Information processing method, information processing program, and information processing device

Abstract

To provide an information processing method, an information processing program, and an information processing device which make it implementable to provide a region limited service.SOLUTION: The information processing method associates a personal ID effective in a predetermined region with a public ID given to a public certificate or a unique identifier generated from the public certificate. In a case where the public ID or the identifier is received, a computer executes processing of providing a service limited to the region, based on the personal ID associated with the received public ID or the identifier.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an information processing method, an information processing program, and an information processing device that realize the provision of a region-limited service by using an official certificate. [Background technology]

[0002] Public certificates such as driver's licenses, health insurance cards, passports, and personal number cards are issued by public institutions, and therefore the contents written on them are highly reliable. For this reason, public certificates are also widely recognized as identification documents. In particular, personal number cards, commonly known as My Number cards, are capable of storing electronic certificates. For this reason, in recent years, attention has been focused on using My Number cards in various services. Patent Document 1 discloses that in a procedure information linkage system that carries out various procedures at each business in response to a user's request, public personal authentication using My Number cards is performed to verify the user's identity.

[0003] In addition, assuming the widespread use of My Number, the idea of ​​a digital garden city has been proposed, and there is a demand for localized resident services and information for tourists to be provided through a regional data sharing platform. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2023-49133 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, in the conventional technology, the provision of area-limited services is not taken into consideration. The present invention has been made in consideration of such circumstances. An object of the present invention is to provide an information processing method, an information processing program, and an information processing device that realize the provision of area-limited services. [Means for solving the problem]

[0006] An information processing method according to one embodiment of the present application involves storing a personal ID valid in a specified region in association with a public ID assigned to a public certificate or a unique identifier generated from the public certificate, and when the public ID or identifier is received, a computer performs a process to provide the region-restricted service based on the personal ID associated with the received public ID or identifier. Effect of the Invention

[0007] According to one aspect of the present application, it becomes possible to provide area-limited services. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is an explanatory diagram illustrating an example of the configuration of a service providing system. [Diagram 2] FIG. 2 is a block diagram showing an example of a hardware configuration of a server. [Diagram 3] FIG. 2 is a block diagram showing an example of a hardware configuration of a user terminal. [Figure 4] FIG. 2 is a block diagram showing an example of a hardware configuration of a store terminal. [Diagram 5] FIG. 11 is an explanatory diagram showing an example of a user DB. [Figure 6] FIG. 11 is an explanatory diagram showing an example of an association DB. [Figure 7] FIG. 13 is an explanatory diagram showing an example of a period DB. [Figure 8] FIG. 13 is an explanatory diagram showing an example of a confirmation date DB. [Figure 9] 13 is a flowchart illustrating an example of a procedure for a linking process. [Figure 10] 13 is a flowchart illustrating an example of a procedure for a serial number acquisition process. [Figure 11] 13 is a flowchart illustrating an example of a procedure for a serial number acquisition process. [Figure 12] 13 is a flowchart showing an example of a payment process procedure. [Figure 13]13 is a flowchart showing an example of a payment process procedure. [Figure 14] 13 is a flowchart showing another example of a procedure of the payment process. [Figure 15] 13 is a flowchart showing another example of a procedure of the payment process. [Figure 16] FIG. 11 is an explanatory diagram illustrating an example of a service DB. [Figure 17] 13 is a flowchart showing an example of a procedure for a subject determination process. [Figure 18] 13 is a flowchart showing an example of a procedure for a subject determination process. [Figure 19] 13 is a flowchart illustrating an example of a procedure for information providing processing. [Figure 20] 13 is a flowchart showing an example of a procedure for login processing. [Figure 21] 13 is a flowchart showing an example of a procedure for login processing. [Figure 22] 13 is a flowchart showing an example of a procedure for login processing. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] (Embodiment 1) An embodiment will be described below with reference to the drawings. Fig. 1 is an explanatory diagram showing an example of the configuration of a service providing system. The service providing system 100 includes a server 1, a user terminal 2, and a store terminal 3. Although one user terminal 2 and one store terminal 3 are shown, there may be multiple of each. The server 1, the user terminal 2, and the store terminal 3 are connected to each other via a network N so as to be able to communicate with each other.

[0010] The server 1, the user terminal 2, and the store terminal 3 can communicate with the certificate authority CA and can verify the validity of public certificates. The server 1, the user terminal 2, and the store terminal 3 can also communicate with multiple cloud services CS, such as payment services operated by a payment service provider. This allows users to receive various services.

[0011] Server 1 provides area-limited services or performs information processing for providing such services. Area-limited services include services provided in a specific area only to residents living in that area, and services provided in a specific area with no restrictions on the recipients. Server 1 is composed of a server computer, a workstation, a PC (Personal Computer), etc. Server 1 may also be composed of a multicomputer consisting of multiple computers, a virtual machine virtually constructed by software, or a quantum computer. Furthermore, the functions of server 1 may be realized by cloud services.

[0012] 2 is a block diagram showing an example of the hardware configuration of the server 1. The server 1 includes a control unit 11, a main memory unit 12, an auxiliary memory unit 13, a communication unit 14, and a reading unit 15. Each component is connected to a bus B.

[0013] The control unit 11 has one or more arithmetic processing devices such as a CPU (Central Processing Unit), an MPU (Micro-Processing Unit), a GPU (Graphics Processing Unit), etc. The control unit 11 reads out and executes a control program 1P (information processing program, program product) stored in the auxiliary storage unit 13, thereby realizing a functional unit that performs various information processing, control processing, etc. related to the server 1.

[0014] The main memory unit 12 is a static random access memory (SRAM), a dynamic random access memory (DRAM), a flash memory, etc. The main memory unit 12 mainly temporarily stores data necessary for the control unit 11 to execute arithmetic processing.

[0015] The auxiliary storage unit 13 is a hard disk or a solid state drive (SSD) or the like, and stores a control program 1P and various DBs (databases) necessary for the control unit 11 to execute processing. The auxiliary storage unit 13 stores a user DB 131, a link DB 132, a period DB 133, a confirmation date DB 134, and a service DB 135. The auxiliary storage unit 13 may be separate from the server 1 and an external storage device connected externally. The various DBs and the like stored in the auxiliary storage unit 13 may be stored in a database server or cloud storage different from the server 1. The service DB 135 is not essential in this embodiment.

[0016] The communication unit 14 communicates with the user terminal 2, the store terminal 3, the certificate authority CA, and the cloud service CS via the network N. In addition, the control unit 11 may use the communication unit 14 to download the control program 1P from another computer via the network N or the like, and store it in the auxiliary storage unit 13.

[0017] The reading unit 15 reads the portable storage medium 1a including a CD (Compact Disc)-ROM and a DVD (Digital Versatile Disc)-ROM. The control unit 11 may read the control program 1P from the portable storage medium 1a via the reading unit 15 and store it in the auxiliary storage unit 13. The control unit 11 may also read the control program 1P from the semiconductor memory 1b.

[0018] The user terminal 2 is a terminal used by an end user. The user terminal 2 is configured as a smartphone, a tablet computer, or the like.

[0019] 3 is a block diagram showing an example of the hardware configuration of the user terminal 2. The user terminal 2 includes a control unit 21, a main memory unit 22, an auxiliary memory unit 23, a communication unit 24, a display panel 25, and an operation unit 26. Each component is connected by a bus B.

[0020] The control unit 21 has one or more arithmetic processing devices such as a CPU, an MPU, a GPU, etc. The control unit 21 provides various functions by reading and executing a control program 2P (program, program product) stored in the auxiliary storage unit 23.

[0021] The main memory unit 22 is an SRAM, a DRAM, a flash memory, etc. The main memory unit 22 mainly temporarily stores data necessary for the control unit 21 to execute arithmetic processing.

[0022] The auxiliary storage unit 23 is a hard disk or an SSD, etc., and stores various data necessary for the control unit 21 to execute processing. The auxiliary storage unit 23 may be an external storage device that is separate from the user terminal 2 and externally connected. The various DBs, etc. stored in the auxiliary storage unit 23 may be stored in a database server or cloud storage.

[0023] The communication unit 24 communicates with the server 1, the cloud service CS, or the certificate authority CA via the network N. In addition, the control unit 21 may use the communication unit 24 to download the control program 2P from another computer via the network N or the like, and store it in the auxiliary storage unit 23.

[0024] The display panel 25 includes a liquid crystal display panel or an organic EL (electro Luminescence) display panel. The display panel 25 displays a notification screen output by the server 1. The operation unit 26 is a keyboard, a mouse, a trackpad, or the like. The display panel 25 and the operation unit 26 may be integrated to configure a touch panel display. The user terminal 2 may display on an external display device such as a display.

[0025] The store terminal 3 is a terminal used in a store that provides services via the service providing system 100. For example, the store terminal 3 is used in a retail store that provides payment services limited to a service area via the service providing system 100.

[0026] The store terminal 3 is configured as a smartphone, a tablet computer, a notebook computer, etc. The store terminal 3 may be configured as a POS (Point of Sale) register.

[0027] 4 is a block diagram showing an example of the hardware configuration of the store terminal. The store terminal 3 includes a control unit 31, a main memory unit 32, an auxiliary memory unit 33, a communication unit 34, a display panel 35, an operation unit 36, an imaging unit 37, and a short-range communication unit 38. Each component is connected by a bus B. The control unit 31, the main memory unit 32, the auxiliary memory unit 33, the communication unit 34, the display panel 35, and the operation unit 36 ​​are similar to the control unit 21, the main memory unit 22, the auxiliary memory unit 23, the communication unit 24, the display panel 25, and the operation unit 26 of the user terminal 2, respectively, and therefore description thereof will be omitted.

[0028] The imaging unit 37 is, for example, a CCD camera or a CMOS camera, and obtains image data by photoelectrically converting an optical signal input via a CCD or a CMOS, etc. The control unit 31 and the imaging unit 37 may cooperate to realize a function of a POS (Point Of Sales) register, such as reading barcodes attached to products sold in a store and obtaining the sales price.

[0029] The short-distance communication unit 38 performs communication according to the NFC (Near Field Communication) standard. The short-distance communication unit 38 reads out an electronic certificate from a certificate card in which an IC (Integrated Circuit) chip storing electronic data of an official certificate and a wireless antenna are embedded. The short-distance communication unit 38 may also be capable of communication according to the Bluetooth (registered trademark) standard, the infrared communication (IrDA (Infrared Data Association)) standard, the WiFi (registered trademark) standard, etc.

[0030] Next, the database used in the service providing system 100 will be described. FIG. 5 is an explanatory diagram showing an example of a user DB. The user DB 131 stores information on end users, mainly local residents or tourists visiting the area. The user DB 131 includes a user ID column, a name column, an address column, a gender column, a date of birth column, a phone number column, an email column, and a type column. The user ID column stores a user ID (personal ID) that can uniquely identify a user. The user ID is assigned by the service providing system 100. The name column stores the name of the user. The address column stores the current address of the user. The gender column stores the gender of the user. The date of birth column stores the date of birth of the user. The phone number column stores the contact phone number of the user. It is desirable that the stored phone number is a mobile phone number that can use SMS (Short Message Service). The email column stores the contact email address of the user. The type column stores the type of user. For example, the types are resident and tourist. A resident refers to a resident who lives in the area covered by the service providing system 100. A tourist refers to a person who lives outside the area and visits the area mainly for tourist purposes.

[0031] FIG. 6 is an explanatory diagram showing an example of the linked DB. The linked DB 132 is a database that stores a user ID and other IDs in association with each other. The linked DB 132 includes a user ID column, a serial number column, and a payment ID column. The user ID column stores a user ID. The serial number column stores an issue number assigned to an electronic certificate, a so-called serial number (public ID). For example, the electronic certificate is a user authentication electronic certificate or a signature electronic certificate stored in a personal number card, a so-called My Number card. Note that it is desirable to store a hashed value (identifier) ​​of the stored serial number in order to avoid misuse in the event of leakage. The payment ID column stores a payment ID. The payment ID is an ID used when the user uses a payment service. When the user receives a service other than a payment service, the ID used when using the service may be stored in the linked DB 132.

[0032] Fig. 7 is an explanatory diagram showing an example of a period DB. The period DB 133 stores, for each service, a period during which the electronic certificate is exempt from the revocation check. The period DB 133 includes a service column and an exemption period column. The service column stores a service name that identifies the service, etc. The exemption period column stores a period (check exemption period) during which the check process may be omitted after the validity of the electronic certificate is confirmed.

[0033] FIG. 8 is an explanatory diagram showing an example of a check date DB. Check date DB 134 stores the date on which the last revocation check of the electronic certificate was performed for each user. Check date DB 134 includes a user ID column and a check date column. The user ID column stores a user ID. The check date column stores the date on which the last revocation check of the electronic certificate was performed. Note that period DB 133 and check date DB 134 are not essential components in this embodiment, but are essential components in variant example 1 described below.

[0034] Next, the information processing performed in the service providing system 100 will be described. Before describing the information processing, the premise for performing the following information processing will be described. It is assumed that a user who wishes to receive various services via the service providing system 100 uses the user terminal 2 to access the server 1 and register as a user. That is, the user is given a user ID by the service providing system 100, and the user terminal 2 stores the user ID. In addition, the user is registered to use a payment service that is available only in limited areas, is given a payment ID to be used when using the payment service, and the user terminal 2 stores the payment ID.

[0035] FIG. 9 is a flow chart showing an example of the procedure of the linking process. The linking process links a user ID with the serial number of an electronic certificate, and also links the user ID with IDs of various services to which the user is granted. The process shown in FIG. 9 shows an example of a payment service as various services. The user operates the user terminal 2 and specifies a service to be linked. In this case, it is a payment service, and the ID is a payment ID. The control unit 21 of the user terminal 2 transmits the user ID and the payment ID to the server 1 (step S1). The control unit 11 of the server 1 receives the user ID and the payment ID (step S2). The control unit 11 acquires user information from the user DB 131 (step S3). The control unit 11 transmits the user information and the payment ID to the payment service (step S4). The payment service receives the user information and the payment ID (step S5). The payment service authenticates the user (step S6). The payment service compares the user information it holds with the received user information, and if the name, date of birth, etc. match, the authentication is successful. The management of user information may be collectively performed by the service providing system 100. In this case, step S3 is unnecessary, and user information is not sent or received in steps S4 and S5. Then, the authentication in step S6 is successful if the received payment ID is an issued ID, and is unsuccessful if it is not an issued ID. The payment service transmits the authentication result to the server 1 (step S7). The control unit 11 of the server 1 receives the authentication result (step S8). The control unit 11 determines whether the authentication result is successful or not (step S9). If the control unit 11 determines that the authentication result is successful (YES in step S9), the control unit 11 links the user ID and the payment ID and stores them in the linked DB 132 (step S10). The control unit 11 transmits a linking completion to the user terminal 2 (step S11). The control unit 21 of the user terminal 2 receives the completion notification and displays that fact on the display panel 25 (step S12). The control unit 21 ends the process. If the control unit 11 determines that the authentication result is a failure (NO in step S9), it transmits an error to the user terminal 2 (step S13). The control unit 21 of the user terminal 2 receives the error notification and displays a message on the display panel 25 that the matching has failed (step S14). The control unit 21 ends the process.

[0036] 10 and 11 are flowcharts showing an example of the procedure of the serial number acquisition process. The serial number acquisition process is executed after the linking process. However, the serial number acquisition process may be executed once before the electronic certificate expires. The user may start the serial number acquisition process on the user terminal 2, but may request the start of the process on the store terminal 3 when using the service for which the linking process has been completed for the first time. The following description will be given of the case where the process is started on the store terminal 3. The control unit 31 of the store terminal 3 displays a message on the display panel 35 prompting the user to hold the certificate card over the display panel 35. If the store terminal 3 is capable of outputting audio, it may output an audio message. The user holds the certificate card over the short-range communication unit 38. The control unit 31 reads the signature electronic certificate from the certificate card via the short-range communication unit 38 (step S31). The control unit 31 displays a message on the display panel 35 prompting the user to input the PIN for the signature electronic certificate. The user inputs the PIN through the operation unit 36. The control unit 31 acquires the PIN (step S32). The control unit 31 judges whether the PIN is correct or not (step S33). If the control unit 31 judges that the PIN is incorrect (NO in step S33), it outputs a message prompting the user to re-enter the PIN, and returns the process to step S32. If the control unit 31 judges that the PIN is correct (YES in step S33), it transmits the serial number of the signature electronic certificate to the certification authority CA (step S34). The transmission of the serial number indicates a request to confirm the validity of the signature electronic certificate. The certification authority CA receives the serial number (step S35). The certification authority CA checks whether the signature electronic certificate has been revoked, and transmits the confirmation result to the shop terminal 3 (step S36). The control unit 31 of the shop terminal 3 receives the confirmation result (step S37). The control unit 31 judges whether the signature electronic certificate is valid or not based on the confirmation result (step S38). If the control unit 31 determines that the signature digital certificate is invalid (NO in step S38), it displays an error (step S39) and ends the process.If the control unit 31 determines that the signature electronic certificate is valid (YES in step S38), the process moves to FIG. 11 and sends a request for the serial number of the user-certification electronic certificate, including the serial number of the signature electronic certificate, to the certification authority CA (step S40). The certification authority CA receives the request (step S41). The certification authority CA sends the serial number of the user-certification electronic certificate to the store terminal 3 (step S42). The control unit 31 of the store terminal 3 receives the serial number (step S43). The control unit 31 acquires the four basic pieces of information (name, address, gender, date of birth) from the signature electronic certificate (step S44). The control unit 31 sends the serial number of the user-certification electronic certificate and the four basic pieces of information to the server 1 (step S45). The control unit 11 of the server 1 receives and stores the serial number of the user-certification electronic certificate and the four basic pieces of information (step S46). The control unit 11 hashes the serial number of the user authentication electronic certificate and stores it in the linked DB 132, and stores the basic 4 information in the user DB 131. The control unit 11 judges whether or not the user is a resident based on the user's address. If the control unit 11 judges that the user is a resident, it sets the value of the type column in the user DB 131 to resident. If the control unit 11 judges that the user is not a resident, it sets the value of the type column in the user DB 131 to tourist. The control unit 11 transmits completion to the store terminal 3 (step S47). The control unit 31 of the store terminal 3 receives the completion and displays that fact on the display panel 35 (step S48). The control unit 31 ends the process.

[0037] 12 and 13 are flow charts showing an example of the procedure of the payment process. The payment process is a process that is performed when a user electronically pays for the purchase price of a product at a store. The user holds the certificate card over the short-range communication unit 38 of the store terminal 3. The control unit 31 of the store terminal 3 reads the user-certificate electronic certificate from the certificate card via the short-range communication unit 38 (step S61). The control unit 31 displays a message on the display panel 35 prompting the user to input a PIN for the user-certificate electronic certificate. The user inputs the PIN through the operation unit 36. The control unit 31 acquires the PIN (step S62). The control unit 31 determines whether the PIN is correct (step S63). If the control unit 31 determines that the PIN is incorrect (NO in step S63), it outputs a message prompting the user to re-enter the PIN, and returns the process to step S62. If the control unit 31 determines that the password is correct (YES in step S63), it transmits the serial number of the user-certification electronic certificate to the certification authority CA (step S64). The transmission of the serial number means a request to confirm the validity of the user-certification electronic certificate. The certification authority CA receives the serial number (step S65). The certification authority CA checks whether the user-certification electronic certificate has been revoked, and transmits the confirmation result to the shop terminal 3 (step S66). The control unit 31 of the shop terminal 3 receives the confirmation result (step S67). The control unit 31 determines whether the user-certification electronic certificate is valid or not based on the confirmation result (step S68). If the control unit 31 determines that the user-certification electronic certificate is invalid (NO in step S68), it displays an error (step S69) and ends the process. If the control unit 31 determines that the user-certification electronic certificate is valid (YES in step S68), it transmits the serial number of the user-certification electronic certificate to the server 1 (step S70). The control unit 11 of the server 1 receives the serial number (step S71). Moving to Fig. 13, the control unit 11 acquires a payment ID from the associated DB 132 based on the received serial number and transmits it to the store terminal 3 (step S72). Since the serial number is hashed and stored in the associated DB 132, the control unit 11 searches using the hashed version of the received serial number as a search key. The control unit 31 of the store terminal 3 receives the payment ID (step S73).The control unit 31 sends a payment request (payment information) including the payment ID and the payment amount to the payment service (step S74). The payment service receives the payment request (step S75). The payment service executes the payment (step S76). The payment service determines whether the payment is successful (step S77). If the payment service determines that the payment is successful (YES in step S77), it sends a success to the store terminal 3 (step S78). The control unit 31 of the store terminal 3 receives the success and displays it on the display panel 35 (step 79). At that time, the control unit 31 may print a receipt on which the purchased product, the price, the payment amount, etc. are printed by an external printer or the like. The control unit 31 ends the process. If the payment service determines that the payment is unsuccessful (NO in step S77), it sends an error to the store terminal 3 (step S80). The control unit 31 of the store terminal 3 receives the error and displays it on the display panel 35 (step 81). The control unit 31 ends the process. It is assumed that the payment service here can be used only in limited areas, and therefore only store terminals 3 used by stores within the area are able to execute payment processing.

[0038] This embodiment has the following effects. It becomes possible for a user to use services that are available only in limited areas, such as payment services. Furthermore, in payment services, a user can make payments using a certificate card such as a My Number card, eliminating the need to carry around a dedicated card medium for using the service. Since a digital certificate issued by a public institution is stored in the certificate card, a store can obtain highly reliable data for the four basic pieces of information.

[0039] User registration in the service providing system 100 may be in a provisional registration state until the serial number acquisition process is executed for the first time. In addition, since the user's name, address, sex, and date of birth certified by a public institution can be acquired by the serial number acquisition process, the user may be in a provisional registration state and not be able to use the payment service until the serial number acquisition process is executed in the payment service.

[0040] (Variation 1) 12 and 13, the user-certificate digital certificate is checked each time it is issued to see if it has expired, which places a heavy burden on the certification authority CA if the number of payments made increases. In this modified example, if the validity of the user-certificate digital certificate is confirmed, the check is waived for a specified period of time.

[0041] 14 and 15 are flow charts showing another example of the procedure of the payment process. In the following explanation, differences from the payment process explained with reference to Figs. 12 and 13 will be mainly described.

[0042] The control unit 31 of the store terminal 3 reads the user authentication electronic certificate from the certificate card (step S91). The control unit 31 acquires the PIN entered by the user (step S92). The control unit 31 judges whether the PIN is correct or not (step S93). If the control unit 31 judges that the PIN is incorrect (NO in step S93), it outputs a message prompting the user to re-enter the PIN, and returns the process to step S92. If the control unit 31 judges that the PIN is correct (YES in step S93), it transmits a hashed version of the serial number of the user authentication electronic certificate to the server 1 (step S94). The control unit 11 of the server 1 receives the hashed serial number (step S95). The control unit 11 judges whether the validity of the user authentication electronic certificate needs to be checked or not (step S96).

[0043] The determination is made in the following procedure. The control unit 11 uses the hashed serial number as a search key to search the linked DB 132 and acquires the corresponding user ID. The control unit 11 uses the acquired user ID as a search key to search the check date DB 134 and acquires the date when the electronic certificate was last revocation checked. The control unit 11 searches the period DB 133 and acquires the period for which validity check is exempt. If the service type was obtained in step S95, the control unit 11 acquires the period corresponding to that type, and if the service type was not obtained, the control unit 11 acquires the default corresponding period. The control unit 11 determines whether validity check is necessary or not based on the current date, the date when the check was performed, and the exemption period.

[0044] When the control unit 11 determines that the validity of the user-certificate electronic certificate does not need to be checked (NO in step S96), the process proceeds to step S105 in FIG. 15. When the control unit 11 determines that the validity of the user-certificate electronic certificate needs to be checked (YES in step S96), the control unit 11 transmits a message to the store terminal 3 indicating that the user-certificate electronic certificate needs to be checked (step S97). The control unit 31 of the store terminal 3 receives the message indicating that the user-certificate electronic certificate needs to be checked (step S98). Moving to FIG. 15, the control unit 31 transmits the serial number of the user-certificate electronic certificate to the certificate authority CA (step S99). The certificate authority CA receives the serial number (step S100). The certificate authority CA checks whether the user-certificate electronic certificate has been revoked, and transmits the confirmation result to the store terminal 3 (step S101). The control unit 31 of the store terminal 3 receives the confirmation result (step S102). The control unit 31 determines whether the user-certificate electronic certificate is valid or not based on the confirmation result (step S103). If the control unit 31 determines that the user-certificate electronic certificate is not valid (NO in step S103), it displays an error (step S104) and ends the process. If the control unit 31 determines that the user-certificate electronic certificate is valid (YES in step S103), it transmits the hashed serial number of the user-certificate electronic certificate to the server 1 (step S105). At this time, the control unit 31 also transmits a flag indicating whether or not the validity of the user-certificate electronic certificate has been confirmed. The control unit 11 of the server 1 receives the hashed serial number (step S106). The control unit 11 determines whether or not to update the confirmation date based on the flag (step S107). If the control unit 11 determines that the confirmation date should not be updated (NO in step S107), it proceeds to step S109. If the control unit 11 determines that the confirmation date should be updated (YES in step S107), it updates the confirmation date of the record of the corresponding user in the confirmation date DB 134 to the current date (step S108). The control unit 11 acquires a payment ID from the association DB 132 based on the received hashed serial number, and transmits it to the store terminal 3 (step S109). The control unit 31 of the store terminal 3 receives the payment ID (step S110). The control unit 31 executes step 74 and subsequent steps in Fig. 13. The subsequent processing has been described above, so a description thereof will be omitted.

[0045] In this modified example, once the validity of a user authentication certificate has been confirmed, confirmation is omitted for a prescribed period thereafter, thereby making it possible to reduce the burden on the certification authority CA, which performs revocation checks.

[0046] (Variation 2) The payment process in this modified example is almost the same as the procedure shown in Figures 12 and 13, but the method of determining whether the user-certificate electronic certificate is valid is different. In this modified example, the store terminal 3 obtains a certificate revocation list (CRL) provided daily by the certification authority CA. In Figure 12, steps S64 to S67 are not required. In step S68, the control unit 31 determines whether the user-certificate electronic certificate is valid based on the certificate revocation list. If the control unit 31 is unable to obtain the certificate revocation list, it executes the process of embodiment 1 or modified example 1 described above.

[0047] In this modification, as in the first modification, it is possible to reduce the burden on the certification authority CA that performs revocation checks.

[0048] (Embodiment 2) This embodiment relates to a form capable of limiting users to whom a service is provided. Fig. 16 is an explanatory diagram showing an example of a service DB. Service DB 135 stores conditions for users to whom a service is provided. Service DB 135 includes a service ID column, a name column, a target column, and a geographical range column. The service ID column stores a service ID that can uniquely identify a service. The name column stores the name of the service. The target column stores the type of user to whom the service is provided. The geographical range column stores the target geographical range when the target user type is a resident.

[0049] 17 and 18 are flowcharts showing an example of the procedure of the target person determination process. The target person determination process is a process for determining whether or not a user is a target person when a service limited to the target person is provided. In the following explanation, a case where the determination is made at a store receiving the service will be described. The user holds the certificate card over the short-range communication unit 38 of the store terminal 3. The control unit 31 of the store terminal 3 reads the signature electronic certificate from the certificate card via the short-range communication unit 38 (step S121). The control unit 31 displays a message on the display panel 35 prompting the user to input the PIN for the signature electronic certificate. The user inputs the PIN through the operation unit 36. The control unit 31 acquires the PIN (step S122). The control unit 31 determines whether or not the PIN is correct (step S123). If the control unit 31 determines that the PIN is incorrect (NO in step S123), it outputs a message prompting the user to re-enter the PIN, and returns the process to step S122. When the control unit 31 determines that the password is correct (YES in step S123), it transmits the service ID of the service that the user is about to receive to the server 1 (step S124). The control unit 11 of the server 1 receives the service ID (step S125). The control unit 11 searches the service DB 135 using the service ID as a search key to acquire information on the service recipient (step S126). Based on the acquired information, the control unit 11 determines whether or not confirmation of the recipient is necessary (step S127). If the recipient of the service is limited to residents, confirmation is necessary. If the recipient of the service is everyone and there are no limiting conditions, confirmation is unnecessary. When the control unit 11 determines that confirmation of the recipient is unnecessary (NO in step S127), it proceeds to step S140 in FIG. 18. When the control unit 11 determines that confirmation of the recipient is necessary (YES in step S127), it transmits a message to the store terminal 3 indicating that confirmation is necessary (step S128). The control unit 31 of the store terminal 3 receives the message indicating that confirmation is necessary (step S129). 18, the control unit 31 transmits the serial number of the signature digital certificate to the certificate authority CA (step S130). The certificate authority CA receives the serial number (step S131). The certificate authority CA checks whether the signature digital certificate has been revoked, and transmits the result of the check to the shop terminal 3 (step S132).The control unit 31 of the store terminal 3 receives the confirmation result (step S133). The control unit 31 determines whether the signature electronic certificate is valid or not based on the confirmation result (step S134). When the user moves, the previous signature electronic certificate becomes invalid, and a new signature electronic certificate is issued at the new address and stored in the certificate card. When the control unit 31 determines that the signature electronic certificate is invalid (NO in step S134), it displays an error (step S141) and ends the process. When the control unit 31 determines that the signature electronic certificate is valid (YES in step S134), it transmits a confirmation request including the user's address and service ID obtained from the signature electronic certificate to the server 1 (step S135). The control unit 11 of the server 1 receives the confirmation request (step S136). The control unit 11 uses the service ID as a search key to compare the information about the service recipient acquired from the service DB 135 with the user's address to determine whether the user is a recipient of the service, and transmits the result to the store terminal 3 (step 137). The control unit 31 of the store terminal 3 receives the result (step S138). The control unit 31 determines whether the user is a recipient from the result (step S139). If the control unit 31 determines that the user is a recipient (YES in step 139), it provides the service (step S140) and ends the process. If the control unit 31 determines that the user is not a recipient (NO in step 139), it displays that the user is not a recipient (step S142) and ends the process. The result indicating that the user is a recipient transmitted from the server 1 is an example of a command to provide the service.

[0050] In this embodiment, it is possible to provide services to limited target persons. For example, a health management service for residents is envisioned as a service to limited target persons.

[0051] (Embodiment 3) This embodiment relates to a form in which information is provided according to the type of user. In this embodiment, the user terminal 2 is provided with a short-range communication unit, similar to the store terminal 3. FIG. 19 is a flowchart showing an example of the procedure of information provision processing. The user holds the certificate card over the short-range communication unit of the user terminal 2. The control unit 21 of the user terminal 2 reads the signature electronic certificate from the certificate card via the short-range communication unit (step S161). The control unit 21 displays a message on the display panel 25 prompting the user to input the PIN for the signature electronic certificate. The user inputs the PIN through the operation unit 26. The control unit 21 acquires the PIN (step S162). The control unit 21 determines whether the PIN is correct or not (step S163). If the control unit 21 determines that the PIN is incorrect (NO in step S163), it outputs a message prompting the user to re-enter the PIN, and returns the process to step S162. If the control unit 21 determines that the password is correct (YES in step S163), it transmits the serial number of the signature electronic certificate to the certification authority CA (step S164). The certification authority CA receives the serial number (step S165). The certification authority CA checks whether the signature electronic certificate has been revoked and transmits the confirmation result to the user terminal 2 (step S166). The control unit 21 of the user terminal 2 receives the confirmation result (step S167). The control unit 21 determines whether the signature electronic certificate is valid or not based on the confirmation result (step S168). If the control unit 21 determines that the signature electronic certificate is not valid (NO in step S168), it displays an error (step S175) and ends the process. If the control unit 21 determines that the signature electronic certificate is valid (YES in step S168), it transmits an information provision request including the address acquired from the signature electronic certificate to the server 1 (step S169). The control unit 11 of the server 1 receives the request (step S170). The control unit 11 acquires information for the user based on the address (step S171). The control unit 11 searches the service DB 135 to acquire services available to the user. The control unit 11 may access an information portal or the like to acquire information related to the user's residential area. Furthermore, the control unit 11 may access a site operated by the city, ward, town, or village in which the user resides based on the address to acquire information.The date of birth may also be obtained from the digital signature certificate and used when obtaining information. For example, notifications of coming-of-age ceremonies or celebrations of Respect for the Aged Day may be provided only to the intended recipients. The control unit 11 transmits the obtained information to the user terminal 2 (step S172). The control unit 21 of the user terminal 2 receives the information (step S173). The control unit 21 displays the information on the display panel 25 (step S174) and ends the process.

[0052] In this embodiment, it is possible to provide information selected according to the type of user (resident, tourist). It is possible to provide vaccination tickets only to residents, or distribute coupons that can be used at restaurants only to tourists.

[0053] In the present embodiment, the user terminal 2 is used to obtain information, but this is not limiting. A store terminal 3 may be used, or a kiosk terminal installed in a convenience store or a public facility may be used.

[0054] (Embodiment 4) This embodiment relates to an embodiment in which it is possible to limit users to whom a service is provided, as in the second embodiment. In this embodiment, a client-server system is used, and a service server outside the service providing system 100 provides a service to a user. When a user logs in to a service, the service providing system 100 determines whether the user is a target user.

[0055] 20, 21, and 22 are flowcharts showing an example of a procedure for login processing. A user operates the user terminal 2 to request login to a service. The control unit 21 of the user terminal 2 transmits the login request to the service server (step S191). The service server receives the login request (step S192). The service server transmits a redirect command to the user terminal 2 to redirect the processing to the server 1 (step S193). The control unit 21 of the user terminal 2 receives the redirect command (step S194). The control unit 21 transmits an authentication request to the server 1 (step S195). The control unit 11 of the server 1 receives the authentication request (step S196). The control unit 11 transmits an authentication screen to the user terminal 2 (step S197). The control unit 21 of the user terminal 2 receives the authentication screen (step S198). The user holds up the certificate card over the short-range communication unit of the user terminal 2 according to the authentication screen. The control unit 21 reads the certificate card (step S199). The user inputs the PIN for the electronic signature certificate using the operation unit 26. The control unit 21 acquires the PIN (step S200). Moving to FIG. 21, the control unit 21 judges whether the PIN is correct or not (step S201). If the control unit 21 judges that the PIN is incorrect (NO in step S201), it outputs a message prompting the user to re-input, and returns the process to step S200. If the control unit 21 judges that the PIN is correct (YES in step S201), it transmits the serial number of the electronic signature certificate to the certificate authority CA (step S202). The certificate authority CA receives the serial number (step S203). The certificate authority CA checks whether the electronic signature certificate has been revoked, and transmits the confirmation result to the user terminal 2 (step S204). The control unit 21 of the user terminal 2 receives the confirmation result (step S205). The control unit 21 judges whether the electronic signature certificate is valid or not based on the confirmation result (step S206). If the control unit 21 determines that the signature electronic certificate is invalid (NO in step S206), it displays an error (step S207) and ends the process. If the control unit 21 determines that the signature electronic certificate is valid (YES in step S206), it transmits the four basic information pieces obtained from the signature electronic certificate to the server 1 (step S208).At that time, the control unit 21 also transmits an identifier of the service provided by the service server, for example, a service ID. The control unit 11 of the server 1 receives the basic 4 information (step S209). The control unit 11 confirms whether the user is a service recipient based on the basic 4 information, and transmits the confirmation result to the user terminal 2 (step S210). The control unit 21 of the user terminal 2 receives the confirmation result (step S211). Moving to FIG. 22, the control unit 21 judges whether the user is a service recipient based on the confirmation result (step S212). If the control unit 21 judges that the user is not a service recipient (NO in step S212), it displays a "No" screen on the display panel 25 indicating that the service cannot be provided (step S213), and ends the process. If the control unit 21 judges that the user is a service recipient (YES in step S212), it transmits a completion of authentication to the service server (step S214). The authentication is an example of a command to provide a service. The service server receives the completion of authentication (step S215). The service server creates a screen to be displayed after login is complete, for example a top screen (step S216). The service server transmits the screen to the user terminal 2 (step S217). The control unit 21 of the user terminal 2 receives the screen and displays it on the display panel 25 (step S218). The control unit 21 ends the processing. The user can operate the screen displayed on the display panel 25 to receive services from the service server.

[0056] The present embodiment has the following advantages: When a user logs in to a service server external to the service providing system 100, the service providing system 100 performs authentication processing on behalf of the user, and it becomes possible to limit users to whom services are provided by using the four basic pieces of information from the digital signature certificate.

[0057] In this embodiment, the four basic pieces of information are used to determine whether or not a user is a target for service provision, but this is not limiting. All users are targeted for service provision, but local residents and other users may be charged different fees. In addition, when multiple types of services are provided, local residents may be targeted for all services, but other users may be targeted for only some of the services.

[0058] The technical features (constituent elements) described in each embodiment can be combined with each other, and by combining them, new technical features can be formed. The embodiments disclosed herein are illustrative in all respects and should not be considered as limiting. The scope of the present invention is defined by the claims, not by the above meaning, and is intended to include all modifications within the scope and meaning equivalent to the claims. Furthermore, the claims are written in a format in which a claim cites two or more other claims (multiple claim format), but this is not limited to this format. A multiple claim that cites at least one other claim (multi-multi claim) may also be written. [Explanation of symbols]

[0059] 100: Service provision system 1: Server 11: Control section 12: Main memory 13: Auxiliary storage section 131: User DB 132: Linked Database 133: Period DB 134: Confirmation date DB 135: Service DB 14: Communications Department 15: Reading section 1P: Control program 1a: Portable storage medium 1b: Semiconductor memory 2: User terminal 21: Control section 22: Main memory 23: Auxiliary storage section 24: Communications Department 25: Display panel 26:Operation section 2P: Control program 3: Store terminal 31: Control section 32: Main memory 33:Auxiliary storage section 34: Communications Department 35: Display panel 36:Operation unit 37: Imaging section 38: Near field communication department B: Bus CA : Certificate Authority CS: Cloud Services N: Network

Claims

1. storing a personal ID valid in a predetermined area in association with a public ID provided in a public certificate or a unique identifier generated from the public certificate; When the public ID or the identifier is received, the area-limited service is provided based on the personal ID associated with the received public ID or the identifier. An information processing method in which processing is performed by a computer.

2. determining a type of user to whom the personal ID is assigned based on the address obtained from the official certificate; When it is determined that the user type is a local resident, a command is output to instruct the user type to provide a service different from that for other types of users. The information processing method according to claim 1 .

3. Selecting the service based on user attributes obtained from the public certificate; Send information about the selected service 3. The information processing method according to claim 1.

4. The service is a payment service, receiving the official ID or the identifier and a payment amount from a store in the area; generating payment information including the payment amount based on the received public ID or the personal ID corresponding to the identifier; Send the generated payment information to the payment provider 3. The information processing method according to claim 1.

5. Sending a request to a certificate authority to validate the public certificate; If a response that the certificate is valid is received from the certificate authority, the service is provided.

3. The information processing method according to claim 1.

6. storing a confirmation date on which the validity of the public certificate associated with the public ID or the identifier was confirmed in a storage unit in association with the public ID or the identifier; storing the service and the confirmation exemption period in a storage unit in association with each other; receiving said public ID or said identifier together with a request for said service; Obtaining a confirmation date of the public certificate associated with the public ID or the identifier and the confirmation exemption period associated with the received service; If it is determined based on the current date and the acquired confirmation date that the date falls within the confirmation exemption period, the service is provided without making a valid confirmation request.

3. The information processing method according to claim 1.

7. storing a personal ID valid in a predetermined area in association with a public ID provided in a public certificate or a unique identifier generated from the public certificate; When the public ID or the identifier is received, a service is provided based on the personal ID associated with the received public ID or the identifier. An information processing program that causes a computer to execute processing.

8. An information processing device including a control unit, storing a personal ID valid in a predetermined area in association with a public ID provided in a public certificate or a unique identifier generated from the public certificate; When the public ID is received, a service is provided based on the personal ID associated with the received public ID. The control unit executes the process.

Images