system

Abstract

To provide a system capable of minimizing damage even if personal information is leaked from a server that manages the personal information. [Solution] A system 1 for outputting personal information linked to the personal number contained in a personal number card, comprising a server 2 that stores the personal information, and a terminal device 3 that accepts a request for the personal information using a user's personal number card, and obtains and outputs the personal information indicated by the request from the server 2, wherein there are multiple servers 2 corresponding to multiple administrative agencies, and the personal information stored in each of the multiple servers 2 is different from one another.

Description

[Technical field]

[0001] This invention relates to a system for acquiring personal information using a personal identification number card. [Background technology]

[0002] Recently, individual number cards (hereinafter referred to as My Number cards) that list the individual number assigned to each individual have become widespread. In addition to being used as identification documents, My Number cards can also be used to easily receive various government services, such as obtaining personal information such as a resident's card, a seal certificate, or a family register certificate on paper by reading them with a reader such as a multi-copy machine at government offices or convenience stores.

[0003] In related technology, a processing device is known that includes a memory unit that stores a specific code, an identification code acquisition unit that acquires an identification code related to a target person, and an encryption unit that generates a token by encrypting the specific code stored in the memory unit using the identification code acquired by the identification code acquisition unit as an encryption key (see Patent Document 1 below). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2019-29680 A Summary of the Invention [Problem to be solved by the invention]

[0005] The present invention aims to provide a technology that can minimize damage even if personal information is leaked from a server that manages the personal information. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems, one aspect of the present invention is a system for outputting personal information linked to a personal number contained in a personal number card, comprising a server that stores the personal information, and a terminal device that accepts a request for the personal information using a user's personal number card and obtains and outputs the personal information indicated by the request from the server, wherein there are a plurality of servers corresponding to a plurality of administrative agencies, and the personal information stored by each of the plurality of servers is different from one another. Effect of the Invention

[0007] According to the present invention, it is possible to provide a technology that can minimize the damage even if personal information is leaked from a server that manages personal information. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a schematic diagram illustrating a system according to an embodiment. [Diagram 2] FIG. 2 is a block diagram showing a hardware configuration of a server according to the embodiment. [Diagram 3] FIG. 2 is a block diagram showing a hardware configuration of a terminal device according to the embodiment. [Figure 4] FIG. 2 is a schematic plan view showing a personal identification number card according to an embodiment. [Diagram 5] FIG. 2 is a block diagram showing a functional configuration of a server according to the embodiment. [Figure 6] FIG. 2 is a block diagram showing a functional configuration of a terminal device according to the embodiment. [Figure 7] 1 is a flowchart showing a personal information acquisition method of the system according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In this specification and the drawings, components having substantially the same functional configurations are denoted by the same reference numerals, and redundant description will be omitted.

[0010] 1 is a schematic diagram showing a system according to the present embodiment. As shown in FIG 1, the system 1 according to the present embodiment includes first to third servers 2A to 2C, a terminal device 3, and an authentication server 4.

[0011] The first to third servers 2A to 2C are connected to the network NW by wireless or wired communication and are configured to be able to transmit and receive data to and from the terminal device 3. The first to third servers 2A to 2C correspond to different administrative agencies, that is, are managed by the corresponding administrative agencies, and are preferably located in the corresponding administrative agencies. Each of the first to third servers 2A to 2C stores personal information PI1 to PI3 of the owner (user of the terminal device 3) of the My Number card for each owner. The personal information PI1 to PI3 of each owner stored individually by the first to third servers 2A to 2C is different information between the servers. In other words, the personal information PI1 of an owner P stored by the first server 2A, the personal information PI2 of the owner P stored by the second server 2B, and the personal information PI3 of the owner P stored by the third server 2C are different information from each other. Each of the personal information PI1 to PI3 is linked to information stored in the IC chip of the owner P's My Number card, preferably a personal number (My Number).

[0012] As types of personal information, for example, if the first server 2A is managed by the National Police Agency or the Tokyo Metropolitan Police Department, the personal information PI1 may include criminal records, fingerprints, etc. For example, if the second server 2B is managed by the Ministry of Health, Labor and Welfare, the personal information PI2 may include medical history, hospital visit history, etc. For example, if the third server 2C is managed by the Ministry of Finance, the personal information PI3 may include finance-related information.

[0013] The terminal device 3 is connected to the network NW using wireless or wired communication, and is configured to be able to send and receive data to and from the first to third servers 2A to 2C (hereinafter, when there is no need to distinguish between them, they will be referred to as servers 2) and the authentication server 4. The terminal device 3 is configured to be able to read the My Number card, and can read the My Number card, that is, read the information stored in the IC chip of the My Number card, obtain a PIN number input by the user of the terminal device 3, and communicate with the authentication server 4 to accept personal authentication. Personal authentication here refers to whether or not the PIN number is correct, and if the PIN number is correct, it is determined that the user of the terminal device 3 is the legitimate owner of the My Number card.

[0014] The terminal 3 can also obtain the PIN by capturing an image of the two-dimensional code, which will be described in detail later. After personal authentication has been performed, the terminal 3 can accept operations by the authenticated user and obtain and output from the server 2 any of the personal information PI1 to PI3 desired by the user (hereinafter, when the personal information PI1 to PI3 are not differentiated, they will be referred to as personal information PI).

[0015] The terminal 3 may be installed in an individual administrative agency that manages the server 2, or in a government office or town hall. The terminal 3 may also be incorporated in a multi-copy machine installed in a convenience store, in which case the personal information PI can be printed on paper as output. Although the terminal 3 is connected to the network NW, it is preferable that it is configured to be capable of communicating only with specific servers, for example the server 2 and the authentication server 4.

[0016] The authentication server 4 acquires from the terminal device 3 the information for personal authentication of the My Number card read by the terminal device 3 and the PIN number, and performs personal authentication of the user operating the terminal device 3 based on the authentication data for personal authentication stored in its own database, that is, determines whether the information on the My Number card and the PIN number are correct or not, and returns the result to the terminal device 3. Note that the authentication server 4 can be an existing server that performs personal authentication, and a detailed description thereof will be omitted here.

[0017] (Hardware configuration) The hardware configuration of the server 2 and the terminal device 3 will be described below. Fig. 2 is a block diagram showing the hardware configuration of the server according to this embodiment. As shown in Fig. 2, the server 2 includes, as hardware, a CPU (Central Processing Unit) 21, a RAM (Random Access Memory) 22, a storage device 23, and a network I / F 24.

[0018] The CPU 21 and the RAM 22 cooperate to execute various functions of the server 2, which will be described later. The storage device 23 stores various data related to the various functions executed by the CPU 21 and the RAM 22. The storage device 23 also stores personal information PI of each individual, and constructs a database by linking each of the multiple personal information PI with information capable of identifying each individual, such as a personal number, etc. The network I / F 24 is connected wirelessly or via wire to an access point for connecting to the network NW.

[0019] 3 is a block diagram showing the hardware configuration of a terminal device according to this embodiment. As shown in Fig. 3, the hardware includes a CPU 31, a RAM 32, a storage device 33, a network I / F 34, a touch panel display 35, a reading device 36, and a camera 37.

[0020] The CPU 31 and the RAM 32 work together to execute various functions of the terminal 3, which will be described later. The storage device 33 stores various data related to the various functions executed by the CPU 31 and the RAM 32. The storage device 33 also stores a server list 331. The server list 331 indicates in which server 2 the personal information indicated by the name button is stored, and specifically, a plurality of name buttons are associated with the servers 2 that respectively store the personal information PI indicated by these plurality of name buttons. In other words, it can be said to be a list in which the names of a plurality of personal information PI or information indicating the names are associated with the servers 2 that respectively store the plurality of personal information PI.

[0021] The network I / F 34 is used for wireless or wired connection to an access point for connecting to the network NW. The touch panel display 35 displays an input screen for the user of the terminal 3, i.e., the owner of the My Number card, to operate the terminal 3, and also displays various operation buttons selectably. For example, the touch panel display 35 displays name buttons for each of a plurality of pieces of personal information PI that the user can request, and accepts the selection of the name button. The reader 36 reads information stored in the IC chip of the My Number card, such as various electronic certificates. Since the reader 36 is an existing device, a detailed description thereof will be omitted here. The camera 37 captures an image of a two-dimensional code, which will be described in detail below.

[0022] In this embodiment, the two-dimensional code captured by the camera 37 indicates a PIN for personal authentication of the owner, in other words, a PIN used when acquiring the owner's personal information PI. Such a two-dimensional code is preferably displayed on the screen of the owner's mobile terminal, such as a smartphone, in the form of, for example, a QR code (registered trademark). For example, an application program (hereinafter, referred to as an app) for displaying a PIN can be installed in advance on the mobile terminal, and the two-dimensional code can be displayed by starting the app. The owner can present a screen on which the two-dimensional code is displayed to the camera 37 of the terminal 3, and the terminal 3 can reliably acquire the PIN. In other words, by using such a two-dimensional code, the user of the terminal 3 does not need to manually input the PIN, and it is possible to reliably avoid a situation in which the user forgets the PIN. The two-dimensional code is not limited to a QR code (registered trademark), and any code that can include information, such as a barcode, may be used. The terminal 3 may acquire the PIN by selecting a number displayed on the touch panel display 35 by the user as usual.

[0023] Fig. 4 is a schematic plan view showing the My Number card according to this embodiment. As shown in Fig. 3, the back side of the My Number card 5 according to this embodiment is provided with the above-mentioned IC chip 51. The IC chip 51 is preferably tamper-resistant, and is configured so that if the IC chip 51 is forcibly removed from the My Number card 5, the IC chip 51 is destroyed so as to be unreadable. Furthermore, various information such as electronic certificates contained in the IC chip 51 should preferably be unified into Japanese and Arabic numerals.

[0024] (Functional configuration) The functional configurations of the server 2 and the terminal device 3 will be described below. Fig. 5 is a block diagram showing the functional configuration of the server according to this embodiment. As shown in Fig. 5, the server 2 has as its functions a request acquisition unit 201, a search acquisition unit 202, and an information transmission unit 203. The request acquisition unit 201 acquires request information indicating a request for personal information of a user from the terminal device 3. The request information will be described in detail later. The search acquisition unit 202 searches for and acquires the personal information PI based on the acquired request information. The information transmission unit 203 transmits the acquired personal information PI to the terminal device 3 that made the request.

[0025] Fig. 6 is a block diagram showing the functional configuration of the terminal device according to this embodiment. As shown in Fig. 6, the terminal device 3 includes an acquisition determination unit 301, a display unit 302, a specification unit 303, a request transmission unit 304, and an information acquisition unit 305 as functions. The acquisition determination unit 301 captures or scans a two-dimensional code using the camera 37 and reads the PIN. The acquisition determination unit 301 also reads information for personal authentication from a My Number card placed in a predetermined reading area of ​​the reading device 36, transmits it to the authentication server 4, and obtains the authentication result, that is, the result of whether the PIN is correct or not. The acquisition determination unit 301 also determines whether the PIN is correct or not from the authentication result.

[0026] Display unit 302 displays on touch panel display 35 the names of personal information that the user can request, allowing multiple selections. Display unit 302 also displays (outputs) personal information PI acquired by information acquisition unit 305 on touch panel display 35. Identification unit 303 identifies, based on server list 331, in which server 2 the personal information indicated by a name button selected by the user from among the name buttons displayed on touch panel display 35 is stored.

[0027] The request sending unit 304 sends information indicating the selected name button, such as the name of the personal information or identification information uniquely indicating the name, and information indicating the authenticated user, such as the My Number, as request information (request) to the server 2 identified by the identification unit 303. The information acquiring unit 305 acquires the personal information PI transmitted from the server 2.

[0028] (device operation) Next, a personal information acquisition method will be described as an operation of the system 1. Fig. 7 is a flowchart showing the personal information acquisition method of the system 1 according to this embodiment. This flow is triggered by the recognition that the user of the terminal 3 has selected a start use button and a personal information acquisition button (e.g., an administrative service button) displayed on the touch panel display 35 or the operation panel of the terminal 3, and set the My Number card 5 in the reading device 36.

[0029] First, the acquisition determination unit 301 of the terminal device 3 acquires information for personal authentication from the My Number card 5 using the reader 36, and when the user of the terminal device 3 brings the two-dimensional code displayed on the screen of the mobile terminal close to the camera 37, the camera 37 acquires the PIN (S101). After acquisition, the acquisition determination unit 301 transmits the acquired information for personal authentication and the PIN to the authentication server 4, and acquires the authentication result from the authentication server 4. Next, the acquisition determination unit 301 judges whether the PIN is correct or not from the authentication result (S102). If the PIN is incorrect (S102, NO), the display unit 302 notifies the user that the PIN is incorrect using the touch panel display 35, and the process proceeds to step S101 to try to acquire the PIN again. At this time, a guide to switch to manual input may be provided.

[0030] On the other hand, if the PIN is correct (S102, YES), the display unit 302 of the terminal 3 displays selectable name buttons on the touch panel display 35 in order to accept personal information desired by the user, i.e., the owner of the My Number card 5 (S103). The name buttons displayed here may include, for example, a resident's card, a personal seal certificate, a family register certificate, as well as criminal history, fingerprints, medical history, medical history, and financial information.

[0031] After the display, the identification unit 303 of the terminal device 3 identifies the server 2 that stores the personal information indicated by the name button based on the name button selected by the user and the server list 331 (S104). If multiple name buttons are selected, it goes without saying that multiple servers 2 may be identified. After the identification, the request sending unit 304 of the terminal device 3 sends request information including information on the selected name button and information indicating the personally authenticated user to the identified server 2 (S105). If multiple servers 2 are identified, the request information is sent to each server 2. For the sake of explanation, a case where only one server 2 is identified is illustrated here.

[0032] After transmission, the request acquisition unit 201 of the server 2 acquires the request information (S106). After acquisition, the search acquisition unit 202 of the server 2 searches for personal information PI (possibly multiple pieces) related to the user indicated in the request information from among the multiple pieces of personal information PI stored in the server 2 based on the request information, and further searches for and acquires personal information PI corresponding to the information of the selected name button from among the personal information PI (S107). After acquisition, the information transmission unit 203 of the server 2 transmits the personal information PI acquired by the search acquisition unit 202 to the terminal device 3 that sent the request information (S108).

[0033] After transmission, the information acquisition unit 305 of the terminal device 3 acquires the personal information PI transmitted by the information transmission unit 203 of the server 2 (S109). After acquisition, the display unit 302 displays the acquired personal information PI on the touch panel display 35 (S110), and this flow ends. If the terminal device 3 is equipped with a printing function after display, the acquired personal information PI can be printed on printing paper. Also, if the terminal device 3 can be connected to an external memory such as a USB memory, it is also possible to write the personal information PI to the external memory. Furthermore, the display unit 302 may display input keys on the touch panel display 35, and when the user inputs an email address, the display unit 302 etc. may rewrite the personal information PI into a format that can be attached to an email, such as PDF, and attach it to the email and send it by email.

[0034] According to the present embodiment described above, the personal information PI of the owner of the My Number card 5 can be distributed among the first to third servers 2A to 2C, etc. Therefore, even if the personal information PI of any of the servers 2 is leaked, the damage can be minimized.

[0035] In this embodiment, the number of servers 2 is three, but this is for the sake of simplicity and is of course not limited to this. For example, it is conceivable that tens or hundreds of servers 2 are installed depending on the number of administrative agencies, the amount of personal information PI related to the administrative agencies, etc.

[0036] In addition, a program that realizes the functions of terminal device 3 may be installed in the form of an application on a portable terminal device such as the owner's smartphone, thereby giving the portable terminal device the functions of terminal device 3.

[0037] Moreover, the authentication server 4 may be eliminated from the system 1 by incorporating its functionality into the server 2 or the terminal device 3 .

[0038] In addition, in the method of acquiring personal information of the system 1 described using FIG. 7, the name button is displayed and selected after the PIN number and the like are acquired and determined in S101 to S102, but the name button may be displayed and selected prior to the PIN number and the like being acquired and determined.

[0039] The present invention can be embodied in various other forms without departing from the spirit or main features thereof. Therefore, the above-described embodiments are merely illustrative in all respects and should not be interpreted as being limiting. The scope of the present invention is defined by the scope of the utility model registration claims and is not limited in any way by the text of the specification. Furthermore, all modifications, various improvements, substitutions and alterations within the scope of the utility model registration claims are within the scope of the present invention. [Explanation of symbols]

[0040] 1 System 2 Server 2A~2C 1st~3rd Servers 201 Request acquisition section 202 Search and Acquisition Department 203 Information Transmission Department 3 Terminal 301 Acquisition judgment unit (PIN acquisition unit) 302 Display section 303 Specific section 304 Request Sender 331 Server List 5. My Number Card 51 IC chip PI, PI1~PI3 Personal Information

Claims

1. A system for outputting personal information linked to an individual number included in an individual number card, A server that stores the personal information; a terminal that receives a request for the personal information using the user's personal number card, and obtains and outputs the personal information indicated by the request from the server; Equipped with The server is provided in a plurality of servers corresponding to a plurality of administrative agencies, The plurality of servers store different personal information. system.

2. The personal information stored in each of the plurality of servers is related to the administrative agency corresponding to each of the plurality of servers. The system of claim 1 .

3. The terminal device includes: a display unit that displays on a display the names of a plurality of pieces of personal information that the user can request in a selectable manner; an identification unit that identifies in which server the personal information indicated by the name selected by the user from among the names of the plurality of displayed personal information items is stored, based on a server list in which the names of the plurality of personal information items or information indicating the names are associated with servers that store each of the plurality of personal information items; a request transmission unit that transmits, as the request, to the server specified by the specification unit, a name of the selected personal information or information indicating the name and information indicating the user; 3. The system according to claim 1 or claim 2, comprising:

4. Each of the plurality of servers a request acquisition unit that acquires the request transmitted by the transmission unit; a search and acquisition unit that searches and acquires the selected personal information from among a plurality of personal information stored based on the request; an information transmitting unit for transmitting the acquired personal information to the terminal; 4. The system of claim 3, comprising:

5. The terminal device includes: A personal identification number acquisition unit that acquires a personal identification number for requesting the personal information from a two-dimensional code displayed on the mobile terminal, The display unit displays, in a selectable manner, names of a plurality of pieces of personal information that the user can request if the acquired personal identification number is correct. The system of claim 4.

6. The information contained in the IC chip is unified in Japanese and Arabic numerals. The system of claim 1 .

Images