Information processing system, information processing method and program

Abstract

To provide an information processing system, an information processing method and a program in which it is easily known what a service user is providing a consent to.SOLUTION: In an information processing system 1000, a server device 100, a client device 110, a service providing device 120, and a web marketing device 130 are communicably connected through a network 150. The server device 100 has a control unit which receives information on a user's consent action, and issues a consent receipt on the basis of the information on the consent action. In the consent receipt, the information about a content to which the user has consented and an expiration date of the consented content are included.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] To use the service, you will be required to agree to the terms of use and privacy policy. Patent Document 1 discloses a data service providing method that can provide data services more easily. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2023-075816 A Summary of the Invention [Problem to be solved by the invention]

[0004] One issue that can be faced by some service users is that it can be difficult to understand what they are agreeing to. [Means for solving the problem]

[0005] According to one aspect of the present invention, there is provided an information processing system. The information processing system receives information on a consent action of a user. The information processing system issues a consent receipt based on the information on the consent action. The consent receipt includes information on the contents agreed to by the user and an expiration date of the contents agreed to. [Brief description of the drawings]

[0006] [Figure 1] FIG. 1 is a diagram illustrating an example of a system configuration of an information processing system 1000. As shown in FIG. [Diagram 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of the server device 100. As shown in FIG. [Diagram 3]FIG. 3 is a diagram illustrating an example of a hardware configuration of the client device 110. As shown in FIG. [Figure 4] FIG. 4 is a conceptual diagram (part 1) showing an example of information processing in the information processing system 1000. [Diagram 5] FIG. 5 is a diagram showing an example of screen transitions regarding a screen for reading a My Number card using the client device 110. [Figure 6] FIG. 6 is a diagram showing an example of a screen showing pre-registered personal information categories and whether or not name information is to be made public. [Figure 7] FIG. 7 is a conceptual diagram (part 2) showing an example of information processing in the information processing system 1000. In FIG. [Figure 8] FIG. 8 is a diagram showing an example of screen transitions for obtaining permission to share personal information with other services, that is, to disclose personal information to other services. [Figure 9] FIG. 9 is a conceptual diagram (part 2) showing an example of information processing in the information processing system 1000. [Figure 10] FIG. 10 is a diagram showing an example of a screen including a user consent receipt. [Figure 11] FIG. 11 is a conceptual diagram (part 3) showing an example of information processing in the information processing system 1000. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0007] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Various features shown in the following embodiments can be combined with each other. In particular, in this specification, a "unit" may include, for example, a combination of hardware resources implemented by a circuit in a broad sense and software information processing that can be specifically realized by these hardware resources. In addition, various information is handled in this embodiment, and communication and calculation can be performed on a circuit in a broad sense, regardless of whether this information is represented by a high or low signal value as a binary bit collection consisting of 0 or 1, represented by a physical numerical value of the signal value, or represented by quantum superposition.

[0008] In addition, a circuit in the broad sense is a circuit realized by at least appropriately combining a circuit, circuitry, a processor, a memory, etc. In other words, it includes an application specific integrated circuit (ASIC), a programmable logic device (e.g., a simple programmable logic device (SPLD), a complex programmable logic device (CPLD), and a field programmable gate array (FPGA)), etc.

[0009] In addition, the program for realizing the software appearing in the embodiments may be implemented in a form that is downloadable from a server, the program may be executed on a cloud computer, or the program may be stored in a non-volatile or volatile non-transitory storage medium and distributed.

[0010] <Embodiment 1> 1. System Configuration Fig. 1 is a diagram showing an example of a system configuration of an information processing system 1000. As shown in Fig. 1, the information processing system 1000 includes, as a system configuration, a server device 100, a client device 110, a service providing device 120, and a web marketing device 130. The server device 100, the client device 110, the service providing device 120, and the web marketing device 130 are communicatively connected via a network 150. Note that the server device 100, the service providing device 120, and the web marketing device 130 may each be realized as a cloud system.

[0011] The server device 100 executes the process of the embodiment including the modified examples described below. The client device 110 is a device operated by a user. The user is a person who is the subject of consent. In the specification, a smartphone is used as an example of the client device 110, but the present invention is not limited to this. Other examples of the client device 110 may be a PC (Personal Computer), a tablet computer, etc. Although only one client device 110 is illustrated in FIG. 1 for simplification, the information processing system 1000 includes multiple client devices 110. However, in the following, for simplification, a single client device 110 will be used as an example.

[0012] The service providing device 120 is a system, a server, or the like that provides a service to a user of the client device 110 via online. Examples of the services provided by the service providing device 120 include a social networking service, an Internet banking service, a music distribution service, a video distribution service, and an online storage service. For simplification, only one service providing device 120 is illustrated in FIG. 1, but the information processing system 1000 includes as many service providing devices 120 as there are services. However, for simplification of the explanation below, unless otherwise specified, one service providing device 120 will be used as an example. The service providing device 120 may be a system, a server, or the like provided by a domestic company, or may be a system, a server, or the like provided by a foreign company. That is, the service providing device 120 may be installed in a foreign country.

[0013] The web marketing device 130 receives the individual-related information from the service providing device 120. The individual-related information includes information that the service providing device 120 has received by processing the personal information and the like so that the individual cannot be identified, and the user's behavior history on the service provided by the service providing device 120. Processing of the personal information and the like includes, for example, deleting the user's name or converting the user's name so that the user cannot be identified. The web marketing device 130 performs analysis of the user's behavior history on each service based on the received individual-related information, output of the analysis result, and the like. The individual-related information is an example of information that is required to be recorded when the service providing device 120 discloses (or provides) information obtained with the user's consent to another company. The information is not limited to the individual-related information, and may be processed in the same manner as the individual-related information, as long as it is required to be recorded when the information obtained with the user's consent is disclosed (or provided) to another company.

[0014] The information processing system recited in the claims may be composed of multiple devices or may be composed of one device. When the information processing system recited in the claims is composed of one device, an example of the device is a server device 100, etc. When the information processing system recited in the claims is composed of multiple devices, an example of the multiple devices is a server device 100 and a client device 110, or a server device 100 and a service providing device 120, etc.

[0015] 2. Hardware Configuration (Hardware configuration of server device 100) 2 is a diagram showing an example of a hardware configuration of the server device 100. The server device 100 includes a control unit 210, a storage unit 220, and a communication unit 230 as the hardware configuration.

[0016] The control unit 210 is a CPU (Central Processing Unit) or the like, and controls the entire server device 100. The control unit 210 executes processing based on a program stored in the storage unit 220, thereby realizing functions of the server device 100, etc.

[0017] The storage unit 220 is any one of a hard disk drive (HDD), a read only memory (ROM), a random access memory (RAM), and a solid state drive (SSD), or any combination thereof, and stores a program and data used when the control unit 210 executes a process based on the program. The control unit 210 executes a process based on the program stored in the storage unit 220, thereby realizing the functions of the server device 100. The storage unit 220 is an example of a storage medium. Note that, in this embodiment, the data used when the control unit 210 executes a process based on the program is described as being stored in the storage unit 220, but the data may be stored in a storage unit of another device that can communicate with the server device 100. In other words, the data may be stored in a storage unit of any device as long as the control unit 210 can refer to the data. The communication unit 230 is a NIC (Network Interface Card) or the like, which connects the server device 100 to the network 150 and controls communication with other devices.

[0018] The hardware configuration of the service providing device 120 is similar to that of the server device 100. The control unit of the service providing device 120 executes processing based on a program stored in a storage unit or the like of the service providing device 120, thereby realizing the functions of the service providing device 120.

[0019] (Hardware Configuration of Client Device 110) 3 is a diagram showing an example of a hardware configuration of the client device 110. The client device 110 includes, as its hardware configuration, a control unit 310, a storage unit 320, an imaging unit 330, an input / output unit 340, and a communication unit 350.

[0020] The control unit 310 is a CPU or the like, and controls the entire client device 110 . The storage unit 320 is any one of an HDD, a ROM, a RAM, and an SSD, or any combination thereof, and stores programs, data used when the control unit 310 executes processing based on the programs, etc. The control unit 310 executes processing based on the programs stored in the storage unit 320, thereby realizing the functions of the client device 110.

[0021] The imaging unit 330 captures an image of a subject, etc. For example, the imaging unit 330 captures an image of a two-dimensional code, etc., based on a user operation. The input / output unit 340 is a touch panel display or the like, and inputs information based on user operations, and outputs the results of processing by the control unit 310, etc. The communication unit 350 connects the client device 110 to the network 150 and manages communications with other devices.

[0022] 3. Information Processing The information processing according to this embodiment will be described below. (Processing Overview) The control unit 210 receives information on the consent behavior of the user. The consent behavior information includes information on what the user has consented to. If the user has consented to the provision of personal information, the consent behavior information includes information on the personal information that the user has consented to providing. The consent behavior information may also include information on which service provider the user has consented to providing what personal information to. The consent behavior information may also include information on the consent method (authentication method used when consenting). The consent behavior information includes the consent method, and if there are multiple authentication methods for consent, information on the multiple authentication methods is included. The control unit 210 issues a consent receipt based on the received consent behavior information, etc. The consent receipt includes at least information on the consented content and the expiration date of the consented content. The consent receipt is issued for each service provider that provides a service to the user. The information on the consented content includes a URL (Uniform Resource Locator) to a document in which the consented content is described. Here, the service provider refers to a provider that provides a service using the service providing device 120. In addition, if a service provider needs to obtain multiple consents from a user, the same service provider may issue a consent receipt for each of the multiple consents, or may issue a single consent receipt for all consents together. An example of a consent receipt is shown in screen 850 of FIG. 8, FIG. 10, etc., which will be described later. In this way, the control unit 210 issues a consent receipt, making it possible to record and manage information such as what the user consented to for each service provider.

[0023] For the sake of simplicity, the following description will be given on the assumption that the information on the consent behavior is information on the consent behavior regarding the provision of personal information by the user. Therefore, the following description will be given on the assumption that the consent receipt includes information on the contents of consent regarding the provision of personal information. However, this does not limit the first embodiment. Consent is not limited to the provision of personal information, and may include consent to and signing of terms of use, signing a health declaration form when applying for insurance, selecting a confirmation button for security matters and selecting a button for age confirmation, and providing important personal information. In addition, the information is not limited to personal information, and may be any information that can be acquired via the user's client device 110.

[0024] (Processing details) (1) Advance registration FIG. 4 is a conceptual diagram (part 1) showing an example of information processing in the information processing system 1000. 4, authentication is a function provided in a server device 100. A service provider is equivalent to a service providing device 120. A mobile device is equivalent to a client device 110. The same applies below.

[0025] In (1) of Fig. 4, the control unit 210 accepts registration of an electronic certificate registered in a user's My Number card from the client device 110. Here, the description will be given using a My Number card as an example, but the present invention is not limited to My Number cards as long as the user's identity can be confirmed. However, for the sake of simplicity, the description will be given using My Number cards (or My Number) as an example.

[0026] FIG. 5 is a diagram showing an example of screen transitions related to a screen for reading a My Number card using the client device 110. The user accesses the server device 100 using the client device 110, and inputs and reads appropriate information and the like according to the screen transitions shown in FIG. 5. The input and read information is transmitted from the client device 110 to the server device 100. By having the information read, it is possible to prevent the user from having to write information, system malfunctions due to human error, and malicious tampering of information by the user. A screen 510 is a screen displayed when the server device 100 is accessed. A screen 520 is a screen for inputting a phone number as a login ID. A screen 530 is a screen for inputting a passcode. A screen 540 is a screen for prompting the user to read the My Number card.

[0027] In (2) of Fig. 4, the user of client device 110 registers the user's prior consent to the personal information category via a screen or the like provided by server device 100. That is, control unit 210 accepts the registration of the user's prior consent to the provision of personal information included in the personal information category from client device 110. The process of (2) of Fig. 4 is an example of a process for registering the user's prior consent in advance.

[0028] Examples of personal information categories include physical contact information, online contact information, unique ID information, financial ID information, computer information, interactive data, preference data, etc. Examples of physical contact information include name, address, telephone number, mobile phone number, place of employment, delivery address, billing address, etc. Examples of online contact information include email address, homepage URL, SNS account, etc. Examples of unique ID information include driver's license number, passport number, My Number card, etc. Examples of financial ID information include credit card number, bank account number, etc. Examples of computer information include IP address, domain name, browser type, OS type, etc. Examples of interactive data include search items on a search engine, products purchased on a shopping site, etc. Examples of preference data include hobbies, favorite foods, favorite music, favorite sports teams, etc.

[0029] Examples of user prior consent for personal information categories include the following: Physical Contact Information: Allows you to provide information to service providers Online Contact Information: Allow service providers to provide information Unique ID information: Do not allow service providers to provide information Financial ID information: Do not allow service providers to provide information Computer Information: Allow service providers to provide information Interactive Data: Allowing Service Providers to Provide Information Preference Data: Allow service providers to provide information

[0030] FIG. 6 is a diagram showing an example of a screen showing whether or not to make pre-registered personal information categories and name information public. The icons shown in FIG. 6 show representative information from among the personal information categories that the user has permitted to be made public. For example, icon 630 shows that the user has permitted to make his / her e-mail address public. An icon is a small picture or symbol that is displayed on the screen. Toggle button 640 is a button that allows the user to select (or change) whether or not to permit the user's name to be made public. The state of toggle button 640 on screen 610 shows that the user's name is permitted to be made public. The state of toggle button 640 on screen 620 shows that the user's name is not permitted to be made public.

[0031] In (3) of FIG. 4, the service provider registers in the server device 100 via the service providing device 120 the types of information categories that the service provider wishes to collect and the authentication scheme (authentication method) that the service provider requests the user to execute.

[0032] FIG. 7 is a conceptual diagram (part 2) showing an example of information processing in the information processing system 1000. In FIG. In FIG. 7(1), the client device 110 accesses a registration screen for a service provided by the service providing device 120 in response to a user operation. In FIG. 7(2), the service providing apparatus 120 transmits information of a predetermined Web page of the server apparatus 100 to the client apparatus 110 using a redirect function.

[0033] Having received the information, client device 110 displays a specific Web page of server device 100. In (3) of Fig. 7, on the specific Web page, the user checks, via client device 110, necessary information regarding the service provided by service providing device 120 and information that the user permitted to be provided in the information processing of Fig. 4. Note that the Web page is one example, and may be a screen displayed by an application running on client device 110. The same applies hereinafter. In FIG. 7( 4 ), the user transmits personal identification information and the like to the server device 100 via the client device 110 .

[0034] When the user's identity verification is completed, in (5) of Fig. 7, the server device 100 transmits to the service providing device 120 information on information categories that the user agreed to be provided from among the types of information categories to be collected that were registered with the service provider in (3) of Fig. 4. If the received information category information contains all of the information on the information categories to be collected, the service providing device 120 transmits a screen indicating consent completion to the client device 110 and causes it to display it, and then starts providing the service to the user of the client device 110. If the received information category information does not contain all of the information on the information categories to be collected, the service providing device 120 transmits to the client device 110 a screen or the like requesting permission to disclose the missing information and causes it to display it.

[0035] Fig. 8 is a diagram showing an example of screen transitions for obtaining permission to share personal information with other services, i.e., to disclose personal information to other services. In the example of Fig. 8, permission to disclose personal information to other services is explained as an example, but permission to disclose missing information is similar. Also, a service provider who has not registered in advance in the server device 100 the types of information categories to be collected and the authentication scheme (authentication method) to be requested to be executed by the user as described above can obtain permission to obtain information or disclose information through screen transitions as shown in Fig. 8.

[0036] When a user accesses a screen provided by the service providing device 120 via the client device 110, the service providing device 120 uses a redirect function to transmit information on a predetermined web page of the server device 100 to the client device 110. The client device 110 that receives the information displays a predetermined web page of the server device 100. A screen 810 in FIG. 8 is a diagram showing an example of a consent screen. In the example of FIG. 8, the screen requests consent to providing an activity log on a certain service to another service. When the user consents and performs a predetermined operation, the screen transitions from the screen 810 to the screen 820. The screen 820 is a screen for face authentication. When the face authentication is performed, the screen transitions from the screen 820 to the screen 830. The screen 830 is a screen for My Number card authentication. When the My Number card is read and authenticated, the screen transitions from the screen 830 to the screen 840. The screen 840 is a screen for inputting the user's signature. When the certificate is authenticated, the screen transitions from the screen 840 to the screen 850. The screen 850 is a screen including a consent receipt. The consent receipt shown on screen 850 includes information on the service provider providing the service to the user ("TokTok" in the example of FIG. 8), information on the content of the consent (provision of activity logs to a specified SNS in the example of FIG. 8), and information on the method of consent for the provision of the user's personal information (face recognition → My Number card → signature in the example of FIG. 8). In addition, although not shown in FIG. 8, the consent receipt may also include the expiration date of the content of the consent, the expiration date of the data acquired by consent, the difficulty or reliability of the consent method, and specific information on the consent method such as face recognition.

[0037] By registering in advance the categories of personal information of the user which the user has agreed to provide to any service provider, the user can save the trouble of agreeing to provide information on a similar form for each service provider many times. In addition, service providers do not have to take the trouble of creating a system for obtaining consent, and they can also save the trouble of recording what each user agreed to and did not agree to. It should be noted that the advance registration process is merely a process for registering information regarding what the user agrees to in advance in server device 100, and the user's personal information and the like are stored in client device 110.

[0038] (2) Centralized management and logging FIG. 9 is a conceptual diagram (part 2) showing an example of information processing in the information processing system 1000. In FIG. 9, authentication and logging are functions provided by server device 100. In (1) of FIG. 9, the control unit 210 accepts a consent action (consent behavior) of a user regarding the provision of personal information included in the personal information category from the client device 110. The process of (1) of FIG. 9 is, for example, the above-mentioned process of (1) receiving information on the consent behavior regarding the provision of personal information of a user who has not registered in advance and uses a service provided by the service providing device 120. The client device 110 accesses a registration screen of a service provided by the service providing device 120 in response to an operation of the user. The service providing device 120 transmits information on a specific Web page of the server device 100 to the client device 110 using a redirect function. The client device 110 that has received the information displays the specific Web page of the server device 100. On the specific Web page, the user performs a consent behavior when using a service provided by the service providing device 120 via the client device 110. The process of (1) of FIG. 9 is executed, for example, for each service provided by the service providing device 120.

[0039] 9(2), the control unit 210 generates log information regarding the user's consent action based on the accepted consent action. The log information includes the user's identification information, date and time information when consent was obtained from the user, the authentication scheme, and information such as when and to which service provider the user's personal information was passed. The generated log information is stored and managed in the storage unit 220, etc.

[0040] In (3) of FIG. 9, the control unit 210 generates a consent receipt for the user based on information on the user's consent behavior or the generated log information in response to a request from the user. The control unit 210 generates a screen including the generated consent receipt and transmits it to the client device 110. Note that the screen transition between screens 1010 and 1020 described below is controlled by the control unit 210. The process of (3) of FIG. 9 is an example of a process for generating a screen including a consent receipt for the user in response to a request from the user. The process of (3) of FIG. 9 is also an example of a process for controlling the display of the generated screen to the user.

[0041] FIG. 10 is a diagram showing an example of a screen including a user consent receipt. Screen 1010 is a screen showing an example of a display when option 1030 is selected on a screen including a consent receipt. In the example of Fig. 10, it is shown that the user has permitted a service identified as "TokTok" to disclose personal information such as name, birthdate, and address. Also, in the example of Fig. 10, it is shown that the user has permitted a service identified as "CT Bank" to disclose personal information such as phone number, email address, name, and birthdate. Screen 1020 is a screen showing a display example when option 1040 is selected on the screen including the consent receipt. In the example of Fig. 10, the user indicates that they have consented to providing activity logs for both the service identified by "TokTok" and the service identified by "CT Bank".

[0042] In (4) of FIG. 9, the control unit 210 generates a user consent receipt related to the requesting service provider based on the information of the user's consent behavior or the generated log information in response to a request from the service provider. For example, if the service provided by the requesting service provider is a service identified by "TokTok", the portion of the consent receipt shown in FIG. 10 related to the service identified by "TokTok" is generated as a consent receipt and sent to the requester. The process of (4) of FIG. 9 is an example of a process of sending a user consent receipt to a service provider in response to a request from the service provider.

[0043] In (5) of Fig. 9, the web marketing device 130 receives personal related information from the service providing device 120. The process of (5) of Fig. 9 is an example of a process in which a recipient receives related information related to a user's personal information from a service provider.

[0044] In (6) of FIG. 9, the web marketing device 130 inquires of the server device 100 about the personal-related information to confirm whether or not the user has agreed to the provision of the personal-related information. The inquiry includes identification information for identifying the user and identification information for identifying the service provider who provided the personal-related information. In response to a request from the web marketing device 130, the control unit 210 confirms whether or not the user has agreed to the service provider providing the personal-related information based on the identification information for identifying the user and the identification information for identifying the service provider, the consent receipt, and the like. This confirmation process is an example of a process for confirming the presence or absence of the user's consent in response to a request from a recipient who has received related information related to the user's personal information. The control unit 210 transmits the confirmation result to the web marketing device 130 that made the request. The process for transmitting the confirmation result is an example of a process for transmitting the confirmation result of the presence or absence of the user's consent to the recipient.

[0045] (3) Report creation and auditing FIG. 11 is a conceptual diagram (part 3) showing an example of information processing in the information processing system 1000. In FIG. 11, authentication, log information, and reporting are functions provided by server device 100. In (1) of FIG. 11, the control unit 210 acquires information (or log information) of the user's consent behavior. In (2) of FIG. 11, the control unit 210 creates a consent report based on the acquired information (or log information) of the consent behavior of the user. The consent report includes information on how many consents were acquired over a certain period of time, where the consent is backed up, distribution information on when and where the acquired data was passed on, attribute information of the user who gave the consent, and the like. Then, the control unit 210 transmits the generated consent report to, for example, an auditing corporation that audits information, or a system of an auditing institution such as the Digital Agency, and requests an audit. The process of (2) of FIG. 11 is an example of a process of creating a consent report on personal information based on the information of the consent behavior. The consent report includes the number of pieces of information on the consent behavior over a certain period of time, information on attribute information of the user who performed the consent behavior over a certain period of time, the consent content for each consent behavior, and information on whether the expiration date of the consent content has expired. The process of (2) of FIG. 11 is also an example of a process of executing an audit process on the report. That is, in this example, the audit process is a process of transmitting an audit request including the consent report to the system of the auditing institution. In addition, the control unit 210 may also send the service terms and conditions, privacy policy, etc. of the relevant service to the auditing institution's system along with the consent report, and request analysis or confirmation to see if there are any inconsistencies in the consent content.

[0046] In (3) of Figure 11, the auditing agency's system will conduct audits based on the consent report to determine whether each service handles personal information appropriately.

[0047] As described above, according to the first embodiment, the server device 100 can provide the role of a platform for managing consent. In addition, the control unit 210 can issue a consent receipt, thereby recording and managing information such as what the user consented to for each service provider. As another example, the control unit 210 may transmit the consent report and the service terms and / or privacy policy of the corresponding service to an auditing institution's system, etc., and receive an analysis result as to whether or not there is any inconsistency in the consent content from the auditing institution's system, etc. In this way, it is possible to check whether or not there is any inconsistency in the consent content.

[0048] The following are specific examples of consent: ·Select the age verification button Select the button to check security issues when using Wi-Fi · Taking pictures of your driver's license etc. for identity verification and sending the pictures ·Agreement and signature of terms of use Signing a health declaration when applying for insurance · Consent to provide information for a certain service

[0049] (Variation 1) A first modification of the first embodiment will be described. The control unit 210 of the first embodiment transmits an inspection request to a system of an inspection agency or the like. However, the control unit 210 of the first modified example may be configured to audit the consent report and the like in the server device 100. For example, the control unit 210 audits the consent report using a trained model. The trained model of the first modified example is a model trained using the consent report as input data and whether the contents of the consent report are appropriate or not as output data. The control unit 210 outputs whether the contents of the consent report are appropriate or not. One example of output is sending information to a specified device. Another example of output is storing information in a specified memory area.

[0050] According to the first modification, the server device 100 can perform an audit of the consent report.

[0051] (Variation 2) A second modification of the first embodiment will be described. The control unit 210 of the second modification may use the trained model to perform an analysis of whether or not there is a contradiction in the consent content. The trained model of the second modification is a model trained using the consent report and the service terms and conditions and / or privacy policy of the corresponding service as input data, and the analysis result of whether or not there is a contradiction in the consent content as output data. The control unit 210 outputs the analysis result of whether or not there is a contradiction in the consent content. One example of output is sending information to a specified device. Another example of output is storing information in a specified memory area.

[0052] According to the second modification, the server device 100 can check whether there are any contradictions in the contents of the agreement.

[0053] (Variation 3) A third modification of the first embodiment will be described. As shown in (5) and (6) of Figure 9 in embodiment 1, in embodiment 1, it has been described that the web marketing device 130 that receives the personal-related information inquires of the server device 100 to confirm whether or not the user has consented to the provision of the personal-related information. However, the service providing device 120 in the third modification makes an inquiry to the server device 100 to confirm whether or not the user agrees to the provision of the personal-related information. Then, the service providing device 120 receives a confirmation result in response to the inquiry from the server device 100. If the confirmation result indicates that the user agrees to the provision of the personal-related information, the service providing device 120 transmits the personal-related information to the web marketing device 130.

[0054] The process (logging with centralized management) shown in the first embodiment can also be performed by the third modification.

[0055] Furthermore, it may be provided in the following aspects:

[0056] (1) An information processing system that receives information about a user's consent behavior and issues a consent receipt based on the information about the consent behavior, the consent receipt including information about the content agreed to by the user and the expiration date of the content agreed to.

[0057] (2) In the information processing system described in (1) above, the consent receipt further includes an expiration date for the data obtained by consent.

[0058] (3) An information processing system according to (1) or (2) above, which transmits the consent receipt of the user to the service provider in response to a request from the service provider.

[0059] (4) An information processing system according to any one of (1) to (3) above, which generates a screen including a consent receipt for the user in response to a request from the user, and displays the screen to the user.

[0060] (5) An information processing system according to any one of (1) to (4) above, which verifies the consent of the user in response to a request from a recipient who has received related information relating to the user's personal information, and the recipient receives the related information relating to the user's personal information from the service provider.

[0061] (6) In the information processing system described in (5) above, a result of confirmation of the presence or absence of the user's consent is transmitted to the recipient.

[0062] (7) An information processing system according to any one of (1) to (6) above, which creates a consent report based on the information on the consent behavior, and the report includes the number of pieces of consent behavior information over a certain period of time, information on the attributes of the user who performed the consent behavior over a certain period of time, the consent content for each consent behavior, and information on whether the consent content has expired.

[0063] (8) An information processing system according to (7) above, which performs an audit process related to the report.

[0064] (9) In the information processing system according to any one of (1) to (8) above, the information processing system registers the user's prior consent in advance.

[0065] (10) An information processing method executed by an information processing system, comprising: receiving information on a user's consent behavior; and issuing a consent receipt based on the information on the consent behavior, the consent receipt including information on the content agreed to by the user and the expiration date of the agreed content.

[0066] (11) A program for causing a computer to function as the information processing system according to any one of (1) to (9) above. Of course, this is not the case.

[0067] For example, a part or all of the processes of the server device 100 described above may be executed by the client device 110 . In the first embodiment, the server device 100 is described as generating a screen. However, the server device 100 transmits data for generating a screen to the client device 110, etc. The client device 110, etc. may generate and display a screen based on the received data. Moreover, the first embodiment and each of the modified examples may be implemented in any combination.

[0068] Finally, although various embodiments of the present invention have been described, these are presented as examples and are not intended to limit the scope of the invention. The new embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. The embodiments and their modifications are within the scope and spirit of the invention, and are included in the scope of the invention and its equivalents described in the claims. [Explanation of symbols]

[0069] 100: Server device 110: Client device 120: Service providing device 130: Web marketing equipment 150: Network 210: Control section 220: Storage section 230: Communications Department 310: Control section 320: Storage section 330: Imaging unit 340: Input / output section 350: Communications Department 510: Screen 520: Screen 530: Screen 540: Screen 610: Screen 620: Screen 630: Icon 640: Toggle button 810: Screen 820: Screen 830: Screen 840: Screen 850: Screen 1000: Information processing systems 1010: Screen 1020: Screen 1030: Choice 1040: Choice

Claims

1. An information processing system, Receive information about the user's consent action; issuing a consent receipt based on the consent behavior information; The consent receipt includes information regarding the contents of the user's consent and the expiration date of the consent. R, Information processing system.

2. 2. The information processing system according to claim 1, The consent receipt further includes an expiration date for the data obtained by consent. Information processing system.

3. 2. The information processing system according to claim 1, transmitting the consent receipt of the user to the service provider in response to a request from the service provider; Information processing system.

4. 2. The information processing system according to claim 1, generating a screen including a consent receipt for the user in response to a request from the user; displaying the screen to the user; Information processing system.

5. 2. The information processing system according to claim 1, Verify the consent of the user upon request from a recipient of relevant information related to the user's personal information; The recipient receives relevant information related to the user's personal information from the service provider; Information processing system.

6. 6. The information processing system according to claim 5, Transmitting a result of the confirmation of the presence or absence of the user's consent to the recipient; Information processing system.

7. 2. The information processing system according to claim 1, Generate a consent report based on the consent behavior information; The report includes the number of pieces of information on consent behavior over a certain period of time, information on attribute information of users who have performed consent behavior over a certain period of time, the consent content for each consent behavior, and information on whether the consent content has expired. Information processing system.

8. 8. The information processing system according to claim 7, Carry out an audit process with respect to said report; Information processing system.

9. 2. The information processing system according to claim 1, Registering the user's prior consent in advance; Information processing system.

10. An information processing method executed by an information processing system, comprising: Receive information about the user's consent action; issuing a consent receipt based on the consent behavior information; The consent receipt includes information regarding the contents of the user's consent and the expiration date of the consent. R, Information processing methods.

11. A program, Computer, A program for causing the information processing system according to any one of claims 1 to 9 to function as such.

Images