JP7687095B2 - Information management server, information management method, and program - Google Patents

Description

The present invention relates to an information management server, an information management method, and a program.

When a user performs various procedures, it is necessary to confirm that the personal information of the user used in the procedure is correct. Patent Document 1 discloses a technology that shares personal information of users and reduces the burden on users when registering for each service.

JP 2020-170369 A

However, in various procedures, there are cases where not only the user's information but also that of their family members is required. For example, in procedures related to finance, dementia, inheritance, etc., some systems are in place to enable contact with pre-registered family members of users in the event that the user cannot be contacted due to a disaster or relocation. There are established methods, including online methods, for confirming that information about users is correct, but it is difficult to say that there is an established method for confirming that information about the user's family members is correct. For this reason, there has been a need to establish a method for determining whether information about a user's family members is correct.

The present invention was made in consideration of these circumstances, and its purpose is to provide an information management server, information management method, and program that can determine whether personal information about a user's family is correct.

In order to solve the above-mentioned problems, the information management server of the present invention includes an acquisition unit that acquires family information about a user's family notified by a user who uses a service to check the user's status via the family, the family information including the mobile phone number , name, and address of the family member; a control unit that sends a message including URL (Uniform Resource Locator) information indicating a specific site linked to the family information to the mobile phone number of the family member included in the family information; and a determination unit that is configured to be able to notify the specific site of whether or not the family member agrees to being registered as the user's family member, and when the specific site is notified of the agreement from the family member's mobile phone , determines whether or not the family information is correct by comparing the name and address of the family member recorded on a certification medium of the family member with the name and address included in the family information, wherein the certification medium is associated with personal identification information that uniquely identifies an individual, is a certification medium that certifies the identity of the individual, and is a recording medium that records at least the name and address of the individual.

In addition, in the above-mentioned information management server of the present invention, the acquisition unit acquires a password designated by the user, and the control unit sets the password acquired by the acquisition unit to the specific site.

In the information management server of the present invention, the acquisition unit acquires information indicating whether the user and the family live together, and when the acquisition unit acquires information indicating that the user and the family live together, the determination unit determines whether the pre-stored address of the user matches the address of the family obtained from the family's certification medium.

In addition, in order to solve the above-mentioned problems, the present invention provides an information management method in which an acquisition unit acquires family information about a user's family notified by a user who uses a service to check the user's status via the family, the family information including a mobile phone number , name, and address of the family member, a control unit sends a message including URL (Uniform Resource Locator) information indicating a specific site linked to the family information to the mobile phone number of the family member included in the family information, and a judgment unit is configured to be able to notify the specific site of whether or not the family member agrees to being registered as the user's family member, and when the specific site is notified of the agreement from the family member's mobile phone , the information management method judges whether or not the family information is correct by comparing the name and address of the family member recorded on a certification medium of the family member with the name and address included in the family information, the certification medium is associated with personal identification information that uniquely identifies an individual, is a certification medium that certifies the identity of the individual, and is a recording medium that records at least the name and address of the individual.

In order to solve the above-mentioned problems, the present invention is a program for operating a computer as the information management server described above, and for causing the computer to function as each part of the information management server.

The present invention makes it possible to determine whether personal information about a user's family is correct.

A block diagram showing an example of the configuration of a procedural information linkage system 1 to which an information management server 20 relating to an embodiment is applied. A sequence diagram showing the flow of processing performed by the procedural information linkage system 1 according to the embodiment. A sequence diagram showing the flow of processing performed by the procedural information linkage system 1 according to the embodiment. FIG. 2 is a block diagram showing an example of the configuration of an information management server 20 according to the embodiment. FIG. 2 is a diagram showing an example of the configuration of user information 220 according to the embodiment. FIG. 2 is a diagram showing an example of the configuration of family information 221 according to the embodiment. FIG. 2 is a diagram showing an example of the configuration of determination information 222 according to the embodiment.

One embodiment of the present invention will be described below with reference to the drawings.

<Configuration of procedural information linkage system 1>
The procedural information linkage system 1 is a system that provides procedural services. In the procedural services, various procedures requested by each business are carried out in response to a user's request. For the various procedures, there is a system that allows personal information about the user's family to be registered with the user's consent. Personal information about family members is, for example, information such as the family members' names, addresses, and mobile phone numbers. In the following explanation, personal information about family members is simply referred to as "family information."

For example, even if a user moves and it becomes difficult to contact the user, the registered family members can check the user's situation by checking the user's status. In the procedural information linkage system 1, users use this system to carry out the procedure of registering family information.

The following describes an example in which a procedural service is provided via a message application (hereafter referred to as a message app) that uses RCS (Rich Communication Services). A message app is an application program that sends and receives messages, including text and images, addressed to a mobile phone number.

Figure 1 is a block diagram showing an example configuration of a procedural information linkage system 1 to which an information management server 20 according to an embodiment is applied. The procedural information linkage system 1 includes, for example, a first user terminal 10, a second user terminal 11, an information management server 20, an authentication server 30, and an operator server 40. These components in the procedural information linkage system 1 (the first user terminal 10, the second user terminal 11, the information management server 20, the authentication server 30, and the operator server 40) are connected to be able to communicate with each other via a communication network NW.

The first user terminal 10 is a computer with communication capabilities, such as a smartphone or a mobile phone. The first user terminal 10 is operated by a user. It is assumed that a message app is installed on the first user terminal 10 and that a procedure service using the message app is available.

The second user terminal 11 is a computer with communication functions, such as a smartphone or a mobile phone. The second user terminal 11 is operated by a family member. Here, family members refer to users designated as family members by the user. The second user terminal 11 is required to be capable of at least sending notifications addressed to a mobile phone number, for example, SMS (Short Message Service). In other words, the second user terminal 11 does not necessarily need to have a messaging app installed.

The information management server 20 is, for example, a computer such as a server, a cloud server, or a PC. The information management server 20 provides a procedure service. The information management server 20 receives procedure applications from users registered in the procedure service. In response to the application from the user, the information management server 20 transmits information necessary for the procedure to the business server 40. As a result, the information management server 20 executes the procedure requested by the user.

The authentication server 30 is a computer such as a server, a cloud server, or a PC. The authentication server 30 performs processes related to public personal authentication using My Number cards. Specifically, the authentication server 30 manages the validity of the electronic certificate embedded in the My Number card of the user or a family member. For example, in response to a request from the information management server 20, the authentication server 30 determines whether the electronic certificate is valid based on the expiration date indicated in the electronic certificate, and notifies the information management server 20 of the determination result.

The business operator server 40 is a computer such as a server, a cloud server, or a PC. The business operator server 40 provides various services operated by business operators. The business operator server 40 performs procedures related to services that utilize, for example, communications, water, electricity, gas, finance, and insurance. With the user's consent, the business operator server 40 registers information such as the names and contact details of the user's family members in advance, and provides a service that allows the user's situation to be confirmed through the family members, for example. The business operator server 40 acquires information such as the names and contact details of the user's family members via the information management server 20, and performs procedures to register information such as the names and contact details of the family members using the acquired information.

<Processing flow>
Here, a description will be given of a process flow for registering family information of a user by the procedural information linkage system 1. Fig. 2 and Fig. 3 are sequence diagrams showing a process flow performed by the procedural information linkage system 1 of the embodiment.

Step S0: The procedural information linkage system 1 is premised on the fact that the mobile phone number of the first user terminal 10 has been identified. Specifically, it is premised on the fact that the user will be using the procedural service being registered, and that the user's name, address, the mobile phone number of the first user terminal 10 as contact information, etc. have been stored in advance in the information management server 20.

Step S1: The first user terminal 10 logs in to the procedure service. For example, the first user terminal 10 logs in to the procedure service by notifying the information management server 20 of the login ID and password information entered into the login screen of the procedure service by the user's input operation.

Step S2: The first user terminal 10 transmits the family information to the information management server 20. For example, when login to the procedure service is successful, an operation screen of the procedure service is displayed on the first user terminal 10. An input field for inputting family information, a send button for transmitting the family information, and the like are displayed on the operation screen. The user inputs the family information by touching the screen of the first user terminal 10. As a result, the first user terminal 10 displays the information input by the user in the input field as family information. The user visually checks the family information displayed in the input field, and if the displayed content is to be transmitted as family information, performs an operation of pressing the send button. As a result, the first user terminal 10 transmits the content displayed in the input field to the information management server 20 as family information.

Step S3: The information management server 20 transmits information to the first user terminal 10 to display an authentication screen. The authentication screen here is a screen for acquiring information embedded in the My Number card. A signature electronic certificate (hereinafter referred to as electronic certificate) is embedded in the My Number card. The electronic certificate indicates four basic pieces of information about the user. The four basic pieces of information are basic personal information that are used to identify or identify an individual, and indicate the name, address, date of birth, and gender.

Step S4: The first user terminal 10 displays an authentication screen, acquires information entered by inputting information on the displayed screen, and transmits the acquired information to the information management server 20. Specifically, the first user terminal 10 displays a My Number card reading screen. The reading screen displays a message such as, for example, "Please enter your electronic certificate password." The user operates the touch panel of the first user terminal 10 according to the display on the reading screen to enter the password. As a result, the first user terminal 10 acquires the password.

In addition, a message such as "Please touch the card" is displayed on the reading screen. The user performs a touch operation by bringing the card face of the My Number card close to the reading portion of the first user terminal 10 according to the display on the reading screen. This allows communication between the My Number card and the first user terminal 10. For example, when the first user terminal 10 notifies the My Number card of the correct password, the My Number card transmits information (called authentication information) including the electronic certificate embedded in the My Number card to the first user terminal 10. As a result, the first user terminal 10 obtains the authentication information.

The first user terminal 10 notifies the information management server 20 of the input authentication information. The information management server 20 notifies the authentication server 30 of the authentication information received from the first user terminal 10. Note that the authentication information may be notified directly to the authentication server 30 without going through the information management server 20. In this case, the first user terminal 10 notifies the authentication server 30 of the authentication information.

Step S5: Based on the received authentication information, the authentication server 30 checks the validity of the electronic certificate embedded in the user's My Number card. The authentication server 30 transmits the result of determining whether the electronic certificate is valid to the information management server 20 as validity information.

Step S6: The information management server 20 acquires the four basic information. For example, when the validity information received from the authentication server 30 indicates that the user's electronic certificate is valid, the information management server 20 acquires the four basic information from the electronic certificate included in the authentication information. Here, the information management server 20 performs identity verification of the user. Specifically, the information management server 20 compares the four basic information acquired from the user's electronic certificate with the user information 220 and determines whether the two match. If the two match, the information management server 20 determines that the person attempting to register family information is the user himself/herself. If the two do not match, the information management server 20 determines that the person attempting to register family information is not the user himself/herself. This allows the information management server 20 to verify that the person attempting to register family information is the user himself/herself, that is, to verify the user's identity.

Step S7: The information management server 20 stores the family information notified by the user as family information 221. For example, if the user's four basic pieces of information match the user information 220 and the information management server 20 determines that the person registering the family information is the user himself/herself, that is, if the information management server 20 determines that the user's identity has been correctly verified, the information management server 20 stores the family information notified by the user as family information 221.

If the user's electronic certificate is invalid, identity verification other than official personal authentication may be performed. For example, identity verification methods other than official personal authentication include carrier authentication and image authentication. Carrier authentication is a method of identity verification in which the user enters a PIN number registered when signing a mobile phone contract. Image authentication is a method of identity verification using an image of a driver's license, etc.

Furthermore, when verifying the identity of a user by comparing the four basic pieces of information with the user information 220, it may be determined that identity verification has been performed correctly only if there is a perfect match, or that identity verification has been performed correctly if there is a partial match. For example, it may be determined that identity verification has been performed correctly only if the address, name, date of birth, and gender all match, or it may be determined that identity verification has been performed correctly if the address and name match without checking the date of birth or gender. The type of information that must match and how it must be matched to determine that identity verification has been performed correctly may be determined arbitrarily by the business operator or procedure service that is the recipient of the procedure.

Step S8: Proceeding to FIG. 3, the information management server 20 transmits an individual URL (Uniform Resource Locator) to the second user terminal 11. The second user terminal 11 is a mobile phone of a user designated by the user as a family member. The individual URL is information indicating a site for obtaining consent from the user designated by the user as a family member (hereinafter referred to as family member). The individual URL may be information indicating any site, but it is preferable that the site is a secure site. For example, the individual URL is information indicating a so-called one-time URL, which can be accessed only once, or for a limited time, or only a limited number of times.

Step S9: The second user terminal 11 notifies the site corresponding to the individual URL of the consent information. The consent information is information indicating that the family member is definitely the family member of the user and that the family member consents to being registered as the family member of the user in the information management server 20 and the business server 40. The second user terminal 11 receives the individual URL from the information management server 20 and displays the received information. The family member touches the individual URL displayed on the second user terminal 11. This causes the second user terminal 11 to access the site corresponding to the individual URL and display the screen notified from the site. The screen notified from the site shows, for example, confirmation items such as "Are you sure you are the family member of the user?" and "Do you agree to be registered as the family member of the user?" along with selection buttons that allow "Yes" or "No" to be selected. The family member can show their intention by visually checking the screen and selecting either "Yes" or "No". When the family member operates the screen, the consent information is notified from the second user terminal 11 to the site.

Step S10: When the information management server 20 receives the consent information from the second user terminal 11, it transmits information for displaying an authentication screen to the second user terminal 11. The authentication screen is the same as the authentication screen transmitted to the first user terminal 10 in step S3.

The processing shown in steps S11 to S13 is similar to the processing shown in steps S4 to S6. For this reason, a description of the processing shown in steps S11 to S13 will be omitted. However, the subject is different. That is, the processing performed by the first user terminal 10 shown in steps S4 to S6 becomes the processing performed by the second user terminal 11 in steps S11 to S13.

Here, the information management server 20 performs identity verification of the family member. The identity verification of the family member is to verify that the person who notified the consent information (the person who agreed to be registered as a family member) is the family member himself/herself. The identity verification of the family member may be performed by any method. For example, the identity verification method may be carrier authentication or image authentication. Carrier authentication is a method of verifying the identity by entering the PIN registered at the time of the mobile phone contract. Image authentication is a method of verifying the identity by using an image of a driver's license or the like. In addition, when the family member has already registered for the procedure service, for example, when the information management server 20 stores the family member's user information 220, the family member's identity may be verified by performing a process similar to that of step S6. Specifically, the information management server 20 checks the basic four information acquired from the family member's electronic certificate against the family member's user information 220 and determines whether the two match. This makes it possible to verify that the person who agreed to be registered as a family member is the family member himself/herself, that is, to verify the family member's identity.

Step S14: The information management server 20 determines whether the family information 221 notified by the user is correct. Here, assuming that the user and family live together, an example of a method in which the information management server 20 checks whether the family's address in the family information 221 is correct will be described. The information management server 20 determines whether the user's address in the user information 220, the user's address in the family information 221, and the address in the four basic pieces of information extracted from the family's electronic certificate match. Note that a similar verification method can also be applied when determining whether information other than the address in the family information 221 notified by the user is correct.

In addition, when checking whether the family information 221 is correct by comparing the four basic information with the family information 221, the family information 221 may be determined to be correct only if there is a perfect match, or may be determined to be correct if there is a partial match. The type and manner of match for determining that the family information 221 is correct may be arbitrarily decided by the business operator or procedure service that is the recipient of the procedure.

Step S15: The information management server 20 sends a notification (completion notification) to the first user terminal 10 that confirmation of the family information has been completed. The completion notification may include, for example, the results of matching the four basic family information items with the family information 221.

Step S16: When the first user terminal 10 receives the completion notification, it returns a response to that effect. Here, the first user terminal 10 transmits consent and procedural information, etc. to the information management server 20. Consent means acknowledging that confirmation of family information has been completed in the procedural service and consenting to the family information being registered as information on the user's family. The procedural information is information for carrying out procedures such as registering family information with the business operator at which the procedure is to be carried out. Note that if the procedure carried out by the business operator at which the procedure is to be carried out requires that a document be attached, the first user terminal 10 transmits the procedural information with the necessary document attached to the information management server 20.

Step S17: The information management server 20 transmits the procedure information received from the first user terminal 10 to the destination business server 40. As a result, the destination business performs procedures such as registering personal information of the user's family. The procedures performed by the destination business may not only simply register personal information of the family, but may also include, with the user's consent, the business notifying the family of information such as the user's account number registered as an account to be used for transfers, etc.

Here, if the procedure information is accompanied by a document required for the procedure, the information management server 20 may check whether there are any errors in the information written on the document. In this case, if there is an error in the information written on the document, the information management server 20 notifies the first user terminal 10 of this and requests that the document without any errors be sent to the information management server 20. The information management server 20 repeats communication with the first user terminal 10 until the document error is resolved. When the information management server 20 receives a document without any errors from the first user terminal 10, it sends the document without any errors to the business server 40.

The information management server 20 only needs to be able to hold the family information that is determined to be correct in step S14. Specifically, the processes shown in steps S15 to S17 may be omitted here. Then, the processes shown in steps S15 to S17 may be executed at the necessary timing, such as when the procedure is carried out at the business that is the destination of the procedure, and the procedure information may be sent to the business server 40 with the user's consent.

<Modification 1 of Processing Flow>
In step S2, the first user terminal 10 may transmit the password set by the user to the information management server 20. The password here is a password set when viewing family information. For example, the operation screen displayed on the first user terminal 10 in step S2 displays an input field for inputting family information and a setting field for setting a password. The user sets an arbitrary password in the setting field. The password is notified to the information management server 20 together with the family information. The user notifies the family of the password set here in advance. The information management server 20 sets the password notified from the first user terminal 10 as the password required when accessing the site corresponding to the individual URL. In step S9, when the individual URL is notified to the second user terminal 11, the family accesses the site corresponding to the individual URL and inputs the password notified by the user. Only when the password specified by the user is correctly input, the family information is displayed on the second user terminal 11 and the family can view the information. In this way, by setting a password designated by the user, it is possible to prevent a third party impersonating the user from accessing the site, thereby preventing information leakage.

<Modification 2 of processing flow>
In step S2, the first user terminal 10 may transmit information indicating whether or not the user is living with a family member to the information management server 20. In addition, if the user is not living with a family member, the first user terminal 10 may transmit a document proving that the user is a family member to the information management server 20. Alternatively, the first user terminal 10 may transmit information indicating the address of the family member living with the user to the information management server 20, and the family member may register the document proving that the user is a family member in the procedure service using the second user terminal 11 or a mailing means. The document proving that the user is a family member may be, for example, a certified copy of a family register in which the family member's name and address are written. The type of document to be used as the document proving that the user is a family member may be determined by the judgment of the registration destination business operator. Alternatively, in step S2, the information management server 20 may determine whether or not the address of the family member shown in the family information matches the address of the user stored in the user information 220, and if they do not match, may request the first user terminal 10 to provide a document proving that the user is a family member.

If the user and family do not live together, in step S14, instead of determining whether the user's address in the user information 220, the family's address in the family information 221, and the address in the family's four basic information match, the information management server 20 determines whether the family's address in the family information 221 and the address in the family's four basic information match.

In addition, if the user and the family do not live together, and the information management server 20 receives a document proving that the user is a family member in step S2, the information management server 20 may determine in step S14 whether the address listed on the document proving that the user is a family member matches the user's address in the user information 220.

<Modification 3 of processing flow>
If the identity of the user or the family has already been confirmed at the time of registration for the procedure service, the identity confirmation of the user or the family may be omitted in steps S6 and S13. In this case, for example, at the time of registration for the procedure service, an authentication screen is transmitted from the information management server 20 to the first user terminal 10, and the user's identity is confirmed by performing the processes shown in steps S4 to S6. If the user's identity is confirmed correctly, the user's personal information is stored in the storage unit 22 as the user information 220. Similarly, for the family, an authentication screen is transmitted from the information management server 20 to the second user terminal 11, and the family's identity is confirmed by performing the processes shown in steps S11 to S13. If the family's identity is confirmed correctly, the family's personal information is stored in the storage unit 22 as the user information 220.

<Configuration of information management server 20>
Here, the configuration of the information management server 20 will be described. Fig. 4 is a block diagram showing the configuration of the information management server 20 according to the embodiment. The information management server 20 includes, for example, a communication unit 21, a storage unit 22, and a control unit 23. The communication unit 21 communicates with the first user terminal 10, the second user terminal 11, the authentication server 30, and the business server 40.

The storage unit 22 is configured with a storage medium, such as a hard disk drive (HDD), flash memory, electrically erasable programmable read only memory (EEPROM), random access read/write memory (RAM), read only memory (ROM), or any combination of these storage media. The storage unit 22 stores programs for executing various processes of the information management server 20, and temporary data used when performing various processes.

The memory unit 22 stores, for example, user information 220, family information 221, and judgment information 222.

Figure 5 is a diagram showing an example of the configuration of user information 220 according to the embodiment. User information 220 is information about a user who uses a procedure service. User information 220 is created, for example, when a user registers for a procedure service. User information 220 is composed of information corresponding to items such as a user information ID, a mobile phone number, a login ID/PW (password), and user information. The user information ID is identification information that uniquely identifies user information 220. The mobile phone number is the mobile phone number of a user registered for the procedure service. The login ID/PW is an ID and password for logging in to the procedure service. User information is personal information of a user identified by the user information ID. User information is, for example, the user's name, date of birth, address, etc. In the example of this figure, the user information shown is a mobile phone number "012-3456-7890", a name "TF Hanako", and an address "Shinjuku-ku, Tokyo".

FIG. 6 is a diagram showing an example of the configuration of family information 221 according to the embodiment. Family information 221 is information about a family member specified by a user. Family information 221 is created, for example, when a user notifies a procedure service of family information. Family information 221 is composed of information corresponding to items such as a family information ID, a mobile phone number, a user information ID, and family information. The family information ID is identification information that uniquely identifies family information 221. The mobile phone number is the mobile phone number of a family member notified by the user. The user information ID is identification information of the user who applied for the family information identified by the family information ID. Family information is personal information of a family member identified by the family information ID. Family information is, for example, the name, date of birth, address, etc. of a family member. In the example of this figure, it is shown that a mobile phone number "034-5678-9012", a name "TF Taro", and an address "Shinjuku-ku, Tokyo" have been applied for as family information for user "TF Hanako".

Figure 7 is a diagram showing an example of the configuration of the determination information 222 according to the embodiment. The determination information 222 is information used to verify the identity of each user and family member. The determination information 222 is composed of information corresponding to each item, such as the subject, confirmation items and confirmation results, and confirmation date and time. The subjects include users and family members, and for each, information indicating the confirmation items, confirmation results, and confirmation date and time is stored.

As user confirmation items, information corresponding to each of the items of the signature electronic certificate and the comparison with the basic four information is shown. As the confirmation result of the signature electronic certificate, information indicating whether the user's electronic certificate is valid is stored. In addition, information indicating the confirmation date and time of the signature electronic certificate is stored. In the comparison with the basic four information, the confirmation result is the result of comparing the user information 220 with the basic four information extracted from the user's electronic certificate. In addition, the date and time of the comparison with the basic four information is stored as information indicating the confirmation date and time. In the example of this figure, the user's electronic certificate is "valid," and the comparison result with the basic four information indicates that the name, address, date of birth, and gender each "match."

As confirmation items for family members, information corresponding to each of the items of consent to registration, information to be registered, signature electronic certificate, and comparison with basic 4 information is shown. As a confirmation result of consent to registration, information indicating whether or not the family member has consented to being registered as the user's family member is stored. In addition, the date and time when consent to registration was obtained is stored as information indicating the confirmation date and time. As an item of information to be registered, information to be registered as family information with the business to which the procedure is to be performed is shown. As a confirmation item for the signature electronic certificate, information indicating whether or not the family member's electronic certificate is valid is stored. In the comparison with basic 4 information, the result of the comparison between the family information 221 and the basic 4 information extracted from the family member's electronic certificate is shown as the confirmation result. In addition, the date and time when the comparison with basic 4 information was performed is stored as information indicating the confirmation date and time. In the example of this figure, it is shown that consent to being registered as the user's family member has been given, and the family member's name and address will be registered as family information. In addition, the family member's electronic certificate is "valid", and the comparison result with basic 4 information shows that the name, address, date of birth, and gender each "match".

Returning to the explanation of FIG. 4, the control unit 23 controls each component of the information management server 20. The control unit 23 is realized, for example, by the CPU (Central Processing Unit) of the information management server 20 executing a program pre-stored in the storage unit 22. The control unit 23 may also be realized as an integrated circuit such as an ASIC (Application Specific Integrated Circuit). The control unit 23 includes, for example, an acquisition unit 230, a determination information generation unit 231, a determination unit 232, an application control unit 233, and a device control unit 234.

The acquisition unit 230 acquires various information. The acquisition unit 230 also acquires various information notified from the first user terminal 10, the second user terminal 11, or the authentication server 30 via the communication unit 21. The acquisition unit 230 outputs the acquired information to a functional unit (the determination information generation unit 231, the application control unit 233, and the device control unit 234) that performs processing using the acquired information. For example, the acquisition unit 230 acquires family information notified from the first user terminal 10 via the communication unit 21 and outputs the acquired family information to the application control unit 233. The acquisition unit 230 acquires valid information notified from the authentication server 30 via the communication unit 21 and outputs the acquired valid information to the determination information generation unit 231 and the application control unit 233. The acquisition unit 230 acquires consent information notified from the second user terminal 11 via the communication unit 21 and outputs the acquired consent information to the determination information generation unit 231 and the application control unit 233. The acquisition unit 230 acquires procedure information from the first user terminal 10 and outputs the acquired procedure information to the application control unit 233.

The determination information generating unit 231 generates the determination information 222. When the authentication server 30 notifies the information management server 20 of the validity information in step S5, the determination information generating unit 231 acquires the validity information via the acquiring unit 230. The determination information generating unit 231 stores the acquired validity information in the memory unit 22 as information indicating whether the electronic certificate of the user in the determination information 222 is valid or not.

In step S6, the determination information generating unit 231 stores in the memory unit 22 the result of comparing the four basic pieces of information extracted from the user's electronic certificate with the user's personal information stored in the user information 220 as information indicating the result of the comparison with the four basic pieces of information of the user in the memory unit 22.

When the second user terminal 11 notifies the information management server 20 of the consent information in step S9, the determination information generating unit 231 acquires the consent information via the acquiring unit 230. The determination information generating unit 231 stores the acquired consent information in the storage unit 22 as information indicating whether or not consent to registration has been obtained in the determination information 222.

When the family information is notified from the first user terminal 10 to the information management server 20 in step S2, the determination information generation unit 231 acquires the family information via the acquisition unit 230. The determination information generation unit 231 determines the type of the acquired family information. For example, if the acquired family information is a family address, the determination information generation unit 231 determines that the type of family information is an address. The determination information generation unit 231 stores the type of family information in the storage unit 22 as information to be registered as family information in the determination information 222.

When the authentication server 30 notifies the information management server 20 of the validity information in step S12, the determination information generating unit 231 acquires the validity information via the communication unit 21. The determination information generating unit 231 stores the acquired validity information in the storage unit 22 as information indicating whether the family's electronic certificate in the determination information 222 is valid or not.

In step S13, the determination information generating unit 231 compares the four basic pieces of information extracted from the family's electronic certificate with the family's personal information stored in the family information 221, and stores the result in the memory unit 22 as information indicating the result of the comparison with the four basic pieces of information for the family in the memory unit 22.

The determination unit 232 determines whether the family information 221 is correct based on the determination information 222. The determination unit 232 determines whether the family information 221 is correct by performing the process shown in step S14.

The application control unit 233 performs a procedure service. The application control unit 233 performs the procedure service by executing an application program that performs the procedure service. For example, the application control unit 233 performs the procedure service by performing the processes shown in steps S3, S6, S7, S8, S10, S13, S15, and S17. Note that the process is not limited to these processes, and the information management server 20 only needs to perform a process according to the content of the service provided in the procedure service. In addition, part of the process performed by the application control unit 233 may include a process performed by the judgment information generation unit 231 and the judgment unit 232 that judges whether the personal information included in the family information is correct information.

The device control unit 234 performs integrated control of the information management server 20. For example, the device control unit 234 controls the communication unit 21, and causes the communication unit 21 to output various pieces of information received from the first user terminal 10, the second user terminal 11, and the authentication server 30 to the acquisition unit 230. In addition, the device control unit 234 outputs screen information such as an authentication screen output from the application control unit 233 to the communication unit 21, and causes it to be transmitted to the first user terminal 10.

As described above, the information management server 20 of the embodiment includes an acquisition unit 230, an application control unit 233, and a determination unit 232. The acquisition unit 230 acquires family information notified from the first user terminal 10. The family information includes at least the family's mobile phone number and the family's personal information. The application control unit 233 sends a message to the family's mobile phone number included in the family information. The message includes URL information indicating a specific site linked to the family information. The specific site is configured to be able to notify whether the family agrees to be registered as the user's family. The determination unit 232 determines whether the personal information included in the family information is correct. When the consent information is notified to the specific site, the determination unit 232 determines whether the personal information included in the family information is correct based on the family's personal information obtained from the electronic certificate (certification medium) of the family's My Number card. The My Number card and the electronic certificate are associated with personal identification information (My Number) that uniquely identifies an individual. The My Number card and the electronic certificate are certification media that certify the identity of an individual. At least one of an individual's name, address, date of birth, and gender is recorded in the electronic certificate of the My Number card. This allows the information management server 20 of the embodiment to compare the personal information contained in the family information notified by the user with the personal information (name, address, date of birth, and gender) shown in the electronic certificate of the My Number card. Therefore, it is possible to determine whether the family member's personal information is correct.

In addition, in the information management server 20 of the embodiment, the acquisition unit 230 acquires a password specified by the user. The application control unit 233 sets the password acquired by the acquisition unit 230 to the specific site. This makes it possible to set the specific site to be accessible only when the password is entered correctly. This prevents a third party other than the family from accessing the specific site and viewing family information, and keeps the family information secure.

In addition, in the information management server 20 of the embodiment, the acquisition unit 230 acquires information indicating whether or not the user and family live together. When the acquisition unit 230 acquires information indicating that the user and family live together, the determination unit 232 determines whether or not the address of the user stored in the user information 220 matches the address included in the family information. This makes it possible to check whether or not the address stored in the user information 220 is the latest address, and to check whether or not the latest information is stored in the user information 220 of the user at the time the family information is registered.

In the above embodiment, the case where the consent information is notified to a site (specific site) corresponding to an individual URL by the second user terminal 11 or the like accessing the site is described as an example. However, the present invention is not limited to this. The information management server 20 may obtain the consent information by exchanging messages with the second user terminal 11 via a message app. In this case, for example, the information management server 20 notifies a message showing a selection button with selectable "Yes" or "No" along with a confirmation item such as "Are you sure you are a family member of the user?". The family member visually checks the message displayed on the second user terminal 11 and selects either "Yes" or "No". As a result, the consent information is notified from the second user terminal 11 to the information management server 20 via the message app.

The information management server 20 in the above-mentioned embodiment may be realized in whole or in part by a computer. In that case, a program for realizing this function may be recorded in a computer-readable recording medium, and the program recorded in the recording medium may be read into the computer system and executed to realize the function. Note that the term "computer system" here includes hardware such as an OS and peripheral devices. Furthermore, the term "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, and storage devices such as hard disks built into the computer system. Furthermore, the term "computer-readable recording medium" may include a medium that dynamically holds a program for a short period of time, such as a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line, and a medium that holds a program for a certain period of time, such as a volatile memory inside a computer system that is a server or client in such a case. Furthermore, the above-mentioned program may be a program for realizing a part of the above-mentioned function, or may be a program that can realize the above-mentioned function in combination with a program already recorded in the computer system, or may be a program that is realized using a programmable logic device such as an FPGA (Field Programmable Gate Array).

The above describes an embodiment of the present invention in detail with reference to the drawings, but the specific configuration is not limited to this embodiment, and includes designs that do not deviate from the gist of the present invention.

1...Procedural information linkage system, 10...First user terminal, 11...Second user terminal, 20...Information management server, 21...Communication unit, 22...Storage unit, 220...User information, 221...Family information, 222...Determination information, 23...Control unit, 230...Acquisition unit, 231...Determination information generation unit, 232...Determination unit, 233...Application control unit, 234...Device control unit, 30...Authentication server 30, 40...Business server

Claims (5)

an acquisition unit that acquires family information regarding a user's family notified by a user who uses a service for checking the user's status via the family, the family information including a mobile phone number , a name, and an address of the family;
a control unit that transmits a message including URL (Uniform Resource Locator) information indicating a specific site linked to the family information to a mobile phone number of the family member included in the family information;
a determination unit configured to be able to notify the specific site of whether or not the family member agrees to be registered as the user's family member, and when the family member's mobile phone notifies the specific site of the agreement, the determination unit determines whether or not the family member information is correct by comparing the name and address of the family member recorded on the family member's certification medium with the name and address included in the family information;
Equipped with
The certification medium is a certification medium that is associated with personal identification information that uniquely identifies an individual and that certifies the identity of the individual, and is a recording medium that records at least the name and address of the individual.
Information management server. The acquisition unit acquires a password designated by the user,
The control unit sets the password acquired by the acquisition unit to the specific site.
2. The information management server according to claim 1. the acquiring unit acquires information indicating whether the user and the family live together, and the determining unit, when the acquiring unit acquires information indicating that the user and the family live together, determines whether a pre-stored address of the user matches an address of the family obtained from a certification medium of the family.
3. The information management server according to claim 1 or 2. An acquisition unit acquires family information regarding a user's family notified by a user who uses a service for checking the user's status via the family, the family information including a mobile phone number , a name, and an address of the family member;
A control unit transmits a message including URL (Uniform Resource Locator) information indicating a specific site linked to the family information to a mobile phone number of the family member included in the family information;
a determination unit configured to be able to notify the specific site whether or not the family member agrees to being registered as the user's family member, and when the family member's mobile phone notifies the specific site of the agreement, the determination unit determines whether or not the family member information is correct by comparing the family member's name and address recorded on the family member's certification medium with the name and address included in the family information;
1. An information management method, comprising:
The certification medium is a certification medium that is associated with personal identification information that uniquely identifies an individual and that certifies the identity of the individual, and is a recording medium that records at least the name and address of the individual.
Information management method. A program for operating a computer as the information management server according to any one of claims 1 to 3, the program causing the computer to function as each unit of the information management server.

Images