via the UI. At this time, the account management server 150 may send a confirmation code to the email address from which the input from the user was accepted, in order to confirm that the email address belongs to the user himself/herself. In this case, the account management server 150 may confirm that the email address belongs to the user himself/herself when the confirmation code accepted from the user via the UI displayed on the terminal device 210 matches the confirmation code sent to the previously specified email address.
The account management server 150 then generates an account for the user based on various information related to the account registration input by the user.

When the creation of the account for the target user is completed, the account management server 150 issues an access token corresponding to the user's account to the front-end server 110 in S105.
In S107, the front-end server 110 executes processing related to the login of the target user based on the access token issued by the account management server 150. Note that, for the subsequent processing, the login state of the user whose account was registered in the processing of S103 is maintained, and the subsequent processing is executed for that account.

In S109, the front-end server 110 checks with the target user whether or not to register an IC card related to the use of the service via the terminal device 210. In the example shown in Fig. 7, it is assumed that the user selects to register an IC card.
In S111a, the front-end server 110 receives a request from the user via the terminal device 210 regarding registration of an IC card for use of the service.
When the front-end server 110 receives a request for registering an IC card related to the use of a service from a user via the terminal device 210, in S111b, the front-end server 110 instructs the personal information holding server 170 to start a procedure for registering the IC card. At this time, the front-end server 110 may notify the personal information holding server 170 of information on the terminal device 210 that is the other party in the procedure for registering the IC card. This allows the personal information holding server 170 to access the terminal device 210 that is the other party in the procedure for registering the IC card based on the information notified from the front-end server 110. In the following, for convenience, each process will be described assuming that the IC card 270 (IC card 270 shown in FIG. 1) used for electronic payment, such as so-called Suica, is the target of registration.

In S113, the personal information holding server 170, based on an instruction from the front-end server 110, executes processing corresponding to the procedure for registering the IC card 270 between the terminal device 210 of the target user.
As a specific example, the personal information holding server 170 may display a UI on the terminal device 210 presenting an input form for second identification information assigned to the IC card 270 to be registered, and may accept input of the second identification information from the user via the UI. As another example, the personal information holding server 170 may instruct the user via the terminal device 210 to read the IC card 270 to be registered using the terminal device 210. In this case, the personal information holding server 170 may acquire the second identification information held in the IC card 270 from the terminal device 210 as a result of the terminal device 210 reading the IC card 270.
Then, the personal information holding server 170 stores the second identification information acquired from the terminal device 210 in a predetermined storage area (for example, the storage unit 174) in association with the account of the target user. As a result, the IC card 270 to which the second identification information is assigned is registered as the IC card to be used by the target user to use the service.

When the registration of the IC card 270 is completed, in S115, the personal information holding server 170 notifies the target user via the terminal device 210 that the registration of the IC card 270 has been completed.

Above, with reference to Figure 4, we have explained an example of the process flow for the registration procedure for a user to start using the service.

(Procedures for use of personal information)
Next, an example of a process flow relating to a procedure for enabling a user to use a service corresponding to his/her personal information by permitting the use of the user's personal information for the provision of the service when the user receives the provision of the service will be described with reference to Fig. 5. In the example shown in Fig. 5, at least a part of the personal information managed by a personal information management server 190 related to a public institution is used for the provision of the service on the premise of authentication of the user using an IC card 230 such as a so-called My Number.

In S151, the personal information holding server 170 accepts an application from the target user via the terminal device 210 for the use of the user's personal information in providing a service to the user. Note that in the example shown in FIG. 5, the personal information holding server 170 accepts the application directly from the terminal device 210, but this does not necessarily limit the flow of processing related to the acceptance of the application. As a specific example, the personal information holding server 170 may accept the application from the terminal device 210 via the front-end server 110.

In S152, the personal information holding server 170 requests the personal information management server 190, which manages the personal information of the user, to authenticate the individual user who has applied to use the personal information for the provision of services to the user. At this time, the personal information holding server 170 may notify the personal information management server 190 of information regarding the terminal device 210 that will be the other party in the authentication procedure. This allows the personal information management server 190 to access the terminal device 210 that will be the other party in the authentication procedure for the individual user, based on the information notified from the personal information holding server 170.

When the personal information management server 190 receives a request for authentication of an individual user from the personal information holding server 170, it executes processing corresponding to the procedure for authenticating the individual user between the terminal device 210 of the target user. Note that in the example shown in FIG. 5, an example of the flow of processing related to the procedure for authentication will be described, focusing on the case where the individual user is authenticated using electronic authentication information (electronic information used for authentication such as a so-called electronic certificate) held in the IC card 230.

In S155, the personal information management server 190 accepts input of a password that has been preset for the electronic certificate assigned to the user from the user to be authenticated via the user's terminal device 210. As a specific example, the personal information management server 190 may display a UI on the terminal device 210 that presents an input form for the password, and accept input of the password from the user via the UI.

If the personal information management server 190 confirms that the password entered in S155 matches the password set in the target electronic certificate, it instructs the terminal device 210 to send electronic authentication information in S157.

When the terminal device 210 receives an instruction to transmit electronic authentication information from the personal information management server 190, in S159, it reads the electronic authentication information (e.g., an electronic certificate) stored in the IC card 230. Specifically, the terminal device 210 notifies the user of predetermined notification information to prompt the user to perform an operation related to reading the IC card 230. Then, in response to an operation from the user, the terminal device 210 reads the electronic authentication information stored in the IC card 230 from the IC card 230 placed within a range where information is read by the reading unit 212.
When the terminal device 210 reads the electronic authentication information from the IC card 230, it transmits the read electronic authentication information to the personal information management server 190 in S161.

When the personal information management server 190 receives the electronic authentication information from the terminal device 210, in S163, it performs authentication of the target user (i.e., the user to whom the electronic authentication information was issued) based on the electronic authentication information. Note that a publicly known method can be used as a method for authenticating an individual using electronic authentication information such as a so-called electronic certificate, so a detailed explanation is omitted.

When the personal information management server 190 completes authentication of the individual user, in S165 it issues an access token to the personal information holding server 170 that requested the authentication, for accessing the personal information of the user.

In S167, the personal information holding server 170 uses the access token issued in S165 to obtain from the personal information management server 190 at least a portion of the personal information to be used in providing the service from the series of personal information managed by the personal information management server 190.
In S169, the personal information holding server 170 stores the personal information acquired in S167 in association with the second identification information stored in association with the target user's account.
In addition, if the user's personal information is used when a service is provided to the user, the personal information stored in the personal information holding server 170 in S169 will be used to provide the service.

Above, with reference to Figure 5, we have explained an example of the process flow for the procedure for allowing a user to use a service according to their personal information when receiving the service by permitting the use of their personal information in the provision of the service.

(Service provision example 1: Provision of services associated with applications via a network)
Next, an example of a process flow relating to the provision of a service using a user's personal information will be described with reference to Fig. 6, focusing in particular on a case where a service is provided to a user in response to an application received via a network. Fig. 6 shows an example of a process flow in a case where a local government, such as a prefecture or a city, ward, town, or village, issues commuter passes for use in public transportation such as buses and trains to residents of the local government in response to an application received via a network.
In the example shown in Fig. 6, it is assumed that the personal information holding server 170 performs various management related to the issuance of commuter passes to each user. Also, in the example shown in Fig. 6, it is assumed that the user making the application has previously logged in to the system that provides the service related to the issuance of commuter passes and that the logged-in state is maintained.

In S201, the front-end server 110 accepts an application for use of a service (i.e., an application for issuance of a commuter pass) from a target user via the terminal device 210.
In S203, the front-end server 110 requests the personal information holding server 170 to determine whether or not the user whose application was accepted in S101 is a resident of a specified area (in other words, to determine whether or not the user's address is included in the specified area).

In S205, in response to a request from the front-end server 110, the personal information holding server 170 determines whether the user is a resident of a specified area based on personal information (address) associated with the second identification information corresponding to the target user's account.
In S207, the personal information holding server 170 notifies the front-end server 110 of the result of the determination in S205 (i.e., the result of the determination as to whether the target user is a resident of the specified area or not). For the sake of convenience, in the following explanation, it is assumed that the target user is determined to be a resident of the specified area.

In S209, the front-end server 110 executes a procedure for registering the target user as a user of the service (in other words, a procedure for issuing a commuter pass to the user) based on the determination result notified in S207. As a specific example, the front-end server 110 may request the personal information holding server 170 to register the target user as a user of a commuter pass issued to local residents.

In S211, the personal information holding server 170 executes a process for registering the target user as a user of the service (in other words, a process related to issuing a commuter pass to the user) based on the request from the front-end server 110 in S209. As a specific example, the personal information holding server 170 may register the user as a user of the commuter pass by associating various information related to the use of the commuter pass (e.g., the start date of use, the expiration date, etc.) with the second identification information corresponding to the user's account.

In S213, in response to the request from the front-end server 110 in S209, the personal information holding server 170 notifies the target user that he/she has been registered as a user of the service (in other words, that the issuance of the commuter pass has been completed).
Furthermore, when the target user becomes able to use the service, the personal information holding server 170 may notify the terminal device 210 of the target user of the start of use of the service in S215. As a specific example, when a commuter pass becomes valid upon the arrival of the use start date of the commuter pass, the personal information holding server 170 may notify the terminal device 210 of the target user of the start of use of the commuter pass.

As described above, in the information processing system 1 according to the present embodiment, personal information used to provide a service to a user is stored in the personal information holding server 170, and the personal information stored in the personal information holding server 170 is used when providing a service to the user. That is, when using a service, the user does not necessarily need to hold the IC card 230 used for personal authentication of the user to the personal information management server 190, such as a My Number card. In particular, for media used for authentication based on personal information protected by high security, such as a My Number card, there is a high risk of loss, and the procedures required for reissuance are complicated, which tends to be a burden on the user. In contrast, according to the information processing system 1 according to the present embodiment, as described above, the user does not necessarily need to hold the IC card 230 when using a service, so that it is expected to have the effect of preventing the risk of loss of the IC card 230 and the burden on the user.
In addition, the personal information stored in the personal information holding server 170 can be limited to information used for providing services to the user, and the use of the information can be limited to the determination process within the personal information holding server 170. This configuration is expected to be effective in preventing the risk of a malicious third party using the user's personal information illegally.

Above, with reference to Figure 6, we have explained an example of the process flow for providing a service using a user's personal information, focusing in particular on the case where a service is provided to a user upon receipt of an application via a network.

(Service provision example 2: provision of services associated with reading an IC card)
Next, referring to Fig. 7, another example of the process flow relating to the provision of a service using a user's personal information will be described, focusing in particular on the case where a service is provided to a user in response to reading of IC card 270. Fig. 7 shows an example of the process flow when a discount is applied to the fare for use of a public transport facility such as a bus or train, for residents of a specified area, when the fare is electronically paid using IC card 270.

In S251, the reading device 250 detects the IC card 270 located within a predetermined detection range (the detection range of the reading unit 252), and acquires the second identification information stored in the IC card 270. As a specific example, the reading device 250 may acquire the second identification information stored in the IC chip of the IC card 270 located within the detection range by establishing short-range wireless communication, typically non-contact communication, with the IC chip.
In S253, the reading device 250 notifies the personal information holding server 170 of the second identification information read from the IC card 270, and requests the personal information holding server 170 to determine whether the user who owns the IC card 270 is a resident of a specified area.

In S255, in response to a request from the reading device 250, the personal information holding server 170 determines whether the target user is a resident of a specified area based on the personal information (address) associated with the second identification information also notified.
In S257, the personal information holding server 170 notifies the result of the determination in S255 (i.e., the result of the determination as to whether the target user is a resident of the specified area) to the reading device 250. For the sake of convenience, in the following description, it is assumed that the target user is determined to be a resident of the specified area.

In S259, the reading device 250 again recognizes the IC card 270. At this time, if the reading device 250 does not detect the IC card 270, the reading device 250 may notify the user in a predetermined output mode of notification information that prompts the user to operate so as to hold the IC card 270 in a predetermined detection range.
When the reading device 250 recognizes the IC card 270 in S259, in S261, it reads the information related to electronic payment stored in the IC card 270, and executes processing related to the payment of the fee based on the determination result notified in S257. As a specific example, when the reading device 250 recognizes that the target user is a resident of a specified area based on the determination result notified in S257, it may apply a discount to the fee to be paid.
The content of the process related to the payment of the fee is not particularly limited. As a specific example, the reading device 250 may request a process related to the payment of the fee to a predetermined business server 130. As another example, the reading device 250 itself may perform substantial processing related to the payment of the fee (for example, updating the balance of electronic money charged to the IC card 270, etc.).

As described above, in the example shown in FIG. 7, the reading device 250 recognizes the IC card 270 (in other words, establishes contactless communication with the IC chip) at two occasions shown as S251 and S259. The reading device 250 then uses the information read from the IC card 270 at each of S251 and S259 for the procedure to be executed immediately afterwards (the process related to personal information determination shown as S253 to S257, and the process related to payment shown as S261). With this configuration, the reading device 250 can also limit the information read from the IC card 270 upon recognition of the IC card 270 to the information to be used for the procedure to be executed immediately after the recognition.

As described above, the reading device 250 is not particularly limited in the manner of recognizing the IC card 270, so long as it is capable of recognizing the IC card 270 immediately before each procedure that is executed sequentially and reading information to be used in the procedure from the IC card 270.
As a specific example, for each procedure executed by the reading device 250, a so-called touch operation may be performed in which the IC card 270 is held over the reading unit 252 (e.g., a sensor surface for contactless communication) that recognizes the IC card 270 by the reading device 250. In this case, each time the reading device 250 recognizes the IC card 270, notification information that prompts the user to perform a touch operation of the IC card 270 over the reading unit 252 may be notified in a predetermined manner.
As another example, with IC card 270 held in close proximity to reading unit 252, reading device 250 may recognize IC card 270 (in other words, establish non-contact communication with IC card 270) each time a procedure is executed. In this case, notification information may be issued in a predetermined manner to prompt the user to maintain the state in which IC card 270 is held in close proximity to reading unit 252 until execution of a series of procedures by reading device 250 is completed.

In the example shown in Fig. 7, an IC card 270 used for electronic payment or the like is used when the user receives the provision of a service. That is, in the example shown in Fig. 7, similar to the example described with reference to Fig. 6, the user does not necessarily need to hold an IC card 230 such as a My Number card used for personal authentication of the user with respect to the personal information management server 190 when using a service. Therefore, similar to the example shown in Fig. 6, it is expected to have the effect of preventing the risk associated with the loss of the IC card 230 and the burden on the user.
7, the personal information stored in the personal information holding server 170 can be limited to information used for providing services to the user, and the use of the information can be limited to the determination process within the personal information holding server 170. In other words, such a configuration is expected to have the effect of preventing the occurrence of the risk of a malicious third party using the user's personal information illegally.

Above, with reference to Figure 7, another example of the process flow for providing a service using a user's personal information has been described, focusing in particular on the case where a service is provided to a user upon reading the IC card 270.

<Example>
As an example, a specific example of a service that can be realized by applying the information processing system 1 according to this embodiment will be described.

(Applying rate discounts to local residents)
4 to 7, the information processing system 1 according to this embodiment can provide additional services, such as discounts on the usage fees of various services, to residents living in a specific area. In this case, as described above, information on the address of the target user is stored in the personal information holding server 170 as the personal information of the user, and the information on the address is used when the service is provided.

(Restrictions on the sale of products intended for adults to minors)
According to the information processing system 1 of this embodiment, it is possible to prevent the occurrence of a situation where products such as alcohol and tobacco that are sold to adults are sold to minors. In this case, information on the age of the target user (e.g., information that can identify the age such as date of birth) is stored in the personal information holding server 170 as personal information of the target user, and based on the information on the age, it is determined whether the target user's age is below a threshold value (e.g., whether the target user is a minor) when the service is provided. Then, when it is determined that the target user's age is below the threshold value, control that restricts processing related to the sale of a specific product to the user (e.g., issuing a warning or suppressing payment processing) may be applied.
In addition, when providing services, not limited to goods, targeted at adults, it is also possible to prevent the provision of such services to minors by using a mechanism similar to that described above.
In addition, services may be provided according to the age of the user. As a specific example, it is possible to provide additional services such as discounts on the usage fees of various services to elderly people. In this case, too, it is only necessary to determine whether or not the target user satisfies the conditions based on information on age as personal information of the target user, thereby controlling whether or not to provide the additional services described above to the user.

(Provision of gender-appropriate services)
As an example, a ladies' day or a women-only car may be used, and services may be provided according to the gender of the user. According to the information processing system 1 of this embodiment, it is possible to provide such services according to the gender of the user in a more suitable manner. In this case, information on the gender of the target user is stored in the personal information holding server 170 as personal information of the target user, and it is possible to determine whether the target user is female (or male) or not based on the information on the gender when the service is provided. This makes it possible to realize, for example, restriction of entry to some sections, restriction of the sale of a specific product or application of a discount on the price of the sale of the product, and restriction of the provision of a specific service or application of a discount on the price of the provision of the service, etc., according to the gender of the target user.

(supplement)
Of course, the above is merely an example, and does not limit the application of the information processing system 1 according to the present embodiment. In other words, the information processing system 1 according to the present embodiment can be applied under circumstances in which various services (including sales of products, etc.) are provided according to the attributes of the user by using the personal information of the user. Of course, the type of personal information to be used is not particularly limited as long as it indicates the attributes of the target user. As a specific example, even personal information set as information about the individual user according to the situation at the time, such as whether the user is a student or not, the user's occupation, etc., can be used by the information processing system 1 according to the present embodiment to realize various controls.

<Conclusion>
As described above, the information processing system according to the present embodiment includes a first information processing device that stores personal information used to provide a service to a user, and a second information processing device that controls processing related to the provision of the service to the user according to the personal information stored in the first information processing device. The first information processing device includes a first acquisition unit, a storage unit, and a determination unit. The first acquisition unit acquires at least a part of personal information from a series of personal information related to an individual to whom a first identification information is assigned. The storage unit stores the acquired personal information in association with a second identification information related to the provision of a predetermined service. The determination unit receives a designation of a condition related to the personal information and determines whether or not the personal information associated with the second identification information satisfies the condition. The second information processing device also includes a second acquisition unit and a control unit. The second acquisition unit acquires a result of the determination. The control unit controls processing related to the provision of the service according to the personal information based on the acquired result of the determination.

With the above-described configuration, by using the user's personal information when providing services to the user, it is possible to provide services to the user in a more suitable manner according to the user's attributes, such as providing additional services to residents of a specific area.
In particular, the information processing system according to this embodiment enables a user to receive services according to his/her attributes without going through cumbersome procedures such as inputting his/her personal information.
Furthermore, the information processing system according to the present embodiment makes it possible to use, for example, highly reliable personal information managed by a public institution or the like to determine the attributes of a user when providing a service to the user. Therefore, the information processing system according to the present embodiment makes it possible to provide services that require higher reliability.
Furthermore, according to the information processing system of this embodiment, when a service using the user's personal information is provided to the user, the user does not need to hold a medium used for authentication based on the personal information protected by high security, such as a My Number card, etc. Therefore, according to the information processing system of this embodiment, it is expected to be effective in preventing the risk associated with the loss of the medium and the burden on the user.
As described above, according to the information processing system of this embodiment, it is possible to realize more suitable utilization of a user's personal information for providing services to the user.

Note that the above description has focused mainly on the case where a so-called IC card is used when providing services to a user, but this does not necessarily limit the application of the information processing system 1 according to this embodiment. As a specific example, a so-called magnetic stripe card or the like may be used, and the identification information assigned to the magnetic stripe card may be used as second identification information that is associated with and stored with personal information.

In addition, the information used as the second identification information is not limited to identification information assigned to a medium used to provide a service to a user, such as an IC card. In other words, any identification information that can uniquely identify a user when a service is provided to the user can be used as the second identification information. As a specific example, identification information (e.g., an ID, etc.) used to identify an account created to provide a specific service to a user may be used as the above-mentioned second identification information.

In the above, the personal information management server 190 is mainly assumed to be a server related to an institution that manages personal information of the user in association with identification information individually assigned to each user, such as a My Number, but this does not necessarily limit the application of the information processing system 1 according to this embodiment. In other words, as long as the server manages pre-registered personal information and allows access to at least a portion of the personal information based on a predetermined authentication, the source of the personal information stored in the personal information holding server 170 for use in providing services to the user is not particularly limited. As a specific example, personal information managed in association with a medium such as a credit card or a driver's license may be stored in the personal information holding server 170 based on the authentication of the individual user who used the medium, and used to provide services to the user. In other words, in this case, the information used as the first identification information may also be appropriately changed depending on the entity that manages the personal information used to provide services to the user.

Furthermore, the entity that stores the personal information used to provide services to the user is not necessarily limited to a so-called server such as the personal information holding server 170 described above. As a specific example, a terminal device 210 such as a smartphone used by a user may hold the personal information of the user used to provide services to the user by storing it in a specified storage area. As another example, the personal information of the user used to provide services to the user may be stored in a recording medium such as an IC card used by the user to receive services.

In the above-described embodiment, the personal information holding server 170 judges whether the personal information of the user satisfies the desired conditions based on the personal information held by storing it in advance in the storage unit 174. On the other hand, if the personal information holding server 170 is capable of making such a judgment, the personal information holding server 170 does not necessarily need to hold the personal information of the target user. As a specific example, when the personal information holding server 170 judges whether the personal information of the target user satisfies the desired conditions, the personal information holding server 170 may access the personal information management server 190 each time to view the personal information of the target user and judge whether the personal information satisfies the conditions. In this case, the personal information holding server 170 may hold an access token acquired according to the authentication result of the target user as information for accessing the personal information management server 190. In this case, the personal information holding server 170 may execute a procedure related to the authentication of the target user again when it is necessary to reissue the access token.

1 Information processing system, 110 Front-end server, 130 Business server, 150 Account management server, 170 Personal information storage server, 171 Communication unit, 172 Personal information management unit, 173 Judgment unit, 174 Storage unit, 190 Personal information management server, 191 Communication unit, 192 Authentication processing unit, 193 Access control unit, 194 Storage unit, 210 Terminal device, 211 Communication unit, 212 Reading unit, 213 Input unit, 214 Output unit, 215 Control unit, 216 Storage unit, 250 Reading device, 251 Communication unit, 252 Reading unit, 253 Control unit, 254 Storage unit

Claims (17)

an acquisition unit that acquires at least a portion of a set of personal information related to an individual to whom a first identification information is assigned, the personal information being used to provide a predetermined service;
a storage unit that stores the acquired personal information in advance in association with second identification information related to the provision of the service ;
a determination unit that, when providing the service, receives a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition;
Equipped with
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
the determination unit, when a first communication is established between the second recording medium and the reading device, receives a condition related to the personal information from the reading device and determines whether the personal information associated with the second identification information satisfies the condition;
when a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
Information processing device. The acquisition unit is
requesting a server that manages a series of personal information relating to the individual to authenticate the individual based on the first identification information;
obtaining at least a part of the set of personal information from the server according to a result of the authentication;
The information processing device according to claim 1 . The server is a server related to a public institution involved in managing a series of personal information relating to the individual.
The information processing device according to claim 2 . The first identification information is an identification information issued by a public institution involved in managing a series of personal information relating to the individual.
4. The information processing device according to claim 1. the acquiring unit acquires at least a part of the personal information from a series of personal information related to the individual to whom the first identification information is assigned, in response to a result of reading the first recording medium by a terminal device connected via a network;
The information processing device according to any one of claims 1 to 4 . an acquisition unit that acquires, when providing a predetermined service, a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned, the personal information being stored in advance in association with a second identification information relating to the provision of the service, satisfies a predetermined condition relating to the provision of the service;
A control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Equipped with
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
the acquiring unit acquires a result of the determination based on the second identification information when a first communication is established between the second recording medium and the reading device;
when a second communication is established between the second recording medium and the reading device after the first communication is established, the control unit controls a process related to the provision of the service according to the personal information based on the acquired result of the determination, and limits information read from the second recording medium when providing the service to information used for providing the service.
Information processing device. the acquisition unit, when the first communication is established, accesses a first server and acquires a result of the determination from the first server;
When the second communication is established, the control unit accesses a second server different from the first server, and requests the second server to control a process related to the provision of the service corresponding to the personal information based on the acquired result of the determination.
The information processing device according to claim 6 . The personal information stored in association with the second identification information includes information regarding at least one of the address of the individual, the age of the individual, and the sex of the individual;
8. The information processing device according to claim 6 or 7 . The personal information stored in association with the second identification information includes at least information regarding the address of the individual;
The acquisition unit acquires a result of a determination as to whether or not the address of the individual is included in a predetermined area,
The control unit performs control so that a service according to the address of the individual is applied when the address of the individual is included in the predetermined area.
The information processing device according to any one of claims 6 to 8 . The personal information stored in association with the second identification information includes at least information regarding the age of the individual;
The acquisition unit acquires a result of a determination as to whether or not the age of the individual is less than a threshold value,
The control unit controls so that, when the age of the individual is less than a threshold value, provision of services according to the age of the individual is restricted.
The information processing device according to any one of claims 6 to 9. A first information processing device and a second information processing device connected via a network,
The first information processing device,
a first acquisition unit that acquires at least a portion of a set of personal information related to an individual to whom first identification information is assigned, the personal information being used to provide a predetermined service ;
a storage unit that stores the acquired personal information in advance in association with second identification information related to the provision of the service ;
a determination unit that, when providing the service, receives a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition;
Equipped with
The second information processing device,
A second acquisition unit that acquires a result of the determination when the service is provided;
A control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Equipped with
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
the second acquisition unit acquires a result of the determination based on the second identification information when a first communication is established between the second recording medium and the reading device;
when a second communication is established between the second recording medium and the reading device after the first communication is established, the control unit controls a process related to the provision of the service according to the personal information based on the acquired result of the determination, and limits information read from the second recording medium when providing the service to information used for providing the service.
Information processing system. The computer
obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service;
storing the acquired personal information in advance in association with second identification information related to the provision of the service;
When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition;
Including,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a condition related to the personal information is specified by the reading device, and a determination is made as to whether or not the personal information associated with the second identification information satisfies the condition;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
Information processing methods. The computer
When providing a predetermined service, acquiring a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned and which is stored in advance in association with a second identification information relating to the provision of the service satisfies a predetermined condition relating to the provision of the service;
Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Including,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
Information processing methods. A system including a first information processing device and a second information processing device connected via a network,
The first information processing device acquires at least a part of personal information used for providing a predetermined service from a set of personal information related to an individual to whom first identification information is assigned;
The first information processing device pre-stores the acquired personal information in association with second identification information related to the provision of a predetermined service;
The first information processing device, when providing the service, receives a designation of a condition related to the personal information and determines whether or not the personal information associated with the second identification information satisfies the condition;
The second information processing device acquires a result of the determination when providing the service; and
The second information processing device controls a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Including,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
Information processing methods. On the computer,
obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service;
storing the acquired personal information in advance in association with second identification information related to the provision of the service ;
When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition;
Run the command,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a condition related to the personal information is specified by the reading device, and a determination is made as to whether or not the personal information associated with the second identification information satisfies the condition;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service according to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
program. On the computer,
When providing a predetermined service, acquiring a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned and which is stored in advance in association with a second identification information relating to the provision of the service satisfies a predetermined condition relating to the provision of the service;
Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Run the command ,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
program. A system including a first information processing device and a second information processing device connected via a network,
The first information processing device,
obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service;
storing the acquired personal information in advance in association with second identification information related to the provision of a predetermined service;
When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition;
Run the command,
The second information processing device,
acquiring a result of the determination when providing the service;
Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination;
Run the command ,
the first identification information is information associated with a first recording medium,
the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service;
the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication,
When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information;
When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service.
program.

Images