JP7767863B2 - Information management server, information linkage system, information management method, and program - Google Patents

Description

The present invention relates to an information management server, an information linkage system, an information management method, and a program.

Public personal authentication is performed in a variety of procedures (see, for example, Patent Document 1). For example, public personal authentication is performed in procedures for opening or registering an account with various businesses, such as banks, securities companies, credit companies, and insurance companies, allowing procedures to be carried out accurately and securely based on the latest and most accurate four pieces of basic information (name, address, date of birth, and gender) registered with the local government.

Japanese Patent Application Laid-Open No. 2017-211869

However, there are cases where the four basic pieces of information change due to moving, etc. In such cases, the user is required to go through the change procedures with each of the service providers, which places a significant burden on the user. Furthermore, if there are many service providers for which the user must make changes, there is a possibility that the user may forget to go through the change procedures even though they are aware of the need to do so. As a result, there is a possibility that the change procedures will not be carried out with some service providers, contrary to the user's intentions.

The present invention was made in light of these circumstances, and its purpose is to provide an information management server, information linkage system, information management method, and program that can reduce the burden on users of the procedures required to change their personal information when that information is changed.

In order to solve the above-mentioned problems, the information management server of the present invention comprises an acquisition unit that acquires identification information of a user's electronic certificate; a judgment unit that judges the validity of the electronic certificate based on a response result from the authentication server obtained by sending the identification information to the authentication server; and a coordination unit that, if the user has consented to a first notification inquiring whether the user agrees to performing a first coordination process to acquire personal information stored in the electronic certificate judged to be valid and to transmit the acquired personal information to a business server, performs the first coordination process. The judgment unit periodically judges whether the personal information has been changed based on the information notified from the authentication server, and the coordination unit notifies the user of the first notification and a second notification inquiring whether the user agrees to obtaining the personal information from the authentication server together. If the judgment unit determines that the personal information has been changed and the user has consented to the second notification inquiring whether the user agrees to obtaining the personal information from the authentication server, the coordination unit performs a second coordination process to acquire the personal information held in the authentication server and transmit the acquired personal information to the business server.

Furthermore, in order to solve the above-mentioned problems, an information management method according to the present invention is an information management method performed by a computer, in which an acquisition unit acquires identification information of a user's electronic certificate, a judgment unit judges the validity of the electronic certificate based on a response result from the authentication server obtained by sending the identification information to the authentication server, a linkage unit acquires personal information stored in the electronic certificate judged to be valid, and, if the user has consented to a first notification inquiring whether the user agrees to performing a first linkage process of transmitting the acquired personal information to a business server, performs the first linkage process, the judgment unit periodically judges whether the personal information has been changed based on information notified by the authentication server, and the linkage unit notifies the user of the first notification and a second notification inquiring whether the user agrees to obtaining the personal information from the authentication server together, and, if the judgment unit judges that the personal information has been changed and the user has consented to the second notification inquiring whether the user agrees to obtaining the personal information from the authentication server, performs a second linkage process of acquiring the personal information held in the authentication server and transmitting the acquired personal information to the business server.

Furthermore, in order to solve the above-mentioned problems, the present invention provides a program for operating a computer as the information management server described above, and for causing the computer to function as each unit included in the information management server.

This invention reduces the burden on users of the procedures required to change their personal information when it changes.

1 is a block diagram showing an example of the configuration of an information linkage system 1 to which an information management server 20 according to an embodiment is applied. FIG. 2 is a sequence diagram showing the flow of processing performed by the information linkage system 1 according to the embodiment. FIG. 2 is a block diagram showing an example of the configuration of an information management server 20 according to the embodiment. FIG. 2 is a diagram showing an example of user information 220 according to the embodiment. FIG. 10 is a block diagram illustrating a configuration example of an information linkage system 1 according to a modified example of the embodiment. FIG. 10 is a sequence diagram showing the flow of processing performed by the information linkage system 1 according to a modified example of the embodiment.

One embodiment of the present invention will be described below with reference to the drawings.

<Configuration of information linkage system 1>
The information linkage system 1 is a system that provides procedure services. In the procedure services, various procedures are performed by each business operator in response to a user's request. The procedures performed here include, for example, membership registration, membership application, account registration, account transfer, address change, name change, and the like for services provided by the business operator.

FIG. 1 is a block diagram showing an example configuration of an information linkage system 1 to which an information management server 20 according to an embodiment is applied. The information linkage system 1 includes, for example, a user terminal 10, an information management server 20, an authentication server 30, and multiple provider servers 40 (Provider A server 40-1, Provider B server 40-2, Provider C server 40-3, and Provider D server 40-4). These components of the information linkage system 1 (user terminal 10, information management server 20, authentication server 30, and multiple provider servers 40) are communicatively connected via a communications network NW. In the following description, when there is no need to distinguish between the provider A server 40-1, provider B server 40-2, provider C server 40-3, and provider D server 40-4, they may be simply referred to as "provider servers 40."

The user terminal 10 is a computer with communication capabilities, such as a smartphone, mobile phone, tablet, or personal computer (PC). The user terminal 10 is operated by a user. The user here is a person who uses the procedure service, and uses the procedure service by operating the user terminal 10.

The information management server 20 is, for example, a computer such as a server, cloud server, or PC. The information management server 20 provides procedure services. The information management server 20 executes procedures in response to requests from users. The method by which the information management server 20 executes procedures will be explained in detail later.

The authentication server 30 is a computer such as a server, cloud server, or PC. For example, the authentication server 30 is a server device of a certification authority, i.e., the Japan Agency for Local Government Information Systems (J-LIS). The authentication server 30 performs public personal authentication using the My Number card (JPKI, Japanese Public Key Infrastructure).

The business operator server 40 is a computer such as a server, cloud server, or PC. Via the information management server 20, the business operator server 40 acquires the procedure details requested by the user, as well as information such as the user's name and address to be used in the procedure. The business operator server 40 carries out the procedure based on the acquired information.

Here, we will explain public personal authentication. In public personal authentication, the validity of a signature electronic certificate is confirmed by querying the certification authority (J-LIS). Specifically, a signature verifier such as the information management server 20 sends the issue number of the signature electronic certificate extracted from the My Number card to the certification authority, and the certification authority notifies the verifier of information indicating the validity of the signature electronic certificate corresponding to that issue number. The signature verifier here is a business operator authorized to query the certification authority about the validity of a signature electronic certificate.

Currently, it is permitted to inquire about the validity of a certificate from a certification authority, but it is not permitted to obtain the latest basic four information held by the certification authority. For example, if a user's address changes due to moving, etc., an inquiry to the certification authority will reveal that the digital signature certificate storing the user's address before the move has expired, but it is not possible to obtain the latest address information from the certification authority. For this reason, if the user's address changes due to moving, etc., the information management server 20 cannot obtain the latest address information unless it inquires about the latest address from the user terminal 10.

In light of these circumstances, a policy has been announced that it will be permitted to obtain the latest four basic pieces of information from certification authorities in the future (see the Ministry of Internal Affairs and Communications explanatory document "Radical Improvements to the Convenience of My Number Cards" (https://www.kantei.go.jp/jp/singi/it2/dgov/kaizen_wg/dai4/siryou2.pdf)).

In this embodiment, the information linkage system 1 was constructed on the assumption that it will be possible to obtain the latest four basic pieces of information from a certification authority in the future.

<Processing flow performed by information linkage system 1>
2 is a sequence diagram showing the flow of processing performed by the information linkage system 1 according to the embodiment. The information linkage system 1 performs the processing shown in the following steps S1 to S5, which can be roughly divided.
In step S1, a process of registering four basic pieces of information of a user is carried out. In step S1, personal information other than the four basic pieces of information of a user, such as the user's telephone number, email address, account information, etc. may also be registered.
In step S2, with the consent of the user, a process (information linkage) is performed in which all or part of the user's four basic pieces of information is transmitted to the business server 40.
In step S3, a process is performed to determine whether the user's four basic information has been changed from the content registered in step S1. Step S3 is executed periodically, for example, every six months, after the user's four basic information has been registered in step S1.
In step S4, if the user's basic four information has been changed, the latest basic four information held by the authentication server 30 is acquired from the authentication server 30 with the user's consent.
In step S5, with the consent of the user, a process (information linkage) is performed in which all or part of the latest four basic pieces of information acquired in step S4 is transmitted to the business entity server 40.

First, the processing performed in step S1 will be explained in detail. The user terminal 10 transmits information to the information management server 20 by, for example, accessing an application corresponding to the procedure service (step S10). For example, the user terminal 10 displays an authentication screen provided by the information management server 20. The authentication screen displays a field for entering the password set on the My Number card and a message such as "Please bring your My Number card close." Following the instructions on the authentication screen displayed on the user terminal 10, the user, for example, enters a password or performs a touch operation such as bringing the My Number card close to the user terminal 10. This causes the user terminal 10 to transmit the password to the information management server 20 and transmit information created based on the My Number card's digital signature certificate to the information management server 20.

The information management server 20 transmits the issue number of the digital signature certificate to the authentication server 30 (step S11). The issue number of the digital signature certificate is included in the information created based on the digital signature certificate that the information management server 20 obtained from the user terminal 10 in step S10.

The authentication server 30 receives the issue number from the information management server 20 and transmits the result of its determination of the validity of the digital signature certificate corresponding to the received issue number, for example, information indicating whether it is valid or invalid, to the information management server 20 (step S12). If the information management server 20 receives information indicating validity from the authentication server 30, it stores the user's four basic pieces of information in the memory unit (memory unit 22, described below) of the information management server 20. The user's four basic pieces of information are included in the information created in step S10 based on the digital signature certificate that the information management server 20 obtained from the user terminal 10.

Next, the processing performed in step S2 will be described in detail. The user terminal 10 transmits consent information to the information management server 20 (step S20). The consent information here indicates which of the multiple businesses registered with the procedure service the user agrees to share information with. Here, information sharing refers to transmitting all or part of the user's four basic pieces of information to the business. Information sharing may also include transmitting personal information about the user other than the four basic pieces of information, such as a phone number, email address, or account information, to the business. For example, the user terminal 10 displays a consent screen (hereinafter referred to as the first consent screen) provided by the information management server 20. The first consent screen displays a message such as, "Please select a business with which you will share information. Once you have completed your selection, press the send button." It also displays a list of businesses registered with the procedure service, check boxes for each listed business, and a send button. The user selects a business with which to share information by clicking the checkboxes as instructed on the first consent screen displayed on the user terminal 10. After confirming that the correct business was selected, the user clicks the send button. This will notify users of which businesses they will send all or part of their basic four information to when using the procedure service, and which businesses they will not send their basic four information to.

In this embodiment, in step S20, a process is performed to obtain the user's consent regarding how any future changes to the user's four basic information will be handled. For example, the information management server 20 provides a consent screen (hereinafter referred to as the second consent screen) to the user terminal 10. Note that the first consent screen and the second consent screen may be displayed on the same screen, or on separate screens.

For example, the second consent screen mainly presents the user with the following two items on which they can choose whether or not to agree.
(1) When the user's four basic information changes, the information management server 20 acquires the user's latest four basic information from the authentication server 30. (2) If the user agrees to the above (1), the information management server 20 notifies the business operator of all or part of the user's latest four basic information acquired.

For example, the second consent screen displays a message such as, "If the Basic 4 Information changes in the future, do you agree that the procedure service will obtain the latest Basic 4 Information from the certification authority?" along with two buttons indicating "Agree" and "Disagree." If the user agrees to the information management server 20 obtaining the latest Basic 4 Information, they click the "Agree" button. On the other hand, if the user does not agree to the information management server 20 obtaining the latest Basic 4 Information, they click the "Disagree" button.

When the user clicks the "Agree" button, the second consent screen displays a message such as, "If the user's Basic 4 Information changes, please select the business that will share the latest Basic 4 Information. Once you have completed your selection, press the send button." In this case, as with the first consent screen, a list of businesses registered with the procedure service, check boxes set for each listed business, and a send button are displayed. By clicking the check boxes, the user selects the business that will notify the user of the latest Basic 4 Information if the Basic 4 Information changes in the future. After confirming that the user has correctly selected the business, the user clicks the send button. This notifies the business to which the user will send all or part of the latest Basic 4 Information using the procedure service, and which business to which the latest Basic 4 Information will not be sent.

The information management server 20 performs information sharing in accordance with the consent notified by the user terminal 10. For example, Figure 2 shows an example in which the user agrees to information sharing with business operator A, which corresponds to business operator A server 40-1. In this case, the information management server 20 transmits all or part of the user's four basic information acquired in step S12 to the business operator A server 40-1. Based on all or part of the user's four basic information received from the information management server 20, the business operator A server 40-1 checks business operator A's customer list, etc., and determines whether the information relates to a business operator A customer. If the information relates to a business operator A customer, the business operator A server 40-1 responds that the information has been correctly registered with the business operator A server 40-1 (registration OK). On the other hand, if the information does not relate to a business operator A customer, the business operator A server 40-1 responds that the information has not been correctly registered with the business operator A server 40-1 (registration NG).

This figure also shows an example in which the user agrees to share information with provider B, which corresponds to provider B's server 40-2. In this case, the information management server 20 sends all or part of the user's four basic pieces of information acquired in step S12 to provider B's server 40-2, and receives a response (registration OK or registration NG) from provider B's server 40-2.

This figure also shows an example in which the user does not agree to information sharing with provider C, which corresponds to provider C's server 40-3. In this case, the information management server 20 does not send the user's four basic pieces of information to provider C's server 40-3.

This figure also shows an example in which the user agrees to share information with provider D, which corresponds to provider D's server 40-4. In this case, the information management server 20 sends all or part of the user's four basic information acquired in step S12 to provider D's server 40-4, and receives a response (registration OK or registration NG) from provider D's server 40-4.

Next, the processing performed in step S3 will be described in detail. The information management server 20 transmits the issue number to the authentication server 30 (step S30). The issue number here is the issue number that the information management server 20 transmitted to the authentication server 30 in step S11. The authentication server 30 transmits to the information management server 20 the result of determining the validity of the digital signature certificate corresponding to the issue number received from the information management server 20, for example, information indicating whether the digital signature certificate is valid or invalid (step S31).

Next, the processing performed in step S4 will be explained in detail. If the signature digital certificate is invalid, the information management server 20 sends a notification to the authentication server 30 inquiring about the latest basic four information (step S40). This assumes that the user's consent has been obtained in step S20 for the information management server 20 to obtain the user's latest basic four information. In response to the inquiry received from the information management server 20, the authentication server 30 sends the user's latest basic four information to the information management server 20 (step S41).

Next, the processing performed in step S5 will be explained in detail. The information management server 20 transmits the latest basic four information acquired in step S41 to the provider A server 40-1. In this case, it is assumed that the user's consent has been obtained in step S21 for the information management server 20 to transmit all or part of the user's latest basic four information to the provider A corresponding to the provider A server 40-1 and conduct information sharing.

Note that this diagram shows an example in which in step S23 the information management server 20 sends all or part of the user's latest Basic 4 information to the provider B server 40-2, but in step S5 does not send all or part of the user's latest Basic 4 information to the provider B server 40-2. This is because the user has agreed to information sharing with provider B corresponding to step S23, but has not agreed to sending the latest changed Basic 4 information to provider B if the Basic 4 information is changed.

This diagram also shows an example in which the information management server 20 does not send all or part of the user's latest Basic Four information to the provider C server 40-3 in step S2, and in step S5, the information management server 20 does not send all or part of the user's latest Basic Four information to the provider C server 40-3. This is because the user has not agreed with provider C to engage in information sharing corresponding to step S23, nor to sending the latest changed Basic Four information to provider C if the Basic Four information is changed.

This diagram also shows an example in which, in step S25, the information management server 20 sends all or part of the user's latest Basic 4 information to the provider D server 40-4, but in step S5, the information management server 20 does not send all or part of the user's latest Basic 4 information to the provider D server 40-4. This is because the user agreed to information sharing with provider D in step S25 and also agreed to send the latest changed Basic 4 information to provider B if the Basic 4 information was changed, but in step S26, the provider D server 40-4 sent a response indicating registration was not successful, so the latest changed Basic 4 information was not sent to provider D.

<Configuration of information management server 20>
The configuration of the information management server 20 will now be described with reference to Fig. 3. Fig. 3 is a block diagram showing the configuration of the information management server 20 according to the embodiment. The information management server 20 includes, for example, a communication unit 21, a storage unit 22, and a control unit 23. The communication unit 21 communicates with the user terminal 10, the authentication server 30, and the business server 40.

The storage unit 22 is configured with a storage medium, such as a hard disk drive (HDD), flash memory, electrically erasable programmable read-only memory (EEPROM), random access read/write memory (RAM), read-only memory (ROM), or any combination of these storage media. The storage unit 22 stores programs for executing various processes of the information management server 20, as well as temporary data used when performing various processes. The storage unit 22 stores, for example, user information 220. The user information 220 is information about a user and includes the four basic pieces of information about the user. The user information 220 is generated, for example, for each user.

Figure 4 is a diagram showing an example of user information 220 in an embodiment. The user information 220 stores information corresponding to items such as the user information ID, issue number, four basic pieces of information, acquisition date, most recent change determination date, most recent acquisition of the four basic pieces of information, and information sharing with the business.

The user information ID indicates identification information such as a number that uniquely identifies the user information 220. The issue number indicates the issue number of the digital signature certificate. The basic four information indicates the basic four information of the user identified by the user information ID. The acquisition date indicates the date on which the user's basic four information was acquired. The most recent change determination date indicates the date on which it was determined whether the user's basic four information had changed. Whether the user's basic four information has changed is determined based on the result indicating the validity of the digital signature certificate obtained when the information management server 20 sends the issue number to the authentication server 30.

The "Acquisition of Latest Basic 4 Information" field indicates whether the user agrees to the information management server 20 acquiring the user's latest Basic 4 information, along with the date on which the user's response was received. The "Information Sharing with Businesses" field indicates, for each business, whether the user agrees to sending all or part of the Basic 4 information to the business, along with the date on which the user's response was received. The "Information Sharing with Businesses" field also indicates, in the event that the Basic 4 information has been changed, whether the user agrees to sending all or part of the latest Basic 4 information to the business, along with the date on which the user's response was received. The "Information Sharing with Businesses" field also indicates whether the business that received all or part of the Basic 4 information responded with "Registration OK" or "Registration NG."

Returning to FIG. 3, the control unit 23 controls each component of the information management server 20. The control unit 23 is realized, for example, by the CPU (Central Processing Unit) of the information management server 20 executing a program pre-stored in the memory unit 22. The control unit 23 may also be realized as an integrated circuit such as an ASIC (Application Specific Integrated Circuit). The control unit 23 includes, for example, an acquisition unit 230, an application control unit 231, a determination unit 232, a collaboration unit 233, and a device control unit 234.

The acquisition unit 230 acquires various types of information. The acquisition unit 230 acquires various types of information notified from the user terminal 10, authentication server 30, and business server 40 via the communication unit 21. The acquisition unit 230 outputs the acquired information to a functional unit (at least one of the application control unit 231, determination unit 232, collaboration unit 233, and device control unit 234) that performs processing using the information.

The acquisition unit 230 acquires information generated from the user's digital signature certificate, which is notified by the user terminal 10. The information generated from the digital signature certificate includes the issue number of the digital signature certificate and the four basic pieces of information. The acquisition unit 230 outputs the issue number to the determination unit 232. The acquisition unit 230 also outputs the information generated from the digital signature certificate to the linkage unit 233. The acquisition unit 230 may also acquire information used in a user procedure that has been digitally signed. A digital signature may be required for certain procedures (for example, an application procedure for opening an account). In this case, the user terminal 10 transmits the digital signature certificate embedded in the user's My Number card and the digitally signed information to the information management server 20. The acquisition unit 230 acquires the digital signature certificate and the digitally signed information.

The app control unit 231 controls an application (hereinafter referred to as app) corresponding to the procedure service. For example, when the user terminal 10 logs in to the app, the app control unit 231 sends an authentication screen to the user terminal 10. In addition, the app control unit 231 sends a consent screen (first consent screen and second consent screen) to the user terminal 10 before information sharing with the business operator. The app control unit 231 stores the content of the consent obtained from the user terminal 10 as user information 220 in the memory unit 22.

Here, consent obtained from the user terminal 10 in response to the first consent screen is an example of "consent to the first notification." Furthermore, consent obtained from the user terminal 10 in response to the second consent screen is an example of "consent to the second notification." Furthermore, consent obtained from the user terminal 10 in response to the second consent screen is an example of "consent to the third notification."

The determination unit 232 determines the validity of the digital signature certificate based on the response result from the authentication server 30 obtained by sending the issuance number to the authentication server 30. The determination unit 232 outputs the determination result of the validity of the digital signature certificate to the link unit 233.

The linking unit 233 performs information linking when the user's consent has been obtained. Information linking involves sending all or part of the user's four basic pieces of information to the business server 40. When the signature digital certificate is determined to be valid, the linking unit 233 acquires the user's four basic pieces of information from the information generated from the signature digital certificate acquired from the acquisition unit 230, and stores the acquired basic four pieces of information in the memory unit 22 as user information 220. The linking unit 233 also stores the date on which the four basic pieces of information were acquired as the acquisition date of the user information 220.

The linking unit 233 references the content of the consent stored in the user information 220 and transmits all or part of the four basic pieces of information to the business operator server 40 of the business operator with whom the user has consented to information sharing. The linking unit 233 also stores the response (registration OK or registration NG) received from the business operator server 40 in response to the information sharing as user information 220 in the storage unit 22.

Furthermore, after acquiring the four basic pieces of information, the determination unit 232 periodically determines the validity of the electronic signature certificate. The determination unit 232 determines the validity of the electronic signature certificate based on the response result from the authentication server 30 obtained by sending the issuance number to the authentication server 30. The determination unit 232 outputs the determination result of the validity of the electronic signature certificate to the linkage unit 233. The determination unit 232 stores the date on which the validity of the electronic signature certificate was determined as the most recent change determination date in the user information 220.

The linking unit 233 obtains the determination result from the determination unit 232 and determines whether the user's four basic information has been changed based on the obtained determination result. If the digital signature certificate is valid, the linking unit 233 determines that the four basic information has not been changed. On the other hand, if the digital signature certificate is invalid, the linking unit 233 determines that the four basic information has been changed.

If the linking unit 233 determines that the basic four information has changed, and if the user's consent has been obtained, it acquires the user's latest basic four information from the authentication server 30. The linking unit 233 references the content of the consent stored in the user information 220 and determines whether the user has consented to the information management server 20 acquiring the latest basic four information. If the user has consented, the linking unit 233 notifies the authentication server 30 requesting the latest basic four information, thereby acquiring the user's latest basic four information from the authentication server 30. The linking unit 233 reflects the acquired latest basic four information in the basic four information in the user information 220.

If the linking unit 233 determines that the four basic information has changed, and if the user's consent has been obtained, it performs latest information linking. Latest information linking involves sending all or part of the user's latest four basic information to the business server 40. The linking unit 233 references the content of the consent stored in the user information 220 and determines for each business whether the user has consented to sending the latest four basic information to the business. The linking unit 233 performs latest information linking by sending all or part of the latest four basic information to the business server 40 of the business with which the user has consented to latest information linking.

Here, if the linking unit 233 determines that the Basic 4 information has changed, it may confirm again whether the user agrees to the information management server 20 acquiring the latest Basic 4 information. If a long period of time (for example, about one year) has passed since the Basic 4 information was acquired, the user may change their mind and oppose the information management server 20 acquiring the latest Basic 4 information. Alternatively, the user may change their mind and change their mind from one who opposed the information management server 20 acquiring the latest Basic 4 information to one who now agrees. In such cases, by confirming again whether the user agrees to the acquisition of the latest Basic 4 information before acquiring the latest Basic 4 information, it becomes possible to respond in line with the user's wishes.

The timing for confirming the user's consent may be set arbitrarily. It is sufficient to obtain consent to share information with a business operator at least before sharing information with that business operator. It is also sufficient to obtain consent for the information management server 20 to acquire the user's latest basic four information before the information management server 20 acquires the latest basic four information. It is also sufficient to obtain consent for sharing the latest information with a business operator at least before sharing the latest information with that business operator.

The device control unit 234 comprehensively controls the information management server 20. For example, the device control unit 234 controls the communication unit 21 and outputs information received by the communication unit 21 from the user terminal 10, authentication server 30, and business server 40 to the acquisition unit 230.

As described above, the information management server 20 of the embodiment includes an acquisition unit 230, a determination unit 232, and a linking unit 233. The acquisition unit 230 acquires the issue number (identification information) of the signature electronic certificate (electronic certificate) embedded in the user's My Number card (certification medium). The determination unit 232 determines the validity of the signature electronic certificate based on a response result from the authentication server 30 obtained by transmitting the issue number to the authentication server 30. The linking unit 233 acquires the four basic information (personal information) stored in the signature electronic certificate determined to be valid. If the user's consent has been obtained, the linking unit 233 performs information linking (first linking process). Information linking refers to transmitting the four basic information to the business server 40. The linking unit 233 determines whether the user has agreed to information linking based on the user's response to the first consent screen (first notification inquiring whether the user agrees to information linking with the business). The determination unit 232 periodically determines whether the four basic information has been changed. The linking unit 233 acquires the Basic 4 information stored in the authentication server 30 when the determination unit 232 determines that the Basic 4 information has been changed and the user's consent has been obtained. The linking unit 233 determines whether the user has consented to the acquisition of the Basic 4 information stored in the authentication server 30 based on the user's response to the second consent screen (a second notification inquiring whether the user consents to the acquisition of the Basic 4 information from the authentication server 30 when the Basic 4 information has been changed). The linking unit 233 performs latest information linking (second linking process). Latest information linking is the transmission of the latest Basic 4 information stored in the authentication server 30 to the business entity server 40 when the user's Basic 4 information has been changed. In this case, the linking unit 233 may be configured to perform latest information linking when the user's consent has been obtained. The linking unit 233 determines whether the user has consented to latest information linking based on the user's response to the second consent screen (a third notification inquiring whether the user consents to latest information linking).

As a result, when the information management server 20 of the embodiment determines that the Basic 4 Information has changed, it can obtain the Basic 4 Information stored in the authentication server 30 with the user's consent. Therefore, the information management server 20 does not need to inquire about the latest Basic 4 Information from the user when the Basic 4 Information has changed. When the Basic 4 Information has changed due to a move or other reason, the user does not need to notify the information management server 20 of their new address, etc. each time. This reduces the burden on the user of the change procedures when their personal information changes. Furthermore, when the Basic 4 Information has changed, it is possible to send all or part of the latest Basic 4 Information to the business server 40 with the user's consent. This allows businesses to obtain the latest Basic 4 Information about their customers.

In the information management server 20 of this embodiment, the determination unit 232 determines the validity of the digital signature certificate based on the response result from the authentication server 30 obtained by sending the issuance number to the authentication server 30. If the digital signature certificate is valid, the determination unit 232 determines that the user's four basic information has not been changed. If the digital signature certificate is invalid, the determination unit 232 determines that the user's four basic information has been changed. This allows the information management server 20 of this embodiment to quantitatively determine whether the four basic information has been changed.

If the determination unit 232 determines that the signature digital certificate is invalid, the information management server 20 of the embodiment may again provide the second consent screen to the user terminal 10 (may issue a second notification). If the user's consent is obtained again, the linking unit 233 may obtain the latest basic four information from the authentication server 30. The linking unit 233 determines whether the user has consented based on the user's response to the second consent screen. This allows the information management server 20 of the embodiment to once again confirm whether the user consents, thereby enabling it to respond in line with the user's wishes.

The information linkage system 1 of the embodiment includes an information management server 20 and an authentication server 30. As a result, the information linkage system 1 of the embodiment can obtain the latest four basic pieces of information from the authentication server 30 with the user's consent. Therefore, the same effects as those described above are achieved.

<Modification of the embodiment>
A modified example of the embodiment will now be described. This modified example differs from the above-described embodiment in that the information management server 20 is not the signature verifier. The signature verifier here is an entity authorized to inquire about the validity of a signature digital certificate from a certification authority. Below, configurations that differ from the above-described embodiment will be described, and configurations equivalent to those in the above-described embodiment will be assigned the same reference numerals and their description will be omitted.

Figure 5 is a block diagram showing an example configuration of an information linkage system 1 according to a modified embodiment. The information linkage system 1 includes a signature verification server 50. The signature verification server 50 is a computer such as a server, a cloud server, or a PC. The signature verification server 50 is used by a signature verifier to inquire of the authentication server 30 about the validity of a signature digital certificate.

Figure 6 is a sequence diagram showing the flow of processing performed by information linkage system 1 according to a modified embodiment. The processing shown in steps S200 and S500 in Figure 6 is similar to steps S2 and S5 in Figure 2, and therefore a description thereof will be omitted.

In step S100, similar to step S1 in Figure 2, the user's four basic pieces of information are registered. The user terminal 10 transmits information to the signature verification server 50, for example by accessing an application corresponding to the procedure service (step S10). The signature verification server 50 transmits the issue number of the digital signature certificate to the authentication server 30 (step S13). The authentication server 30 receives the issue number from the signature verification server 50 and transmits the result of its determination of the validity of the digital signature certificate corresponding to the received issue number to the signature verification server 50 (step S14). The signature verification server 50 transmits the result of its determination to the information management server 20 (step S15).

In step S300, similar to step S3, a process is performed to determine whether the user's four basic information has been changed. The information management server 20 transmits the issuance number to the signature verification server 50 (step S32). The signature verification server 50 transmits the issuance number to the authentication server 30 (step S33). The authentication server 30 transmits the determination result of the validity of the signing digital certificate corresponding to the issuance number received from the signature verification server 50 to the signature verification server 50 (step S34). The signature verification server 50 transmits the determination result to the information management server 20 (step S35).

In step S400, similar to step S4, if the user's basic four information has changed, the latest basic four information is obtained. If the digital signature certificate is invalid, the information management server 20 sends a notification to the signature verification server 50 inquiring about the latest basic four information (step S42). The signature verification server 50 sends a notification to the authentication server 30 inquiring about the latest basic four information (step S43). In response to the inquiry received from the signature verification server 50, the authentication server 30 sends the user's latest basic four information to the signature verification server 50 (step S44). The signature verification server 50 sends the user's latest basic four information to the information management server 20 (step S45).

As described above, the information linkage system 1 according to the modified embodiment further includes a signature verification server 50. The user terminal 10 transmits the issuance number of the digital signature certificate to the signature verification server 50. The signature verification server 50 transmits the issuance number received from the information management server 20 to the authentication server 30. The signature verification server 50 transmits the response result from the authentication server 30 obtained by transmitting the issuance number to the authentication server 30 to the information management server 20. The determination unit 232 of the information management server 20 determines the validity of the digital signature certificate based on the response result received from the signature verification server 50. As a result, in the information linkage system 1 according to the modified embodiment, even if the information management server 20 is not the signature verifier, it is possible to inquire about the validity of the certificate from the authentication server 30 and obtain the latest basic four information.

Furthermore, in the information linkage system 1 according to the modified embodiment, the signature verification server 50 may periodically transmit the issue number to the authentication server 30. The signature verification server 50 may determine the validity of the signature digital certificate based on the response result from the authentication server 30, and if it is invalid, notify the information management server 20 of that fact, or if it is valid, notify the information management server 20 of that fact. As a result, in the information linkage system 1 according to the modified embodiment, the information management server 20 can receive notification only when the basic four information has been changed and it becomes necessary to obtain the latest basic four information, making it possible to reduce unnecessary communication and suppress an increase in processing load.

Note that while the above example describes the case where the four basic pieces of user information are obtained using a My Number card, this is not limiting. Instead of a My Number card, a medium that can prove the user's identity (certification medium) and that stores the user's personal information, such as a driver's license, may be used. Furthermore, if the functionality of a My Number card is installed on a user's smartphone, the smartphone equipped with the functionality of a My Number card may be used in place of the My Number card.

The information linkage system 1 and information management server 20 in the above-described embodiment may be implemented in whole or in part by a computer. In this case, a program for implementing this function may be recorded on a computer-readable recording medium, and the program may be loaded into the computer system and executed. Note that the term "computer system" herein includes hardware such as an OS and peripheral devices. Furthermore, "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, as well as storage devices such as hard disks built into computer systems. Furthermore, "computer-readable recording medium" may also include media that dynamically store programs for a short period of time, such as communication lines used when transmitting programs over networks such as the Internet or over communication lines such as telephone lines, or media that store programs for a fixed period of time, such as volatile memory within the computer system that serves as the server or client. The program may be designed to implement some of the aforementioned functions, or may be capable of implementing the aforementioned functions in combination with programs already stored in the computer system, or may be implemented using a programmable logic device such as an FPGA (Field Programmable Gate Array).

The above describes in detail an embodiment of the present invention with reference to the drawings, but the specific configuration is not limited to this embodiment and includes designs that do not deviate from the gist of the present invention.

1... Information linkage system, 10... User terminal, 20... Information management server, 21... Communication unit, 22... Storage unit, 220... User information, 23... Control unit, 230... Acquisition unit, 231... Application control unit, 232... Determination unit, 233... Linkage unit, 234... Device control unit, 30... Authentication server, 40... Business operator server

Claims (11)

an acquisition unit for acquiring identification information of a user's digital certificate;
a determination unit that determines the validity of the electronic certificate based on a response result from an authentication server obtained by transmitting the identification information to the authentication server;
a linking unit that performs a first linking process when the user has consented to a first notification inquiring whether the user consents to performing a first linking process of acquiring personal information stored in the electronic certificate that has been determined to be valid and transmitting the acquired personal information to a business server;
Equipped with
the determination unit periodically determines whether the personal information has been changed based on information notified from the authentication server;
the linking unit notifies the user of the first notification and a second notification inquiring whether the user agrees to the acquisition of the personal information from the authentication server together, and when the determination unit determines that the personal information has been changed and the user has agreed to the second notification inquiring whether the user agrees to the acquisition of the personal information from the authentication server, performs a second linking process to acquire the personal information held in the authentication server and transmit the acquired personal information to the business server.
Information management server. an acquisition unit for acquiring identification information of a user's digital certificate;
a determination unit that determines the validity of the electronic certificate based on a response result from an authentication server obtained by transmitting the identification information to the authentication server;
a linking unit that performs a first linking process when the user has consented to a first notification inquiring whether the user consents to performing a first linking process of acquiring personal information stored in the electronic certificate that has been determined to be valid and transmitting the acquired personal information to a business server;
Equipped with
the determination unit periodically determines whether the personal information has been changed based on information notified from the authentication server;
the linking unit issues a second notification inquiring whether the user agrees to acquiring the personal information from the authentication server in response to the determination unit that the personal information has been changed, and if the user agrees to the second notification, performs a second linking process of acquiring the personal information held in the authentication server and transmitting the acquired personal information to the business server.
Information management server. the linking unit performs the second linking process when consent is obtained from the user in response to a third notification inquiring whether or not the user consents to performing the second linking process.
3. The information management server according to claim 1. the determination unit determines that the personal information has not been changed if the electronic certificate is valid, based on information indicating the validity of the electronic certificate, which is information notified from the authentication server, and determines that the personal information has been changed if the electronic certificate is invalid.
The information management server according to claim 1 or 3 . If the determination unit determines that the personal information has been changed, the second notification is made again;
the linking unit acquires the personal information held in the authentication server if consent has been obtained from the user for the second notification.
The information management server according to any one of claims 1 to 4 . an information management server according to any one of claims 1 to 5 ;
an authentication server;
An information sharing system equipped with: further comprising a signature verification server;
the signature verification server receives identification information of the user's digital certificate from the user's terminal device, and transmits the received identification information to the authentication server, thereby obtaining a response result from the authentication server, and transmitting the response result to the information management server;
The information linkage system according to claim 6 . further comprising a signature verification server;
the signature verification server receives identification information of the user's electronic certificate from the user's terminal device, periodically transmits the received identification information to the authentication server, determines the validity of the electronic certificate based on a response result from the authentication server, notifies the information management server that the electronic certificate is invalid if the electronic certificate is invalid, and does not notify the information management server if the electronic certificate is valid;
The information linkage system according to claim 6 . An information management method performed by a computer, comprising:
The acquisition unit acquires the identification information of the user's digital certificate,
a determination unit determining the validity of the electronic certificate based on a response result from the authentication server obtained by transmitting the identification information to the authentication server;
a linking unit that acquires personal information stored in the electronic certificate that has been determined to be valid, and, if consent is obtained from the user in response to a first notification inquiring whether the user agrees to a first linking process of transmitting the acquired personal information to a business server, performs the first linking process;
the determination unit periodically determines whether the personal information has been changed based on information notified from the authentication server;
the linking unit notifies the user of the first notification and a second notification inquiring whether the user agrees to the acquisition of the personal information from the authentication server together, and when the determination unit determines that the personal information has been changed and the user has agreed to the second notification inquiring whether the user agrees to the acquisition of the personal information from the authentication server, performs a second linking process to acquire the personal information held in the authentication server and transmit the acquired personal information to the business server.
Information management method. An information management method performed by a computer, comprising:
The acquisition unit acquires the identification information of the user's digital certificate,
a determination unit determining the validity of the electronic certificate based on a response result from the authentication server obtained by transmitting the identification information to the authentication server;
a linking unit that acquires personal information stored in the electronic certificate that has been determined to be valid, and, if consent is obtained from the user in response to a first notification inquiring whether the user agrees to a first linking process of transmitting the acquired personal information to a business server, performs the first linking process;
the determination unit periodically determines whether the personal information has been changed based on information notified from the authentication server;
the linking unit issues a second notification inquiring whether the user agrees to acquiring the personal information from the authentication server in response to the determination unit that the personal information has been changed, and if the user agrees to the second notification, performs a second linking process of acquiring the personal information held in the authentication server and transmitting the acquired personal information to the business server.
Information management method. 6. A program for causing a computer to operate as the information management server according to claim 1 , wherein the program causes the computer to function as each unit included in the information management server.