Promotion system and promotion method

Abstract

To properly specify a user as an object of promotion and perform the promotion.SOLUTION: In a promotion system S, a member information management server 1 has a storage unit which stores attribute information on users associatively with the users, and is configured to: acquire confirmation completion attribute information representing an attribute which is an attribute of one user, the attribute indicating the fact that the user is certified using an electronic certificate; make the attribute information, stored associatively with the user, coincident with the confirmation completion attribute information; and store coincidence information, showing that the attribute information is coincident with the confirmation completion attribute information, in an attribute association information DB associatively with the user. A promotion servier is configured to acquire condition information showing conditions of attributes of a user as an object of predetermined promotion, and execute processing for the predetermined promotion targeting the user related to the coincidence information among users related to attribute information showing attributes meeting the conditions shown by the condition information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a method for conducting promotions based on user attributes. [Background technology]

[0002] Conventionally, promotions such as product sales promotion activities and service usage promotion activities have been widely carried out. Examples of promotions include displaying and distributing advertisements, sending direct mail, and offering benefits such as coupons and points. It is also known that such promotions may use a method such as targeting. For example, in targeting, users who are the target of the promotion are narrowed down to a user group that meets certain conditions. One example of the conditions for target users is user attributes. Examples of attributes include gender, address, age, etc. Such information is generally managed in the database of the service or company as information on members of the service or customer information of the company.

[0003] For example, Patent Document 1 discloses that a user's basic attributes and history, such as gender, age, address, telephone number, occupation, etc., are stored in a user database, and in response to a content request from a user terminal, targeting information including the user's basic attributes and history is read out, optimal advertising data is obtained based on the targeting information, and a distribution file that combines the advertising data and content data is sent to the user terminal. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2002-203119 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, the information on the attributes of users registered in databases managed by services, companies, etc. is generally information entered by the users. Therefore, the attributes in the database may not match the attributes of the actual users. As a result, there is a risk that users who are the targets of promotions may not be properly identified.

[0006] The present invention has been made in consideration of the above points, and one example of an objective of the present invention is to provide a promotion system and a promotion method that make it possible to appropriately identify users who are the target of a promotion and implement a promotion. [Means for solving the problem]

[0007] One aspect of the present invention is a promotion system comprising: an attribute information storage means for storing, for each of a plurality of users, attribute information indicating the attributes of the user in association with the user; confirmed attribute information acquisition means for acquiring confirmed attribute information indicating attributes of any of the plurality of users, the attributes being confirmed to be true for any of the users using an electronic certificate; a matching means for matching the attribute information stored in the attribute information storage means in association with any of the users to the acquired confirmed attribute information; a storage control means for storing, in the matching information storage means, matching information indicating that the attribute information matches the confirmed attribute information, associated with any of the users; a condition information acquisition means for acquiring condition information indicating conditions of the attributes of users who are the target of a predetermined promotion; and a promotion means for executing processing for the predetermined promotion on users associated with the matching information among users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information.

[0008] According to this aspect, the attribute information storage means stores attribute information of each user. For any user, the attribute information stored in the attribute information storage means is matched with confirmed attribute information indicating attributes confirmed to be true using an electronic certificate. For a user whose attribute information matches the confirmed attribute information, matching information indicating that the attribute information matches the confirmed attribute information is stored. Among users whose attribute information indicating attributes satisfying the attribute conditions of a user who is the target of a predetermined promotion is stored in the attribute information storage means, users whose attribute information has matched the confirmed attribute information are eligible for the promotion. Whether or not the attribute information has matched the confirmed attribute information can be specified by whether or not matching information has been stored. Since the attributes indicated by the confirmed attribute information are attributes confirmed to be true using an electronic certificate, the attribute information that matches the confirmed attribute information is highly likely to be accurate information about the user. Since users who are the target of the promotion are identified based on such attribute information, it is possible to appropriately identify users who are the target of the promotion and implement the promotion.

[0009] Another aspect of the present invention is a promotion system characterized in that the memory control means stores the matching information indicating the matching date on which the attribute information matched the confirmed attribute information by the matching means in the matching information storage means, and the promotion means targets, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the matching information indicating the matching date where the length of time that has elapsed since the matching date is a predetermined length or less, as the target of the specified promotion.

[0010] According to this aspect, a user for whom a predetermined length of time has not yet passed since the date on which the attribute information stored in the attribute information storage means matches the confirmed attribute information may be a promotion target. If time passes from the date on which the attribute information matches the confirmed attribute information, the user's actual attributes may change. Therefore, a user for whom the attribute information is likely to be accurate during that period of time may be a promotion target.

[0011] Yet another aspect of the present invention is a promotion system characterized in that the memory control means stores in the attribute information storage means the matching information indicating whether or not any of the users has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information matches the confirmed attribute information, and the promotion means includes a user associated with the matching information indicating that the consent was not given as a target of the specified promotion if the length of the period that has elapsed since the match date is less than or equal to the specified length, and includes a user associated with the matching information indicating that the consent was given as a target of the specified promotion regardless of the length of the period that has elapsed since the match date.

[0012] According to this aspect, a user who allows the attribute information stored in the attribute information storage means to be matched with the confirmed attribute information can select whether or not to agree to updating the attribute information with the changed confirmed attribute information if the confirmed attribute information is changed after the match. A user who does not agree to this can be eligible for the promotion if a predetermined period has not passed since the date on which the attribute information matched the confirmed attribute information. A user who agrees to this can be eligible for the promotion even if the period of time that has passed since the date on which the attribute information matched the confirmed attribute information exceeds the predetermined period. The attribute information stored in the attribute information storage means is updated with the changed confirmed attribute information as needed. Therefore, for users who choose to agree, the accuracy of the attribute information is highly likely to be maintained, and they can be included in the promotion regardless of the time.

[0013] Yet another aspect of the present invention is a promotion system further comprising a delivery status information acquisition means for acquiring delivery status information indicating a delivery status of a shipment sent to an address indicated by any of the attribute information stored in the attribute information storage means, the attribute indicated by at least one of the attribute information stored in the attribute information storage means including an address condition, and the condition indicated by the acquired condition information including an address condition, the promotion means including, as targets of the specified promotion, users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, and the attribute information indicating the address of the delivery destination for which delivery is indicated to be completed by the acquired delivery status information, regardless of whether they are associated with the matching information.

[0014] According to this aspect, when a shipment is sent to a user's address stored in the attribute information storage means as a delivery destination and the delivery status information indicates that the delivery of the shipment has been completed, the user may be eligible for a promotion even if no matching information is stored for the user. Completion of delivery of a shipment to an address stored in the attribute information storage means indicates that the address is likely to be accurate information for the user. Therefore, it is possible to appropriately identify users who are eligible for a promotion and implement the promotion while eliminating the need to match the attribute information stored in the attribute information storage means with the confirmed attribute information.

[0015] Yet another aspect of the present invention is a promotion system characterized in that the confirmed attribute information acquisition means acquires the electronic certificate from a terminal device of any of the users, and acquires the confirmed attribute information contained in the acquired electronic certificate.

[0016] Yet another aspect of the present invention is a promotion method executed by a computer, comprising: a confirmed attribute information acquisition step of acquiring confirmed attribute information indicating an attribute of any of the multiple users, the attribute information indicating the attribute of the user being associated with the user and stored in an attribute information storage means, the confirmed attribute information indicating an attribute of any of the multiple users and confirmed to be true for any of the users using an electronic certificate; a matching step of matching the attribute information stored in the attribute information storage means associated with any of the users with the acquired confirmed attribute information; a storage control step of storing matching information indicating that the attribute information matches the confirmed attribute information, the attribute information being associated with any of the users, in a matching information storage means; a condition information acquisition step of acquiring condition information indicating conditions of attributes of users who are the target of a predetermined promotion; and a promotion step of executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information. Effect of the Invention

[0017] According to the present invention, it is possible to appropriately identify users who are the targets of a promotion and implement the promotion. [Brief description of the drawings]

[0018] [Figure 1] 1 is a diagram illustrating an example of a schematic configuration of a communication system S according to an embodiment. [Diagram 2] 1 is a block diagram showing an example of a schematic configuration of a member information management server 1 according to an embodiment. [Diagram 3] 4] FIG. 4 is a diagram showing an example of information stored in a database of member information management server 1. [Figure 4] FIG. 2 is a block diagram showing an example of a schematic configuration of a promotion server 2 according to an embodiment. [Diagram 5]FIG. 2 is a diagram showing an example of information stored in a database of the promotion server 2. [Figure 6] 2 is a diagram showing an example of functional blocks of a system control unit 11 in the member information management server 1. FIG. [Figure 7] 1A is a diagram showing an example of the contents of the member DB 14a and the attribute linkage information DB 14b at the time of member registration. FIG. 1B is a diagram showing an example of attribute information included in an electronic certificate stored in a My Number card. FIG. 1C is a diagram showing an example of the contents of the member DB 14a and the attribute linkage information DB 14b after selecting to use the attribute information linkage function. [Figure 8] 2 is a diagram showing an example of functional blocks of a system control unit 21 in the promotion server 2. FIG. [Figure 9] 1A is a diagram showing an example of a user attribute condition; FIG. 1B is a diagram showing an example of information about a certain user; FIG. 1C is a diagram showing an example of information about another user; and FIG. 1D is a diagram showing an example of information about yet another user. [Figure 10] 1A is a diagram showing an example of a determination as to whether or not a certain user is included in a promotion target, and FIG. 1B is a diagram showing an example of a determination as to whether or not another user is included in a promotion target. [Figure 11] 11 is a sequence diagram showing an example of processing by the communication system S when selecting to use an attribute information linking function. FIG. [Figure 12] 11 is a sequence diagram showing an example of processing by the communication system S when a user attribute is changed. [Figure 13] 13 is a flowchart showing an example of a promotion control process executed by a system control unit 21 of the promotion server 2 according to an embodiment. [Figure 14] 1 is a diagram illustrating an example of a schematic configuration of a communication system S according to an embodiment. [Figure 15] FIG. 2 is a diagram showing an example of information stored in the databases of the service server 6 and the delivery company server 7. [Figure 16]2 is a diagram showing an example of functional blocks of a system control unit 11 in the member information management server 1. FIG. [Figure 17] 1A is a diagram showing an example of a user attribute condition, and FIG. 1B is a diagram showing an example of information related to a certain user. [Figure 18] 13 is a flowchart showing an example of a promotion control process executed by a system control unit 21 of the promotion server 2 according to an embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0019] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

[0020] [1. First embodiment] [1-1. Communication system configuration] First, the configuration and functional overview of a communication system S according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of the schematic configuration of a communication system S according to this embodiment. As shown in Fig. 1, the communication system S includes a member information management server 1, one or more promotion servers 2, a signature verification server 3, a certification authority server 4, and multiple user terminals 5. The member information management server 1, each promotion server 2, the signature verification server 3, the certification authority server 4, and each user terminal 5 are connected to a network NW. The network NW is constructed by, for example, the Internet, a dedicated communication line (for example, a CATV (Community Antenna Television) line), a mobile communication network (including base stations, etc.), a gateway, etc.

[0021] The member information management server 1 may be a server device that manages member information related to members of a predetermined service. The predetermined service may be, for example, a service provided using a computer network or information and communication technology, or may not be such a service. The service provided using a computer network or the like may be, or may not be, an online service. The online service may be provided via a website. Examples of the predetermined service include an online shopping mall, a facility reservation service, a service reservation service, online securities, online banking, web search, video distribution, point programs, mobile communication services, carrier payments, optical fiber connection services, credit card payments, app payments, electronic money payments, check-in services, social networking services, stamp card services, rich communication services, and email services. The predetermined service may also be an Internet comprehensive service. The Internet comprehensive service may be a service that is composed of multiple services. The Internet comprehensive service may include at least one of the services shown in the above examples. For convenience, hereinafter, the predetermined service will be described as an Internet comprehensive service. When a user becomes a member of the Internet comprehensive service, a user ID is assigned to the user. The user ID may be identification information that identifies the user in the Internet comprehensive service. A user may be able to specify a user ID, or the Internet Comprehensive Service may automatically assign a user ID. A user who becomes a member of an Internet Comprehensive Service may be able to use many of the services included in the Internet Comprehensive Service. In order to use some services, a user may need to register as a separate member on the condition that he or she is a member of the Internet Comprehensive Service. At the time of or after registering as a member of the Internet Comprehensive Service, each user may register his or her attributes with the Internet Comprehensive Service. Examples of attributes include name, gender, date of birth, address, etc.The member information stored by the member information management server 1 includes these attributes.

[0022] The member information management server 1 may also provide an attribute information linking function to members of the Internet comprehensive service. The attribute information linking function may be a service that matches the user's attributes included in the member information with attributes that have been confirmed to be true using the user's electronic certificate. This is expected to make the information on the user's attributes stored in the member information management server 1 more accurate. The electronic certificate may include information on the user's attributes. The user's electronic certificate may be, for example, an electronic certificate stored in the user's My Number card, or may be stored or acquired in other ways. The My Number card is issued to an individual by the individual filing a procedure with a local government. The electronic certificate may be issued by, for example, a specific certification authority or other institution. An example of a certification authority is the Local Government Information System Agency. In this embodiment, the attributes that are the target of the attribute information linking function are name, sex, date of birth, and address. These pieces of information are also called the four basic pieces of information. However, the attributes that are the target of the attribute information linking function are not limited to these. Each user can select whether or not to use the attribute information linking function. The member information management server 1 may be configured so that a user who has selected to use the attribute information linking function can select whether or not to automatically update the attributes stored in the member information management server 1 with the changed attributes when the user's actual attributes are subsequently changed. Since the certification authority provides the changed attribute information to a person other than the user, the user's consent to the provision of the information may be required. Examples of events that cause a change in a user's attributes include a change of address, marriage, divorce, etc. In response to the occurrence of such an event, the user will carry out procedures to change the attributes with the relevant local government.

[0023] The promotion server 2 may be a server device that executes a process for implementing a predetermined promotion for members of the Internet comprehensive service. Examples of the promotion include advertisements, provision of benefits, and the like. The advertisements may be online advertisements or offline advertisements. Examples of the advertisements include advertisements that are displayed on a screen (for example, display advertisements, listing advertisements, etc.), e-mail advertisements, direct mail, provision of sample products, and the like. A promotion server 2 may be installed for each type of promotion. Examples of the benefits that are provided include coupons, points in a point program, electronic money, cash back, and other prizes, and the like. Examples of the purpose of the promotion include sales promotion of products, promotion of use of services, promotion of use of facilities, improvement of the image of a company or brand, revitalization of a region, and the like. The promotion may be implemented only for users who satisfy a predetermined condition. The condition may be determined, for example, by an advertiser or sponsor. This method may correspond to so-called targeting. For example, in display advertisements and listing advertisements, when a user who satisfies the conditions displays a screen such as a web page including an advertisement space, an advertisement may be displayed on the screen. In e-mail advertisements, e-mails including advertisements may be delivered to users who satisfy the conditions. When providing direct mail or samples, the direct mail or samples may be sent to users who satisfy conditions. When providing benefits, the benefits may be given to users who satisfy conditions. Alternatively, benefits may be given to all users, but users who satisfy conditions may be given benefits that are more valuable than other users. The promotion server 2 may extract users who are eligible for the promotion from among members of the Internet comprehensive service. When the promotion is carried out online, the promotion server 2 may actually carry out the promotion. For example, the promotion server 2 may deliver advertisements, provide benefits, etc. to the target users.When a promotion is carried out offline, the promotion server 2 may execute a process for preparing to send a mail, such as a direct mail, to the target users.

[0024] The signature verification server 3 may be a server device having a signature verification function in the personal authentication service. The signature verification function may include verification of an electronic certificate and verification of an electronic signature. The personal authentication service may be, for example, a service that mainly provides online identity verification means. Identity verification may be performed, for example, using an electronic certificate. The verification of the electronic certificate by the signature verification server 3 may include, for example, verification of the certification path of the electronic certificate, verification of the validity period of the electronic certificate, verification of the revocation status of the electronic certificate, etc. The verification of the electronic signature may include, for example, calculation of a hash value of the electronic certificate or other information, decryption of the electronic signature to the original hash value using a public key included in the electronic certificate, and a match determination of the hash value. In addition, the signature verification server 3 may provide the member information management server 1 with information on the user's attributes that have been confirmed to be true using the electronic certificate. Furthermore, the signature verification server 3 may obtain information on the changed attributes due to the revocation of the electronic certificate caused by a change in the user's attributes from the certification authority server 4, and provide the obtained information to the member information management server 1.

[0025] The certification authority server 4 may be a server device installed by a certification authority. The certification authority server 4 may provide, for example, the revocation status of an electronic certificate. The certification authority server 4 may also manage attribute information indicating the attributes of each user to whom an electronic certificate has been issued. The certification authority server 4 may also provide information on changed attributes resulting from the revocation of an electronic certificate due to a change in the user's attributes.

[0026] Each user terminal 5 may be a terminal device owned by a user who can use the Internet comprehensive service. Examples of the user terminal 5 include a personal computer, a smartphone, a portable information terminal such as a tablet computer, a mobile phone, a PDA (Personal Digital Assistant), a set-top box, and the like. A web browser may be installed in each user terminal 5. In addition, an application for using the Internet comprehensive service may be installed in the portable user terminal 5. In addition, each user terminal 5 may be configured to be able to read an electronic certificate from a My Number card. For example, each user terminal 5 may have an integrated circuit (IC) card reader compatible with near field communication (NFC) or the like built-in or be connectable to the card reader.

[0027] Among the devices included in the communication system S, the combination of the member information management server 1 and the promotion server 2 is an example of a promotion system of the present invention. The example of the promotion system may or may not include the signature verification server 3.

[0028] [1-2.Device configuration] [1-2-1. Member information management server] Next, the configuration of member information management server 1 will be described with reference to Fig. 2 and Fig. 3. Fig. 2 is a block diagram showing an example of a schematic configuration of member information management server 1 according to this embodiment. As shown in Fig. 2, member information management server 1 comprises a system control unit 11, a system bus 12, an input / output interface 13, a storage unit 14, and a communication unit 15. System control unit 11 and input / output interface 13 are connected via system bus 12.

[0029] The system control unit 11 includes a central processing unit (CPU) 11a, a read only memory (ROM) 11b, a random access memory (RAM) 11c, and the like.

[0030] The input / output interface 13 performs interface processing between the storage unit 14 and the communication unit 15 and the system control unit 11 .

[0031] The storage unit 14 is configured with, for example, a hard disk drive, etc. Databases such as a member DB 14a, an attribute linkage information DB 14b, etc. may be stored in this storage unit 14. "DB" is an abbreviation for database.

[0032] 3 is a diagram showing an example of information stored in the database of the member information management server 1. Member DB 14a may store member information on each member of the Internet comprehensive service. This member information may include attribute information indicating the attributes of the user. For example, member DB 14a may store, as member information, a user ID, name, sex, date of birth, address, telephone number, e-mail address, etc., in association with one another. At least one of the name, sex, date of birth, address, telephone number, and e-mail address may correspond to attribute information.

[0033] The attribute federation information DB14b may store attribute federation information related to the attribute information federation function for each member of the Internet comprehensive service. For example, the attribute federation information DB14b may store a user ID, a federation state, a federation date, an agreement type, a serial ID, and the like as attribute federation information in association with each other. The user ID indicates which user the attribute federation information is about. The federation state may indicate whether the user has used the attribute information federation function. For example, the federation state may be set to either "unlinked" or "linked". "Unlinked" indicates that the user has not used the attribute information federation function. In this case, the user's attributes stored in the member B14a do not necessarily match the attributes confirmed by the electronic certificate. "Linked" indicates that the user has used the attribute information federation function. In this case, the user's attributes stored in the member B14a have been matched with the attributes confirmed by the electronic certificate at least once. The federation date, the agreement type, and the serial ID are valid when the federation state is set to "linked". The linking date indicates the date on which the user selected to use the attribute information linking function. On the linking date, the user's attributes stored in the member B14a are matched with the attributes confirmed in the electronic certificate. Therefore, the linking date also indicates the date on which the attributes stored in the member B14a matched with the attributes confirmed in the electronic certificate. The consent information may be information indicating the user's consent status to the member information management server 1 using the user's information to realize the attribute information linking function. For example, the consent information may be set to either "first-time only linking" or "continuous linking". "First-time only linking" indicates that the user consented to matching the user's attributes stored in the member B14a with the attributes confirmed in the electronic certificate only on the linking date. In order to match the attributes in this case, the member information management server 1 needs to obtain information on the user's attributes contained in the electronic certificate. "First-time only linking" also indicates that the user consented only to the acquisition of this information. "Continued Linkage" indicates that in addition to the linkage date, if there is a change in the user's actual attributes, the user has agreed to have the user's attributes stored in member B14a matched to the changed attributes.In order to match the attributes in this case, the member information management server 1 needs to obtain information on the changed attributes from the certification authority server 4 via the signature verification server 3. "Continuous linkage" indicates that in addition to obtaining information on the user's attributes contained in the electronic certificate, the user has also agreed to obtaining information from the certification authority server 4. The serial ID is identification information for identifying the user in the signature verification server 3. The serial ID may be automatically assigned by the signature verification server 3 to each user who uses the attribute information linkage function. The signature verification server 3 may identify the user using the user ID. In this case, the serial ID is not necessary. The attribute linkage information may also be stored in the member DB 14a.

[0034] The member information management server 1 may provide an API (Application Programming Interface) for accessing the database stored in the storage unit 14 to a server device such as the promotion server 2. By using the API, the promotion server 2 may be able to acquire information from the member DB 14ba and the attribute linkage information DB 14b.

[0035] Furthermore, various programs such as an operating system, a DBMS (Database Management System), and a member information management server program are stored in storage unit 14. The member information management server program is a program that causes system control unit 11 to execute processes related to the management of member information. The member information management server program may be obtained, for example, from another device via network NW, or may be stored in a storage medium such as a magnetic tape, optical disc, or memory card and read via a drive device.

[0036] The communication unit 15 is configured by, for example, a network interface card, etc. The communication unit 15 connects to the promotion server 2, the signature verification server 3, the user terminal 5, etc. via the network NW, and controls the communication state with the connected devices.

[0037] [1-2-2. Promotion Server] Next, the configuration of the promotion server 2 will be described with reference to Fig. 4 and Fig. 5. Fig. 4 is a block diagram showing an example of a schematic configuration of the promotion server 2 according to this embodiment. As shown in Fig. 4, the promotion server 2 includes a system control unit 21, a system bus 22, an input / output interface 23, a storage unit 24, and a communication unit 25. The system control unit 21 and the input / output interface 23 are connected via the system bus 22.

[0038] The system control unit 21 includes a CPU 21a, a ROM 21b, a RAM 21c, and the like.

[0039] The input / output interface 23 performs interface processing between the storage unit 24 and the system control unit 21, and between the communication unit 25 and the system control unit 21.

[0040] The storage unit 24 is configured with, for example, a hard disk drive, etc. The storage unit 24 may store a database such as a promotion DB 24a.

[0041] FIG. 5 is a diagram showing an example of information stored in the database of the promotion server 2. The promotion DB 24a may store promotion information related to each promotion. The promotion information may be set by, for example, an advertiser or a sponsor. For example, in the promotion DB 24a, a promotion ID, a promotion name, a user attribute condition, and the like may be associated with each other as promotion information. The promotion ID is identification information for identifying a promotion. The user attribute condition may indicate a condition of an attribute of a user who is a target of the promotion. The attributes for which a condition can be set may be limited to only attributes that are targets of the attribute information linking function, or may include other attributes. The user attribute condition may include, for example, an attribute item name and attribute value information for each attribute for which a condition is set. The attribute item name indicates the name of the attribute item for which a condition is set. Examples of the attribute item name include "last name", "first name", "gender", "age", and "address". The attribute value information indicates the value of the attribute. An example of an attribute value corresponding to "last name" is "Yamada". An example of an attribute value corresponding to "first name" is "Taro". Examples of attribute values ​​corresponding to "gender" are "male" and "female". Examples of attribute values ​​corresponding to "age" include "15 years old," "45 years old," "20 years old or older," "under 60 years old," and "30 to 40 years old." Examples of "address" include "Tokyo," "Chuo Ward, Chiba City, Chiba Prefecture," and "Tohoku region." The attribute conditions are indicated by a combination of the attribute item name and attribute value information. When conditions are set for each of multiple attributes according to the user attribute conditions, users who satisfy all of the multiple conditions may be eligible for the promotion.

[0042] An example of setting user attribute conditions will be described. For example, if there is an age limit for the use of a product or service, it is possible to set an age condition. For example, if a promotion for alcoholic beverages is implemented, it is possible to limit the age of users who are the target of the promotion to 20 years old or older. Furthermore, if a promotion for a product or service aimed at consumers of a specific gender, such as cosmetics, is implemented, the gender of users who are the target of the promotion may be limited. Furthermore, if a promotion aimed at revitalizing a region is implemented, it is possible to limit the addresses of users who are the target of the promotion to that region. Furthermore, the promotion may be implemented only for users with a specific surname or given name.

[0043] Further, the promotion DB 24a may further store other information according to the type of promotion. For example, examples of other information stored in the promotion DB 24a include conditions of user behavior that is the target of the promotion, information identifying an advertiser or sponsor, an advertising budget, an advertising unit price, information identifying content presented to a user as an advertisement, the type of benefit to be granted, and a method of determining the content or value of the benefit to be granted. The storage unit 24 may further store databases and other information according to the type of promotion.

[0044] Furthermore, various programs such as an operating system, a DBMS, and a promotion server program are stored in the storage unit 24. The promotion server program is a program that causes the system control unit 21 to execute processing for implementing a promotion. The promotion server program may be obtained from another device via the network NW, for example, or may be stored in a storage medium such as a magnetic tape, an optical disk, or a memory card and read via a drive device.

[0045] The communication unit 25 is configured by, for example, a network interface card, etc. The communication unit 25 connects to the member information management server 1 or the user terminal 5, etc. via the network NW, and controls the communication state with the connected device.

[0046] [1-3. Functional overview of the system control unit] [1-3-1. Member information management server] Next, a functional overview of the system control unit 11 in the member information management server 1 will be described with reference to Figures 6 and 7. Figure 6 is a diagram showing an example of a functional block of the system control unit 11 in the member information management server 1. As shown in Figure 6, the system control unit 11 may function as an attribute information acquisition unit 1101, an attribute information matching unit 1102, a matching information storage control unit 1103, and the like, by the CPU 11a reading and executing various program codes included in the member information management server program.

[0047] The attribute information acquisition unit 1101 may acquire attribute information indicating the attributes of any one of a plurality of users who are members of the Internet comprehensive service. The acquired attribute information may be information indicating attributes that have been confirmed to be true for that user based on an electronic certificate. This attribute information is also referred to as confirmed attribute information. An attribute that has been confirmed to be true for a user based on an electronic certificate may be an attribute when, for example, the user has been confirmed or proven to be the user who possesses that attribute using an electronic certificate. The attribute information may be included in the electronic certificate.

[0048] For example, it is assumed that the electronic certificate is stored in the IC chip of the My Number card. For example, the My Number card stores an electronic certificate for signature and an electronic certificate for user authentication. The electronic certificate for signature includes attribute information indicating the user's name, sex, date of birth, and address. For example, the application of the Internet comprehensive service may include a program for reading the electronic certificate for signature from the My Number card and transmitting the electronic certificate and electronic signature to the member information management server 1. Alternatively, the member information management server 1 may transmit a web page for the attribute information linking function to the user terminal 5 in response to a request from the user terminal 5. This web page may include a script for reading the electronic certificate for signature from the My Number card and transmitting the electronic certificate and electronic signature to the member information management server 1. For example, the user may be able to select the attribute information linking function on the application or web page. Then, the user may perform an operation for consenting to the Internet comprehensive service acquiring the user's confirmed attribute information. At this time, when the confirmed attribute information is changed, the user may be able to select whether or not to agree to update the attribute information stored in the member DB 14a with the changed confirmed attribute information. When the user agrees to at least acquiring the confirmed attribute information, the user may input a password for accessing the electronic certificate according to an instruction from an application or a web page to cause the user terminal 4 to read the electronic certificate stored in the My Number card. At this time, the IC chip provided in the My Number card may perform an electronic signature on the electronic certificate or on the predetermined information transmitted from the member information management server 1 to the user terminal 5, and transmit the electronic signature together with the electronic certificate to the user terminal 5. The user terminal 5 may transmit the electronic certificate and the electronic signature to the member information management server 1. The attribute information acquisition unit 1101 may transmit the electronic certificate and the electronic signature acquired from the user terminal 5 to the signature verification server 3. As a result, the attribute information acquisition unit 1101 may cause the signature verification server 3 to execute verification of the electronic certificate and the electronic signature.If these verifications confirm or prove that the user of user terminal 5 that sent the electronic certificate is the user identified by the attribute information included in the electronic certificate, attribute information acquisition unit 1101 may acquire the attribute information included in the electronic certificate as confirmed attribute information. Here, member information management server 1 may acquire the attribute information directly from the electronic certificate. Alternatively, signature verification server 3 may acquire the attribute information from the electronic certificate, and member information management server 1 may acquire the attribute information from signature verification server 3.

[0049] When the user's attributes are changed, the attribute information acquisition unit 1101 may also acquire attribute information indicating the changed attributes from the certificate authority server 4 via the signature verification server 3.

[0050] The attribute information matching unit 1102 may match the attribute information stored in the member DB 14a in association with the user about whom the confirmed attribute information is acquired by the attribute information acquisition unit 1101 with the confirmed attribute information. The information associated with the user may be information associated with identification information that identifies the user. The identification information may be, for example, a user ID. Matching the attribute information with the confirmed attribute information may include, for example, rewriting the attribute information stored in the member DB 14a with the confirmed attribute information. Matching the attribute information with the confirmed attribute information may include determining whether the attribute information stored in the member DB 14a matches the confirmed attribute information. If the attribute information matches the confirmed attribute information, the attribute information matching unit 1102 may not need to rewrite the attribute information stored in the member DB 14a. If the attribute information does not match the confirmed attribute information, the attribute information matching unit 1102 may rewrite the attribute information stored in the member DB 14a with the confirmed attribute information. The match determination and rewriting of information may be performed for each attribute.

[0051] When the attribute information stored in the member DB 14a by the attribute information matching unit 1102 matches the confirmed attribute information, the matching information storage control unit 1103 may store, in the attribute linkage information DB 14b, matching information indicating that the attribute information matches the confirmed attribute information, in association with the user from which the confirmed attribute information was acquired. This matching information may be attribute linkage information including a linkage status indicating "linked", for example. The matching information may be stored in the member DB 14a.

[0052] FIG. 7(a) is a diagram showing an example of the contents of the member DB 14a and the attribute linkage information DB 14b at the time of member registration. For example, a user U1 has registered as a member of an Internet general service. At this time, the user U1 has also registered the user's name, sex, date of birth, and address. As shown in FIG. 7(a), the attribute information of the user U1 is stored in the member DB 14a. The date of birth on the member DB 14a is "August 1, 2000". However, the correct date of birth of the user U1 is "August 11, 2000". The user U1 has input the wrong date of birth. In addition, the address on the member DB 14a is "ABCDEFGH, Chuo-ku, Tokyo". This address is correct. In addition, the member information management server 1 stores the attribute linkage information for the user U1 in the attribute linkage information DB 14b. At this time, the member information management server 1 sets the linkage state to "non-linkage".

[0053] After that, user U1 moved and completed the procedure to change his / her address. The new address is "IGKLMNOP, Yokohama, Kanagawa Prefecture." User U1 then completed the procedure to issue a My Number card. Figure 7(b) shows an example of attribute information contained in the electronic certificate stored in the My Number card. As shown in Figure 7(b), the date of birth included in the electronic certificate is "August 11, 2000." Furthermore, the address included in the electronic certificate is "IGKLMNOP, Yokohama, Kanagawa Prefecture."

[0054] After that, the user U1 selects to use the attribute information linking function. Fig. 7(c) is a diagram showing an example of the contents of the member DB 14a and the attribute linking information DB 14b after the selection of the use of the attribute information linking function. As shown in Fig. 7(c), the date of birth and address of the user U1 stored in the member DB 14a are updated to "August 11, 2000" and "IGKLMNOP, Yokohama City, Kanagawa Prefecture", respectively. In addition, the linking status stored in the attribute linking information DB 14b is changed to "Linked".

[0055] The match information storage control unit 1103 may store, in the attribute linkage information DB 14b, match information indicating the match date on which the attribute information stored in the member DB 14a matches the confirmed attribute information, by the attribute information acquisition unit 1101. This match date may be the linkage date included in the attribute linkage information.

[0056] Furthermore, the matching information storage control unit 1103 may store, in the attribute linking information DB 14b, matching information indicating whether or not the user has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information stored in the member DB 14a matches with the confirmed attribute information. The presence or absence of this user consent may be indicated by consent information included in the attribute linking information. Consent information indicating "continuous linking" indicates that the user has consented to updating the attribute information with the changed confirmed attribute information. Consent information indicating "first-time linking only" indicates that the user has not consented to updating the attribute information with the changed confirmed attribute information.

[0057] In this embodiment, each user can select either "first-time only linkage" or "continuous linkage", whichever the user desires. However, the member information management server 1 may be configured so that only "first-time only linkage" is selectable, or the member information management server 1 may be configured so that only "continuous linkage" is selectable.

[0058] [1-3-2. Promotion Server] Next, a functional overview of the system control unit 21 in the promotion server 2 will be described with reference to Fig. 8 to Fig. 10. Fig. 8 is a diagram showing an example of functional blocks of the system control unit 21 in the promotion server 2. The system control unit 21 may function as a condition information acquisition unit 2101, a promotion unit 2102, etc., as shown in Fig. 8, by the CPU 21a reading and executing various program codes included in the promotion server program.

[0059] The condition information acquiring unit 2101 may acquire a user attribute condition indicating a condition of an attribute of a user who is a target of a predetermined promotion. For example, the condition information acquiring unit 2101 may acquire the user attribute condition from the promotion DB 24a.

[0060] The promotion unit 2102 may execute a process for a predetermined promotion for a user associated with the matching information stored in the attribute linkage information DB 14b by the matching information storage control unit 1103 among users associated with attribute information indicating an attribute satisfying a condition indicated by the user attribute condition acquired by the condition information acquisition unit 2101. At this time, the promotion unit 2102 may not include a user who is not associated with the matching information as a target of the promotion even if the user is associated with attribute information indicating an attribute satisfying a condition indicated by the user attribute condition. The attribute information stored in the member DB 14a for a user associated with the matching information is attribute information that has been confirmed once as true for that user based on an electronic certificate. Therefore, the attribute information of a user associated with the matching information is more accurate. Therefore, the promotion can be appropriately implemented by making only the user associated with the matching information a target of the promotion among the users whose attribute information stored in the member DB 14a satisfies the condition. An example of a user associated with the matching information is a user associated with attribute linkage information including a linkage status indicating "linked". An example of a user not associated with the matching information is a user associated with attribute linkage information including a linkage status indicating "not linked".

[0061] FIG. 9(a) is a diagram showing an example of a user attribute condition. The promotion in FIG. 9(a) is the revitalization of a region using an electronic stamp card. For example, the Internet comprehensive service includes a stamp card service. The stamp card service is a service that gives stamps to a user who visits a specific facility. A user who has acquired a predetermined number of stamps can acquire some kind of benefit. For example, the benefit is given by a sponsor, a facility, or an operator of the stamp card service. For each stamp card, one or more facilities at which the user can acquire stamps are predefined. In addition to the promotion DB 24a, the storage unit 24 of the promotion server 2 may store a database indicating facilities at which the user can acquire stamps for each stamp card, a database indicating the issuance status of each stamp card for each user, a database indicating the acquisition status of stamps for each issued stamp card, a database indicating information on each facility, and the like. The promotion unit 2102 may determine whether or not the user has visited a facility. For example, the promotion unit 2102 may make a determination based on the location information of the user terminal 5 and the location information of the facility. The location information of the user terminal 5 is information indicating the location of the user terminal 5. For example, the user terminal 5 may periodically calculate the location information of the user terminal 5 using a satellite positioning system such as a GPS (Global Positioning System). The user terminal 5 may transmit the location information to the promotion server 2. The location information of the facility indicates the location of the facility. The location information of the facility is set in advance. The promotion unit 2102 may determine whether the user has visited the facility based on the usage status of a service available to the user at the facility among the services included in the Internet comprehensive service. Examples of such services include a point program, credit card payment, app payment, and electronic money payment. When the user uses a service at the facility, for example, a terminal device (not shown) installed at the facility may transmit usage information of the service to a predetermined server device (not shown) included in the Internet comprehensive service. This usage information may include information identifying the user who used the service and information identifying the facility visited by the user.The promotion unit 2102 can determine whether or not a user has visited a facility by acquiring the usage information. As shown in FIG. 9(a), the promotion name is "Fukushima Limited Stamp Card". No conditions are set for name, sex, and age. The address condition is "Fukushima Prefecture". Therefore, users who live in Fukushima Prefecture are eligible for the promotion using the stamp card. FIG. 9(b) is a diagram showing an example of information about a certain user. As shown in FIG. 9(b), the address of user U11 is in Fukushima Prefecture. Therefore, the attributes of user U11 satisfy the user attribute condition. However, the linkage status is "unlinked". Therefore, user U11 is not eligible for the promotion. FIG. 9(c) is a diagram showing an example of information about another user. As shown in FIG. 9(c), the address of user U12 is in Fukushima Prefecture. In addition, the linkage status is "linked". Therefore, user U12 is eligible for the promotion. FIG. 9(d) is a diagram showing an example of information about yet another user. As shown in FIG. 9(d), the address of user U13 is in Kanagawa Prefecture. In addition, the linkage status is "linked". In the first place, since the attributes of user U13 do not satisfy the user attribute conditions, user U13 is not eligible for the promotion.

[0062] The determination of whether a certain user is a user who is a target of the promotion or the extraction of users who are the target of the promotion may differ depending on the type of promotion. For example, when a type of advertisement that is displayed on a screen is implemented, the promotion unit 2102 may acquire the user ID of the user of any user terminal 5 from the user terminal 5 when the user terminal 5 displays the screen. The promotion unit 2102 may acquire the member information and attribute linkage information associated with the user ID and make the determination. When an advertisement is implemented by e-mail or direct mail, the promotion unit 2102 may search for member information including attribute information that satisfies a user attribute condition from, for example, the member DB 14a, and may also search for attribute linkage information including a linkage status indicating "linked" from the attribute linkage information DB 14b. The promotion unit 2102 may extract users who are the target of the promotion based on these search results. When a promotion using a stamp card is implemented, the promotion unit 2102 may determine whether or not the user is a target of the promotion based on the user attribute condition of the stamp card and the member information and attribute linkage information of the user, for example, when the user selects to issue any stamp card. Alternatively, the promotion unit 2102 may determine whether or not the user is eligible for the promotion when, after the stamp card is issued, it is detected that the user has visited a facility that is set up so that stamps can be earned using the stamp card.

[0063] The process for the promotion of the user who has been determined as the target of the promotion may also differ depending on the type of promotion. For example, when a type of advertisement that is displayed on a screen is implemented, the promotion unit 2102 may transmit the content data of the advertisement to the user terminal 5, thereby displaying the advertisement on the screen. When an advertisement is implemented by e-mail, the promotion unit 2102 may transmit an e-mail including the advertisement to the user who is the target of the promotion. When an advertisement is implemented by direct mail, the promotion unit 2102 may generate information including the postal code, address, name, etc. of the user who is the target of the promotion as information for printing the address of the direct mail. In addition, the promotion unit 2102 may acquire or generate information indicating an image or text to be printed on the direct mail as the advertisement. The promotion unit 2102 may transmit at least the information for printing the address of the user among the above information to a computer (not shown) used for printing the direct mail, for example. This computer may be connected to a predetermined printer. Then, the direct mail may be printed by the printer based on the transmitted information. When a promotion using a stamp card is implemented, the promotion unit 2102 may execute a process of issuing a stamp card requested by a user, for example. Alternatively, when the promotion unit 2102 detects that a user has visited a facility set up so that stamps can be acquired using the stamp card owned by the user, the promotion unit 2102 may execute a process of updating the number of stamps acquired by the user in the database. In addition, the promotion unit 2102 may transmit a message indicating that the user has acquired a stamp to the user terminal 5 used by the user.

[0064] The promotion unit 2102 may target a user associated with matching information indicating a matching date on which the length of the period that has elapsed since the matching date on which the attribute information stored in the member DB 14a matches the confirmed attribute information is equal to or shorter than a predetermined length for a predetermined promotion. On the other hand, the promotion unit 2102 may exclude a user on which the length of the period that has elapsed since the matching date exceeds a predetermined length for the promotion. As described above, the attribute information that matches the confirmed attribute information is highly likely to be correct information for the user at that time. However, the attributes of a user may be changed. On the other hand, information such as name and address does not change frequently. Therefore, the attribute information may be interpreted as being valid for a certain period from the date on which the attribute information matches the confirmed attribute information when a promotion is implemented. The predetermined period is called an attribute validity period. Examples of the length of the attribute validity period include three months, six months, and one year.

[0065] The promotion unit 2102 may include, as a target of a predetermined promotion, a user associated with matching information indicating that there is no consent to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information stored in the member DB 14a matches the confirmed attribute information, if the length of the period that has passed since the matching date is less than or equal to a predetermined length. On the other hand, the promotion unit 2102 may include, as a target of the promotion, a user associated with matching information indicating that there is consent to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information stored in the member DB 14a matches the confirmed attribute information, regardless of the length of the period that has passed since the matching date. Even if a user who agrees to updating the attribute information with the changed confirmed attribute information changes the attribute, the attribute information stored in the member DB 14a for that user is updated to reflect the latest attribute. Therefore, it is not necessary to limit the period during which such a user can be included in the promotion.

[0066] FIG. 10(a) is a diagram showing an example of a determination as to whether or not a certain user is included as a promotion target. For example, user U21 selects the use of the attribute information linking function. Here, user U21 does not agree to update the attribute information with the changed confirmed attribute information when the attribute information stored in the member DB 14a matches the confirmed attribute information and then the confirmed attribute information is changed. Therefore, as shown in FIG. 10(a), the linking status is set to "linked" and the consent information is set to "linked only for the first time." Assume that the linking date is January 1st. Also, assume that the length of the attribute validity period is six months. Therefore, user U21 can be a promotion target from January 1st to June 30th. Therefore, for example, user U21 is a promotion target on March 10th. Also, for example, user U21 is not a promotion target on August 20th.

[0067] FIG. 10(b) is a diagram showing an example of a determination as to whether or not another user is included in the promotion target. For example, user U22 selects to use the attribute information linking function. Here, user U21 agrees to updating the attribute information with the changed confirmed attribute information when the attribute information stored in the member DB 14a matches the confirmed attribute information and then the confirmed attribute information is changed. Therefore, as shown in FIG. 10(b), the linking status is set to "linked" and the consent information is set to "continuous linking." Assume that the linking date is January 1st. In this case, user U22 is still eligible for the promotion even as of August 20th, for example.

[0068] [1-4. Operation of communication system] Next, the operation of the communication system S will be described with reference to Figures 11 to 13. The processes shown in these figures are examples, and any process may be executed as long as the purpose is achieved. The order of the processes is not limited to the order shown in these figures. Furthermore, at least one of the steps shown in these figures may not be executed. The system control unit 11 of the member information management server 1 may execute the processes shown in Figures 11 and 12 in accordance with various program codes included in the member information management server program. The system control unit 21 of the promotion server 2 may execute the processes shown in Figures 11 to 13 in accordance with various program codes included in the promotion server program.

[0069] FIG. 11 is a sequence diagram showing an example of processing by the communication system S when selecting to use the attribute information linking function. For example, the user operates the user terminal 5 to select the use of the attribute information linking function. At this time, the user selects whether or not to agree to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information stored in the member DB 14a matches the confirmed attribute information. The user also causes the user terminal 5 to read an electronic certificate and an electronic signature from the My Number card. Thereafter, as shown in FIG. 11, the user terminal 5 transmits the electronic certificate, the electronic signature, the consent information set to either "first-time link" or "continuous link" according to the user's selection, and the user ID of the user to the member information management server 1 (step S101). The attribute information acquisition unit 1101 of the member information management server 1 that has received this information transmits a signature verification request to the signature verification server 3 (step S102). The signature verification request includes, for example, an electronic certificate and an electronic signature.

[0070] The signature verification server 3 that has received the signature verification request executes signature verification (step S103). For example, the signature verification server 3 may determine the validity of the electronic certificate by verifying the certification path based on the identification information of the issuer and the electronic signature of the issuer included in the electronic certificate. The signature verification server 3 may also determine whether the expiration date included in the electronic certificate has not expired. The signature verification server 3 may also decrypt the electronic signature to the original hash value using the public key included in the electronic certificate. The signature verification server 3 may also calculate a hash value of the information that is the basis of the electronic signature. The signature verification server 3 may determine the validity of the electronic signature by determining whether these hash values ​​match each other. If the electronic certificate is valid, the expiration date has not expired, and the electronic signature is valid, the signature verification server 3 transmits a validity check request to the certification authority server 4 (step S104). The validity check request may include, for example, the issue number of the electronic certificate. The issue number may be included in the electronic certificate. The certificate authority server 4 transmits a validation result indicating whether the electronic certificate corresponding to the issue number included in the validation request is valid or revoked to the signature verification server 3 (step S105). When the signature verification server 3 obtains a validation result indicating that the electronic certificate is valid, it obtains the attribute information included in the electronic certificate as confirmed attribute information (step S106). The signature verification server 3 transmits this confirmed attribute information to the member information management server 1 (step S107). At this time, the signature verification server 3 may generate a new serial number. The signature verification server 3 may store this serial number in association with the issue number of the electronic certificate. The signature verification server 3 may also transmit a serial ID to the member information management server 1 together with the confirmed attribute information.

[0071] When the attribute information acquisition unit 1101 of the member information management server 1 receives the confirmed attribute information, the attribute information matching unit 1102 rewrites the attribute information stored in the member DB 14a in association with the user ID transmitted from the user terminal 5 with the confirmed attribute information (step S108). Next, the match information storage control unit 1103 changes the attribute association information stored in the attribute association information DB 14b in association with the user ID transmitted from the user terminal 5 (step S109). For example, the match information storage control unit 1103 may change the association status to "linked", change the association date to today's date, and change the consent information to the consent information transmitted from the user terminal 5. The match information storage control unit 1103 may also add the serial ID received from the signature verification server 3 to the attribute association information.

[0072] If the result of signature verification by the signature verification server 3 is bad or the electronic certificate has expired, the signature verification server 3 does not transmit the confirmed attribute information to the member information management server 1. In this case, the member information management server 1 does not rewrite the attribute information in the member DB 14b and does not change the attribute federation information in the attribute federation information DB 14b. The member information management server 1 may transmit a message indicating that the attribute information federation function is unavailable to the user terminal 5. Here, if the result of signature verification is good but the electronic certificate has expired, the signature verification server 3 may obtain attribute information indicating the changed attributes as the confirmed attribute information from the certificate authority server 4. The member information management server 1 may rewrite the attribute information in the member DB 14b with the confirmed attribute information to change the attribute federation information.

[0073] FIG. 12 is a sequence diagram showing an example of processing by the communication system S when the attributes of a user are changed. For example, the user performs an attribute change procedure at a government office. In response to this change procedure, the certificate authority server 4 changes the attribute information of the user to attribute information indicating the changed attributes. The certificate authority server 4 also issues a new electronic certificate to the user whose attributes have been changed, and revokes the old electronic certificate of the user. The certificate authority server 4 links the issue number of the new electronic certificate with the issue number of the old electronic certificate. As shown in FIG. 12, the certificate authority server 4 also transmits a revocation list to the signature verification server 3, for example, every day (step S201). For example, the certificate authority server 4 may transmit the revocation list in response to a request from the signature verification server 3. The revocation list may be, for example, a list of issue numbers of electronic certificates that have most recently been revoked.

[0074] When the signature verification server 3 receives the revocation list and the issue number stored by the signature verification server 3 in association with any serial ID is included in the revocation list, the signature verification server 3 recognizes that the electronic certificate corresponding to the issue number has been revoked (step S202). In response to this recognition, the signature verification server 3 transmits an information request to the certificate authority server 4 (step S203). The information request may include, for example, the issue number of the revoked electronic certificate. The certificate authority server 4 transmits attribute information indicating the changed attribute based on the issue number included in the information request to the signature verification server 3 as confirmed attribute information (step S204). The signature verification server 3 transmits the confirmed attribute information received from the certificate authority server 4 to the member information management server 1 together with the serial ID associated with the issue number of the revoked electronic certificate (step S205). The attribute information matching unit 1102 of the member information management server 1 that receives the confirmed attribute information and the serial ID obtains the user ID associated with this serial ID from the attribute linkage information DB 14b. The attribute information matching unit 1102 rewrites the attribute information stored in the member DB 14a in association with this user ID with the confirmed attribute information (step S206).

[0075] Fig. 13 is a flowchart showing an example of a promotion control process executed by the system control unit 21 of the promotion server 2 according to this embodiment. The process example shown in Fig. 13 is an example of a case where it is determined whether or not a specific user is a target of a promotion. For example, when the promotion is a type of advertisement displayed on a screen or a promotion using a stamp card, the process shown in Fig. 13 may be executed.

[0076] As shown in FIG. 13, the condition information acquisition unit 2101 acquires the user attribute condition of the promotion to be judged from the promotion DB 24a (step S301). Next, the promotion unit 2102 acquires the user ID of the user to be judged (step S302). For example, the promotion unit 2102 may acquire the user ID from the user terminal 5 of the user. Next, the promotion unit 2102 acquires attribute information associated with this user ID from the member DB 14a (step S303). Next, the promotion unit 2102 judges whether the user attribute indicated by the attribute information satisfies the user attribute condition (step S304). If the user attribute does not satisfy the user attribute condition (step S304: NO), the promotion unit 2102 does not execute the process for the promotion (step S305), and the promotion control process ends.

[0077] If the user's attribute satisfies the user attribute condition (step S304: YES), the promotion unit 2102 acquires attribute association information associated with the acquired user ID from the attribute association information DB 14b (step S306). Next, the promotion unit 2102 judges whether the association state included in the attribute association information is "associated" (step S307). If the association state is "unassociated" (step S307: NO), the process proceeds to step S305. If the association state is "associated" (step S307: YES), the promotion unit 2102 judges whether the consent information included in the attribute association information is "continuous association" (step S308). If the consent information is "associated only for the first time" (step S308: NO), the promotion unit 2102 judges whether today is within the attribute validity period from the association date included in the attribute association information (step S309). If today is outside the attribute validity period (step S309: NO), the process proceeds to step S305. If the consent information is "continuous linkage" (step S308: YES) or if today is within the attribute validity period (step S309: YES), the promotion unit 2102 executes processing for promotion (step S310), and the promotion control processing ends.

[0078] As described above, according to this embodiment, the member information management server 1 may acquire confirmed attribute information for any user. The member information management server 1 may match the attribute information stored in the member DB 14a in association with the user to the confirmed attribute information. The member information management server 1 may store the matching information in the attribute linkage information DB 14b in association with the user. The promotion server 2 may acquire a user attribute condition. The promotion server 2 may execute a process for a predetermined promotion for a user associated with the matching information among users associated with attribute information indicating an attribute that satisfies the user attribute condition. In this case, the user who is the target of the promotion can be appropriately identified and the promotion can be implemented.

[0079] Here, the member information management server 1 may store the matching information indicating the matching date on which the attribute information matches the confirmed attribute information in the matching information storage means. The promotion server 2 may target a predetermined promotion for a user associated with the matching information indicating the matching date on which the length of the period that has elapsed since the matching date is a predetermined length or less among users associated with the attribute information indicating the attribute that satisfies the user attribute condition. In this case, a user who has not yet elapsed a predetermined length of time since the date on which the attribute information stored in the member DB 14a matches the confirmed attribute information may be the target of the promotion. If time passes from the date on which the attribute information matches the confirmed attribute information, the actual attribute of the user may change. Therefore, a user who is within a period during which the attribute information is likely to be accurate may be the target of the promotion.

[0080] At this time, the member information management server 1 may store in the attribute link information DB 14b matching information indicating whether or not any user has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information matches with the confirmed attribute information. In addition, the promotion server 2 may include a user associated with matching information indicating that there was no consent as a target of a predetermined promotion if the length of the period that has elapsed since the matching date is equal to or shorter than a predetermined length. In addition, the promotion server 2 may include a user associated with matching information indicating that there was consent as a target of a predetermined promotion regardless of the length of the period that has elapsed since the matching date. In this case, a user who allows the attribute information stored in the member DB 14a to match with the confirmed attribute information can select whether or not to consent to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the matching. A user who does not consent to this may be eligible for the promotion if a predetermined period has not elapsed since the date on which the attribute information matches the confirmed attribute information. A user who consents to this may be eligible for the promotion even if the length of the period that has elapsed since the date on which the attribute information matches the confirmed attribute information exceeds the predetermined length. The attribute information stored in the member DB 14a is updated with the confirmed attribute information after any changes as required. Therefore, for users who have selected consent, the accuracy of their attribute information is highly likely to be maintained, and they can be included in promotions regardless of the time.

[0081] [2. Second embodiment] Next, a second embodiment will be described with reference to Figures 14 to 18. Except for the points described below, the first embodiment may be the same as the second embodiment.

[0082] Fig. 14 is a diagram showing an example of a schematic configuration of a communication system S according to this embodiment. In Fig. 14, the same reference numerals as in Fig. 1 are used for the same reference numerals. Fig. 14 differs from Fig. 1 in that the communication system S shown in Fig. 14 further includes one or more service servers 6 and one or more delivery company servers 7. The service servers 6 and the delivery company servers 7 are connected to a network NW.

[0083] The service server 6 may be a server device that executes a process for providing a predetermined service to a member or business operator of the Internet comprehensive service. This service is referred to as a specific service for convenience. The specific service may be, for example, a service included in the Internet comprehensive service. In the specific service, a delivery service is used. The delivery service may be a service for delivering a predetermined type of delivery item to a delivery destination. The delivery item may be at least one of a package and a postal item. The delivery service may be provided by a delivery business operator. For example, the operator of the specific service may use the delivery service to provide this specific service. Alternatively, a member or business operator of the Internet comprehensive service may use the delivery service. Examples of the specific service include intermediation of product transactions at an online shopping mall, intermediation of product transactions at a flea market, and direct mail services. In an online shopping mall, multiple businesses sell products to members of the Internet comprehensive service. A business operator that receives an order for a product in the online shopping mall ships the product to a user who is the destination of the sale. In a flea market, products are bought and sold between members of the Internet comprehensive service. A user who purchases a product ships the product to a user who purchased the product. In the direct mail service, the operator of the advertising service sends direct mail to members of the Internet general service based on a request from an advertiser. A service server 6 may be installed for each specific service provided. Also, the server device that executes the process related to the direct mail service may be any of the promotion servers 2.

[0084] The delivery company server 7 may be a server device managed by the delivery company. The delivery company server 7 may be a server device that manages the delivery status of the delivery items handled by the delivery company. For example, the delivery status of the delivery items may be confirmed through a website operated by the delivery company. The delivery company server 7 may be installed for each delivery company.

[0085] FIG. 15 is a diagram showing an example of information stored in the databases of the service server 6 and the delivery company server 7. As shown in FIG. 15, the service server 6 may store a database such as a delivery information DB61. In the delivery information DB61, delivery information required for delivery of a delivery item in a specific service may be stored for each delivery item or for each transaction within the specific service. The actual delivery information may be included in appropriate information depending on the type of the specific service. For example, if the specific service is transaction intermediation in an online shopping mall, the delivery information may be included in purchase information, etc. The purchase information may be information indicating the purchase contents of the product. Also, for example, if the specific service is transaction intermediation in a flea market, the delivery information may be included in transaction information, etc. The transaction information may be information indicating the transaction contents of the product. In the delivery information DB61, for example, a user ID, a destination name, a delivery address, a delivery destination zip code, a delivery method, a delivery company ID, an inquiry number, etc. may be stored as delivery information in association with each other. The user ID indicates the user to whom the delivery item is to be delivered. The destination name indicates the name of the person to whom the delivery item is to be delivered. The shipping address indicates the address of the shipping destination of the item. The shipping destination postal code is a postal code corresponding to the shipping address. When the specific service is a transaction intermediation in an online shopping mall or a flea market, the name and address stored in the member DB 14a may be used as the addressee and shipping address. Alternatively, the name and address registered in advance by the user in the specific service may be used as the addressee and shipping address. Alternatively, the user may input the addressee and shipping address when purchasing the product. When the specific service is a direct mail service, the name and address stored in the member DB 14a may be used as the addressee and shipping address. The shipping method indicates how the item is to be shipped. The delivery company ID is identification information that identifies the delivery company to which the delivery of the item is requested. When the specific service is a transaction intermediation in an online shopping mall or a flea market, the shipping method and the delivery company may be designated by the purchaser or seller of the product. When the specific service is a direct mail service, the shipping method and the delivery company may be determined in advance.The inquiry number is identification information for the delivery company to identify the delivery item. For example, the inquiry number may be printed in advance on a delivery slip affixed to the delivery item. Alternatively, the delivery company may notify the sender of the inquiry number when the sender requests the delivery company to deliver the delivery item. The sender may register the inquiry number in a specific service. Alternatively, the service server 6 may automatically obtain the inquiry number from the delivery company server 7. The service server 6 may provide an API for accessing the shipping information DB 61 to a server device such as the promotion server 2.

[0086] The delivery company server 7 may store a database such as a delivery status information DB71 as shown in FIG. 15. The delivery status information DB71 may store delivery status information indicating the delivery status of a delivery item each time the delivery company accepts a delivery request for the delivery of the delivery item. For example, the delivery status information DB71 may store an inquiry number, a delivery status, and a delivery date and time, etc., as delivery status information, in association with each other. The inquiry number is a number associated with the delivery item. The delivery status may be set to, for example, any of "acceptance completed," "in transit to the delivery base," "arrived at the delivery base," "in delivery," "delivery completed," and "returned." "Acceptance completed," "in transit to the delivery base," "arrived at the delivery base," and "in delivery" all indicate that the delivery item is in delivery. "Delivery completed" indicates that the delivery of the delivery item has been completed. "Returned" indicates that the delivery item could not be delivered and therefore the delivery item has been returned to the sender. The delivery date and time indicates the date and time when the delivery of the delivery item has been completed. An employee of the delivery company may input the actual delivery status into a terminal device (not shown) every time the delivery status changes. The delivery company server 7 may update the delivery status information stored in the delivery status information DB 71 based on the input information. The delivery company server 7 may provide an API for accessing the delivery status information DB 71 to a party outside the delivery company. The delivery status information may be included in the shipping information stored in the shipping information DB 61. For example, the service server 6 may obtain the delivery status information from the delivery company server 7 and add the delivery status information to the shipping information.

[0087] Fig. 16 is a diagram showing an example of functional blocks of the system control unit 21 in the promotion server 2. In Fig. 16, the same elements as those in Fig. 8 are given the same reference numerals. Fig. 16 differs from Fig. 8 in that the system control unit 21 shown in Fig. 16 further functions as a delivery status information acquisition unit 2103.

[0088] The delivery status information acquisition unit 2103 may acquire delivery status information indicating the delivery status of a delivery item that has been sent to an address indicated by any of the attribute information stored in the member DB 14a. For example, the delivery status information acquisition unit 2103 may search the delivery information DB 61 for delivery information associated with the user ID of a user who is to be determined as being eligible for a promotion. If the delivery address included in the searched delivery information matches the address stored in the member DB 14a for that user, the delivery status information acquisition unit 2103 may acquire an inquiry number from the delivery information. The delivery status information acquisition unit 2103 may acquire delivery status information associated with the inquiry number from the delivery status information DB 71. The delivery status information acquisition unit 2103 may acquire delivery status information only when the combination of the addressee and delivery address included in the delivery information matches the combination of the name and address stored in the member DB 14a.

[0089] The promotion unit 2102 may include, among users associated with attribute information indicating attributes satisfying the user attribute conditions acquired by the condition information acquisition unit 2101, users associated with attribute information indicating a delivery address for which completion of delivery is indicated by the delivery status information acquired by the delivery status information acquisition unit 2103, as targets of a predetermined promotion. In this case, the promotion unit 2102 may include, as targets of a predetermined promotion, this user regardless of whether or not this user is a user associated with the matching information stored in the attribute linkage information DB 14b by the matching information storage control unit 1103. Completion of delivery of a shipment to the address of the user stored in the member DB 14a indicates that the user is highly likely to live at the address. In other words, the validity of the address stored in the member DB 14a can be confirmed without using the attribute information linkage function. Therefore, the user does not need to carry out a procedure to use the attribute information linkage function in order to include the user in the promotion target.

[0090] The promotion unit 2102 may include the user in the promotion target only when the length of the period that has elapsed since the delivery completion date of the shipment, which is indicated by the delivery date and time included in the delivery status information, is equal to or shorter than a predetermined length. The length of this period may be the same as or different from the length of the attribute validity period.

[0091] FIG. 17(a) is a diagram showing an example of a user attribute condition. As shown in FIG. 17(a), in a certain promotion, conditions are not set for name, sex, and age. The address condition is "Saitama Prefecture". Therefore, users who live in Saitama Prefecture are eligible for the promotion. FIG. 17(b) is a diagram showing an example of information about a certain user. As shown in FIG. 17(b), the address stored in the member DB14a for user U31 is "STUVWXYZ, Saitama City, Saitama Prefecture". Therefore, user U31 satisfies the user attribute condition. The linkage state stored in the attribute linkage information DB14b for user U31 is set to "non-linkage". Therefore, user U31 should not be eligible for the promotion. Meanwhile, user U31 purchased a product at an online shopping mall. The purchased product was delivered to the address of user U31. Shipping information regarding the shipping of the product to user U31 is stored in the shipping information DB61 of the service server 6 of the online shopping mall. The shipping address included in this shipping information is "STUVWXYZ, Saitama City, Saitama Prefecture." The delivery company ID included in the shipping information indicates ZZZ Co., Ltd., and the inquiry number is "12345678." Delivery status information including the inquiry number "12345678" is stored in the delivery status information DB71 of the delivery company server 7 of ZZZ Co., Ltd. The delivery status included in this delivery status information is set to "delivery completed." Therefore, the promotion unit 2102 may include user U31 as a target of promotion.

[0092] 18 is a flowchart showing an example of a promotion control process executed by the system control unit 21 of the promotion server 2 according to this embodiment. In FIG. 18, the same processes as those in FIG. 13 are denoted by the same reference numerals.

[0093] As shown in FIG. 18, first, steps S301 to S304 are executed in the same manner as in the first embodiment. If the user attribute satisfies the user attribute condition (step S304: YES), the delivery status information acquisition unit 2103 searches the delivery information DB 61 for delivery information including the user ID of the user to be determined. As a result of the search, the delivery status information acquisition unit 2103 determines whether or not there is corresponding delivery information (step S401). If there is no corresponding delivery information (step S401: NO), the process proceeds to step S306. Then, steps S306 to S310 and S305 are executed in the same manner as in the first embodiment.

[0094] If there is corresponding shipping information (step S401: NO), the delivery status information acquisition unit 2103 judges whether the address included in the user's attribute information matches the shipping address included in the corresponding shipping information (step S402). If the addresses do not match (step S402: NO), the process proceeds to step S306. If the addresses match (step S402: YES), the delivery status information acquisition unit 2103 acquires an inquiry number from the shipping information. The delivery status information acquisition unit 2103 acquires delivery status information including the inquiry number from the delivery status information DB71 (step S403). Next, the delivery status information acquisition unit 2103 judges whether the delivery status included in the acquired delivery status information is "delivery completed" (step S404). If the delivery status is not "delivery completed" (step S404: NO), the process proceeds to step S306. If the delivery status is "delivered" (step S404: YES), the promotion section 2102 executes a process for promotion (step S310), and the promotion control process ends.

[0095] As described above, according to this embodiment, when a shipment is sent to a user's address stored in the member DB 14a as a delivery destination, and the delivery status information indicates that the shipment has been delivered, the user may be eligible for a promotion even if no matching information is stored for the user. Completion of delivery of a shipment to an address stored in the member DB 14a indicates that the address is likely to be accurate information for the user. Therefore, it is possible to appropriately identify users who are eligible for a promotion and implement the promotion while eliminating the need to match the attribute information stored in the member DB 14a with the confirmed attribute information.

[0096] (Supplementary Note 1) A promotion system comprising: an attribute information storage means for storing, for each of a plurality of users, attribute information indicating an attribute of the user in association with the user; a confirmed attribute information acquisition means for acquiring confirmed attribute information indicating an attribute of any of the plurality of users, the attribute information being an attribute of the user and confirmed to be true for the any of the users using an electronic certificate; a matching means for matching the attribute information stored in the attribute information storage means in association with the any of the users to the acquired confirmed attribute information; a storage control means for storing, in the matching information storage means, matching information indicating that the attribute information matches the confirmed attribute information, in association with the any of the users; a condition information acquisition means for acquiring condition information indicating conditions of the attributes of users who are the target of a predetermined promotion; and a promotion means for executing a process for the predetermined promotion on users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information.

[0097] (Appendix 2) The promotion system described in Appendix 1 is characterized in that the memory control means stores the matching information indicating the matching date on which the attribute information matched the confirmed attribute information by the matching means in the matching information storage means, and the promotion means targets, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the matching information indicating the matching date where the length of time that has elapsed since the matching date is less than or equal to a predetermined length, as the target of the specified promotion.

[0098] (Appendix 3) The promotion system described in Appendix 2, characterized in that the storage control means stores in the attribute information storage means the matching information indicating whether or not any of the users has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information matches the confirmed attribute information, and the promotion means includes, for a user associated with the matching information indicating that the consent was not given, as a target of the specified promotion if the length of the period that has elapsed since the matching date is less than or equal to the specified length, and includes, for a user associated with the matching information indicating that the consent was given, as a target of the specified promotion regardless of the length of the period that has elapsed since the matching date.

[0099] (Appendix 4) The promotion system described in any one of Appendices 1 to 3 is characterized in that the attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address, the condition indicated by the acquired condition information includes an address condition, and the system further includes a delivery status information acquisition means for acquiring delivery status information indicating the delivery status of a shipment sent to the address indicated by any of the attribute information stored in the attribute information storage means, and the promotion means includes, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination for which delivery is indicated to be completed by the acquired delivery status information, as targets of the specified promotion, regardless of whether they are associated with the matching information.

[0100] (Appendix 5) A promotion system described in any one of Appendices 1 to 4, characterized in that the confirmed attribute information acquisition means acquires the electronic certificate from a terminal device of any one of the users, and acquires the confirmed attribute information contained in the acquired electronic certificate.

[0101] (Appendix 6) A promotion method executed by a computer, comprising: a confirmed attribute information acquisition step of acquiring confirmed attribute information indicating an attribute of any one of the multiple users, the attribute information indicating the attribute of the user being associated with the user and stored in an attribute information storage means, the confirmed attribute information indicating an attribute of any one of the multiple users being confirmed to be true for the any one of the users using an electronic certificate; a matching step of matching the attribute information stored in the attribute information storage means in association with the any one of the users with the acquired confirmed attribute information; a storage control step of storing matching information indicating that the attribute information matches the confirmed attribute information, the attribute information being associated with the any one of the users, in a matching information storage means; a condition information acquisition step of acquiring condition information indicating conditions of attributes of users who are the target of a predetermined promotion; and a promotion step of executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information. [Explanation of symbols]

[0102] 1. Member information management server 2 Promotion Server 3. Signature Verification Server 4 Certificate Authority Server 5. User terminal 6 Service Server 7. Delivery company server 11 System control section 12 System Bus 13 Input / Output Interface 14 Storage section 14a Member DB 14b Attribute linkage information DB 15 Communications Department 21 System control section 22 System Bus 23 Input / Output Interface 24 Memory section 24a Promotion DB 25 Communications Department 61 Shipping Information DB 71 Delivery status information DB 1101 Attribute information acquisition unit 1102 Attribute information matching section 1103 Matching information storage control unit 2101 Condition information acquisition section 2102 Promotion Department 2103 Delivery status information acquisition unit NW Network S Communication System

Claims

1. an attribute information storage means for storing attribute information indicating attributes of each of a plurality of users in association with the user; a confirmed attribute information acquiring means for acquiring confirmed attribute information indicating an attribute of any one of the plurality of users, the attribute being confirmed as true for the any one of the users using a digital certificate; a matching means for matching the attribute information stored in the attribute information storage means in association with any one of the users with the acquired confirmed attribute information; a storage control means for storing, in a storage means for storing matching information indicating that the attribute information matches the confirmed attribute information, the matching information being associated with any one of the users; A condition information acquiring means for acquiring condition information indicating conditions of attributes of a user who is a target of a predetermined promotion; a promotion means for executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information; A promotion system comprising:

2. The storage control means stores, in the matching information storage means, the matching information indicating a matching date on which the attribute information matched with the confirmed attribute information by the matching means; The promotion system described in claim 1, characterized in that the promotion means targets, among users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information, users associated with the matching information indicating the matching date where the length of time that has elapsed since the matching date is less than a predetermined length, for the specified promotion.

3. the storage control means stores, in the attribute information storage means, the matching information indicating whether or not any of the users has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information matches the confirmed attribute information; The promotion system described in claim 2, characterized in that the promotion means includes users associated with the matching information indicating that the consent was not given as targets of the specified promotion if the length of time that has elapsed since the matching date is less than or equal to the specified length, and includes users associated with the matching information indicating that the consent was given as targets of the specified promotion regardless of the length of time that has elapsed since the matching date.

4. The attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address, the conditions indicated by the acquired condition information include an address condition; The method further includes a delivery status information acquisition means for acquiring delivery status information indicating a delivery status of a delivery item that has been sent to the address indicated by any one of the attribute information stored in the attribute information storage means, The promotion system according to any one of claims 1 to 3, characterized in that the promotion means includes, among users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination where delivery is indicated to be completed by the acquired delivery status information, as targets of the specified promotion, regardless of whether they are associated with the matching information.

5. A promotion system as described in any one of claims 1 to 3, characterized in that the confirmed attribute information acquisition means acquires the electronic certificate from a terminal device of any one of the users and acquires the confirmed attribute information contained in the acquired electronic certificate.

6. 1. A computer-implemented promotion method comprising: Attribute information indicating attributes of each of a plurality of users is stored in an attribute information storage means in association with the user; a confirmed attribute information acquiring step of acquiring confirmed attribute information indicating an attribute of any one of the plurality of users, the attribute being confirmed as true for the any one of the users using a digital certificate; a matching step of matching the attribute information stored in the attribute information storage means in association with any one of the users with the acquired confirmed attribute information; a storage control step of storing, in a storage unit, matching information indicating that the attribute information matches the confirmed attribute information, in association with any one of the users; a condition information acquisition step of acquiring condition information indicating conditions of attributes of a user who is a target of a predetermined promotion; a promotion step of executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information; A promotion method comprising:

Images