Called party leadership based communication method, communication system, and electronic settlement system

Abstract

To effectively utilize communication resources and additional devices by controlling a communication device as intended by an owner of the communication device, and to achieve an efficient routing guide service system and a secure and convenient electronic settlement and moving body charge collection system by eliminating nuisance communication, reducing useless communication traffics, and utilizing supervision, anonymous communication and other additional devices of the communication device.SOLUTION: A ruler player of a communication device issues an instruction to an electronic secretary interposed between the communication device and a network beforehand. There are provided a plurality of handling methods from rejection to control permission for the electronic secretary to respond to each communication request from a caller after identifying the caller or communication content in accordance with instruction content of the ruler player, in order to process communication requests arriving from the inside and the outside.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to communication using electronic devices on a communication network, in particular to the stage of establishing a communication connection and ensuring the security of the communication. It relates to the integration of communication and remote control functions that determine all operations according to the will of the called party or the party in control of the called communication facility. [Background technology]

[0002] Telecommunications have become widespread. Various information technology services using the Internet have rapidly spread to the general public, high-speed, large-capacity, always-on communications have spread to ordinary households, and caller ID notification has also become common. Today, the caller is in control of communications. However, serious damage has been caused by nuisance communications that go against the recipient's will, fraud where the sender's identity is false, emails that have a negative effect on young people, frequent "attacks" by sending large amounts of email, viruses that infect people just by looking at the screen of an incoming email, and "one-ring" calls that fail to complete have caused problems in the networks of telecommunications carriers, paralyzing telephone lines over a wide area for long periods of time. Negative problems have also emerged, such as the paralysis and deterioration of communication infrastructure, and the drowning of normal communications. The weaknesses of the existing public communication system have led to the above illegal and legal acts. Conventional spam communication prevention technologies are divided into various alert levels. However, none of them can simultaneously respond to various situations. For example, "designated rejection" rejects reception from designated recipients, but there is a problem that it is not possible to designate all of the unspecified number of recipients. "Designated reception" only accepts reception from designated recipients, but it becomes "national isolationism" (for example, see Patent Document 1, Non-Patent Documents 1 and 2). The method of Patent Document 6 can improve the convenience when registering and canceling rejected numbers. Reception is rejected according to reception conditions specified by the recipient, and the email sender decides whether to forward the email, but there are problems in that it is difficult to determine the conditions and it is not possible to specify all of them (for example, see Patent Documents 2 and 3). There is also a method of recording unopened spam mail received and charging the sender a reverse fee (for example, see Patent Document 4). There is also a method of extracting the sender's identification information from the received email (for example, see Patent Document 5).

[0003] However, these technologies (a) cannot deal with nuisance communication after at least one occurrence (see, for example, Patent Document 6), and legal regulations such as the opt-out method are almost ineffective, especially in the case of email, because the parties are forced to deal with all callers individually. The reasons are: 1. The number of callers is huge. Even a single call is nuisance, and it is not realistic to reject each call one by one. Even if you register rejection, the memory space for the number of calls that can be registered is limited, and it cannot be increased infinitely. The above-mentioned legal regulations cannot solve the problems, such as how to restrict the content of calls in foreign languages, there are countries that do not have a legal system for restricting calls, and it is not realistic to prosecute violators when the caller is an individual rather than an organization. 2. They cannot deal with one-ring nuisance calls. 3. They cannot deal with the problem of criminal acts such as "it's me" fraud, where the caller's identity is false, or the problem of burglars using home-check calls. (b) It is not possible to set perfect reception conditions. With "designated reception" technology, there is a strong possibility that important communications will not be received. Strict legal regulations and the opt-in system, which only allows sending to registered users, impede freedom of expression and freedom of business. As for the concept of spam, there is no common standard for determining what content constitutes spam, and it cannot be determined without taking into account the subjective element of the individual recipient. Filtering technologies using publicly known spam sender databases and other methods are completely unable to reflect the subjective views of the recipient, and in the current situation where sender addresses are constantly changing, there are clearly limitations to what they can do.

[0004] (c) In general, conventional communication systems are premised on the concept that the parties in communication know each other's identity. For example, a person's phone number plays the role of a person's identity. For this reason, if a phone number is easily made public to an unknown party, some danger may be lurking. On the other hand, in activities such as transactions, relationships, job hunting, etc. between people or companies on a network for the general public, when anonymous communication is required from the beginning or end, once you invite the other party, your email address or phone number is disclosed to the other party, so you cannot easily cut off the relationship with the other party when you want to withdraw. Patent Document 10 shows a method for anonymous communication that requires two steps and establishes a communication channel that removes the identity information of both parties from the communication content through a dedicated anonymous communication center. (d) With the advancement of technology, small portable communication devices are becoming multifunctional. There is a latent need to utilize additional functions such as cameras and location information devices attached to communication equipment, and to use the devices safely as a means of communication and for supervision even when children, elderly people with dementia, or unattended, but this need has not been met. For example, regarding the use of location information, there are devices equipped with control means for setting a route, but the amount of calculation required is large and they are not suitable for small devices such as mobile phones (see, for example, Patent Documents 7 and 8). There are also devices related to mobile phones equipped with means for receiving radio waves from GPS satellites, but there is no means for preventing nuisance communications (see, for example, Patent Document 9). Patent documents 19-20 and 27-29 show technologies for using mobile devices for payment. However, payment PIN numbers cannot be used safely. Patent documents 30-31 show technologies for making commercial transactions cashless. However, this reduces the liquidity of funds. [Patent Document 1] JP 5-14488 A (Claim 1, Figures 1-4) [Patent Document 2] JP 2002-344524 A (claims 1-15, figures 1-19) [Patent Document 3] JP 2000-10880 A (claims 1-5, figures 1-18) [Patent Document 4] Specification of Japanese Patent No. 3283873 (claims 1-2, figures 1-3) [Patent Document 5] Japanese Patent No. 3003640 (Claim 1-2, Figure 1-2) [Patent Document 6] JP 2002-290566 A (full text, Figures 1-3) [Patent Document 7] Patent No. 3460033 specification [Patent Document 8] JP Patent Publication No. 6-60821 (claims 1-2, Figure 1) [Patent Document 9] Specification of Japanese Patent No. 3039536 (full text, Figures 1-7) [Patent Document 10] U.S. Patent No. 5,884,270 (full text, Figures 1-9) [Patent Document 11] U.S. Patent No. 6,070,149 [Patent Document 12] U.S. Patent No. 6,370,235 [Patent Document 13] U.S. Patent No. 6,691,156 [Patent Document 14] JP 2001-148094 A (full text, Figures 1-7) [Patent Document 15] Japanese Patent Application Publication No. 10-307993 [Patent Document 16] Japanese Patent Application Publication No. 9-22497 [Patent Document 17] Patent No. 3488192 [Patent Document 18] Patent No. 3028796 [Patent Document 19] Japanese Patent Application Publication No. 8-339407 [Patent Document 20] JP 2001-338250 A [Patent Document 21] JP 2003-141043 A [Patent Document 22] JP 2002-374307 A [Patent Document 23] JP 2003-36230 A [Patent Document 24] JP 2001-217861 A [Patent Document 25] JP 2003-333097 A [Patent Document 26] JP 2003-216548 A [Patent Document 27] Special Publication No. 2004-519022 [Patent Document 28] Patent No. 3497144 [Patent Document 29] Patent No. 3339843 [Patent Document 30] JP 2000-242717 A [Patent Document 31] JP 2001-306982 A [Patent Document 32] JP 2000-48283 A [Patent Document 33] JP 2002-42273 A [Patent Document 34] Japanese Patent Application Publication No. 11-234393 [Patent Document 35] JP 2003-18636 A [Non-Patent Document 1] Study Group on How to Deal with Spam Emails, "Interim Report," [online], January 24, 2002, Ministry of Internal Affairs and Communications, p.10, [Retrieved January 9, 2004], Internet<URL:http: / / www.soumu.go.jp / s-news / 2002 / 020124_4.html> [Non-Patent Document 2] Study Group on How to Deal with Spam Emails, "Report," [online], October 7, 2002, Ministry of Internal Affairs and Communications, p.3-5 [Retrieved January 9, 2004], Internet<URL:http: / / www.soumu.go.jp / s-news / 2002 / 021007_1.html> [Non-Patent Document 3] J. Myers, "RFC1939, POP3 (Post Office Protocol - Version 3)", [online], May 1996, IAB (Internet Architecture Board) standard recommendation document RFC (Request for Comments), p.11 [Retrieved January 12, 2004], Internet <URL:(ftp: / / ftp.rfc-editor.org / in-notes / rfc1939.txt) [Non-Patent Document 4] J. Klensin, "RFC2821 (Simple Mail Transfer Protocol)", [online], April 2001, IAB (Internet Architecture Board) standard recommendation document RFC (Request for Comments), p.32, [Retrieved January 14, 2004], Internet <URL:(ftp: / / ftp.rfc-editor.org / in-notes / rfc2821.txt) [Non-Patent Document 5] P. Resnick, "RFC2822 (Internet Message Format)", [online], April 2001, IAB (Internet Architecture Board) standard recommendation document RFC (Request for Comments), p.26 [Retrieved January 20, 2004], Internet <URL:(ftp: / / ftp.rfc-editor.org / in-notes / rfc2822.txt) DISCLOSURE OF THEINVENTION [Problem to be solved by the invention]

[0005] All of these are related to the intention of the administrator of an electronic device (hereinafter referred to as a communication device) equipped with a communication function and a function related to communication, that is, the intention to prevent the operation of the device by others, including nuisance communication, and the intention to control the device by one's own will. The problem with the prior art is that it cannot satisfy this intention. The object of the present invention is to solve this problem and satisfy the intention of the parties. Specifically, the object of the present invention is to efficiently utilize communication resources safely according to the intention of the parties. The object of the present invention is to eliminate nuisance communication without impairing the conventional communication function in a normal and open manner, reduce wasteful communication volume, and utilize the auxiliary devices of the communication device, such as custody, emergency communication, anonymous communication, and efficient mobile location information service. The object of the present invention is to provide a route guidance service, grasp the traffic situation without installing dedicated equipment, and realize a safe and convenient electronic payment and mobile toll collection system. [Means for solving the problem]

[0006] In order to solve the above problems, as shown in FIG. 1, the present invention involves an administrator of a communication device issuing instructions to an electronic secretary located between the communication device and a network in advance, and the electronic secretary being provided with a number of processing methods for communication requests arriving from inside or outside (communication device or network) in accordance with the instructions of the administrator, and upon receiving the communication request, selecting one of the multiple processing methods to process the communication request; in this specification, the processing method is referred to as "treatment", which means a method of taking a specific action for a specific communication request determined by the administrator. Conventional communication is usually caller-initiated, and it has been taken for granted that when you call someone, they will answer. The response method is also simple, so there is no need to use special terms to describe it. In the present invention, the response methods are diverse, and there is no suitable technical term to express them succinctly. Therefore, the word "treatment" is used to describe the relationship between the two parties. The reject treatment expresses a desire to completely reject the caller, the allow-to-communicate treatment expresses a traditional communication need, and the allow-to-control treatment expresses a latent need, a desire to give the caller control over the communication device. The term "control permission" as used herein refers to the administrator's intention to allow the communication equipment to be in a controlled state, to execute the caller's commands, or to activate designated functions or programs. For example, a caller can remotely activate a camera attached to the communication equipment to monitor the callee, and an authentication program can be activated when a communication request is received to confirm electronic payment. The idea of ​​this invention is that all communication with a caller starts with prior permission. When an unknown caller makes a call without permission, the system first asks the caller's name, judges the caller's identity, and decides whether to communicate with the caller or not. This is called application acceptance. This flow can be compared to the example of a receptionist or secretary. The secretary is instructed according to certain rules in advance, and when a visitor arrives, the secretary will handle the visitor in the instructed manner. When an unknown visitor arrives, the secretary will ask the visitor's name and business, and decide whether to let the visitor through or not based on the rules taught by the boss. For example, if the boss is interested in the visitor's business, the visitor will be allowed through. If the visitor turns out to be an old acquaintance of the boss, the visitor will be allowed through. A smart secretary will remember the visitor and be able to quickly decide whether to treat the second visitor kindly or turn him / her away.

[0007] If the boss himself comes, the orders are followed because the boss is in control. This is like remote control of a communication device. In the present invention, the parties issue instructions in advance to an electronic secretary who fulfills the role of the secretary, and the electronic secretary processes communication requests according to the instructions of the parties. The electronic secretary is taught a first rule consisting of a pair of a caller ID and a treatment to be given, and the electronic secretary first processes communication requests based on the first rule. The electronic secretary is also taught a second rule consisting of a question, a correct answer, and a treatment, and if the electronic secretary is unable to determine how to process a request based on the first rule, he or she asks the caller a question, and if the electronic secretary obtains a correct answer, the electronic secretary processes the request based on the second rule, and the caller ID and treatment are stored as the first rule. The electronic secretary is also instructed on how to deal with callers for whom the correct answer was not obtained. The second rule can include personal information about the parties involved. For example, if the rule specifies that the name of the party involved must be known, then callers who do not know the name of the recipient can be rejected. Family members and relatives can also be identified by a secret phrase or password. For telephone communications, voice recognition and voiceprint recognition can also be used. The types of treatment include reception rejection and communication permission for communication requests arriving from the outside, and transmission rejection and transmission permission for communication requests originating from the inside. A virtual account (described later) is introduced for settlement. Effect of the Invention

[0008] (a) Prevention of spam e-mails and spam calls. The greatest feature of this invention is that it prevents spam communication before it occurs, without even allowing it to occur once in theory. 1. If the pair of the caller ID and the recipient ID do not match, communication is not permitted. Even if the caller ID can be forged, it cannot be made to match the recipient ID pair. In cases where the caller ID cannot be forged, such as with caller number notification, unknown callers are given a limited number of opportunities to apply, and thereafter, they are rejected unconditionally, thereby preventing automated attempts at spam communication by programs. 2. The application procedure automatically begins for those who attempt to make a one-ring call, and communication charges begin to be charged to the sender, making it possible to impose sanctions. 3. Since unregistered callers are automatically confirmed using a set procedure, it is also possible to deal with "it's me" fraud, in which the elderly and others are fooled carelessly. (b) At the same time, if the other party answers the callee's question correctly, for example if the callee's name can be answered, the normal and open communication function is not impaired in any way, much like in the past. The freedom of the caller is not restricted. When selling or advertising something, it is beneficial for both parties only if the other party is interested. The present invention provides the callee with a means to declare interest in advance, and does not reject communication that is beneficial for both parties. (c) When this invention is operated on a receiving server, it can block unwanted communications at the point of sending a communication request. This reduces the amount of communication caused by large amounts of unnecessary e-mail on the public network, makes effective use of facilities, and saves on the cost of compensation for unwanted communications from telecommunications companies. Even if it is not operated on a receiving server, it reduces the social burden of changing communication contracts and implementing legal provisions, and saves time in manually identifying and deleting unwanted e-mail. By eliminating unwanted communications, the use of communication means can be expanded. (d) Simple anonymous communication and one-way communication where only one party is allowed to send a message will be possible. Dating, job hunting, etc. can be done more safely and comfortably through the public communication network. (e) The other party can be automatically identified based on the subjective awareness of each individual party, and in the unlikely event that the other party obtains unauthorized communication permission due to a problem with the automated processing, that permission can be revoked. (f) The communication device and communication accessory device can be used efficiently and securely according to the will of the person in charge of the receiving communication machine. It is possible to realize the integration of guardianship, crime prevention, emergency communication, and vehicle driving guidance functions. This creates new uses and new needs. In addition, the issues, means, and effects will be described for each embodiment.

[0009] The terms used in this specification are as follows: "communication request" means communication content that arrives at the electronic secretary before the sender's original communication purpose is achieved. For example, a connection request, or an email, data, or a request for approval received by the electronic secretary before the recipient receives it, is a communication request; "rule" means knowledge used to control processing, expressed as a pair of search conditions for a processing object and definition information for an action when the search conditions are satisfied; and "first rule" means a condition part having an application condition related to the sender ID (sender's identifier) ​​and an execution part instructing the execution of an action corresponding to the treatment. A "first rule set" is a set of first rules, and in this specification, creating a first rule and adding it to the first rule set means to give a treatment to a caller. A "second rule" is a rule having a condition part having an application condition related to the expected application content, and an action corresponding to the treatment. The third rule has a condition part having an application condition related to a caller ID and a reception time, and an execution part instructing the execution of an action corresponding to the treatment, and expresses the matter that "if the expected application content is detected from a communication request, process the communication request based on the treatment." The third rule has a condition part having an application condition related to a caller ID and a reception time, and an execution part instructing the execution of an action corresponding to the treatment, and expresses the matter that "if the actual caller ID detected from a communication request matches the caller ID in the condition part, and a predetermined time has not passed since the reception time, process the communication request based on the treatment." The fourth rule has a condition part with a condition for a correct answer to the question to be presented to the caller, and an action part for an action related to a score, and expresses the matter that "if the answer to the question from the caller is correct, add up the score and tally up the total score." The fifth rule has a condition part with a condition for a callee ID and a call time, and an action part that instructs the execution of an action corresponding to the treatment, and expresses the matter that "if the destination ID (the callee ID) matches the callee ID in the condition part, and"If a predetermined time has not elapsed since the time of the call, the call request is treated based on the treatment." "Caller" means a party requesting the start of communication and a device. "Treatment information" means a callee ID and information on a first rule set, and if there is only one callee ID, it means the first rule set. "ID" means an identifier provided by a communication service provider to a party using the communication service, and it is possible to provide multiple identifiers to one party. "Communication permission" means transmitting a communication request to a callee, and when an electronic secretary determines that communication can be permitted, it transmits the communication request to the callee, making it the same as when a communication request is received by a conventional communication means, and the callee can make a final decision on whether to communicate or not. "Receiving client" means a device that can retrieve a callee's mail stored on a server, and is, for example, a mobile phone that receives mail, and a POP3 (Post Office Protocol - Version 3) protocol defined in the standard recommendation document RFC (Request for Comments) issued by the IAB (Internet Architecture Board). 3) corresponds to a host that is trying to use a service that complies with the above, · "sending client" means a device that sends e-mail, such as a client terminal that sends e-mail and an ISP server that sends e-mail, · "server" means a party that provides a service, such as a telephone exchange, · "receiving server" means a device that receives and stores e-mail and provides a service that delivers the stored e-mail to the recipient when the recipient accesses it, such as a mail center of a mobile phone company and a host that provides a POP3 service, · "communication" means transmitting information and control signals, · "e-mail" means electronic mail, · "pre-application" means that a party discloses information including its ID (identifier) ​​to have the sender apply for permission to communicate, and the sender applies for permission to communicate to the party before making a communication request, · "identity registration" means that a party using a communication service is identified by ID, and the provider of the communication service provides the ID to the party,"Permission to listen in" means that a party selected from the group consisting of a communication service provider and a third party registers the identification information of the party; "permission to listen in" means that the caller is allowed to obtain an audio signal obtained by a microphone of the callee's communication device; "permission to monitor" means that the caller is allowed to obtain an image signal obtained by an imaging device installed on the callee's side through the callee's communication device; "permission to obtain location" means that the caller is allowed to obtain location information obtained by a location obtaining means installed on the callee's side through the callee's communication device; "permission to call attention" means that the caller is allowed to output information through the callee's communication device to call the callee's attention; "permission to forward information" means that the caller is allowed to forward information to the callee's communication device; "initial expected treatment" means a preset treatment to be applied when the treatment cannot be determined by the rule set to be applied; "subject" means that the caller is allowed to select an information field (Informational fields), "sender's email address" means a destination email address that sends email to the sender, including a return email address designated by the sender himself, "treatment request" means requesting permission to communicate, and the traditional act of sending a message can also be considered as a form of treatment request, "treatment relationship" is a relationship built by the treatment that each party gives to the other, "treatment set" means a collection of multiple treatments, "request content" means the content of a request for permission to communicate, "expected request content" means the request content expected by the receiving party, for example, when asking the other party for the name of the receiving party, the exact name is the expected request content, that is, the correct answer to the question is the expected request content, or it can be specified as a topic of interest, keyword, or expected request content, "program execution permission" means permission to allow the sender to execute a program on the receiving party's communication device, and the communication device is equipped with a means for executing programs such as a CPU.

[0010] Explanation of email-related terms and concepts. The flow of email transmission is generally from the sender's terminal (sending client) to the sending mail server (receiving server), from the sending mail server (sending client) to the receiving server, and from the receiving server to the recipient's terminal (receiving client). The sending mail server has two roles: receiving server and sending client. Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Fig. 1 is a diagram showing an example of the schematic configuration of one embodiment of the present invention. A party terminal 101 communicates over a network 104 via an electronic secretary 102, and the electronic secretary may be incorporated on the party terminal side or on the server side providing the communication service, or in the case of telephone communication, on the telephone set side or exchange side. When it is incorporated on the server side, it is connected to the party's terminal through a communication channel. The instruction file 103 may be incorporated in the electronic secretary or may be independent of the electronic secretary. The administrator may directly input data into the instruction file (not shown in the figure). The instruction file is stored in a data storage device. As long as the storage device can achieve the object of the present invention, for example, magnetic storage devices, electronic memory circuits such as RAM and ROM, as well as optical storage media, etc. may be adopted. A desirable implementation of the instruction file is a database that organizes and integrates interrelated data, including multimedia information, for easy search. Hereinafter, the same reference numerals are used for common or similar components in each drawing. Figure 2B is a record layout diagram showing the contents of the data database (hereinafter referred to as R1DB) that records the first rule set related to items and treatments. There can be multiple items. For example, the condition part of the "communication confirmation" treatment described later has two items: the calling number and the command.

[0011] Tables contain all the data in a database. A table is a collection of columns. Data is organized in the form of rows and columns. Each row represents a record, and each column represents a field in that record. The layout of a record consists of information organized by "field name" (left side of the table as shown in the figure) and "field characteristics" (right side of the table as shown in the figure). A row corresponds to each field. A primary key is a column whose values ​​uniquely identify each row in a table. A foreign key is a column that establishes a link between data in two tables. R1DB has fields for caller ID and treatment ID. Figure 2A is a record layout diagram showing the contents of a data database (hereinafter referred to as TDB) that records one embodiment of a treatment set. The specific implementation of each treatment varies depending on the communication device, and the total number of treatment types that can be realized varies depending on the communication device. The treatment set can be expanded or simplified according to the needs of the individual parties. The treatment ID is used to identify the processing method (function) to be called within the program, and the text is used to display the contents of the function to the user. 2C is a record layout diagram showing the contents of a data database (hereinafter referred to as GDB) that records one embodiment of the presented information. When the presented information includes a question to be presented to the sender, it may be in the format shown in FIG. 2F. FIG. 2D is a record layout diagram showing the contents of a data database (hereinafter referred to as R2DB) for recording an embodiment of a second rule set relating to expected application contents and treatment. FIG. 2E is a record layout diagram showing the contents of a data database (hereinafter referred to as R3DB) for recording an embodiment of a third rule set relating to senders, receiving times, and treatments.

[0012] 2F is a record layout diagram showing the contents of a data database (hereinafter referred to as R4DB) that records an embodiment of a fourth rule set regarding questions to be presented to a caller, correct answers to the questions, and scores. The questions and presented information stored in the GDB include those selected from the group consisting of text, audio, and images. FIG. 2G is a record layout diagram showing the contents of a data database (hereinafter referred to as R5DB) for recording an embodiment of a fifth rule set relating to the recipient ID, the calling time, and the treatment. FIG. 2H is a record layout diagram showing the contents of a data database (hereinafter referred to as TRDB) that records one embodiment of the treatment relationship master. FIG. 4 is a flow chart of one embodiment of the present invention. A method for communication via an electronic secretary system (hereinafter referred to as "electronic secretary") that supports communication in a telecommunication network, in which an administrator issues instructions to an electronic secretary in advance, the electronic secretary is installed between a communication device and the telecommunication network, and the electronic secretary processes communication requests from the inside (communication device) or the outside (telecommunication network) according to the administrator's instructions, the method comprising: (a) a step of inputting data to construct an instruction file that instructs the electronic secretary to perform a task; and the instruction file has a condition part having application conditions related to an item, and an execution part that instructs the execution of an action corresponding to a treatment. and (b) a step of communicating using the electronic secretary capable of the following operations: (a) a first set of rules (hereinafter referred to as the "first rule set") (the first rule expresses the fact that "when actually receiving the communication request from a sender, if the item (hereinafter referred to as the "fact item") detected from the communication request matches the item in the condition part, then handle the communication request based on the treatment"; in the present specification, creating the first rule and adding it to the first rule set is referred to as giving a treatment to the sender); The device is equipped with a plurality of processing methods (hereinafter referred to as a "treatment set") including: (1) detecting the item from the communication request from the caller; (2) accessing the instruction file; (3) searching through all rules in the first rule set to find a rule whose application condition is met and executing the execution part of the rule (hereinafter simply referred to as applying a predetermined set of rules); and (4) transmitting the communication request to the callee (hereinafter referred to as "communication permission") for each of the communication requests. When the device receives a communication request, it selects one of the plurality of processing methods to process the communication request. When a communication request from an internal or external caller is received, the item, i.e., the fact item, is detected from the communication request (401), an instruction file is read (402), and the first rule set is applied in the next first rule set application procedure. That is, all rules in the first rule set related to items and treatments are targeted, and a rule whose application condition is satisfied is found, and the R1DB (see FIG. 2B) is searched (403) under the condition that the item and the fact item match, and it is determined whether or not it is found (404). If the record is found, i.e., if a rule whose application condition is satisfied is found, the treatment given to the caller can be extracted from the treatment ID field. Then, the execution part of the rule is executed (406). If it is not found, the communication request is processed based on a predetermined processing method, i.e., the initial expected treatment (405).

[0013] A rule set is a description of the control of a process using structured data. In other words, there are multiple different data for the same rule set. Different data for the same rule set are used to control similar processes. In this specification, when the same rule set is described using different data, it is referred to as a rule set for something. First, a case where a communication request from the outside is processed and a treatment is given to each caller will be described. In the first rule set, the item is a caller ID (identifier of the caller), and a treatment for rejecting the communication request is called "rejection of reception," and a treatment for accepting the communication request is called "application acceptance." Acceptance of the application means that the caller is permitted to express a desire to communicate with the recipient, and this action can include conveying the communication subject matter, including information for identifying the caller, to the electronic secretary, and the caller's original purpose of communication cannot be achieved until the presented information is presented to the caller, the caller's response is received, and it is determined that the communication request can be permitted based on the response. The term "communication matter" refers to the content of communication that is received by the electronic secretary and that requires communication with the recipient, by establishing a communication connection between the sender and the electronic secretary before the sender's original communication purpose is achieved. For example, in the case of telephone communication, the sender's name, telephone number, and the matter are recorded and transmitted to the recipient, and the electronic secretary sends out a voice message and receives the sender's reply, but does not allow conversation with the recipient before the reply content is judged to be correct. Repeated questions and answers are possible. Immediate judgment and subsequent judgment of the recipient are possible. Responses can be received by dialed number or voice recognition. For purposes of this invention, the term "submission receipt" refers to any interaction that facilitates an ongoing cycle of presenting invitation messages and receiving responses.

[0014] In the case of e-mail communication, an e-mail address, a subject, etc. are received, but are not handed over to a recipient before the contents are judged to be correct, and an electronic secretary replies with presented information, and the reply contents of the sender according to the presented information are not handed over to the recipient before the contents are judged to be correct. The recipient can freely decide what information to present. For example, they can ask the caller for personal information such as the recipient's name. Conventional telephone technology has a function that allows you to pretend not to be home. In this invention, the caller is confirmed only when the caller is unknown, and communication is possible only when the caller is confirmed, and the call is accepted or rejected when the caller is known. 5 is a flowchart of another embodiment of the present invention. The instruction file includes presentation information to be presented to the sender, and the electronic secretary can operate to present the presentation information to the sender. The instruction file includes a second set of rules (referred to as the "second rule set" in this specification) described in a rule having a condition part having an application condition related to the expected application content and an execution part instructing the implementation of an action corresponding to the treatment (the second rule expresses the matter that "if the expected application content is detected from the communication request, process the communication request based on the treatment"), and the application acceptance includes the following operations: (a) detecting the expected application content from the communication request, and (b) applying the second rule set. The ID is detected (501), the instruction file is read (502), the first rule set is applied (503), and the result is judged (504). When the application is accepted, all the rules in the second rule set related to the expected application content and treatment are searched for to find a rule whose application condition is satisfied (505), and it is judged whether or not it is found (506). If not found, a predetermined processing method is used, i.e., processing is performed based on the initial expected treatment.

[0015] For example, the reception of the message may be rejected after the presentation information is presented to the sender. Or, the reception of the message may be rejected without any information being presented. It is preferable that the parties involved decide on this. It is preferable that the initial expected treatment be selected from the treatment set excluding the application acceptance treatment (507). When no rule is found that satisfies the application condition of the first rule set, the user can choose whether or not to execute the application acceptance treatment. If a rule is found whose applicable condition is satisfied, the communication request is treated based on the treatment given, i.e., the treatment described in the execution part of the rule (508). The treatment includes communication permission and reception refusal, and various treatments, i.e., various methods of treatment, can be specified according to the will of the administrator of the communication equipment, such as partially permitting communication and recording the caller's purpose, depending on the performance of the communication equipment of the receiving side. For example, if the communication equipment only has basic communication functions, the electronic secretary's communication permission treatment simply passes the communication content so as not to interfere, and communication refusal simply blocks all communication content. A communication device incorporating an embodiment of the present invention has a basic communication function and a control function. The implementation of the control permission treatment of the electronic secretary commands the communication device to enter a controlled state, and then passes the communication content including the sender's command. Furthermore, various controlled states such as information transfer permission, warning permission, location acquisition permission, listening permission, and monitoring permission can be realized. Using the second rule set, phishing (forged sender identity) scams can be prevented by issuing a password to the sender. Using the second rule set, communication can be permitted based on the content of the communication. Freedom of communication is not restricted. Mail order sales and advertising, which are profitable for both parties, are possible.

[0016] A communication request from the inside can be processed in the same manner as the mechanism for processing a communication request from the outside. For example, a first rule set for outgoing calls can be used in which the item is the callee ID (identifier of the callee). A treatment called "reject outgoing call" for rejecting a communication request, a treatment called "permit outgoing call" for permitting a communication request, and a treatment called "authentication of outgoing call" can be used. The authentication treatment starts an authentication program, and permits outgoing calls if authentication by password matching or the like is successful. For example, in the case of a company, this invention can be used to manage outgoing international calls and the like. As used herein, giving treatment to a communication request refers to taking a particular action on a communication request of particular communication content. Fig. 6 is a flow chart of another embodiment of the present invention described in the description of Fig. 5. The communication is an e-mail communication, the sender ID is the sender's e-mail address (reply destination), the presented information includes an explanation of the conditions for receiving e-mail, the communication permission treatment is to receive e-mail, the presenting is to reply to the sender, and when the communication request arrives, the electronic secretary first applies the first rule set, and if a rule with the applicable condition is not found, the request is accepted, and in the step of accepting the request, when the second rule set is applied, if a rule with the applicable condition is not found, i.e., if a treatment cannot be determined, the presented information is presented to the sender and then the communication request is rejected. The sender's email address is detected (601), the instruction file is read (602), the first rule set is applied (603), the result is judged (604), the second rule set is applied (605), the result is judged (606), the presented information includes an explanation of the conditions for receiving the email, and the communication permission treatment is to allow the email to be received. That is, the electronic secretary passes the email, and the recipient receives the email. The reception refusal treatment is not to receive the email (608), and presenting the presented information to the sender is to reply to the presented information to the sender (607). Fig. 7 is a diagram showing the configuration of another embodiment of the present invention described in the description of Fig. 6. An electronic secretary and instruction files R1DB, GDB, and R2DB are installed in a receiving client user terminal 701. Reference numeral 702 denotes a receiving server of an ISP (Internet Service Provider).

[0017] Fig. 8 is a flow chart of another embodiment of the present invention described in the description of Fig. 6. The electronic secretary is installed on the receiving client side, and rejecting the communication request means sending a delete command to the receiving server to delete the e-mail from the receiving server, and the method for requesting permission to communicate that is presented to the sender is to write the request contents in the subject of the e-mail. The presented information includes at least content that prompts the sender to write the request contents in the subject of the e-mail, for example, presenting a question and prompting the sender to write the answer in the subject. Then, the system logs into the receiving server (801) and detects the sender's ID, i.e., the sender's email address, from the header of the email (802). For example, the system sends the command "TOP 1 0" described in POP3 (Non-Patent Document 3), a common email receiving protocol, and receives and analyzes the header of the first email from the POP3 server, thereby detecting the sender's email address. Then, the instruction file is read (803), the first rule set is applied in the first rule set application procedure (804, 805, 809), and if no rule whose application condition is satisfied is found in the first rule set, the second rule set is applied in the following example procedure (806, 807).First, the correct answer contents are extracted one by one from all records in the R4DB (see FIG. 2F), and based on the extracted contents, the corresponding contents are searched for from the subject included in the header of the email, and scored. Then, all records in the R2DB are searched for records that match the score value, and if such records are found, that is, if a rule whose application condition is satisfied is found, the treatment ID can be extracted from the treatment ID field. Then, the execution part of the rule is executed (809). The first expected treatment is processed (808).

[0018] There is also an invention that extracts the sender's identification information from an arriving e-mail (Patent Document 5). This invention differs in that the sender ID is extracted from the header of the arriving e-mail. This invention can achieve its purpose without opening the body of the e-mail. Therefore, compared to the above invention in which the body of the e-mail is opened, the amount of communication traffic with the server, especially for mobile phones, that is charged can be significantly reduced. Fig. 9 is a diagram showing the configuration of another embodiment of the present invention described in the description of Fig. 6. An electronic secretary and instruction files R1DB, GDB, and R2DB are incorporated on the receiving server 901 side. Reference numeral 902 indicates a receiving client. Reference numeral 903 indicates a mail sending client. FIG. 10 is a flow chart of another embodiment of the present invention described in the description of FIG. 6. The method for requesting permission to communicate presented to the sender is to write the application contents in the subject of the email. The presented information includes at least the contents that prompt the sender to write the application contents in the subject of the email, and the electronic secretary is installed on the receiving server side. Rejecting the communication request is to notify the sending client of the email of an error occurrence and then to stop the communication. The system receives up to the envelope (1001), detects the sender's email address, reads the instruction file (1002), and applies the first rule set in the first rule set application procedure (1003, 1004, 1009). If no rule with the application condition is found from the first rule set, the system receives up to the header including the subject of the email in order to receive the subject of the email (1005), and then applies the second rule set in the second rule set application procedure (1006, 1007, 1009). Processes the first expectation (1008).

[0019] FIG. 11 is a partial flowchart of the early decision process of another embodiment of the present invention described in the description of FIG. 10. The early decision means that the decision to refuse receipt of the mail is made and executed before the reception of the mail body is completed. The present invention can decide to refuse receipt of the mail body by judging the subject of the mail. However, although the conventional SMTP-compliant mail sender has a step of checking whether it is authorized after sending the mail envelope and before sending the content, there is no step of checking whether it is authorized when the transmission of the mail content starts and before sending the body (see Non-Patent Document 4). Therefore, there is a possibility that there exists a mail sender that is implemented to ignore the error code returned when the sending client is terminated and resends the content by forcibly terminating it by closing the communication channel during the transmission of the content (i.e., early decision). The present invention can realize an early decision that can prevent the generation of unnecessary communication traffic even when receiving from such a conventional sender. The early decision process starts from the point where no rule is found that satisfies the application condition in the step of applying the first rule set (1004 in FIG. 10). The third rule set is applied in the next step of applying the third rule set. That is, the R3DB is searched (1101) based on the conditions that the sender ID (the sender's email address in this embodiment) matches and that a predetermined time has not elapsed from the reception time to the search time, and the result is judged (1102). If the record is detected, that is, if a rule that satisfies the application condition is found, the treatment can be extracted from the treatment ID field. Then, the execution part of the rule is executed (1110). If no rule that satisfies the application condition is found, the header including the subject of the email is received (1103), the second rule set is applied in the second rule set application step (1104, 1105, 1112), and the first expected treatment is processed (1106). However, if the treatment and first expected treatment of the second rule set execution part include a rejection of reception (judgment: 1107), a third rule is created based on the actual sender ID, the time of reception, and the rejection of reception treatment, and added to the third rule set (1108), and the communication request is processed based on the treatment, and if the reception is rejected during the treatment, a temporary error state is returned to the sending client, and the communication is forcibly stopped (1109), otherwise the communication request is processed based on the given treatment (1112). The purpose of executing the third rule is to cause a sender conforming to the SMTP of the prior art to stop before receiving the step: header that allows the formal stop of the prior art. Since it only needs to be executed once, once the execution part of the third rule is executed, the corresponding rule is deleted (1111).

[0020] Issuing a socket close command (close) of the TCP protocol is one example of the forced abort. When an SMTP-compliant sender retries transmission after a certain period of time, the third rule set is used as a rejection history. If the history detects a retry of the aborted sender, the system rejects the content transmission using standard SMTP methods. If no retry occurs, old rejection history is deleted. In this way, an early decision can be made to prevent the generation of unnecessary traffic. The third rule set for this purpose is called the abort third rule set. The embodiment shown in Figures 30 and 31 is proposed as an extension function of the conventional SMTP. When a sender that implements this function and the invention shown in Figure 10 are used simultaneously, the electronic secretary of the receiver does not need to handle the above-mentioned retry, and there is no need to rely on a forced stop means by a command of the TCP layer, which is located at a layer other than SMTP, and the traffic volume of the public network and the processing of the connected mail server can be further reduced for spam e-mails. If the third rule is set to a predetermined time longer than the retry interval (see non-patent document 4), the retry transmission can be reliably captured (YES in 1102), causing the sender to give up and preventing unwanted repeated retries. In step 1109, instead of a temporary error state, a failure response may be returned to the sending client. Instead of the header, after receiving part or all of the content, if the correct answer to the question or the expected keyword is not detected or is detected, it may be determined to be spam. Fig. 12 is a flow chart of another embodiment of the present invention described in the description of Fig. 6. The presented information presented to the sender causes the sender to apply for permission to communicate, the presented information includes at least a content that prompts the sender to write the application content in the e-mail, the electronic secretary is installed on the receiving server side, and refusing the communication request means notifying the sending client of the e-mail of an error occurrence and then stopping the communication, and when the communication request arrives, the electronic secretary first receives the e-mail envelope including the actual sender ID, applies the first rule set, and if no rule with the application condition is found, receives the content of the e-mail and accepts the application. The electronic secretary receives the envelope (1201), detects the sender's e-mail address, reads the instruction file (1202), and applies the first rule set in the first rule set application procedure (1203, 1204, 1209). If no rule whose application condition is satisfied is found from the first rule set, the content is received (1205), and the second rule set is applied in the second rule set application procedure (1206, 1207, 1209).The first expected occurrence is processed (1208).

[0021] FIG. 13 is a flow chart of another embodiment of the present invention described in the description of FIG. 6. When the second rule set is applied, if a second rule for which the application condition is satisfied is found, the treatment of the execution part of the found second rule is given to the caller. The ID is detected (1301), the instruction file is read (1302), the first rule set is applied (1303), the result is judged (1304), the second rule set is applied (1305), the result is judged (1306), and the first expected treatment is processed (1307). The difference from FIG. 5 is that when a second rule for which the application condition is satisfied is found, the storage condition is further judged (1310), and if the condition is satisfied, the electronic secretary gives the treatment of the execution part of the found second rule to the caller. That is, based on the ID and the treatment of the caller, a first rule is created and added to the first rule set (1309), and the communication request is processed based on the treatment (1308). Typically, one of the storage conditions is that the treatment of the execution part of the second rule found is not application acceptance. The storage conditions can be specified or changed by the parties. This process is called automatic screening. If you use this method, when the recipient answers the specified questions correctly, all parties who have contacted the recipient at least once will be automatically stored in the first rule, and the same questions will not be asked a second time. Application acceptance treatment is not usually given to specific parties. If you downgrade the communication permission treatment to a party you have given, and give application acceptance treatment, it is useful as a record of communication with that party. Step 1307 handles the case based on the initial treatment. The initial treatment in this example is to present the presented information to the caller and then refuse to receive the call. If the caller is unknown, it is necessary to present the presented information in order to have the caller apply for permission to communicate. If the presented information was not presented in the exchange of application acceptance, it can be presented in this step. It is also possible for the parties not to present it at their discretion. FIG. 14 is a flowchart of a part of another embodiment of the present invention described in the description of FIG. 5. The processing of this part is included in the processing block of the first expected treatment (FIG. 5, 507). That is, when the treatment is not determined by the first and second rules, the third rule set is applied in the third rule set application procedure (1401, 1402, 1405). When the rule is applied, the corresponding rule is deleted from the third rule set (1406), and the first rule is created based on the caller ID and the predetermined treatment and added to the first rule set (1407). When no rule is found whose application condition is satisfied, the third rule is created based on the caller ID, the time of reception, and the predetermined treatment and added to the third rule set (1403). The electronic secretary executes the original first expected treatment (1404).

[0022] In the case of an unknown sender, the present invention automatically replies to the sender to verify the sender's identity. However, currently, the reply addresses of most spam mails are forged. If an automatic reply is sent, there is a possibility that a new spam mail will be created. In the case of a second mail received from the reply address, if the sender does not include information that can verify the sender's identity, the present invention ignores the specified treatment and rejects the mail if the sender specifies ignoring and refusing to receive the mail, and then rejects the mail without an automatic reply. Similar to the third rule, a time element may be incorporated into the condition part of the first rule. For example, the first rule with the rejection treatment may be deleted after one month or more. This allows rejected callers to return to the initial expected treatment again, preventing the first rule set from becoming too large. Forged and unreplyable addresses are immediately given the rejection treatment. In the case of telephone calls, this invention can prevent attacks by repeated applications. The present invention provides the other party with a limited number of application opportunities, and deals with repeated applications by machines, etc. This can be achieved by including the number of times as an execution condition, or by giving a limited number of application treatments. Please note that the purpose of using the third rule set is different from the purpose of using it for forced cancellation mentioned above. Fig. 15 is a diagram showing the configuration of another embodiment of the present invention described in the description of Fig. 5. An electronic secretary and instruction files R1DB, GDB, and R2DB are incorporated in the party terminal side 1501. It is equipped with a means for communicating through real-time interaction. A party terminal 1502 having control can communicate with the called party terminal 1501 without the intervention of the called party, and can send control commands 1510 to the terminal 1501. A party terminal 1503 that has been granted communication permission treatment can perform normal two-way communication 1520 with the terminal 1501. Communication and control can coexist. Fig. 16 is a flow chart of another embodiment of the present invention described in the description of Fig. 5. The communication is a telephone communication, the presented information includes an explanation of the conditions for receiving the communication, and when a communication request is received, the electronic secretary first applies the first rule set, and if no rule with the applicable conditions is found, the electronic secretary accepts the request, and in the step of accepting the request, the presented information is presented to the caller, and the second rule set is applied after receiving the caller's response, and if no rule with the applicable conditions is found, i.e., no treatment can be determined, the electronic secretary processes the communication request based on the initial expected treatment. The system detects the ID (1601), reads the instruction file (1602), applies the first rule set and judges the result (1603, 1604), and if no rule is found whose conditions are met, presents the presentation information to the sender, receives the sender's response (1605), applies the second rule set and judges the result (1606, 1607), and depending on the result, handles the communication request based on the initial expected treatment or the treatment given (1608, 1609).

[0023] Fig. 17 is a flowchart of another embodiment of the present invention described in the description of Fig. 5. The presented information includes a question to be presented to the sender, and the expected application content is an answer to the question that has obtained a predetermined total score, and the instruction file includes the question to be presented to the sender, a fourth rule set (hereinafter referred to as "fourth rule set") described in a rule having a condition part having an application condition related to the correct answer to the question, and an execution part of an action related to the score (the fourth rule expresses the matter that "if the answer to the question from the sender is correct, add up the score and tally up the total score"), and the electronic secretary is further capable of the following operations: (a) present the question to the sender, (b) receive the sender's answer to the question, and (c) apply the fourth rule set. This part of the process illustrates the procedure of repeatedly presenting a guidance message, receiving a response, and judging the accuracy of the response. It corresponds to the process block of "presenting the presentation information to the sender and receiving the response of the sender" in FIG. 16 (FIG. 16, 1605). It judges whether the processing of the rule data record is complete from the R4DB (1701), extracts it (1702), presents a question to the sender, and receives the answer from the sender (1704). One question may have multiple correct answers. For example, when checking an identification number, there are multiple identification numbers. In this embodiment, the mechanism for checking multiple correct answers (1705) does not ask the same question, but checks whether the answer received at the previous question is the next correct answer. This is judged by adding a question presentation unnecessary indicator to the R4DB or by leaving the question field blank (1703). There are cases where it is not necessary to present all questions. For example, there are cases where the identity of the other party can be determined by the first question. This embodiment has a mechanism for early termination of the question and answer session if the total score (1706) exceeds a predetermined score (1707). The system that performs this process has a means for receiving the caller's response according to the type of presented information. For example, when an answer is obtained by pressing a telephone number, the system has a means for recognizing the pressed number.

[0024] In the case of telephone, the caller is identified by the calling telephone number. This invention can identify the caller by an identification number or password issued by the party concerned. Using the identification number, communication is possible from any calling terminal. Fig. 18 is a diagram showing the configuration of another embodiment of the present invention. The electronic secretary and instruction file are incorporated on the communication service providing server 1801 side. Each party has its own instruction file, and multiple parties can use it. A party with usage rights inputs data to build his / her own instruction file from any terminal 1803 or telephone (1820). A communication request or control command from the caller terminal 1802 is sent via the electronic secretary server (1810). Fig. 19 is a diagram showing the configuration of another embodiment of the present invention. The electronic secretary has a means for accessing the instruction file through a network (1930), and one manager uses multiple electronic secretaries (1901, 1904). The multiple electronic secretaries access one instruction file 103. Reference numeral 1940 indicates an email via server 1904. The fifth rule set (Fig. 2G, R5DB) created by the electronic secretary is also saved in the instruction file 103 (not shown in Fig. 19). FIG. 20 is a flowchart of the outgoing call processing part of another embodiment of the present invention described in the description of FIG. The method is characterized in that the instruction file further includes a fifth rule set (hereinafter referred to as the "fifth rule set") described in a rule having a condition part having application conditions related to the recipient ID and the calling time, and an action part instructing the implementation of an action corresponding to the treatment, and the electronic secretary is further capable of the following operations: (a) applying the fifth rule set, (b) sending a communication request to the recipient and receiving the treatment, and (c) creating the fifth rule and adding it to the fifth rule set.

[0025] All rules in the fifth rule set relating to the destination recipient ID, the time of call, and the treatment are searched for a rule whose application condition is satisfied, and the result is judged (2001, 2002). If a rule whose application condition is satisfied is found, the call request is processed based on the given treatment (2004). If the rule is not found, a communication request is sent to the recipient, and the treatment is received (2003). If the recipient is the electronic secretary of the present invention, the treatment received is determined based on a specified return code, and communication is performed (2005, 2006). If the recipient is using conventional technology, for example, a conventional mail receiving server, it is desirable to regard a permanent error code as a rejection of reception. If the treatment received is "cannot communicate immediately", a fifth rule is created based on the callee ID, the time of call origination, and the treatment, and added to the fifth rule set (2007). The main purpose of this invention is to prevent nuisance communications at the source. It is preferably operated on a server as shown in Figs. 18 and 19, and the caller cannot be prevented from inputting the "cannot communicate immediately" treatment, including the refusal to receive, into the R5DB (2007). If the treatment given to the other party is refusal to receive, repeated calls are prevented within a specified time. It is preferable that the server administrator sets the specified time. For example, if a treatment such as "please try again in an hour" is given, this can be implemented on the sending server side. If the R5DB is not cleared, the number of R5DB records for callers of large amounts of nuisance communications will increase indiscriminately. The server administrator can manage the caller by lowering the sending efficiency or issuing a warning depending on the number of R5DB records. A communication request originating from the inside can be treated according to the first rule set for outgoing calls set by the administrator of the communication device. Note that the first and fifth rule sets for outgoing calls have different purposes.

[0026] FIG. 21 shows a system for anonymous communication between electronic secretary users. The first and second parties are users of the electronic secretary of the present invention. As shown in FIG. 1, the electronic secretary operates between the terminal and the communication network, and is incorporated in the party terminal side or the server side that provides communication services (not shown in FIG. 21). The first and second data are personal information of the first and second parties, respectively. This information is shown in FIG. 3A, which describes the PDDB, and includes party IDs such as phone numbers, names, pseudonyms, addresses, educational backgrounds, work history, etc. The server system 2103 stores the personal information PDDB and VDB of the parties who wish to communicate anonymously, and provides services such as searching for communication partners to start anonymous communication. This form relates to anonymous communication between two or more parties. For contrasting background art, see mainly Patent Document 10. The problem is to realize anonymous communication easily and conveniently. The main means is the creation of a communication channel between the parties by controlling permission treatment. FIG. 3A is a record layout diagram showing the contents of a party data database (hereinafter referred to as PDDB) of one embodiment relating to party data. FIG. 3B is a record layout diagram showing the contents of a Verification Data Database (hereinafter referred to as VDB) according to one embodiment of the present invention, which relates to data for recording a verification request. FIG. 3C is a record layout diagram showing the contents of a verifier data database (hereinafter referred to as VRDB) of one embodiment relating to data for recording verifier information. Fig. 22 is a partial flowchart of the processing of the first party. Fig. 23 is a partial flowchart of the processing of the second party. Fig. 24 is a flowchart of the processing of searching the server, sending data, and exchanging benefits. The present invention can be used by two or more parties at the same time. In the following description, it is assumed that the first party enters the treatment to be given to the data disclosure party in the PDDB, gives the proxy permission treatment to the server (2202), and the second party sends a search request to the server (2302). See Example 4 for another example of party data other than the PDDB.

[0027] The parties 2101 and 2102 input the first and second data and at least one party rule for disclosing the data to the server 2103 and give the server permission to communicate (2110, 2111, 2201, 2301). The server receives the party data and the party rule and stores them in the PDDB (2401). The party rule includes a profile of candidates who will and will not disclose information, whether confirmation is required before disclosing information, and information on what information will be disclosed to what candidates, and stores the profile in the disclosure authorization profile of the PDDB. The second party sends a search request including search criteria (2112, 2302), which the server receives and searches the PDDB (2402). The search results, such as the number of records that meet the criteria, are sent to the second party (2303, 2403). It is determined whether the first data satisfies the search criteria (2404), and if there is first data that satisfies the search criteria, it is determined whether the first party rules are satisfied (2405), and if so, the first data is sent to the second party (2113, 2303, 2406). If the first party gives the server a proxy permission treatment and inputs the treatment to be given to the second party to which the first data is to be disclosed in the PDDB, the server acts on behalf of the first party's operation and gives the second party the treatment to be given to the disclosure target included in the first data (2113, 2407). It is determined whether the second party rules are satisfied (2408), and if so, the second data of the second party is sent to the first party (2114, 2203, 2409). Party rules can include a requirement that an identity be verified before information is released. Party rules can specify a condition that information about the party has been verified. It is possible to ask the server to verify information about the parties. The information about the verification is stored in the verification database VDB, and the verifier information is stored in the verifier data database VRDB.

[0028] When the instruction file of the party is stored on a server in the network, the server is logged in based on the access permission information (ID, password) and data is entered into the instruction file. Proxy permission is implemented by inputting the information into the instruction file based on the access permission information entered by the requester. When the instruction file is stored locally, proxy permission is implemented by giving the server information transfer permission and inputting the information into the local instruction file. The implementation of a process in which a server processes a search request and determines whether a first piece of data satisfies the search criteria and whether a first (second) party rule disclosing the first (second) piece of data is known from US Pat. No. 5,399,633. There are many search techniques that can be used, including keywords, fuzzy logic and natural language search tools. According to the present invention, the called party holds the key to the success or failure of communication, so the connection between the party ID, such as a telephone number, and the identity can be severed. A personal telephone number or email can only be connected to parties within a range that can be easily trusted. An effect similar to that of a dedicated network in a public network can be obtained. Since the present invention can later refuse communication with a party using a public network communication ID known to the other party, it is possible to realize anonymous communication in which all communication functions can be easily used using a normal number while maintaining anonymity, as long as the party does not disclose their identity. For example, the present invention does not require the intervention of a dedicated central controller that removes the identity from the communication content. There is also no need to create a special communication channel. Compared to anonymous communication technology (see Patent Document 10) that requires a dedicated central controller and two steps for data exchange between the parties, the present invention can easily realize anonymous communication and easy data exchange. The communication service provider provides an ID to the party using the communication service, and the party's identification information is stored in a server using a method in which a party selected from the group consisting of the communication service provider and a third party registers the party's identification information. The communication service provider that manages the server or a third party such as a security service provider that cooperates with the communication service provider has a statutory obligation to protect information. In the event of damage due to illegal activity, the other party's identity can be investigated through legal means, so communication can be done with peace of mind.

[0029] You can cut off the communication relationship by resetting the other party's treatment to refusal to receive calls. If necessary, you can use an additional ID and make a new contract for a phone number dedicated to anonymous communication in addition to the phone number you normally use. For example, Nippon Telegraph and Telephone East Corporation offers an additional number service in addition to the original subscriber line number, and the additional number can also be used as the caller ID. In the case of email, a new address can be used as an additional ID. If you no longer need anonymous communication and feel that setting the treatment to refusal to receive calls is a burden, you can simply cancel the contract for the additional ID. The concept of treatment in ordinary terms is a give-and-receive relationship. The term treatment in this invention is also a give-and-receive relationship, but "treatment exchange" does not necessarily mean exchange at the same time. In this invention, only one party can give permission to communicate, and only the other party can communicate. FIG. 25 is a flow chart of another embodiment in which a control permission treatment is added to the present invention described in the description of FIG. 4. FIG. 26 is a diagram showing the configuration of one embodiment in the present invention described in the description of FIG. 25. The administrator of terminal A 2601 gives information transfer permission and program execution permission treatment to terminal C 2603. When information is transferred from terminal C to terminal A, the data is written to the storage device 13 of terminal A (2610), and attention-calling permission treatment is given, it is possible to output information to the display unit 18 through terminal A and output sound from the speaker 17 to call the attention of nearby parties. Terminal B 2602 and terminal A perform normal two-way communication (2620). When information is received from terminal C requesting confirmation of the bank's electronic payment, an authentication program is started, and the holder of terminal A inputs a fingerprint through the fingerprint sensor. The authentication program compares the input fingerprint information with the registered fingerprint information, and only if there is a match, it sends a pre-registered PIN to terminal C to confirm the payment.

[0030] FIG. 27 is a conceptual diagram showing the configuration of another embodiment of the present invention. The administrator of the mobile device 2701 has given the caller of terminal A 2702 permission to obtain location information. Terminal A issues a location information obtainment command 2711, and the mobile device obtains location information by a location obtainment means installed in the mobile device according to the command, and transfers the obtained location information to terminal A (2712). The location information includes information selected from the group consisting of a received GPS (Global Positioning System) location signal, location information converted from the received GPS location signal, current location information of a PHS (Personal handy phone) terminal, and mobile terminal location information provided based on mobile phone base station location information (hereinafter referred to as "specific location"). The specific location includes information selected from the group consisting of a GPS location signal received from a GPS satellite 2704, location information converted from the received GPS location signal, current location information provided based on base station 2705 location information of the PHS terminal, and mobile terminal location information provided based on mobile phone base station 2706 location information. When the mobile communication device (hereinafter referred to as "mobile device"), which is the communication device of the called party, issues a communication request to terminal A having a preregistered ID, it detects the speed or the location information and transfers it to terminal A (2714), transfers the movement plan information to terminal A, and further gives terminal A the treatment of (a) information transfer permission and (b) attention calling permission. Terminal A transfers the information to the mobile device, causes the information display means of the mobile device to output the information, and calls the attention of nearby parties through the attention calling means of the mobile device (2715). For example, groups of nearby moving vehicles, mountain climbers, etc. that wish to notify each other of their positions can notify each other of their positions and display them. The speed of the mobile device can be obtained from terminal A, which has been given permission to obtain the speed, in the same manner as the position information obtainment command. Then, terminal A can obtain the movement information from the mobile device only when necessary. The electrical configuration of the mobile device, the calculation of the movement speed and direction, and the estimation of the traffic state are publicly known from Patent Document 14. The above-mentioned attention-raising includes generating in the mobile device one selected from the group consisting of sound, light, and vibration. The movement plan information includes arrival destination information, and the information transferred to the mobile device includes one selected from the group consisting of map information, recommended route, current route, ahead congestion information, detour route information, and weather information. The above-mentioned position information includes a specific position. Terminal B 2703 and the mobile device perform normal two-way communication (2713). A system for supervising wandering elderly people appeared several years ago. The present invention is not only an element that can obtain (control) the location information of the caller. Please note that the present invention also includes an element that can make a call.

[0031] FIG. 28 is a flow chart of another embodiment of the present invention related to dynamic route guidance (see FIG. 27). This example is aimed at providing an efficient vehicle driving guidance function to a mobile terminal having a location information acquisition function, for example, a mobile phone equipped with a GPS. When a communication request is issued to a server terminal of a fixed terminal having a preregistered ID, the current location and destination information of the mobile terminal are transmitted to the server, and the server receives them (2801). The server searches for a recommended route and transmits it to the mobile terminal (2802), then searches for congestion information on the recommended route at a predetermined interval (2803) and determines whether congestion will occur (2804). If congestion will occur, the server that has been given location acquisition permission acquires the current location of the mobile terminal and checks the route to be traveled (2805). If congestion will occur before the route to be traveled, it searches for a detour (2806, 2807). If a detour exists, the server that has been given information transfer permission and attention alert permission transfers the detour information to the mobile terminal and then notifies the driver by voice (2808). Route search requires a large amount of calculation and calculation speed. It is inefficient to search dynamic road traffic information from a mobile device. The present invention leaves to the server operations that an inexpensive portable mobile terminal cannot perform, and communicates with the mobile device only when a traffic jam occurs that the driver may be caught in, and notifies the mobile device of detour information. By giving the server control permission, the receiving driver does not need to perform any operations himself. Route search and detour search are publicly known from Patent Documents 7 and 8. Fig. 29 is a conceptual diagram of another embodiment of the present invention related to location information, etc. When a mobile device 2701 detects a change in location, it transfers (2911) the changed location information to terminal A 2702 having a preregistered ID. Terminal A grants the mobile device permission to transfer information and permission to alert. The control permission includes permission to listen in. It is assumed that the administrator of the mobile device grants permission to listen in and permission to monitor to the caller of terminal A. A communication request, a listening command, and a monitoring command are issued from terminal A (2921). In accordance with the commands, the mobile device sends to terminal A a voice signal acquired by a transmitter installed therein and an image signal acquired by an imaging device (2922). This example can be used for a mobile device for supervising a child. For example, a parent can check the location of the child and listen to the child's activities such as playing in the park or commuting to school. Location information that changes when the child is out of school or on the move is automatically transferred to the parent's terminal A. The mobile device is preferably a PHS, and information is transferred by email, which is a packet communication. Terminal A is preferably a personal computer that is always connected to the Internet via an ADSL line or the like, and the location of the child carrying the mobile device is displayed on a map in real time. It can also be used for car crime prevention. If there is an unexpected movement of the vehicle, a warning is sent to the owner and it can be tracked. If high location accuracy is required, such as for taxis and transportation businesses, it is preferable to use a GPS location acquisition means.

[0032] An image display unit that adds mobile device position information to map data and displays the map data on an image is known from Patent Document 9. The first rule set of the present invention is a receiver (administrator) driven mechanism, and location acquisition permission can be granted to any caller that the administrator decides. Therefore, the caller can directly acquire the location of the mobile device without relying on a third party relay such as a service center fixed to the receiver, which is different from the invention shown in Patent Document 9. FIG. 30 is a diagram showing the configuration of a mail sending client for pairing with the embodiment of the mail receiving of the present invention (FIG. 10) of the system described in claim 131. An email 3003 stored in the storage device 13 of the sending client 3001 is sent to the receiving server 3002. For an example of the configuration of the email 3003, see the conventional technology SMTP (Non-Patent Documents 4 and 5). FIG. 31 is a flowchart of an example of the sending client of the method described in claim 113 used by the system described in claim 131. Initialization of the session, initialization of the sending client (3101). Envelope sending (3102) is performed by issuing SMTP-compliant commands: MAIL command, RCPT command, and the sender and recipient email addresses are transmitted to the receiving server, and it is checked whether the envelope has been accepted (3103). The process up to this point is the same as SMTP. In order to determine the authorization to send the body based on the information included in the header, the information field included in the header is sent (3104), and the information field contains information that allows the recipient to determine the specified receiving conditions, and it is checked whether the authorization is granted (3105). In the present invention, this step is called the "INFO command." The receiving server can compare the received envelope and the information field with the receiving conditions specified by the recipient and determine whether or not to authorize the transmission of the next body. If authorized, it issues a conventional DATA command to transmit the content (3106). If authorized and accepted, it processes the transmission normally and deletes the sent mail from the storage device 13 (3107, 3109). If not authorized, it performs error processing (3108).

[0033] In the conventional technology SMTP, after authorizing the envelope, the content is sent as one block and an authorization check is performed. When only commands in the mail transfer protocol hierarchy are used, the content cannot be rejected until the entire content has been received. Therefore, even if it is determined that the content should be rejected based on its contents, unnecessary communication will occur. On the other hand, in the content specification (Non-Patent Document 5) that has already been widely used, information fields called Subject, Comments, and Keywords, which have a purpose and have information content that can be read by humans, can be written with information that allows the recipient to determine the specified receiving conditions. Even existing mail communication software has a means for writing information in the above fields. If the sender does not know the recipient's receiving conditions at first, the receiving server side informs the sender of the recipient's receiving conditions by an automatic reply means. Furthermore, the email address of the sender who satisfied the receiving conditions only once is recorded, and for the second and subsequent transmissions, if the sender satisfied the receiving conditions last time based on the sender address included in the envelope, the information field is not checked and the content is passed through. As a result, the receiving server can determine whether or not to authorize the transmission of the body based on the received envelope and information received before receiving the body. As a standard for approval of sending the body, it is desirable to separate the information field from the header and send it before the content, but in order to make the most of existing communication software, the information field may be extracted from the header and sent first, and if approval is granted, the content may be sent without changing it from the conventional one, that is, with a DATA command that sends conventional content (3106). Alternatively, the header may be sent first, and if approval is granted, the body may be sent. As described above, the present invention utilizes the already widely accepted subject field to create an efficient email communication system that can prevent spam emails. BEST MODE FOR CARRYING OUT THEINVENTION

[0034] When the present invention is operated on the server side, it can simultaneously prevent nuisance communications and reduce the overall network traffic. When the control permission function is used at the same time, a multi-function terminal can be realized. A payment system consisting of connection by packet communication, treatment based on a virtual account, and authentication by the fingerprint recognition function attached to the mobile phone allows for robust and convenient cashless business transactions. Example 1

[0035] Multi-function telephone (3201) Fig. 32 is a block diagram showing the configuration. Reference numeral 17 denotes a microphone and a speaker. Figs. 33A to 33D show the TDB, R1DB, R2DB, and R4DB. The presented information is a question to be presented to the caller. The question is a pre-recorded audio file. In this example, a blank question field indicates that a question does not need to be presented, the predetermined total score for early termination of the question-and-answer session is 3 (see Fig. 17, 1707), and the storage condition for automatic review is that if the total score is 5, the caller is automatically given treatment of the second rule execution unit (see Fig. 13, 1310). Figure 34 is a schematic flow chart of the process, and the basic part is the same as Figure 13. In this embodiment, the party terminal is a telephone, or the party terminal function is built into a PC, or it can be realized as an external adapter dedicated to telephones. When a call is made for the first time from a telephone number that the recipient does not recognize, a question message is sent to the other party, who responds by pressing the dial button. Treatment is decided based on the response. FIG. 35 shows an example of an operation in which the telephone number of a related person is automatically given the treatment of being able to make a normal call by automatic screening. A wide variety of functions can be set, from basic nuisance communication prevention functions. The instruction file settings in this example can achieve the following functions. For each other's phone number, you can specify reception (treatment ID = 4), specified rejection (treatment ID = 1), and since an application acceptance is required for unknown callers, the call is automatically answered immediately without ringing, so the other party is charged for the communication fee. This makes it possible to impose economic sanctions on callers who make incomplete calls from the machine (one-ring calls), and since the caller does not respond correctly, the total score = 0, treatment ID = 0, rejection, and the number will not remain in the call history. However, if you give permission, the call will ring as normal and you will not be charged until the recipient answers. If you get the name of the caller wrong in the first question, the call will be immediately rejected. If you press 4 for another matter, the second question will be sent, and you will be prompted to press the dial button 1 for real estate sales, 2 for English conversation, 3 for daily necessities, and 4 for sporting goods. When each selection is made, depending on the score, the call will automatically ring, record without ringing, disconnect, or not automatically store the caller number when a call is made, or automatically store it. When the PIN code 5678 is pressed, the call will be automatically connected without ringing. This allows you to monitor and eavesdrop on babysitters and children at home. For example, parents can choose whether to talk to or eavesdrop on a child's cell phone.

[0036] The first question in this example is simple, but it can be made more complex to suit your needs. For example, if you give your first and last name as two questions, presented in sequence (after you answer the first one correctly, the second one is presented), and present five options for each, the odds of getting the right answer by answering randomly are reduced to 1 in 25. The number you enter in the answer column can have a variety of functions depending on how you use it. For example, it can be used as an extension number, and if the guide question is set to "Please dial the extension number," calls from people who know the number can be answered regardless of the calling number. When special treatment is given to the calling number of the other party's home telephone, if the same person calls from a public telephone, the information message asks the person to enter his / her home number as identity verification, and the entered number is collated with the treatment information to determine the treatment. The specific method of reviewing the benefits application will vary depending on the specific configuration of the device of the party. A variety of methods can be used as long as they achieve the objective of the review stage of the present invention. For example, voice recognition or image recognition can be used. Existing automated telephone transaction technology used by banks etc. provides voice guidance to the caller, who then operates the dial buttons and confirms the customer's identity by entering a PIN number. This invention differs in that the response method is different for each call number and that the caller does not need to register a PIN number in advance. In this example, the electronic secretary accepts the intentions of the parties using rules and points, but it is also possible to accept requests in natural language. For example, "Receive calls from people who know my name," or "Receive solicitation calls related to used car sales." Using known rule-based technology (see, for example, Patent Document 11), the electronic secretary can listen to these requests, have the user input missing information, and create the necessary rules. The electronic secretary of the present invention can be installed on the telephone exchange and related service providing server side using known technology (for example, see Patent Document 6). Symbol 21 is an electric lock control unit, and symbol 22 is an electric lock of a controlled device. When number 8765 is pressed, score=10, treatment ID=6, and an unlocking signal are output, unlocking the front door. The unlocking communication line may be a short-distance communication means such as infrared other than a telephone line. The present invention differs from the invention shown in Patent Document 21 in that it includes an element of a second rule set in which the decision on whether or not to allow communication does not depend on the caller ID. Therefore, it is possible to authenticate the caller from the content of the communication, and real-time control is possible. Example 2

[0037] Answering machine (3601) Fig. 36 is a diagram showing the configuration of a telephone set according to this embodiment. Figs. 37A to 37C show a data database (GDB) for recording a TDB, an R1DB, and response guidance (presentation information). This example illustrates the concept of the present invention, that all communications are subject to a permission system with multiple treatments, and a means is provided to give permission to unauthorized parties. In this example, calls from unknown parties are recorded and not answered directly. This protects the elderly and other vulnerable from fraud. Except for use with unspecified parties such as business, it is suitable for users with a relatively limited communication range. It is also possible to reject all calls from unregistered outsiders, and as the usage time accumulates, the treatment settings are naturally completed, allowing the purpose to be achieved without excessive burden on the parties involved. The example given is a first-time caller pretending not to be home, and if you can confirm the caller's identity by their voice, you can immediately start talking. It is desirable to make the system more convenient to use, such as by allowing you to easily register the number of the last caller you spoke to with the push of a button. If you have an important customer, you can register the number of the caller in advance. Caller identification can be by group. For example, by area code, and communication permission can be given to hometown numbers. This example is simple, easy to use, and low in manufacturing cost. It can be implemented in an external adapter for telephones, or in the server side that provides exchanges and related services.

[0038] In the past, it was taken for granted that if you paid to make a communication request, the recipient would receive it. However, with the development of communication networks, it is becoming increasingly costly to make communication requests, and more and more people have access to communication networks, so there is no reason to accept communication requests from anyone. At the very least, you should be able to reject calls from people who are completely unrelated to you. Conversely, except for public services, the person making the call usually knows the person they want to talk to in advance and has a reason for calling. Therefore, the permission-based communication of the present invention can prevent nuisance communication without sacrificing most of the conventional communication functions. This invention differs from the invention shown in Patent Document 12 in that it allows a one-time call to be made to a caller such as a mail order salesperson without going against the recipient's wishes by using the "attempt to answer" policy. This invention differs from the invention shown in Patent Document 34 in that it has a "call rejection" policy. Example 3

[0039] Mail receiving client system In this embodiment, an electronic secretary is built into the terminal of the person concerned. This will be commercialized as a PC (personal computer) application (URL: http: / / www.netinfotech.co.jp, http: / / www.Emailship.com) and will be publicly available for sale soon. Fig. 38 is a block diagram showing the configuration of the third embodiment. In this figure, reference numeral 10 denotes a server device of an ISP. Reference numeral 381 denotes a mail service party terminal. This embodiment is a client of the mail service server of an ISP, reference numeral 11 denotes a processor, which is composed of a CPU and the like, and controls each part, transfers data, performs various calculations, temporarily stores data, etc. Reference numeral 12 denotes an input / output control means, which controls data input from a server connected via a communication line, and controls data output to the server. Reference numeral 15 denotes a communication transfer device, which is connected to the ISP. Reference numeral 16 denotes a keyboard and a display unit, and reference numeral 13 denotes a storage device. First, such programs are used in the processor 11, and are composed of, for example, a program for setting the treatment, initial expected treatment, required confirmation question, correct answer (keyword), and treatment to be given to the correct answer on the display unit, as well as the main electronic secretary program. Next, data such as instruction files are stored in the storage device 13. A magnetic storage medium is used as the storage device. Figures 39A-D show the TDB, R1DB, R2DB, and GDB. A question and presented information are automatically returned to the sender. Figure 40 is a schematic flowchart of the receiving process. The basic part is the same as Figure 8.

[0040] Processor 11 displays a question input screen as shown in Fig. 41 on the display unit of terminal 381, and prompts the terminal operator to input the criteria for determining this treatment, i.e., the requested confirmation question, the correct answer, and the treatment to be given to the correct answer (4101). When the server receives mail from an unauthorized sender, it automatically replies to the sender with presented information and questions guiding the permission application, and asks the sender to enter the answer to the confirmation question in the subject of the reply mail while guiding the application. Most spam mail is sent automatically by machines. For example, if a correct answer is given to a confirmation question such as "What is one plus one?", it is clear that the sender is a human being and not a machine, and unlike an automatic e-mail sending machine, the recipient can decide for themselves whether they wish to receive future e-mails from such a human. Of course, there are many machines that can do addition, but it would not be profitable to create a machine that can automatically understand the questions posed to each person. The present invention can achieve the purpose without opening the body of the email. In particular, the amount of communication for the charged portion of the connection to the server, such as a mobile phone, can be significantly reduced. If the correct answer, such as the recipient's name or a keyword in an interesting category, is detected from the subject or body of the email, a specific treatment is given. In other words, the permission application procedure is implicitly performed, providing convenience to the sender. When searching from the body of the email, it is preferable to use the server-side resident form of the present invention. Processor 11 causes the display unit of terminal 381 to display a screen as shown in Fig. 42, and prompts the terminal operator to select an initial expected treatment 4202 from list 4201. Fig. 39A shows the treatment set adopted in this example, and a specific realization of the treatment of the application acceptance type is one of the treatments, "Reply a request confirmation question to the sender and refuse to receive." If necessary, it is possible to add a treatment such as "Reply a request confirmation question to the sender and receive only the subject."

[0041] A concrete implementation of the type of treatment that allows some communication is "receive limited size, save in temporary folder, and notify recipient." There is also the "receive" treatment that is necessary for manual review. The "receive and give receive treatment" treatment gives the receive treatment to the sender after receiving the email. If the email is received from an unknown email address, a request confirmation question is sent back to the sender as the initial expected treatment, and the email is rejected. In the initial setting of the product of this embodiment, first, after obtaining the confirmation of the parties, the recipients who are listed in the address book of the existing e-mail software are given the reception permission treatment (treatment ID = 4) (Fig. 42, 4203), and after that, the recipients can input the reception permission and rejection addresses and domain names individually at any time, and the treatment can be set and changed for each sender. Also, it is possible to extract the recipient address from the e-mail sent by the parties and set it to automatically give the reception permission treatment. 39A to 39D are examples of the treatment information that has been set, and the following functions can be realized simultaneously. That is, designated reception (treatment ID = 4) and designated rejection (treatment ID = 1) for each address or domain, Reject unwanted e-mails sent automatically by a machine (Treatment ID = 2), restrict reception of e-mails sent by unrelated people (answered by 1+1=2) and wait for manual treatment review (Treatment ID = 3), and give the sender the treatment of receiving e-mail only after receiving e-mails sent by someone who knows the recipient's name (Treatment ID = 5). In this embodiment, the presented information is processed in multiple languages ​​based on character code information contained in the mail header information and regional information contained in the suffix of the domain name of the sender address. The present invention differs from Patent Document 21 in that it includes an element of a second rule set in which the decision on whether or not to allow communication does not depend on the sender ID. Therefore, it is possible to prevent phishing fraud in which the sender address is forged by issuing a password (Fig. 39C, 5678) to the sender. It is equipped with a means for expressing interest in the sender through the presented information (Fig. 39D), and it is possible to search for the other party's response or keywords from the subject or body of the message, enabling communication that benefits both parties. Example 4

[0042] Internet videophone and surveillance system In this embodiment, an electronic secretary is operated on the server side, and a videophone terminal for parties communicating with each other via the electronic secretary is completed on the client side. 1: Fig. 43 is a block diagram showing the overall configuration. Fig. 44 is a block diagram showing the internal configuration of the first embodiment. In this figure, reference numeral 430 denotes a server, which is connected to the Internet via a route control device and a telephone line. Reference numerals 431 to 434, ... denote various terminals, which are connected to the Internet in the same manner as the server 430. Here, the terminals 431, 432, ... each have an output unit such as a CRT, LCD, or speaker, an input unit such as a keyboard, mouse, camera, or microphone, and a function for executing a videophone program. 1-1: Server Configuration Next, the detailed configuration of the server 430 will be described. FIG. 44 is a block diagram showing the configuration of the server 430 and the terminal. In this diagram, reference numeral 11 denotes a processor, which is composed of a CPU and the like, and controls each part, transfers data, performs various calculations, temporarily stores data, etc. Reference numeral 12 denotes an input / output control means, which controls data input from a terminal connected via the Internet, and controls data output to the terminal. Reference numeral 15 denotes a communication transfer device, which is connected to the Internet. Reference numerals 13 and 14 denote storage devices, in which the following files are stored and stored, respectively. First, a main program is stored in the storage device 14. This main program is used by the processor 11, and is composed of, for example, a program for displaying a treatment application screen on the display unit of the terminal, a treatment screening program for displaying detailed information on the party who sent the treatment application, a program for displaying the public name of the party who made the treatment application in the party's address book, a program for displaying the status of other parties, a program for starting a videophone program, and a program for displaying an icon for calling the other party.

[0043] Next, a party master database table and a treatment relationship master database table are stored in the storage device 13. The party master stores party information records. One party information record is composed of information unique to the party, such as a party ID, password, email address, IP address, self-introduction, etc. (See PDDB for another embodiment of party data). In this embodiment, the party ID is automatically assigned by the processor 11 when a new registration is made for service participation, but identity registration can be performed at this stage. The password, email address, and self-introduction are stored as information registered and transmitted by the party from the terminal 431, 432, ... The IP address stores the address of the terminal that transmitted the videophone communication program when the terminal 431, 432, ... is started. The treatment relationship master stores treatment information records. One treatment information record is composed of treatment information and treatment application indication information. When the present invention is operated on the client side, it records the treatment given to the other party using the R1DB. When it is operated on the server side, the highly efficient treatment relationship master TRDB (see Figure 2H) of this embodiment is desirable. Treatment information consists of the recipient's own ID, the caller ID to which the recipient gave treatment, and the treatment given. Treatment information and treatment application display information are information entered from the user interface of a program that displays a treatment application screen on the display unit of the terminal, and are information sent from terminals 431, 432, ... 2: Operation will be explained. Here, terminals 431, 432, ... are each connected to server 430 to communicate, and all function as terminals of the parties to the videophone call, but for convenience of explanation, the following explanation will be given assuming that terminal 431 is connected to server 430. When terminal 431 is connected to server 430, processor 11 detects this connection via input / output control means 12, and controls terminal 431 in accordance with the main program. Figure 45 is a flow chart showing the operation of such a main program.

[0044] 2-1: In order to explain the process of creating a party information record, it is assumed that the terminal operator is a new party. New registration will be explained. In step Sa1 shown in Fig. 45, the processor 11 displays a main menu screen as shown in Fig. 46 on the display unit of the terminal 431, and prompts the terminal operator to select a desired process from "Login" and "New Registration" in order to use the service. On this main menu screen, a mouse cursor MC is displayed, and various operations can be performed by clicking on a predetermined location. For example, if the mouse cursor MC is positioned on the display area of ​​either link button 4601 or 4602 and clicked, the process indicated in that display area is performed. Here, the terminal operator positions the mouse cursor MC on the display area of ​​link button 4602, and then performs a click operation (hereinafter, this operation will be simply referred to as click) to select the "new registration" process. Then, processor 11, detecting this, causes the procedure to proceed to step Sa2 shown in Fig. 45, where the terminal operator is prompted to input a name, email address, and password. If it is determined that the input email address is not being used in the party master, a user ID is automatically assigned by the processor 11 based on the input information, and the user ID is used as the public ID of the party. The next step Sa3 is then performed. In step Sa3, the processor 11 controls the terminal 431 to display the contact book screen shown in FIG. In the following steps Sa4 to Sa7, the user can return to the contact book screen and the main menu screen at any time by performing a predetermined operation. Now, in the case of a newly registered party, no contacts are displayed in the contact book on this contact book screen, but for the sake of convenience, the following description will be given using a screen on which several contacts already exist.

[0045] First, the addition of a new contact will be explained. In the present invention, in order to communicate with a contact, you first apply for special treatment. Adding a new contact is a specific procedure for applying for special treatment. On the screen for adding a new contact, you can specify the treatment you will give to the contact at the same time as applying for special treatment. The terminal operator is prompted to add a member. The terminal operator clicks link button 4701. Then, processor 11 performs processing of the next step Sa4. In step Sa4, processor 11 controls terminal 431 to display the member addition screen shown in Fig. 48, and prompts the terminal operator to input public ID information. Here is an example of a prior application. The public ID is one that the person concerned has disclosed to the other party himself on a bulletin board or chat on a communication network, or that the other party has directly told him. On this member addition screen, input boxes 4801 and 4802 for ID and self-introduction are displayed, and check buttons 4803 to 4807 corresponding to "disclose email address to this member", "disclose private email address", "disclose home page address", "disclose profile address", and "disclose my status to this member" are displayed for the information disclosure treatment to be given to the other party, and a selection box 4808 corresponding to "incoming call permission" for the incoming call permission treatment to be given to the other party is displayed. The terminal operator is prompted to enter and select the other party's public ID as 200 in the "identification ID" box, and the self-introduction as "This is..." is entered in the "self-introduction" box, and then the execution link button 4810 is clicked. The treatment set of this embodiment has three types of incoming call permission for videophone incoming call response methods: "automatic rejection of incoming calls," "prompt every time," and "automatic reception." "Automatic reception" is a control permission treatment. The caller instructs the called party's communication device (videophone terminal) that he / she has control, and can communicate with the caller without the called party's intervention. Of course, the terminal must always be in a state where it can receive calls.

[0046] The information disclosure range to the other party is configured by multiple selectable options from "disclose email address to this member", "disclose private email address", "disclose homepage address", "disclose profile address", and "disclose my status to this member" (4809), and there are two types of treatment application, "approval of treatment application" and "rejection of treatment application", and the default initial treatment is "inquire every time", and if all information is not disclosed, "approval of treatment application" is selected. This embodiment does not include a function to change the initial expected treatment. Now, by this operation, the procedure performs the next execution process of the treatment application (see FIG. 49). Here, the terminal operator is Party A, the other party with whom the user wishes to communicate is Party B, and Party B's public ID is 200. In order to process the treatment application based on the treatment given by party b to party a, the processor 11 first checks whether party a is already on party b's caller list by searching the already created party master (4901). If party a is on party b's caller list, the processor 11 checks the treatment given by party b to party a in relation to the treatment application (4902). If the treatment given is "treatment application rejected", the processor 11 controls the display unit of the terminal 431 to display "member addition rejected" (Sa8), and then returns the procedure to step Sa3 to display the contact book screen again. If party a is not on party b's caller list and the treatment given is not "treatment application rejected", the processor 11 gives the default initial treatment to party a, creates a new treatment information record consisting of b's and a's IDs, initial expected treatment, and treatment application indication information, stores this in the treatment relationship master, and returns to the contact book screen. In step Sa3, the processor 11 controls the terminal 431 to display the address book screen shown in Fig. 47. The terminal operator is prompted to confirm the personal settings. The terminal operator clicks the link button 4702. Then, the processor 11 performs the process of the next step Sa7.

[0047] In step Sa7, processor 11 controls terminal 431 to display the personal setting screen for the party shown in FIG. 50, displays public ID 5001 to the terminal operator, controls the display area of ​​the public ID to be write-protected, and enables changes to personal information 5002. 2-2: Login, In 2-1, the operator of the terminal 431 is the party a, who has completed a treatment application to the party b. Here, it is assumed that the existing party b is operating the terminal 432. For ease of explanation, the screens displayed on terminal 431 in the explanation of 2-1, Fig. 46 and Fig. 47 will be used in the following explanation as screens displayed on terminal 432 of party b. The following explanation will be given on the assumption that terminal 432 is connected to server 430. When terminal 432 is connected to server 430, processor 11 detects this connection via input / output control means 12, and controls terminal 432 in accordance with the main program. Fig. 51 is a flow chart showing the login processing operation of the main program. Now, in step Sa1 shown in Fig. 45, the processor 11 displays a main menu screen as shown in Fig. 46 on the display unit of the terminal 432, and prompts the terminal operator to select a desired process from "Login" and "New Registration" in order to use the service. Here, the terminal operator inputs an email address and a password in the "Email Address" input box 4603 and the "Password" input box 4604, and clicks on the link button 4601 to select the "Login" process. Then, upon detecting this, the processor 11 checks by searching for the already created party master based on the input email address and password (Fig. 51, 5101).

[0048] If processor 11 determines that the email address and password are incorrect, it advances the procedure to step Sa7, and controls the display unit of terminal 432 to display "Email address or password is incorrect," and then returns the procedure to step Sa1 to display the main menu screen again. On the other hand, if processor 11 determines that the entered email address and password are correct, it performs the process of the next step Sa3. In step Sa3, processor 11 controls terminal 432 to display the address book screen shown in FIG. 47, extracts the person who has newly applied for treatment from the treatment relationship master, notifies party b, displays party a who has applied for treatment in party b's address book in green with party a's public name souss (4705), discloses the status with a color and icon according to the information disclosure treatment given to party b by the other parties (4706), displays an email creation icon for parties who have disclosed their email addresses (4703), displays a link icon for parties who have disclosed their profile addresses (4704), and controls so that detailed information of the person corresponding to the pencil icon is displayed. When the link button (4707) is clicked, the processor 11 performs processing of the next step Sa5. In step Sa5, the processor 11 controls the terminal 432 to display an item editing screen of the friends list shown in Fig. 52, performs treatment review and treatment change on this screen, displays detailed information 5203 of the party a who sent a treatment request to the party b, and controls editing of the treatment 5201 to be given to the party a, thereby encouraging the party b to review the treatment request of the party a, decide the treatment to be given to the party a, and select the contents of each treatment. In addition to reviewing the treatment request, the processor 11 also changes the treatment given to existing parties on this item editing screen of the friends list.

[0049] Party B then selects each treatment content and clicks link button 5204. Processor 11 then updates the treatment information record based on the selected treatment content and stores it in the treatment relationship master. When severing the relationship with the other party, link button 5202 is clicked to delete the other party. Processor 11 then performs processing of step Sa6. In step Sa6, processor 11 controls terminal 432 to display the treatment application qualification designation screen shown in FIG. 53, and by selecting "treatment application rejection" for treatment application qualification 5301, future contact with the other party can be cut off. Party B then clicks link button update 5302. Processor 11 then updates the treatment information record based on the selected treatment content and stores it in the treatment relationship master. This example illustrates the implementation of the anonymous communication function part of the present invention. As long as the parties do not reveal their identities, anonymous communication can be easily realized using all communication functions while maintaining anonymity by using a normal number (ID). The server here is not a dedicated central controller that removes identities from communication content, and there is no need to create a special communication channel. To prevent crime, it is sufficient to register the identity at the stage of acquiring the ID. 2-3: Videophone communication. Assume that the parties a and b have established a relationship of mutual benefit through the processes described in 2-1 and 2-2, and that the terminal 431 of the party a and the terminal 432 of the party b are connected to the server 430. FIG. 54 is a flow chart showing the operation of the videophone communication program. In step Sa3, the processor 11 controls to display the contact book screen shown in FIG. 47, and the party b clicks the link button "Start program" (4708). Then, the processor 11 starts the videophone communication program on the terminal of the party b, and passes "-" as a start parameter. When the videophone communication program is started, the processor 11 transmits the IP address of its own terminal to the server (5401), and then judges whether the start parameter is an IP address or not (5402). If it is judged that the parameter is not an IP address, it displays a connection waiting screen and waits for connection (Sb3: connection waiting screen, FIG. 55). It checks for a connection request during standby (5405). The processor 11 updates the information record of the party b based on the IP address information sent by the terminal videophone communication program of the party b, and stores the information record in the party master.

[0050] Then, the status display icon (4709 in FIG. 47) of party b is displayed as a camera icon on the contact book screen of party a. Party a clicks on party b's camera icon 4709. Then, processor 11 extracts party b's IP address from the party master, starts the videophone communication program of party a's terminal 431, passes the IP address as a parameter (5403), notifies the caller ID, and requests a connection to the destination IP address, i.e., makes a call to party b and receives a response from the callee b's videophone communication program (5404). When the videophone communication program of the recipient b receives a connection request, it queries the processor 11 using the caller ID as a query parameter, and upon receipt of the query, the processor 11 extracts (5406) ​​treatment information from the treatment relationship master of the server 430 based on the caller ID, and returns the treatment given to the caller party a to the videophone communication program as the query result. If the treatment given to the caller party a is "automatic reception" (5407, YES), the electronic secretary instructs the receiver side communication device TV telephone terminal that the caller has control, and in response to this, the receiver party b's video telephone communication program permits the communication request without ringing, without displaying an input request screen and going through the input request, sends a response of connection approval, makes an automatic connection, and allows the other party to obtain the image signal captured by the camera, i.e., sends an image signal, and at the same time, when the image signal sent by the other party is received, it is displayed on the screen and a video telephone communication in progress screen (Sb2: video telephone communication in progress screen, Fig. 56) is displayed. On the other hand, the videophone communication program of the caller party a receives the approval response, and through steps 5404 and 5409, displays the received image signal on the videophone communication screen and communicates or monitors (Sb2). If the treatment given to the caller party a is "inquire every time" (Figure 54, 5408, YES), the videophone communication program of the called party b rings the bell, displays an input request screen (Sb4: approval inquiry screen: displays "Call from party a. Do you want to accept?"), and asks the called party b whether to connect or not.

[0051] At the same time, the caller's videophone communication program displays a screen waiting for the other party's approval (Sb1: Waiting for approval screen: displays "Waiting for the other party's approval..."). If the called party b approves the connection (Fig. 54, 5410, YES), the videophone communication program displays a videophone communication in progress screen and makes the caller's videophone communication program a respond that the connection has been approved. The videophone communication program running on the caller's terminal a then judges this response (5409, YES), displays a videophone communication in progress screen, and communicates. If the called party b does not approve the connection (Fig. 54, 5410, NO), the videophone communication program displays a connection waiting (status display: 5501) screen and makes the caller party a's videophone communication program respond that the connection has been rejected, and then the videophone communication program running on the caller party a's terminal judges this response (5409, NO), displays the connection result "Access Denied" (Fig. 55, 5502, Fig. 54, 5411) on the terminal display of party a, then displays a connection waiting screen and waits for connection (Sb3: connection waiting screen, Fig. 55). If the treatment given to the caller party a is "automatic reception rejection" (Fig. 54, 5408, NO), the same processing is performed as when the called party b does not approve the connection. 3: Flow overview Next, Fig. 57 shows the flow of establishing a relationship of service with the recipient party via a public ID. In order to receive the communication service of the present invention, the party a first uses a terminal 5701 to log in to a server 5702 via the Internet, and submits a service request to the party b, expressing the intention to communicate with the party b, using the public ID: 200 that the party b has made public (1). Party a, requesting treatment, enters recipient b's public ID: 200 (Figure 48, 4801), and at the same time grants party b the "always inquire" treatment (4808). The server saves the treatment "always inquire" that party a grants to the specified party b in the treatment relationship master (5703), and if party a does not exist in party b's caller list, party a is given party b's initial treatment of "automatic rejection of reception" (5704), and in this state party b can make calls and communicate with party a. Reverse communication is not possible. The recipient takes the initiative. The server informs party a that it has received the request (3), (4). When party b logs in to the server using terminal 5705, the party who has newly applied for treatment is extracted from the treatment relationship master and notified of this to party b (5)-(8). In FIG. 47, party a who has applied for treatment is displayed in party b's address book in green with party a's public name souss (4705), and the status is made public with colors and icons according to the information disclosure treatment given to party b by the other parties (4706).

[0052] Figure 52 shows detailed information about party a who has sent a treatment request to party b. Party b reviews the treatment request and decides what treatment to give to party a (Figure 52, 5201). The treatment given to party a, "always ask," is replaced with the treatment stored in the server, "automatic rejection of reception" (10). This allows parties a and b to send connection requests to each other's videophone counterparts. In this embodiment, control permission can be given to any one or more callers, and the caller can directly control the receiving device, start the TV communication program of the receiving device, and transmit and receive data to and from the receiving device. Instead of controlling the camera of the TV phone in this embodiment, it can also be implemented to control the GPS receiver of a mobile phone. The fact that any caller who has been given control permission can directly obtain and display the location information of the receiver is different from the conventional technology shown in Patent Document 9, in which location information can only be obtained from a fixed location information center at the product design stage. Since a third-party location information center is not required, a remarkable effect is obtained that brings about a significant reduction in the operating costs of the hardware equipment and the user. A model with a means for displaying the location information of the mobile phone itself can obtain the original data for display from the other party's mobile phone and display it on the display means of the mobile phone itself. Example 5

[0053] Mail Server System Fig. 58 is a block diagram showing the configuration of this embodiment, and illustrates the operation of an electronic secretary 5801 of the present invention on the mail server side of an ISP 5812. The electronic secretary is independent of the existing mail server, and after receiving permitted mail, transfers it to a conventional mail server 5802. Mail sent from a client of the ISP 5812 is processed directly via the electronic secretary. When electronic secretary 5801 handles the business contact address of a public institution that provides services to unspecified senders or a product sales company, it writes keywords related to its own business scope or services in the guidance information, and when a request to send an e-mail for which communication permission has not been given in advance arrives, if the specific keyword is not detected from the header of the e-mail according to the second rule, it presents (replies to) the guidance information to the sender and refuses to receive the e-mail. For example, the email address for inquiries regarding applicant registration at the Japan Patent Office is PA1670@jpo.go.jp (abbreviated as "F" in Figure 58), and the guidance information for this address (Figure 60) states, "This address is for inquiries to the applicant registration officer in the Application Support Division of the Japan Patent Office. If you would like to use this address, please write <inquiry regarding applicant registration> in the subject line of the email and resend it." Consider the case where a setting (ID=5, Figures 59 and 61) is made in the electronic secretary in the second rule set (Figure 61) to temporarily receive emails containing "inquiry regarding applicant registration", but give no special treatment to the sender.

[0054] The email address of the applicant terminal 5804 is fe1@netinfotech.co.jp ("A" in Figure 58). The applicant obtains an inquiry email address from the Japan Patent Office's website, and preferably information is also posted on the website. The applicant then writes the string "Inquiries regarding applicant registration, regarding registration methods" in the subject line and sends an email (Figure 58, (a1) To:F, applicant registration related...) to PA1670@jpo.go.jp (F). The electronic secretary is permitted to receive the email in accordance with the second rule, and it is forwarded to the mail server 5802. The email is placed in F's mailbox. The reply (a2) from the Application Support Division is sent via the electronic secretary. When an applicant sends an email for the first time without knowing the keyword, the electronic secretary immediately sends an automatic reply, informing the applicant of the guide information. Even outside the business hours of the Patent Office, applicants can receive the guide information in a short time. The automatic reply route for the guide information is applicant → sending server 5803 → receiving server 5801 → sending server 5803 → applicant. In an actual ADSL line environment with URLs: mail.netinfotech.co.jp and mail.yahoo.co.jp, sending and receiving from sender → sending server → receiving server → recipient was tested. The time taken was less than 5 seconds. Therefore, applicants can resend the email following the instructions with almost no time delay. When the terminal 5805 that uses a robot to send spam mail sends mail (Figure 58, (b1) To: F, oooxxx...) to the Application Support Division for product sales, the electronic secretary sends an automatic reply (b2) informing the recipient of the information, and then refuses to receive the mail. Normally, it is impossible for the robot to understand the information and resend the mail according to the instructions. If an email attack occurs due to a human intentionally following the guidance information, it is possible to manually set up communication rejection. When a mail bomb attacker 5806 who frequently uses a robot to send a large amount of mail sends an email (Fig. 58, (c1) To: F, oooxxx...) to the Application Support Division, the electronic secretary automatically replies (c2) to inform the recipient of the information, and then the email is rejected. When the electronic secretary who uses the method described in claim 9 (see Fig. 14) automatically replies, a third rule is created based on the sender's email address, the time of receipt, and a specified rejection treatment (ID=0), and is added to the third rule set for attack prevention (Fig. 63). The constants used in this embodiment are shown in Fig. 64. The specified time in the condition part of the third rule for attack prevention is set to 60 minutes, and the specified treatment is no reply and rejection of receipt. Then, when the attacker sends a second email (c3) within 60 minutes, the email is rejected without a reply (Fig. 14, 1407), and any subsequent attacks are rejected immediately upon checking the email envelope.

[0055] A preferred variation of the present invention adds the number of emails arriving to the condition section of the third rule, for example if the fifth email from the attacker arrives within 60 minutes, process the communication request based on the treatment. Since the electronic secretary can determine the sender from the envelope or header of the email (claim 5), there is no need to receive the body of the email. This can significantly reduce the traffic on the public network. In the prior art shown in Patent Document 13, when the sender is unknown, the mail is temporarily received, a confirmation mail created by the server is automatically replied to the sender, and once the sender has confirmed the mail, the received mail is handed over to the recipient. As described above, the present invention does not generate a large amount of unnecessary communication on the public network, there is absolutely no risk of communication bandwidth being overwhelmed or server memory space being overloaded by mail attacks, there is no possibility that the auto-reply mail itself will become a large number of new spam mails due to the mechanism of the third rule set for attack prevention, and the subjective intentions of each individual recipient can be reflected, which is different from the prior art. In addition, when the present invention is operated on the client side such as a mobile phone, it has the characteristic that recipients who have been inconvenienced by spam mails are not charged unreasonable fees. As described above, it is possible to completely reject erroneous e-mails, machine-sent spam e-mails, and attack e-mails while ensuring normal business operations. A preferred variation of the present invention stores the IP addresses of anomalous callers and rejects TCP connections by IP addresses. When a sender uses a mail sending server (SMTP client) of the prior art, the electronic secretary determines the sender's identity from the mail header, and forcibly stops the communication by closing the underlying delivery connection without receiving the mail body (claim 6, Fig. 11). Since the sending server whose communication has been forcibly stopped retries, the forcibly stopped state is recorded using a dedicated third rule set, and when the sending server retries, the electronic secretary determines the other party from the recorded sender ID and normally stops the communication. Fig. 65 shows the dedicated third rule set (R3DB2). Please note that different data is recorded from the third rule set for attack prevention (R3DB1) shown in Fig. 63.

[0056] When the mail sending server uses the sending system using claims 99 and 100 instead of the conventional technology, the permission to send the body is determined by the information included in the header, so the information field included in the header is sent (Fig. 31, 3104), and the electronic secretary on the receiving server side receives the information field including the subject, and then applies the second rule set (Fig. 10, 1006, 1007, 1009) to determine whether or not to approve sending the body, and if approval is granted, that is, if communication is permitted, the sending side is notified and communication continues (Fig. 31, 3106). By using the inventions of claims 99 and 100 and the electronic secretary at the same time, the amount of unnecessary communication is further reduced, and there is no need to forcibly stop communication. Communication control processing becomes clearer. When sending e-mail from an electronic secretary, it is possible to prevent nuisance communication from the source (see claim 26, Fig. 20). D: mail bomber (5807) sends e-mail (Fig. 58, (d1) To: A, oooxxx...) to A: applicant, and A uses electronic secretary 5803 operated on the server side. Electronic secretary 5803 receives (d1), and since sender D does not have permission to receive, it sends automatic reply (d2) to inform the sender of the applicant's guide information and rejects the reception. Electronic secretary 5801 who sent (d1) receives the reception rejection treatment from 5803, creates the fifth rule, adds it to the fifth rule set R5DB (Fig. 66), and saves it in the instruction file of sender D. If D sends (d3) again within the time (one day) set in the fifth rule condition part, electronic secretary 5801 applies the fifth rule, and rejects the transmission (Fig. 20, 2004). Such spam is rejected by the original sending client before it reaches the public network 5813. For example, if the sender uses Microsoft Outlook, when they press send, Outlook immediately reports the message as undeliverable.

[0057] While the system is running, the third and fifth rules are deleted if a specified time has passed since the time they were created. Companies and organizations that provide services to specific callers have business communications that are only communicated within a limited range. Conventional public telecommunications networks can provide cheap and fast communication. However, because they are open to the public, they are not applicable to the above business. The present invention provides a closed communication effect for specialized use over a public telecommunications network. For example, the Japan Patent Office currently only handles inquiries about the status of patent examinations by mail. The present invention proposes the following process via e-mail: The destination of the email for the inquiry is assumed to be E (Figure 58, 5808). When the information for E states "This is the contact for inquiries regarding the status of patent examination. If you are a first-time user, please enter "Application Number:Serial Number" in the subject line of the email and resend. Example: "Patent Application 2003-70953:0302-001"," and the email arrives, the second rule gives communication permission to receive email to the sender who correctly entered the application number and serial number, and the given permission is saved in the first rule set. The "Application Number:Serial Number" is the password for obtaining permission to communicate for the first time. Alternatively, a password determined by the Patent Office or the applicant can be used. The password will be included in the application delivery documents. The predetermined recording condition of claims 101 and 102 includes the treatment ID. If the treatment ID determined by the second rule is 6, the treatment is stored. That is, the password is not checked for the sender's second and subsequent e-mails. When a business system has many communication parties and is dynamically changing, it is tedious to manually maintain the instruction file. This problem is solved by the instruction file input component described in claims 131 and 132.

[0058] Figure 67 illustrates the user interface layout of the instruction file input component. Figure 68 shows the data passed to the instruction file input component according to the user interface. The electronic secretary 5801 runs on a Microsoft Windows®-based computer. (Someone) enters constants, guide information, and other information that does not change much into an instruction file on a web server via the Internet. The input component is Microsoft Windows (Registered Trademark) The terminal 5810, which runs on the base computer, extracts the application number and the docket number from the data 5811 of the patent office's existing pending cases, and passes them to the component. Alternatively, at the time when the application number is to be stored in the business data, the business system calls the component to input the data into the instruction file. Preferably, the input component stores the caller ID and related information of the second rule set that the input component has authorized, and deletes the related information from the instruction file after the application case is no longer pending at the patent office. As described above, even when there are many people involved and the number of people changes dynamically, a communication environment like a secure private communication network for only the people involved can be created on a public Internet communication network without manual dynamic maintenance. An electronic secretary 5801 sends email directly to the Internet 5813, but emails other than automatic replies may also be forwarded via a conventional mail server 5802, for example, as in 5808-5801-5802-5813 (not shown in FIG. 58). In this case, since email forwarding within the ISP (5801-5802) is fast, the electronic secretary can be omitted from managing the queue of outgoing emails, and functions such as queue management of conventional mail servers can be fully utilized. A conventional mail server can be used, for example Sendmail running on a Unix-based computer. The present invention may be utilized as a component of a mail server. Example 6

[0059] An embodiment is an electronic payment system. FIG. 69 is a block diagram illustrating a method and system for electronic payment. [Field] This invention relates to a system that enables cashless transactions. In particular, this invention relates to an electronic payment server, an electronic payment system, an electronic payment method, and a program that enable instant payment using a communication terminal such as a mobile phone. [Background] There are payment systems for credit cards and debit cards (shopping with a cash card). There are also many services for Internet business (e-business) and mobile communication devices such as cell phones and PHS. However, card data can easily be stolen. When shopping with a debit card, entering a PIN is unsafe, and the PIN can easily be stolen from finger movements. If the terminal has been tampered with or the line has been tapped, information for withdrawing money from the account can easily be stolen. For this reason, damage has occurred due to counterfeit cash cards and stolen PIN numbers. Patent documents 30 and 31 disclose technology for opening dedicated accounts that do not incur large amounts of damage. However, deposits and withdrawals are required between the ordinary account and the dedicated account, which reduces the liquidity of ordinary account funds. [Challenge] A payment method and system that is convenient, safe to prevent large losses, and has liquidity of funds.

[0060] [Means] In an electronic payment system and method for processing commercial payments between an account (e.g., debit card, credit card) holder (hereinafter also referred to as "buyer") and a seller (Figure 69, 6902) at any type of financial institution or payment center (hereinafter also referred to as "bank") to facilitate electronic payments, the buyer (Figure 69, 6901) sends reservation information (Figure 69, A) reserving an electronic payment to the bank (Figure 69, 6903) to pay for a planned purchase by electronic payment, and uses an identification ID (Figure 69, B) to purchase a product (Figure 69, G). Table 1 shows The bank's computer uses 1 shows simple examples of reservation information and data, and operation information. [Table 1]

[0061] The terms used in this specification are defined as follows: "Communication ID" refers to the communication destination when confirming a payment request to a buyer. For example, this includes a mobile phone number, computer communication address, etc. "Identification ID" means a user identifier associated with a Buyer bank account, such as a phone number, vehicle identification number, etc. "Virtual Account" means a fictitious account used to make payments to a specific intended payee, such as a railroad, highway, ATM, shopping, or internet store account, or other fictitious account used to make payments to a specific seller, institution, or group of sellers. "Balance Limit" means a value that specifies the balance of a virtual account. By reserving, the balance of a virtual account is set to the balance limit. The "verification-free limit" refers to the upper limit of payments for which verification may be omitted. The "accumulation limit without confirmation" means a standard amount for which confirmation is always performed. Omission of confirmation is a cumulative method, and when the cumulative amount of payments for which confirmation is omitted exceeds the standard amount (hereinafter referred to as "accumulation excess"), confirmation is performed, the cumulative amount is set to zero, and accumulation is performed again. "Balance Notification Amount" means the amount by which your balance becomes low and you are advised to make a reservation. "Automatic Recovery Days" means the shortest number of days that will pass before the balance is automatically restored to the Balance Cap. "Payment reservation confirmation required" refers to a flag that specifies whether or not the user should reserve a payment request that will occur at the exit gate when the ID medium holder passes through the entrance gate of a paid area.

[0062] "Verification Information" means the information used to verify a Payment Request. It is equivalent to a PIN for a Virtual Account. The information shown in Table 1 using the above terms, the balance notification destination, and the PIN number are reservation information. "Balance" means the balance in a Virtual Account. "Communication confirmation" means one of the control permission treatments available. See Figure 70 for the treatment ID. "Operation information" refers to information to be input into an authentication program that is started upon communication confirmation. In Table 1, the settlement reservation confirmation necessity flags that are not used for virtual accounts are indicated by "-". The seller generates a payment request (Figure 69, C) requesting payment of the amount used, and sends the payment request to the bank for approval. The bank identifies the virtual account from the seller identifier, etc. included in the payment request, and if the balance and bank account balance (hereinafter referred to as the "total balance") are sufficient, the bank presents a confirmation request (Figure 69, D) to the buyer to confirm the payment request. The buyer presents confirmation information (Figure 69, E) to the bank to confirm the payment request. Only after confirmation by the buyer, the bank sends approval (Figure 69, F) to the seller and makes the payment. The virtual account is identified by a method designated by the buyer, such as an industry code, a seller name, a product type, etc. The bank provides available information, such as a seller identifier, to the buyer and allows the buyer to select an association with the virtual account. For the data structure and the like related to the payment processing of the present invention, reference is made to known techniques, for example, Patent Documents 27 to 29. Unlike the dedicated accounts, reserved deposits (a limit that cannot be freely withdrawn from the entire account balance), and prepaid cards of the prior art, virtual accounts allow the total balance to be freely withdrawn from a bank account. Figure 73 shows a schematic of the balance of a bank account opened by an account owner and a reserved virtual account. The balance of a virtual account may exceed the total balance. The settlement amount is less than both the balance and the total balance. Virtual accounts have the effect of maintaining the liquidity of funds while maintaining the safety of settlement. If too much is deposited into multiple dedicated accounts, there is no inconvenience of not being able to easily use the funds for other purposes.

[0063] The confirmation request asks the buyer to confirm the payment request, including the cause and amount of the charge. Banks are required to process payments promptly. Sellers may operate their own clearing houses that act as banks. Any information communication means can be used. Any means that can achieve the purpose of this embodiment, such as telephone, email, or the Internet, can be used. A communication means that is constantly connected to a network can also be used. For example, the mobile Internet Web or chat-like two-way communication can be used. The buyer may call and obtain a confirmation request from the bank. The electronic secretary analyzes incoming communications and performs communication confirmation treatment on the communications to confirm the payment request. For example, an authentication program is launched if a call to the bank's electronic payment telephone number or access to a web page that provides electronic payment services identified by a URL is detected. The reservation information may include verification criteria. The bank may approve the payment request without sending or receiving a verification request and verification information if the verification criteria included in the reservation information are satisfied by the data included in the payment request. Examples of such verification criteria include, but are not limited to, a seller identifier, a payment limit, a settlement date, a settlement time, or any combination thereof, or any other criteria that the buyer may find convenient. The bank may confirm the payment request to the buyer through the seller's communications module, e.g., a cashier's terminal, or may choose to send a confirmation request to both buyer and seller's devices, or may request confirmation by email and / or web confirmation. The identification ID recording medium may use any means that matches the seller's device. For example, a barcode may be displayed on a mobile phone display. A magnetic card, ID tag, IC card, infrared or other short-range communication means may also be used. The identification ID may be manually entered into the seller's device. Furthermore, it may be selected to display the usage history, balance, total balance, etc. on the store's device or print them on the receipt.

[0064] The medium on which the ID is recorded can be copied and used by family members. For example, a child buys juice at a convenience store and presents the card with the barcode on which the ID is recorded to the clerk for payment, and the parent can confirm the payment request at home on their mobile phone. If the medium is accidentally copied or dropped, unauthorized use can be easily discovered, and it can be simply disposed of. It can be used to verify all withdrawals from the customer's bank account. For example, when withdrawing cash from an ATM, the ATM can be considered as the seller (Fig. 69, 6902). The customer inputs the account number or unique ID into the ATM via a medium such as a magnetic card, enters the amount, and the bank withdraws the money only after the withdrawal is confirmed through the customer (buyer) communication module. Communication verification can also be performed at the ATM in addition to the traditional cash card authentication. Furthermore, the bank can generate a transaction code for each transaction, transfer it to the mobile phone, and use a short-range communication means to input the transaction code into the ATM and verify it, and operate an authentication program using the fingerprint, thereby ensuring that only the principal can carry out the transaction. The balance is the limit for electronic payment from the virtual account, and payment is made by deducting the payment amount from the balance. If the balance is insufficient, the payment request is rejected. An amount within the balance can be used with verification information other than the PIN. The balance is the maximum loss amount if the identification ID, verification information, and buyer communication device are stolen at the same time. Any attempt to spend more than the verification limit is immediately notified to the owner and verified. The verification limit is a cash-like amount that can be used with only the identification ID. If the payment request is rejected, the verification information is invalidated. The The virtual account may be frozen. Payment amounts that do not require confirmation are accumulated, and when a payment request is made that attempts to exceed the confirmation-free accumulation limit, confirmation is always performed, and the accumulation amount is then reset to zero before being accumulated again. Payments of large amounts can be confirmed. The confirmation-free accumulation limit is the maximum loss amount when the identification ID and confirmation information are stolen at the same time.

[0065] When the balance falls below the balance notification amount, a notification to that effect is sent to the designated balance notification destination. Furthermore, when certain conditions are met, the balance is automatically restored to the upper balance limit (automatic restoration). For example, automatic restoration will occur if the condition is met that the number of days for automatic restoration has passed since the last reservation or automatic restoration. The confirmation information is different in nature from authentication information such as a PIN number. It can be used according to the importance of the payment and the usage environment. When using the virtual account for payments in a public environment, it is better to use confirmation information different from a PIN number. The confirmation information for a virtual account in an environment where safe input is possible, such as an ATM corner, may be the same code as the PIN number. The term "communication confirmation" includes alerting the holder to an incoming communication request with a ringtone, vibration, etc., receiving information and presenting it visually or audibly, and automatically starting an authentication program. The authentication program includes a process of checking the input operation information against registered operation information, and sending pre-registered information to the outside (bank) only if it matches. The operation information includes information selected from the group consisting of simple button operations, approval codes, voice, passwords, and human physical characteristics (biometric information) such as fingerprints. The verification information is used as the registration information. If necessary, multiple communication confirmation treatments as shown in FIG. 70 can be provided. Reservations can be made via the internet, telephone or at a bank counter based on your ID or account number and PIN. Device etc. Device It may be possible to make reservations only by the designated number.

[0066] Preferably, the PIN (authentication information) To Use one-time password (OTP) Be A different password is used for each communication, preventing damage from wiretapping. For example, the authentication program is provided with a function to realize OTP. Temporary reservations can be made using public telephones, and a daily usage limit may be set to prevent damage from line tapping. Furthermore, OTP may be used for confirmation information. Preferably, after authentication. Prescribed Virtual Account For example, access the instruction file and give the bank a communication confirmation treatment. Or, Prescribed Virtual Account A valid / invalid flag is set, and if the flag is set to invalid, the communication confirmation treatment rejects the communication. The personal authentication utilizes the personal authentication means attached to the communication device, and the buyer registers his / her personal identification information in the device in advance. When the personal identification means is activated, the device prompts the operator to input the personal identification information, compares the input information with the registered personal identification information, and if the comparison results in a match (authentication successful), allows the next operation. The personal identification information includes biometric information such as a fingerprint, or a password, etc. Preferably, Prescribed Virtual Account After a certain period of time, for example 4 hours, has elapsed since you enabled The virtual account will be invalidated (the payment cannot be approved). [effect] If you want maximum security, before you go shopping, set your balance to the amount you intend to use, set the verification-free limit to zero, and set the call destination to your mobile phone number, then verify with your fingerprint. The communication destination is reserved on the store side as a device that remembers the identification ID and confirmation information, and the identification ID and confirmation information are manually input at the store, allowing payment to be made by memory alone.

[0067] When making everyday payments, you do not need to use your PIN during input operations or communication. When making reservations, you can safely use your PIN. You can also not use your PIN at all in everyday life. The outflow speed of money from an account for each purpose can be freely controlled, there is no possibility of high-value damage caused by card counterfeiting exceeding the outflow speed, and if the outflow speed is within the planned range, automatic recovery is performed without the need for time-consuming reservations, improving the planning of household finances. Detailed explanation Details of the conventional technologies used (communication software, command transmission, program execution, IC cards, OTP, etc.) will be omitted. Figures 70 and 71 show the TDB and R1DB of an embodiment of a mobile phone with electronic settlement function according to the present invention. The block diagram showing the configuration is basically the same as that of Figure 26. The R1DB is an embodiment of the one shown in Figure 2B. For ease of explanation, the calling number is used. As in Example 4, it is also possible to use communication means such as a constant Internet connection or packet communication, and it is also possible to identify the caller by ID such as an email address. Fig. 74 is a flow diagram of a transaction process in the virtual account diagram shown in Fig. 73. Fig. 75 is a flow diagram of the approval process shown in Fig. 74. Next, a reservation for the virtual account "Shopping" will be explained. The communication ID "090-1234-5678, store", the identification ID "045-1234-5678", the confirmation information "456", and other reservation information shown in Table 1 are sent. The confirmation information and the buyer fingerprint shown in Table 1 are stored in an instruction file. The communication ID means that the confirmation request is sent to both the mobile phone and the store's terminal. A bar code with a home phone number recorded as an identification ID is attached to the back of the mobile phone.

[0068] The seller reads the identification ID with a barcode reader on the cash register terminal, and sends the identification ID, seller account number, store name, billing amount (A), etc. to the bank to request payment (Figure 74, 7401). If the buyer has forgotten his / her mobile phone, he / she can manually enter his / her home number into the cash register terminal. The bank searches for the account number from the identification ID. For example, if the initial payment amount A is 500 yen and the total balance (B) is 200,000 yen, B is sufficient and the process continues (7402, YES). If a specific virtual account cannot be identified, the bank selects a shopping account (7403). The balance of A does not exceed 100,000 yen (7404, YES), and approval processing (7405) is performed. However, since the balance does not exceed the confirmation-free limit of 1,000 yen (Figure 75, 7501), the bank omits confirmation and immediately approves the payment request. The payment amount of 500 yen for which confirmation was omitted is accumulated in the cumulative amount (C) (Figure 75, 7502). C becomes 500 yen, A is debited from the account and transferred to the seller's account. At the same time, A is debited from the virtual account, and the new total balance becomes 200,000-500=199,500 yen, and the balance becomes 100,000-500=99,500 yen (7407). If the payment amount A for the second purchase is 600 yen, when it is accumulated in C, C becomes 1,100 yen, which exceeds the confirmation unnecessary accumulation limit (7503, YES), so the bank searches for the mobile phone number from the identification ID, calls the mobile phone to confirm the payment request, and at the same time displays the confirmation request on the cash register terminal (7504). The buyer confirms the payment request by entering the confirmation information "456" into the cash register, or by entering a fingerprint through the fingerprint sensor into the authentication program started on the mobile phone. If the confirmation information is incorrect or the payment request cannot be confirmed (7505, NO), the transaction is rejected (7406). If it is confirmed, the transaction is approved, and if the accumulation is exceeded, the accumulated amount C is set to 0 yen (7506), and the new total balance becomes 200,000-1,100=198,900 yen, and the remaining balance becomes 100,000-1,100=98,900 yen.

[0069] FIG. 72 is a block diagram of yet another embodiment of the present invention relating to a ticket. [Field] Toll collection systems for cashless railways, buses, expressways, urban areas, parking lots, event venues, and other toll areas (hereinafter referred to as "roads") [Means] Use electronic payment as shown in Figure 69. The seller (road, Figure 72, 6902) reads the user identification ID at the entrance (Figure 72, 7204) (Figure 72, 1) and sends payment reservation (Figure 72, 2) information to reserve the payment, including the identification ID and the cause, to the bank to reserve the payment. The bank sends a confirmation request (Figure 72, 3) to confirm the reservation to the user. The user confirms the confirmation request and sends confirmation information (Figure 72, 4) to the bank. The bank sends reserved (Figure 72, 5) information to the seller only after it is confirmed by the user. The seller reads the identification ID at the exit (Figure 72, 7205) (Figure 72, 6), settles the usage fee, and sends a payment request (Figure 72, 7) to the bank. The bank sends a confirmation request (Figure 72, 8) to confirm the payment request to the user. The user confirms the confirmation request and sends confirmation information (Figure 72, 8) to the bank. The bank sends an authorization (Fig. 72,10) to the seller and makes the payment only after it has been confirmed by the user. When the payment reservation confirmation necessity flag is set to "required", admission can be controlled depending on the approval / rejection of the reservation. Detailed explanation In a specific embodiment, this is the payment of a train fare. An identification ID is recorded on a contactless IC card. For a reservation to a virtual account "Railway Company", the following reservation information is sent: communication ID "090-1234-5678", identification ID "IC card number", confirmation information "456", whether payment reservation confirmation is required "not required", and other reservation information shown in Table 1.

[0070] The boarding station ticket gate (7204) reads the ID and transfers it to a server (installed in Fig. 72, 6902, not shown). The server creates an entry record that records the ID, boarding station, and time, and sends payment reservation information (different from the virtual account reservation information) including the ID and boarding station name to the bank. If the payment reservation confirmation necessity flag is "not required," the bank omits the confirmation (Fig. 72, 3, 4), sends the reserved information to the ticket gate, and entry is permitted. The ticket gate at the exit station settles the fare for the passenger identified by the read identification ID, sends a payment request to the bank, and allows the passenger to exit if approval is received. If the fare range does not exceed the verification-free limit, the bank omits the verification (Figure 72, 8, 9), which has the effect of speeding up the exit decision process. If the payment reservation confirmation necessity flag is "necessary", the entrance ticket gate will allow entry if the ID it reads is valid, and then send a payment reservation to the bank, and if the disembarking station receives information that the ticket has been reserved, it may allow exit before sending a payment request to the bank. This has the effect of speeding up the entry / exit decision process. Furthermore, in order to reduce costs for high-speed processing and payment request processing, the payment amount without confirmation may be accumulated on the IC card or server. Accumulation and entrance / exit judgment can be approved offline without communicating with the bank. To approve offline, the seller obtains the necessary reservation information set by the buyer from the bank.

[0071] Figure 76 is a flow diagram of offline approval. The seller terminal reads the identification ID, and if it determines that the product price does not exceed the confirmation-free limit (Figure 76, 7601), it adds the product price to the accumulated amount saved by the seller (7602). If the accumulated amount exceeds the limit, it creates a payment request with the lump sum accumulated amount as the product price, and requests approval from the bank using the procedure shown in Figure 74 (hereinafter referred to as "online approval") (7605). If the transaction is approved (7606, YES), the accumulated amount is reset to zero (7607). If the accumulated amount does not exceed the limit, the selling transaction is approved without communicating with the bank. In this system, this process is called "offline approval". An ID (IC card, etc.) is issued for the guaranteed amount, and if the payment is refused, the customer is required to pay in cash at the exit. If the customer requests the cancellation of the ID, the amount used may be deducted from the guaranteed amount and refunded. The cumulative limit for which no verification is required may be limited to approximately the same amount as the guaranteed amount. This has the effect of guaranteeing the recovery of the payment. For example, if an ID is used that was issued or activated for 1,000 yen, rides up to 990 yen are permitted, and when the customer next boards a 120 yen section, the customer is required to pay in cash at the exit. Including the increase If payment is rejected, the withdrawal settlement amount is 120 yen, and if the ID is cancelled, the refund amount is 10 yen. For one ID, multiple sellers can independently save the accumulated amount and approve it offline. For example, the same mobile phone number can be used as an ID for trains of different railway companies. Furthermore, passengers can give location permission to vendors to speed up entry and exit. Boarding gates can determine the validity of nearby passenger IDs in advance. Exiting gates can provisionally settle the fare (assuming the passenger will get off at the station nearest to their current location). Mobile phone locations can be obtained from the telephone company's system, eliminating the need for a direct connection to the mobile phone.

[0072] When processing tickets for entry to an event venue, a customer orders a ticket from a ticket shop or the like prior to entry, and the entrance management server corresponds to a bank and stores the ticket information. The ticket information includes an identification ID as well as data such as the venue name, event name, date and time, number of people, and seat location. The server then transmits a message to the mobile phone corresponding to the identification ID read by the entrance ticket gate, authenticates the person, and then permits entry. Sellers may operate their own clearing centers. Instead of public communication methods, mobile infrared, DSRC (Dedicated Short Range Communication), Bluetooth (Registered Trademark) It is also possible to communicate with the ticket gate using a non-contact short-range communication means such as the above and directly start the personal authentication program on the mobile phone. Yet another particular example is road toll collection. [Background] Japan's Electronic Toll Collection System (ETC system) consists of an ETC on-board unit, an ETC card that stores personal information, contract information or electronic currency, entrance / exit gates, and a DSRC (Direct Speed ​​Control) system. However, vehicles are required to pass through the gates at a speed that allows them to stop at any time. In addition, the system is expensive. Meanwhile, Singapore has a system for ERP that uses a camera to photograph the license plates of vehicles traveling at speeds of 180km / h or less and charge them. Existing camera-based charging technology can realize free-flow toll gates that allow high-speed passage, but it is difficult to separate the vehicle owner from the toll payer. [Challenge] To realize a cashless, free-flow fare system at low cost. [Means] Electronic payment shown in Figure 69 is used. The vehicle registration number is used as the user identification ID. For reservation of the virtual account "Expressway", the communication ID "090-1234-5678", identification ID "license plate number", confirmation information "456", whether payment reservation confirmation is required "Yes", and other reservation information shown in Table 1 are sent.

[0073] The seller photographs the license plate at the entrance (7204) with a digital camera, reads the identification ID with image recognition means, and sends a payment reservation including the identification ID and entrance name, etc. to the bank. If the seller receives the reservation information, the seller allows the seller to leave, settles the payment based on the entrance record, and sends a payment request to the bank. The entry and exit records are kept as evidence of use, including the vehicle type and photos according to the fee category. If a payment reservation or payment request is rejected, or if electronic payment is not reserved, the vehicle user (owner) is identified by the identification ID and billed by sending an invoice, etc. An administrative fee incurred may be added to the invoice. If there is an entrance gate, entry is permitted if the identification ID is a virtual account settlement or reservation information is received. If there is an exit gate, the identification ID is a virtual account settlement, or reservation information is received, or approval is received, then exit is permitted. Preferably, the vehicle is guided by electronic signals and voice messages on mobile phones according to the result of the judgment. Non-stop lanes for electronic payment may be provided together with conventional toll gates. Furthermore, cameras may be installed at the first-arrival positions of the entrance / exit lanes, or location information from mobile phones may be obtained, to determine the payment method of vehicles approaching the entrance / exit, to allow provisional settlement, and to quickly determine the entrance / exit gates. Preferably, a road usage schedule (period) is specified, and the reservation of the virtual account is cancelled when the schedule has passed. In the case of a system in which a fee is charged each time a boundary line of a toll area such as in a city center is crossed (hereinafter referred to as a passing charge), the same processing as that at the exit may be carried out at the boundary line.

[0074] A charging system based on distance traveled (hereafter referred to as distance charging) can be realized. The user gives the system location acquisition treatment, and when entering a toll area, the system keeps track of the mobile phone's location almost continuously. For example, mobile phone location information (location cell, GPS information, etc.) can be obtained from a server and tracked. The distance traveled by the mobile phone is treated as the distance traveled by a car, and the charge is calculated. If the mobile phone battery runs out or the location cannot be determined, a fixed charge can be applied. The camera for reading vehicle information may be replaced with other vehicle information acquisition means required for billing, such as a license plate equipped with a communication function. [Function] ETC systems must instantly recognize cars traveling at high speeds when passing through gates or borders, and instantly process two-way communication with cars and the movement of electronic currency, so they require high speed, high precision, and high reliability. They also require security functions such as maintaining the confidentiality of credit card information and preventing data tampering, so they need to process a large amount of data instantly. This is the reason why ETC systems are expensive. The present invention only requires taking pictures of cars and reading license plates, and the signal processing technology for this is mature. In addition, confidential information is not transferred, so there is no need for instantaneous processing of a large amount of data when passing through a gate, and no on-board unit or ETC card is required, so the costs of both roads and cars are reduced. In addition, problems such as counterfeiting of highway cards can be solved. In addition, it is easy to separate the car owner from the toll payer. Non-stop driving at toll booths, etc. can be easily achieved. Since no card is used, there is no need to worry about card counterfeiting, insufficient balance of electronic currency, or complicated increases.

[0075] FIG. 69 is a block diagram illustrating yet another method and system for payment. In an electronic payment system and method for processing commercial payments between a bank, a buyer and a seller, the buyer uses an identification ID (Fig. 69, 1) to purchase a product (Fig. 69, 6) from a seller. The seller generates a payment request (Fig. 69, 2) requesting payment of the amount used and sends the payment request to the bank (Fig. 69, 6903) to approve the payment request. The bank presents a confirmation request (Fig. 69, 3) to the buyer to confirm the payment request to the buyer. The buyer confirms the payment request by sending authentication information such as a PIN number (Fig. 69, 4) to the bank through a buyer communication module. The bank sends an approval (Fig. 69, 5) to the seller only after it has been confirmed by the buyer. A communication confirmation procedure is performed for a communication request for confirming a payment request. The registration information transmitted by the authentication program activated by the communication confirmation procedure includes the authentication information. This has the effect of avoiding input of the authentication information in public places. Preferably, the electronic payment is invalidated after the payment request is confirmed. Then, the user is always authenticated before each payment, and there is no risk of damage even if the mobile phone is lost, since the electronic payment is valid. Example 7

[0076] Mobile phone key [Field] Using a mobile phone as a key for your home door, safe, car, etc. [Means] When unlocking, the electric lock control system confirms unlocking to the user through the communication module. The electric lock control system unlocks only after the user confirms. The confirmation is performed by sending authentication information such as a PIN number to the electric lock control system. Fig. 32 illustrates the configuration of an electric lock control system. In the first embodiment, unlocking is performed by a mobile phone call. In this example, the electric lock of the controlled device makes the call. When the user performs an unlocking operation using an unlocking operation means such as an unlocking operation button, a call is made from the system to the user. Figs. 70 and 71 show an example in which a communication confirmation treatment is given to an unlocking confirmation communication request. The system unlocks only after receiving the specified authentication information. The unlocking operation may further be verified by checking against a password entered via the numeric keypad. To unlock the door, you can simply press the call button that also serves as the door phone. You can also have the door phone talk to your mobile phone. You can also unlock the door remotely. [Effect] A highly secure lock can be achieved by authenticating the user using biometric authentication or other methods that do not require a key or keyhole. Example 8

[0077] [Field] This embodiment relates to collection of traffic information and route guidance for mobile objects. In this specification, a mobile phone is used as the mobile communication terminal device. However, the mobile communication terminal device is not limited to a mobile phone, and electronic information devices with communication functions (such as notebook PCs, PDAs, electronic organizers, car navigation systems, etc.) can also be used. [Background] Technologies for collecting traffic information from vehicles are known from Patent Documents 14 and 15. A technology for predicting road usage conditions is known from Patent Document 17. The technology shown in Patent Document 16 is intended to prevent traffic congestion from occurring in advance. [Problem] To provide cooperative and efficient collection of traffic information using mobile communication devices, prevention and avoidance of congestion, and dynamic route guidance for moving bodies. [Means] A database of information such as traffic information, maps and facility data, as well as an optimal route calculation function that includes all vehicle elements, is consolidated in a traffic center. Via communication lines, the traffic center collects travel plans from users (pedestrians and vehicles), including departure times and departure and arrival points, and provides users with recommended travel plans and recommended planned routes. A mobile communication device of a user acquires current position information, a traffic center communicates with the mobile body to grasp the moving situation, and when a traffic jam occurs or is predicted ahead on the moving route, a number of cars sufficient to eliminate the traffic jam are selected and transferred to an avoidance route, and only necessary information is retrieved and transferred to the mobile unit when necessary, such as when a map ahead is newer than a map possessed by the mobile body or when the mobile body does not possess a map ahead. Every time communication is made with a mobile device, the traffic center collects information on the location, speed, direction of travel, etc., and updates the traffic situation database. The traffic center provides communication methods with the mobile device, including constant connection, interval connection, and connection only when an event is detected. The mobile device measures the position, speed, traveling direction, etc., and provides the traffic center with necessary control treatment, such as acquisition of measurement data, transfer of map and voice information, and warning, etc., so that the user can exchange the necessary information with the traffic center without taking his / her hands off the steering wheel while driving.

[0078] When a mobile device issues a communication request to a traffic center, information including the position of the mobile device is detected, and requests for route search, congestion information search, etc. are transferred to the traffic center, a route and a command are received from the traffic center, the traffic center operates according to the command, guides the user to the received route, and when the user departs from the route on the way, the traffic center is requested to search for a route again. The system detects events such as intersections and changes in vehicle speed in locations such as fog, poor visibility, and uphill roads that cause congestion, and the traffic center continuously tracks the vehicle's position, informs the driver of the positions of surrounding vehicles, recommends speed adjustments, maintains a safe distance between vehicles, and assists in preventing congestion and safe driving. A danger prevention service is provided by communication between approaching vehicles mediated by the traffic center. Nearby vehicles are treated as a group while moving, and the traffic center grasps the location of each member of the group, and through the mediation of the traffic center, each member exchanges connection numbers, etc., allowing direct connection between vehicles, information communication between vehicles, and displaying the locations of other vehicles in the group on the mobile device screen. If danger such as approaching vehicles in the rear or front, sudden braking, airbag deployment, or accidents is detected, an emergency call is made to the relevant vehicles to warn them. The locations of all vehicles in the approaching group are grasped in real time, the distance between vehicles is maintained, and data is provided to the autonomous driving system installed in each vehicle. When the traffic center is short of information, it uses a mobile phone equipped with a position detection device mounted on a moving object such as a car as a mobile monitor to collect information, analyzes the received information, creates an information collection command, and sends it back to the monitor. One way to activate a monitor is to automatically send information to the traffic center when a set condition is met, such as a moving speed of 20km / h or more. One response or command from the traffic center that receives the information is to return the transmission interval t. t is made to have a positive correlation with the monitor density p. In other words, t is made to increase as p increases. As the possibility of duplicate information transmission increases as the density increases, unnecessary information transmission can be reduced by increasing the transmission interval. For example, t is calculated using constants a and b as t=a*p+b. As a specific example, if p is within a 10km radius, there are 10 monitors within a 10-minute difference in transmission time, a=5, b=10, and t is 60 minutes. In other words, it instructs the monitor to send information again after 60 minutes.

[0079] The specific definition (calculation) method of p and the values ​​of a and b may differ depending on the importance of the measurement location. For example, if it is necessary to increase the measurement density in the city center compared to the suburbs, the values ​​of a and b or the count radius of p can be made smaller than in the suburbs. The center selects and uses a predetermined value depending on the current location of the monitor. Furthermore, the command may include the following information transmission conditions: Do not transmit during a specified time period. Do not transmit within a specified moving speed range. Do not transmit within a specified geographical range. Transmit only when the speed or moving direction changes. The mobile monitor operation provides rewards to information providers, or releases mobile phones with built-in automatic monitoring functions. The preferred reward method is to convert the amount of information provided into reward points and store them in a memory device. In exchange for the points accumulated by users, services such as route guidance are provided. Traffic signals can be controlled based on real-time traffic flow and emergency vehicles. For example, when a vehicle's predicted location approaches an intersection, the traffic center will send out a signal, grasp the vehicle's location in real time, and avoid unnecessary red lights. If emergency vehicles send out their own location information in real time, traffic signals ahead can be optimized. The traffic center can check the locations of other vehicles on the route ahead of the emergency vehicle and instruct those vehicles to move out of the way. The traffic center can monitor speeding and vehicle behavior near intersections, and if it detects a risk of collision, it will immediately warn drivers and pedestrians involved. The traffic center can provide route guidance services to pedestrians with mobile devices. It can provide information on routes to avoid the last train or train cancellations based on travel plans, commuting routes, current location, time, etc.

[0080] [Action, effect] This has the effect of collecting information for traffic guidance while providing it. The feedback we can expect is as follows: Increase in congestion → Increase in demand for services → Increase in the amount of information that the traffic center can collect → Guidance based on the collected information → Decreased congestion. By dynamically guiding recommended routes, the traffic center can change the previously unordered traffic flow into an orderly one, thereby realizing an optimal traffic system. It can provide accurate, real-time information that is tailored to each individual driver and pedestrian. It can predict congestion before it occurs and instruct optimal avoidance routes based on the route information of each vehicle, allowing the transportation capacity of the traffic network to be fully utilized without concentrating it on specific roads. Compared to installing sensors fixedly on the road, there is no limit to measurement points, and traffic condition information can be collected evenly on the road and probabilistically evenly or according to importance. This system can provide dynamic route guidance and congestion avoidance guidance to vehicles without having to operate mobile phones while moving or driving, which is prohibited by traffic laws. It can also provide detour guidance to pedestrians in the event of train service interruption or accidents. It will become easier to support safe driving, optimize traffic management, improve the efficiency of road management, support pedestrians, etc., support the operation of emergency vehicles, and alleviate traffic congestion or prevent it from occurring in the first place. [Industrial Applicability]

[0081] As described above, the present invention is suitable for a method of communication using electronic devices on a communication network. [Brief description of the drawings]

[0082] [Figure 1] FIG. 1 is a diagram showing an example of a basic schematic configuration of the present invention. [Figure 2A] This is a layout diagram of records showing the contents of a TDB. [Figure 2B] This is a record layout diagram showing the contents of the R1DB. [Figure 2C] This is a layout diagram of records showing the contents of a GDB. [Figure 2D] This is a layout diagram of records showing the contents of an R2DB. [Figure 2E] This is a layout diagram of records showing the contents of the R3DB. [Figure 2F] This is a layout diagram of records showing the contents of the R4DB. [Figure 2G] This is a record layout diagram showing the contents of the R5DB. [Figure 2H] FIG. 1 is a layout diagram of records showing the contents of a TRDB. [Figure 3A] FIG. 13 is a layout diagram of records showing the contents of a PDDB. [Figure 3B] FIG. 1 is a layout diagram of records showing the contents of a VDB. [Figure 3C] FIG. 13 is a layout diagram of records showing the contents of a VRDB. [Figure 4] 1 is a flowchart of an embodiment of the present invention. [Diagram 5] 11 is a flow chart of another embodiment. [Figure 6] 11 is a flow chart of another embodiment. [Figure 7] FIG. 13 is a diagram showing a configuration of another embodiment. [Figure 8] 11 is a flow chart of another embodiment. [Figure 9] FIG. 13 is a diagram illustrating a configuration example of another embodiment. [Figure 10] 11 is a flow chart of another embodiment. [Figure 11] 13 is a partial flowchart of an early decision process according to another embodiment. [Figure 12] 11 is a flow chart of another embodiment. [Figure 13] 11 is a flow chart of another embodiment. [Figure 14] 11 is a flow chart of another embodiment. [Figure 15] FIG. 13 is a diagram illustrating a configuration example of another embodiment. [Figure 16] 11 is a flow chart of another embodiment. [Figure 17] 11 is a flow chart of another embodiment. [Figure 18] FIG. 13 is a diagram showing a configuration of another embodiment. [Figure 19] FIG. 13 is a diagram showing a configuration of another embodiment. [Figure 20] 13 is a partial flowchart of an outgoing call process. [Figure 21] FIG. 1 is a diagram showing a system configuration relating to anonymous communication. [Figure 22] 13 is a partial flowchart of the process of the first party. [Figure 23] 13 is a partial flowchart of the second party's processing. [Figure 24] 13 is a flowchart of a treatment exchange processing portion. [Diagram 25] 11 is a flow chart of another embodiment. [Figure 26] FIG. 1 is a diagram illustrating a configuration of an embodiment. [Figure 27] FIG. 1 is a conceptual diagram showing a configuration of a location information system. [Figure 28] 4 is a flowchart of a vehicle driving guidance function. [Figure 29] FIG. 13 is a conceptual diagram of another embodiment of the present invention relating to position information, etc. [Diagram 30] FIG. 2 is a diagram illustrating a configuration of a mail sending client. [Diagram 31] 13 is a flowchart of a mail transmission process. [Diagram 32] FIG. 2 is a block diagram showing the configuration of a multifunction telephone; [Fig. 33A-D] FIG. 13 shows the contents of the instruction file of the telephone. [Diagram 34] 4 is a flowchart of the telephone. [Diagram 35]FIG. 13 is a diagram showing an example in which the telephone number of a related person is automatically given the treatment of being able to make a normal call through automatic screening. [Diagram 36] FIG. 2 is a diagram showing a telephone configuration of an answering machine embodiment. [Figure 37A-C] FIG. 13 shows the contents of the instruction file of the telephone. [Figure 38] FIG. 2 is a block diagram showing the configuration of an embodiment of a mail receiving client; [Figure 39A-D] FIG. 13 shows the contents of an instruction file in the embodiment. [Diagram 40] 13 is a schematic flowchart of a receiving process. [Diagram 41] FIG. 13 is a diagram showing a question input screen. [Diagram 42] FIG. 13 shows a first encounter selection screen. [Diagram 43] FIG. 1 is a block diagram showing the configuration of an Internet video telephone and monitoring system. [Diagram 44] FIG. 2 is a block diagram showing the internal configuration of the embodiment. [Diagram 45] 13 is a flowchart showing the operation of a main program. [Figure 46] FIG. 2 is a diagram showing a main menu screen. [Figure 47] FIG. 13 is a diagram showing a contact book screen. [Figure 48] FIG. 13 shows a member addition screen. [Figure 49] FIG. 13 is a diagram showing a treatment application process. [Figure 50] FIG. 13 is a diagram showing a personal setting screen. [Figure 51] 13 is a flowchart showing a login process operation. [Figure 52] FIG. 13 illustrates a friend list editing screen. [Diagram 53] FIG. 13 is a diagram showing a treatment application qualification designation screen. [Figure 54] 13 is a flowchart showing the operation of a videophone communication program. [Figure 55] FIG. 13 illustrates a connection waiting screen. [Figure 56]FIG. 13 is a diagram showing a videophone communication in progress screen. [Figure 57] FIG. 1 is a diagram showing an outline of the process for establishing a working relationship. [Figure 58] FIG. 2 is a block diagram showing a configuration of an embodiment of a mail server system. [Figure 59] FIG. 13 is a diagram showing a treatment information data database. [Figure 60] FIG. 1 is a block diagram showing the guidance information data database (GDB). [Figure 61] FIG. 11 is a diagram showing a second rule set. [Figure 62] FIG. 11 is a diagram showing a first rule set. [Figure 63] FIG. 13 is a diagram showing a third rule set for attack prevention. [Figure 64] FIG. [Figure 65] FIG. 13 is a diagram showing a third rule set for aborting. [Figure 66] A diagram showing a fifth rule set. [Figure 67] FIG. 1 illustrates a user interface of an input component. [Figure 68] FIG. 13 is a diagram showing data to be passed to an input component. [Figure 69] 1 is a block diagram illustrating a method and system for electronic payment. [Figure 70] FIG. 1 illustrates a TDB for an electronic payment embodiment. [Figure 71] FIG. 13 illustrates an R1DB in an electronic payment embodiment. [Figure 72] FIG. 2 is a block diagram of another embodiment of a ticket. [Figure 73] FIG. 2 is a diagram showing a schematic diagram of an account and a virtual account. [Figure 74] 1 is a flow diagram of a transaction process in a virtual account schematic diagram. [Figure 75] 13 is a flow diagram of an approval process. [Figure 76] 1 is a flow diagram of offline approval. [Explanation of symbols]

[0083] 11, 111, 211.... Processor 12, 112, 212... Input / output control means 13, 14, 114, 214...Storage device 15, 115, 215...Communication forwarding device 16...Keyboard and display unit. 17...Microphone, speaker 18...Camera, keyboard and display. 19...Vibrator 20...Fingerprint sensor

Claims

1. 1. A computer-implemented method comprising: a setting step of receiving instruction information when the user is authenticated based on the authentication information; and processing a request for a service based on the instruction information; the authentication information is information obtained from an electronic device; the electronic device is a device that provides the authentication information to a user, The setting step may be performed in a different session than the processing step. method.

2. The authentication information includes a one-time password. The method of claim 1.

3. the authentication information includes information different from information previously used; 3. The method according to claim 1 or 2.

4. the electronic device is selected from the group consisting of a computer, a portable electronic device, and a mobile phone; 4. The method according to any one of claims 1 to 3.

5. The service includes a communication for transmitting communication information; 5. The method according to any one of claims 1 to 4.

6. The communication includes at least one of a telephone call, an email, an internet communication, a wireless communication, and a data communication. The method according to claim 5.

7. the communication comprises a paper document; 7. The method according to any one of claims 5 to 6.

8. The instruction information includes a secret code.

8. The method according to any one of claims 1 to 7.

9. The instruction information includes a monetary amount.

9. The method according to any one of claims 1 to 8.

10. the instruction information includes at least one of status information and time information; The status information is information indicating whether the service can be provided.

10. The method according to any one of claims 1 to 9.

11. the instructional information includes information associated with an account; the account is selected from the group consisting of a debit card account, a credit card account, and a bank account; 11. The method according to any one of claims 1 to 10.

12. the instruction information includes information associated with electronic money; The electronic money is electronic data, The electronic data is data on a balance of a monetary value that can be used for settlement, using the instruction includes updating the balance amount.

12. The method according to any one of claims 1 to 11.

13. the instruction information includes at least one of identification information for identifying a user of the service, personal information, and communication destination information; The communication destination information is information that can identify the communication destination.

13. The method according to any one of claims 1 to 12.

14. The instruction information includes at least one of an IC card number, an email address, a telephone number, a computer communication address, a license plate number, account information, a communication destination, a name, and an address; 14. The method according to any one of claims 1 to 13.

15. the communication includes transaction information relating to the transaction; 15. The method according to any one of claims 5 to 14.

16. The transaction includes a withdrawal transaction to withdraw cash. The method of claim 15.

17. The transaction includes at least one of a debit card transaction, a credit card transaction, a transfer transaction, a payment transaction, and an account transfer transaction. The method of claim 15.

18. The transaction is between a payer and a payee, The transaction information for the transaction was entered by the payee party; the transaction information includes at least one of an amount and information identifying the payee; The method of claim 15.

19. The transaction is a charge transaction for charging electronic money, The electronic money is electronic data, The electronic data is data on a balance of a monetary value that can be used for settlement, The charge transaction increases the balance amount. The method of claim 15.

20. The transaction is an account-related transaction, and updating the account balance of the account.

20. The method according to any one of claims 15 to 19.

21. the request is a permission request for permission to pass; 21. The method of any one of claims 1 to 20.

22. providing the service.

22. The method of any one of claims 1 to 21.

23. and processing the request based on the authentication information.

23. A method according to any one of claims 1 to 22.

24. A method executed in a system including a client and a server, comprising: a client providing a request for a service; a step of the client receiving response information to the request from the server; a client providing authentication information according to any one of claims 1 to 23 if requested by said response information; - providing, by the client, if requested by said answer information, indication information according to any one of claims 1 to 23; Including, The server is a device comprising means for executing each step of the method according to any one of claims 1 to 23. method.

25. A method executed in a system comprising a client and a computer according to any one of claims 1 to 23, The client is an apparatus having means for performing each of the steps of the method according to claim 24. the client providing the request.

24. A method according to any one of claims 1 to 23.

26. Apparatus comprising means for carrying out the method according to any one of claims 1 to 25.

27. A program for causing a computer to carry out the method according to any one of claims 1 to 25.

28. A computer readable storage medium storing the program according to claim 27.

Images