Promotion system and promotion method

Abstract

To provide a promotion system and a method for properly identifying a user who is a target of promotion to implement the promotion.SOLUTION: In a communication system S that stores attribute information indicating attributes of users in association with the users in an attribute information storage, a member information management server is configured to: acquire verified attribute information indicating an attribute, which is the attribute of one of the users, verified for the user with an electronic certificate; identify the attribute information stored in association with the user as the verified attribute information; and store matching information indicating that the attribute information matches the verified attribute information in association with the user. A promotion server is configured to: acquire condition information indicating conditions for the attributes of a user who is a target of a predetermined promotion; and execute processing for the predetermined promotion with respect to the user associated with the matching information, out of users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the condition information.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a method for implementing promotions based on user attributes.

Background Art

[0002] Conventionally, promotions such as sales promotion activities for products and service utilization promotion activities have been widely carried out. Examples of promotions include display and distribution of advertisements, sending of direct mails, giving of benefits such as coupons and points, etc. It is also known that techniques such as targeting may be used in such promotions. For example, in targeting, the target users for the promotion are narrowed down to a user group that satisfies specific conditions. An example of the conditions for target users is the attributes of the users. Examples of attributes include gender, address, age, etc. Such information is generally managed in databases of the services or companies, such as information of service members and information of company customers.

[0003] For example, Patent Document 1 discloses that basic attributes and histories such as the gender, age, address, telephone, occupation, etc. of users are stored in a user database, and in response to a content request from a user terminal, targeting information including the basic attributes and history of the corresponding user is read out, optimal advertisement data is acquired based on the targeting information, and a distribution file obtained by synthesizing the advertisement data and the content data is transmitted to the user terminal.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, information on the attributes of users registered in databases managed by services, companies, etc. is generally information input by those users. Therefore, the attributes on the database may not match the actual attributes of the users. For this reason, there is a risk that the users to be promoted cannot be appropriately identified.

[0006] The present invention has been made in view of the above points, and an example of its problem is to provide a promotion system and a promotion method that enable appropriate identification of users to be promoted and implementation of promotions.

Means for Solving the Problems

[0007] One aspect of the present invention includes attribute information storage means for storing, in association with each of a plurality of users, attribute information indicating the attributes of the users; confirmed attribute information acquisition means for acquiring confirmed attribute information indicating an attribute that has been confirmed to be a fact using an electronic certificate for any one of the plurality of users; matching means for matching the attribute information stored in the attribute information storage means in association with the any one of the users with the acquired confirmed attribute information; storage control means for storing, in association with the any one of the users, matching information indicating that the attribute information matches the confirmed attribute information in matching information storage means; condition information acquisition means for acquiring condition information indicating conditions for the attributes of users targeted for a predetermined promotion; and promotion means for executing processing for the predetermined promotion for users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information and associated with the matching information. The promotion system is characterized by comprising these components.

[0008] According to this aspect, the attribute information storage means stores the attribute information of each user. For any user, the attribute information stored in the attribute information storage means is made to match the confirmed attribute information indicating the attribute that has been confirmed to be a fact using an electronic certificate. For a user whose attribute information matches the confirmed attribute information, matching information indicating that the attribute information matches the confirmed attribute information is stored. Among the users whose attribute information indicating an attribute that satisfies the conditions of the attributes of the users targeted by a predetermined promotion is stored in the attribute information storage means, a user whose attribute information has ever matched the confirmed attribute information becomes the target of that promotion. Whether or not the attribute information has ever matched the confirmed attribute information can be specified by whether or not the matching information is stored. Since the attribute indicated by the confirmed attribute information is an attribute confirmed to be a fact using an electronic certificate, the attribute information that matches the confirmed attribute information is information that is likely to be accurate information about that user. Based on such attribute information, the users targeted by the promotion are specified, so that the users targeted by the promotion can be appropriately specified and the promotion can be implemented.

[0009] Another aspect of the present invention is that the storage control means causes the matching information storage means to store the matching information indicating the matching date on which the attribute information matches the confirmed attribute information by the matching means, and the promotion means includes, among the users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information, the user associated with the matching information indicating the matching date whose length of the period elapsed from the matching date is equal to or less than a predetermined length is targeted by the predetermined promotion. This is a promotion system characterized by this.

[0010] According to this aspect, a user for whom a predetermined period has not elapsed since the date when the attribute information stored in the attribute information storage means matched the confirmed attribute information can be the target of the promotion. As time elapses from the date when the attribute information matches the confirmed attribute information, the actual attributes of the user may change. Therefore, a user within a period in which the attribute information is likely to be accurate can be targeted for the promotion.

[0011] Still another aspect of the present invention is that the memory control means stores the matching information indicating whether any of the users has consented to updating the attribute information with the updated confirmed attribute information when the confirmed attribute information has changed after the attribute information has matched the confirmed attribute information in the attribute information storage means, and the promotion means includes, for a user associated with the matching information indicating no consent, the user within a period of time elapsed from the matching date being less than or equal to the predetermined length, and for a user associated with the matching information indicating consent, regardless of the length of the period elapsed from the matching date, in the target of the predetermined promotion. A promotion system characterized by including.

[0012] According to this aspect, a user who permits the attribute information stored in the attribute information storage means to match the confirmed attribute information can select whether to consent to updating the attribute information with the updated confirmed attribute information when the confirmed attribute information has changed after the match. A user who does not consent to this may be the target of promotion if a predetermined period of time has not elapsed since the date when the attribute information matched the confirmed attribute information. A user who has consented to this may be the target of promotion even if the length of the period elapsed from the date when the attribute information matched the confirmed attribute information exceeds the predetermined length. The attribute information stored in the attribute information storage means is updated with the updated confirmed attribute information at any time. Therefore, for users who have selected consent, the accuracy of the attribute information is likely to be maintained, so they can be included in the target of promotion regardless of the time.

[0013] Still another aspect of the present invention is that among the attribute information stored in the attribute information storage means, at least one of the attributes indicated by the attribute information includes an address, the condition indicated by the acquired condition information includes an address condition, and further includes a delivery status information acquisition means for acquiring delivery status information indicating the delivery status of a shipment sent to the address indicated by any of the attribute information stored in the attribute information storage means as a delivery destination. The promotion means includes, among the users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, the user associated with the attribute information indicating the address of the delivery destination where delivery is indicated as completed by the acquired delivery status information, regardless of whether the user is associated with the matching information, as a target of the predetermined promotion. This is a promotion system characterized by this.

[0014] According to this aspect, when a shipment is sent to the address of a user stored in the attribute information storage means as a delivery destination and the delivery status information indicates that the delivery of the shipment is completed, that user can be a target of promotion even if no matching information is stored for that user. The completion of the delivery of the shipment to the address stored in the attribute information storage means indicates that the address is likely to be accurate information for the user. Therefore, it is possible to appropriately identify the users who are targets of promotion and implement promotion while omitting the effort of matching the attribute information stored in the attribute information storage means with the confirmed attribute information.

[0015] Still another aspect of the present invention is a promotion system characterized in that the confirmed attribute information acquisition means acquires the electronic certificate from the terminal device of any of the users and acquires the confirmed attribute information included in the acquired electronic certificate.

[0016] Another aspect of the present invention is a promotion method executed by a computer. For each of a plurality of users, attribute information indicating the attributes of the user is stored in an attribute information storage means in association with the user. An authenticated attribute information acquisition step of acquiring authenticated attribute information indicating an attribute that is an attribute of any one of the plurality of users and has been confirmed to be a fact using an electronic certificate for the any one user; A matching step of matching the attribute information stored in the attribute information storage means in association with the any one user with the acquired authenticated attribute information; A storage control step of storing, in a matching information storage means, matching information indicating that the attribute information matches the authenticated attribute information, in association with the any one user; A condition information acquisition step of acquiring condition information indicating conditions of attributes of a user targeted for a predetermined promotion; A promotion step of executing processing for the predetermined promotion for users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information and associated with the matching information. A promotion method characterized by including.

Effect of the Invention

[0017] According to the present invention, it is possible to appropriately identify users targeted for promotion and execute promotions.

Brief Description of the Drawings

[0018]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Mode for Carrying Out the Invention

[0019] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[0020] [1. First Embodiment] [1-1. Configuration of Communication System] First, the configuration and functional overview of the communication system S according to this embodiment will be described with reference to FIG. 1. FIG. 1 is a diagram showing an example of the schematic configuration of the communication system S according to this embodiment. As shown in FIG. 1, the communication system S includes a member information management server 1, one or more promotion servers 2, a signature verification server 3, a certification authority server 4, and a plurality of user terminals 5. The member information management server 1, each promotion server 2, the signature verification server 3, the certification authority server 4, and each user terminal 5 are connected to the network NW. The network NW is constructed by, for example, the Internet, a dedicated communication line (for example, a CATV (Community Antenna Television) line), a mobile communication network (including base stations, etc.), and a gateway, etc.

[0021] The member information management server 1 may be a server device that manages member information regarding members of a predetermined service. The predetermined service may be, for example, a service provided using a computer network or information and communication technology, or it may not be. A service provided using a computer network or the like may or may not be an online service. The online service may be provided via a website. Examples of the predetermined service include an online shopping mall, a facility reservation service, a service reservation service, online securities, online banking, web search, video distribution, a point program, a mobile communication service, carrier settlement, an optical fiber connection service, credit card settlement, app settlement, electronic money settlement, check-in service, social networking service, stamp card service, rich communication service, email service, etc. Also, the predetermined service may be an Internet comprehensive service. The Internet comprehensive service may be a service composed of a plurality of services. The Internet comprehensive service may include at least one of the services shown in the above examples. For convenience, hereinafter, it will be described assuming that the predetermined service is an Internet comprehensive service. When a user becomes a member of the Internet comprehensive service, a user ID is assigned to that user. The user ID may be identification information that identifies the user in the Internet comprehensive service. The user may be able to specify the user ID, or the Internet comprehensive service may automatically assign the user ID. A user who becomes a member of the Internet comprehensive service may be able to use many of the services included in that Internet comprehensive service. In order to use some services, the user may need to perform a separate membership registration on the condition that the user is a member of the Internet comprehensive service. At the time of or after the membership registration of the Internet comprehensive service, each user can register the attributes of that user with the Internet comprehensive service. Examples of the attributes include name, gender, date of birth, address, etc.The membership information stored by the membership information management server 1 includes such attributes.

[0022] In addition, the membership information management server 1 may provide an attribute information linking function for members of the Internet comprehensive service. The attribute information linking function may be a service that matches the attributes of the user included in the membership information with the attributes confirmed to be true using the user's electronic certificate. Thereby, it is expected that the information on the attributes of the user stored by the membership information management server 1 will become more accurate information. The electronic certificate may include information on the attributes of the user. The user's electronic certificate may be, for example, the electronic certificate stored in the user's My Number card, or may be stored or acquired by other means. The My Number card is issued to an individual by that individual going through procedures with a local public entity. The electronic certificate may be issued by, for example, a specific certification authority or other institution. An example of a certification authority or the like is the Local Public Entity Information System Agency. In this embodiment, the attributes subject to the attribute information linking function are name, gender, date of birth, and address. These pieces of information are also called the basic four pieces of information. However, the attributes subject to the attribute information linking function are not limited to these. Each user can select whether to use the attribute information linking function or not. The membership information management server 1 may be configured such that a user who selects to use the attribute information linking function can then select whether to automatically update the attributes stored by the membership information management server 1 with the changed attributes when there is a change in the actual attributes of that user. Since the certification authority will provide information on the changed attributes to persons other than the user himself / herself, the user's consent may be required for such information provision. Examples of events in which the user's attributes change include address change, marriage, divorce, etc. In response to the occurrence of such events, the user goes through procedures for attribute change with the relevant local public entity.

[0023] The promotion server 2 may be a server device that executes processes for implementing a predetermined promotion for members of the Internet comprehensive service. Examples of promotions include advertisements, provision of benefits, etc. The advertisement may be an online advertisement or an offline advertisement. Examples of advertisements include the type of advertisement displayed on the screen (e.g., display advertisement, listing advertisement, etc.), email advertisement, direct mail, provision of sample products, etc. The promotion server 2 may be installed for each type of promotion. Examples of the benefits to be provided include coupons, points in a point program, electronic money, cashback, other prizes, etc. Examples of the purposes of the promotion include promotion of product sales, promotion of service utilization, promotion of facility utilization, improvement of the image of a company or brand, activation of a region, etc. The promotion may be implemented only for users who meet predetermined conditions. This condition may be determined by, for example, an advertiser or a sponsor. This method may correspond to so-called targeting. For example, in the case of a display advertisement or a listing advertisement, when a user who meets the conditions displays a screen such as a web page including an advertisement frame, the advertisement may be displayed on that screen. In the case of an email advertisement, an email including the advertisement may be delivered to the users who meet the conditions. In the case of direct mail or provision of samples, direct mail or samples may be sent to the users who meet the conditions. In the case of provision of benefits, benefits may be provided to the users who meet the conditions. Alternatively, benefits may be provided to all users, but more valuable benefits may be provided to users who meet the conditions compared to other users. The promotion server 2 may extract users who are the targets of the promotion from among the members of the Internet comprehensive service. When the promotion is conducted online, the promotion server 2 may actually execute the promotion. For example, the promotion server 2 may execute distribution of advertisements, provision of benefits, etc. to the target users.When a promotion is conducted offline, the promotion server 2 may execute processing for preparing to send a direct mail or the like to a target user.

[0024] The signature verification server 3 may be a server device having a signature verification function in the personal authentication service. The signature verification function may include verification of an electronic certificate and verification of an electronic signature. The personal authentication service may be, for example, a service that mainly provides means for verifying the identity online. Identity verification may be performed using, for example, an electronic certificate. The verification of the electronic certificate by the signature verification server 3 may include, for example, verification of the authentication path of the electronic certificate, verification of the validity period of the electronic certificate, verification of the invalidation status of the electronic certificate, etc. The verification of the electronic signature may include, for example, calculation of the hash value of the electronic certificate or other information, decryption of the original hash value of the electronic signature using the public key included in the electronic certificate, determination of the hash value match, etc. Further, the signature verification server 3 may provide information on the attributes of the user confirmed to be a fact using the electronic certificate to the membership information management server 1. Furthermore, the signature verification server 3 may obtain information on the changed attributes from the certification authority server 4 due to the invalidation of the electronic certificate caused by the change of the user's attributes, and provide the obtained information to the membership information management server 1.

[0025] The certification authority server 4 may be a server device installed by the certification authority. The certification authority server 4 may, for example, provide the invalidation status of the electronic certificate. Also, the certification authority server 4 may manage attribute information indicating the attributes of each user to whom the electronic certificate has been issued. Further, the certification authority server 4 may provide information on the changed attributes due to the invalidation of the electronic certificate caused by the change of the user's attributes.

[0026] Each user terminal 5 may be a terminal device owned by a user who can use the comprehensive Internet service. Examples of the user terminal 5 include portable information terminals such as personal computers, smartphones, and tablet computers, mobile phones, PDAs (Personal Digital Assistant), and set-top boxes. A web browser may be installed on each user terminal 5. In addition, an application for using the comprehensive Internet service may be installable on the portable user terminal 5. Further, each user terminal 5 may be configured to be able to read an electronic certificate from a my number card. For example, each user terminal 5 may incorporate an IC (Integrated Circuit) card reader compatible with NFC (Near field communication) or the like or be connectable to the card reader.

[0027] Among the devices included in the communication system S, the combination of the membership information management server 1 and the promotion server 2 is an example of the promotion system of the present invention. An example of the promotion system may or may not include the signature verification server 3.

[0028] [1-2. Device Configuration] [1-2-1. Membership Information Management Server] Next, the configuration of the membership information management server 1 will be described with reference to FIGS. 2 and 3. FIG. 2 is a block diagram showing an example of the outline configuration of the membership information management server 1 according to the present embodiment. As shown in FIG. 2, the membership information management server 1 includes a system control unit 11, a system bus 12, an input / output interface 13, a storage unit 14, and a communication unit 15. The system control unit 11 and the input / output interface 13 are connected via the system bus 12.

[0029] The system control unit 11 is composed of a CPU (Central Processing Unit) 11a, a ROM (Read Only Memory) 11b, a RAM (Random Access Memory) 11c, and the like.

[0030] The input / output interface 13 performs interface processing between the storage unit 14 and the communication unit 15 and the system control unit 11.

[0031] The storage unit 14 is composed of, for example, a hard disk drive or the like. Databases such as a member DB 14a and attribute association information DB 14b may be stored in this storage unit 14. "DB" is an abbreviation for database.

[0032] FIG. 3 is a diagram showing an example of information stored in the database of the member information management server 1. Member information regarding each member of the Internet comprehensive service may be stored in the member DB 14a. This member information may include attribute information indicating the attributes of the user. For example, in the member DB 14a, user ID, name, gender, date of birth, address, telephone number, e-mail address, etc. may be stored in association with each other as member information. At least one of the name, gender, date of birth, address, telephone number, and e-mail address may correspond to the attribute information.

[0033] In the attribute link information DB 14b, for each member of the Internet comprehensive service, attribute link information regarding the attribute information link function may be stored. For example, in the attribute link information DB 14b, as the attribute link information, a user ID, a link status, a link date, a consent type, a serial ID, etc. may be stored in association with each other. The user ID indicates for which user the attribute link information is information. The link status may indicate whether the user has used the attribute information link function. For example, the link status may be set to either "not linked" or "linked". "Not linked" indicates that the user has not used the attribute information link function. In this case, the attributes of the user stored in the member B14a do not necessarily match the attributes confirmed by the electronic certificate. "Linked" indicates that the user has used the attribute information link function. In this case, the attributes of the user stored in the member B14a have been made to match the attributes confirmed by the electronic certificate at least once. The link date, consent type, and serial ID are valid when the link status is set to "linked". The link date indicates the date on which the user selected to use the attribute information link function. On the link date, the attributes of the user stored in the member B14a are made to match the attributes confirmed by the electronic certificate. Therefore, the link date also indicates the date on which the attributes stored in the member B14a matched the attributes confirmed by the electronic certificate. The consent information may be information indicating the consent status of the user regarding the use of the user's information by the member information management server 1 to implement the attribute information link function. For example, the consent information may be set to either "link only for the first time" or "continuous link". "Link only for the first time" indicates that the user has consented to match the attributes of the user stored in the member B14a with the attributes confirmed by the electronic certificate only on the link date. For the purpose of matching the attributes in this case, the member information management server 1 needs to obtain the information on the attributes of the user included in the electronic certificate. "Link only for the first time" also indicates that the user has consented only to the acquisition of this information. "Continuous link" indicates that in addition to the link date, when there is a change in the actual attributes of the user, the user has consented to match the attributes of the user stored in the member B14a with the changed attributes.For the attribute matching in this case, the membership information management server 1 needs to obtain the information of the changed attributes from the certification authority server 4 via the signature verification server 3. "Continuous cooperation" also indicates that in addition to obtaining the information of the user's attributes included in the electronic certificate, the user has agreed to obtain the information from the certification authority server 4. The serial ID is identification information for identifying the user in the signature verification server 3. The serial ID may be automatically assigned by the signature verification server 3 to each user who uses the attribute information cooperation function. Note that the signature verification server 3 may identify the user using the user ID. In this case, the serial ID is not necessary. Also, the attribute cooperation information may be stored in the membership DB 14a.

[0034] The membership information management server 1 may provide an API (Application Programming Interface) for accessing the database stored in the storage unit 14 to server devices such as the promotion server 2. By using the API, the promotion server 2 may be able to obtain information from the membership DB 14ba and the attribute cooperation information DB 14b.

[0035] Furthermore, various programs such as an operating system, a DBMS (Database Management System), and a membership information management server program are stored in the storage unit 14. The membership information management server program is a program that causes the system control unit 11 to execute processes related to the management of membership information. The membership information management server program may be obtained, for example, from another device via the network NW, or may be stored in a storage medium such as a magnetic tape, an optical disk, or a memory card and read via a drive device.

[0036] The communication unit 15 is configured by, for example, a network interface card or the like. The communication unit 15 connects to the promotion server 2, the signature verification server 3, or the user terminal 5 or the like via the network NW, and controls the communication state with the connected device.

[0037] [1-2-2. Promotion Server] Next, the configuration of the promotion server 2 will be described with reference to FIGS. 4 and 5. FIG. 4 is a block diagram showing an example of the general configuration of the promotion server 2 according to the present embodiment. As shown in FIG. 4, the promotion server 2 includes a system control unit 21, a system bus 22, an input / output interface 23, a storage unit 24, and a communication unit 25. The system control unit 21 and the input / output interface 23 are connected via the system bus 22.

[0038] The system control unit 21 is composed of a CPU 21a, a ROM 21b, a RAM 21c, etc.

[0039] The input / output interface 23 performs interface processing between the storage unit 24 and the communication unit 25 and the system control unit 21.

[0040] The storage unit 24 is composed of, for example, a hard disk drive or the like. A database such as a promotion DB 24a may be stored in the storage unit 24.

[0041] FIG. 5 is a diagram showing an example of information stored in the database of the promotion server 2. In the promotion DB 24a, promotion information regarding each promotion may be stored. The promotion information may be settable, for example, by an advertiser or a sponsor. For example, in the promotion DB 24a, as promotion information, a promotion ID, a promotion name, user attribute conditions, etc. may be associated with each other. The promotion ID is identification information for identifying a promotion. The user attribute conditions may indicate conditions of attributes of users targeted by the promotion. The attributes for which conditions can be set may be limited to only the attributes targeted by the attribute information cooperation function, or may include other attributes. The user attribute conditions may include, for example, an attribute item name and attribute value information for each attribute for which a condition is set. The attribute item name indicates the name of the item of the attribute for which the condition is set. Examples of the attribute item name include "surname", "name", "gender", "age", "address", etc. The attribute value information indicates the value of the attribute. Examples of the attribute value corresponding to "surname" include "Yamada", etc. Examples of the attribute value corresponding to "name" include "Taro", etc. Examples of the attribute value corresponding to "gender" include "male" and "female". Examples of the attribute value corresponding to "age" include "15 years old", "45 years old", "20 years old or older", "less than 60 years old", "30 years old to 40 years old", etc. Examples of "address" include "Tokyo", "Chuo-ku, Chiba City, Chiba Prefecture", "Tohoku region", etc. The combination of the attribute item name and the attribute value information indicates the condition of the attribute. When conditions are defined for each of a plurality of attributes by the user attribute conditions, a user who satisfies all of the plurality of conditions may be targeted by the promotion.

[0042] An example of setting user attribute conditions will be described. For example, when there is an age limit for using a product or service, it is conceivable to set an age condition. For example, when a promotion for alcoholic beverages is carried out, it is conceivable to limit the age of the users targeted by the promotion to 20 years or older. Also, when a promotion for a product or service targeted at consumers of a specific gender, such as cosmetics, etc., is carried out, the gender of the users targeted by the promotion may be limited. Further, when a promotion is carried out for the purpose of activating a region, it is conceivable to limit the addresses of the users targeted by the promotion to that region. Also, a promotion may be carried out with restrictions on users with a specific surname or a specific name.

[0043] Furthermore, other information may be further stored in the promotion DB 24a according to the type of promotion. For example, as examples of other information stored in the promotion DB 24a, conditions for the actions of the users targeted by the promotion, information for identifying an advertiser or a sponsor, an advertising budget, an advertising unit price, information for identifying the content presented to the users as an advertisement, the types of benefits to be provided, the content of the benefits to be provided or the method for determining the value, etc. may be mentioned. In the storage unit 24, a database according to the type of promotion and other information may be further stored.

[0044] Furthermore, various programs such as an operating system, a DBMS, and a promotion server program are stored in the storage unit 24. The promotion server program is a program that causes the system control unit 21 to execute processes for carrying out a promotion. The promotion server program may be obtained, for example, from another device via the network NW, or may be stored in a storage medium such as a magnetic tape, an optical disk, or a memory card and read via a drive device.

[0045] The communication unit 25 is constituted by, for example, a network interface card or the like. The communication unit 25 connects to the member information management server 1 or the user terminal 5 etc. via the network NW and controls the communication state with the connected device.

[0046] [1-3. Functional Overview of System Control Unit] [1-3-1. Member Information Management Server] Next, with reference to FIGS. 6 and 7, the functional overview of the system control unit 11 in the member information management server 1 will be described. FIG. 6 is a diagram showing an example of the functional blocks of the system control unit 11 in the member information management server 1. The system control unit 11 may function as an attribute information acquisition unit 1101, an attribute information matching unit 1102, a matching information storage control unit 1103, etc., as shown in FIG. 6, when the CPU 11a reads and executes various program codes included in the member information management server program.

[0047] The attribute information acquisition unit 1101 may acquire attribute information indicating the attributes of any one of a plurality of users who are members of the Internet comprehensive service. The acquired attribute information may be information indicating attributes that have been confirmed to be facts based on the electronic certificate for that user. This attribute information is also referred to as confirmed attribute information. Attributes confirmed to be facts based on the electronic certificate for a user may be, for example, those attributes in the case where it is confirmed or proven using the electronic certificate that the user having those attributes is the user himself / herself. The attribute information may be included in the electronic certificate.

[0048] For example, assume that an electronic certificate is stored in the IC chip of the My Number card. The My Number card stores, for example, an electronic certificate for signature and an electronic certificate for user identification. The electronic certificate for signature includes attribute information indicating the user's name, gender, date of birth, and address. For example, an application for an Internet integrated service may include a program for reading the electronic certificate for signature from the My Number card and transmitting the electronic certificate and the electronic signature to the member information management server 1. Alternatively, the member information management server 1 may transmit a web page for the attribute information linking function to the user terminal 5 in response to a request from the user terminal 5. This web page may include a script for reading the electronic certificate for signature from the My Number card and transmitting the electronic certificate and the electronic signature to the member information management server 1. For example, the user may be able to select the attribute information linking function on the application or the web page. Then, the user may perform an operation to consent to the Internet integrated service acquiring the user's verified attribute information. At this time, when there is a change in the verified attribute information, it may be possible to select whether to consent to updating the attribute information stored in the member DB 14a with the updated verified attribute information. When the user consents to at least acquiring the verified attribute information, the user may input a password for accessing the electronic certificate according to an instruction from the application or the web page, and cause the electronic certificate stored in the My Number card to be read into the user terminal 4. At this time, the IC chip provided in the My Number card may perform an electronic signature on the electronic certificate or predetermined information transmitted from the member information management server 1 to the user terminal 5, and transmit the electronic signature together with the electronic certificate to the user terminal 5. The user terminal 5 may transmit the electronic certificate and the electronic signature to the member information management server 1. The attribute information acquisition unit 1101 may transmit the electronic certificate and the electronic signature acquired from the user terminal 5 to the signature verification server 3. Thereby, the attribute information acquisition unit 1101 may cause the signature verification server 3 to execute verification of the electronic certificate and the electronic signature.Through these verifications, when the user of the user terminal 5, which is the sender of the electronic certificate, is confirmed or proven to be the user himself / herself indicated by the attribute information included in the electronic certificate, the attribute information acquisition unit 1101 may acquire the attribute information included in the electronic certificate as the verified attribute information. Here, the direct membership information management server 1 may acquire the attribute information from the electronic certificate. Alternatively, the signature verification server 3 may acquire the attribute information from the electronic certificate, and the membership information management server 1 may acquire the attribute information from the signature verification server 3.

[0049] Even when there is a change in the user's attributes, the attribute information acquisition unit 1101 may acquire, through the signature verification server 3, the attribute information indicating the changed attributes from the certification authority server 4.

[0050] The attribute information matching unit 1102 may match the attribute information stored in the membership DB 14a in association with the user for whom the verified attribute information has been acquired by the attribute information acquisition unit 1101 with the verified attribute information. The information associated with the user may be information associated with the identification information for identifying the user. The identification information may be, for example, a user ID. Matching the attribute information with the verified attribute information may include, for example, rewriting the attribute information stored in the membership DB 14a with the verified attribute information. Also, matching the attribute information with the verified attribute information may include determining whether the attribute information stored in the membership DB 14a matches the verified attribute information. When the attribute information and the verified attribute information match, the attribute information matching unit 1102 may not rewrite the attribute information stored in the membership DB 14a. When the attribute information and the verified attribute information do not match, the attribute information matching unit 1102 may rewrite the attribute information stored in the membership DB 14a with the verified attribute information. The matching determination and rewriting of the information may be executed for each attribute.

[0051] When the attribute information stored in the member DB 14a by the attribute information matching unit 1102 matches the confirmed attribute information, the consistent information control unit 1103 may store, in the attribute association information DB 14b, association information indicating that the attribute information matches the confirmed attribute information, in association with the user from whom the confirmed attribute information was obtained. This consistent information may be, for example, attribute association information including an association state indicating "associated". Note that the consistent information may be stored in the member DB 14a.

[0052] Figure 7(a) is a diagram showing an example of the contents of the member DB 14a and the attribute association information DB 14b at the time of member registration. For example, user U1 registered as a member of an Internet comprehensive service. At this time, user U1 also registered the user's name, gender, date of birth, and address. As shown in Figure 7(a), the member DB 14a stores the attribute information of user U1. The date of birth on the member DB 14a is "August 1, 2000". However, the correct date of birth of user U1 is "August 11, 2000". User U1 entered the date of birth incorrectly. Also, the address on the member DB 14a is "ABCDEFGH, Chuo-ku, Tokyo". This address is correct. Also, the member information management server 1 stores attribute association information in the attribute association information DB 14b for user U1. At this time, the member information management server 1 sets the association state to "not associated".

[0053] After that, user U1 moved and went through the procedure for changing the address. The changed address is "IGKLMNOP, Yokohama City, Kanagawa Prefecture". Furthermore, user U1 went through the procedure for issuing a My Number card. Figure 7(b) shows an example of the attribute information included in the electronic certificate stored in the My Number card. As shown in Figure 7(b), the date of birth included in the electronic certificate is "August 11, 2000". Also, the address included in the electronic certificate is "IGKLMNOP, Yokohama City, Kanagawa Prefecture".

[0054] After that, user U1 selects to use the attribute information linking function. FIG. 7(c) is a diagram showing an example of the contents of the member DB14a and the attribute linking information DB14b after the selection to use the attribute information linking function. As shown in FIG. 7(c), the date of birth and address of user U1 stored in the member DB14a are updated to "August 11, 2000" and "IGKLMNOP, Yokohama City, Kanagawa Prefecture", respectively. Also, the linking status stored in the attribute linking information DB14b is changed to "linked".

[0055] The match information storage control unit 1103 may cause the attribute linking information DB14b to store match information indicating the match date when the attribute information stored in the member DB14a matches the confirmed attribute information by the attribute information acquisition unit 1101. This match date may be the linking date included in the attribute linking information.

[0056] Also, the match information storage control unit 1103 may cause the attribute linking information DB14b to store match information indicating whether the user has agreed to update the attribute information with the updated confirmed attribute information when the attribute information stored in the member DB14a has changed after matching the confirmed attribute information. The presence or absence of this user's agreement may be indicated by the agreement information included in the attribute linking information. The agreement information indicating "continuous linking" indicates that the user has agreed to update the attribute information with the updated confirmed attribute information. The agreement information indicating "linking only for the first time" indicates that the user has not agreed to update the attribute information with the updated confirmed attribute information.

[0057] In this embodiment, each user can select the one desired by the user from among "linking only for the first time" and "continuous linking". However, the membership information management server 1 may be configured such that only "linking only for the first time" is selectable, or the membership information management server 1 may be configured such that only "continuous linking" is selectable.

[0058] [1-3-2. Promotion Server] Next, with reference to FIGS. 8 to 10, the functional outline of the system control unit 21 in the promotion server 2 will be described. FIG. 8 is a diagram showing an example of the functional blocks of the system control unit 21 in the promotion server 2. The system control unit 21 may function as a condition information acquisition unit 2101, a promotion unit 2102, etc., as shown in FIG. 8, by the CPU 21a reading and executing various program codes included in the promotion server program.

[0059] The condition information acquisition unit 2101 may acquire user attribute conditions indicating the conditions of the attributes of users targeted for a predetermined promotion. For example, the condition information acquisition unit 2101 may acquire user attribute conditions from the promotion DB 24a.

[0060] The promotion unit 2102 may execute processing for a predetermined promotion for users associated with the matching information stored in the attribute association information DB 14b by the matching information storage control unit 1103, among the users associated with the attribute information indicating attributes that satisfy the conditions indicated by the user attribute conditions obtained by the condition information acquisition unit 2101. At this time, even for users associated with the attribute information indicating attributes that satisfy the conditions indicated by the user attribute conditions, users not associated with the matching information may not be included in the targets of the promotion. The attribute information stored in the member DB 14a for users associated with the matching information is attribute information that has been confirmed to be true for that user once based on an electronic certificate. Therefore, the attribute information of users associated with the matching information is more accurate. Therefore, by targeting only users associated with the matching information among the users whose attribute information stored in the member DB 14a satisfies the conditions, the promotion can be appropriately implemented. An example of a user associated with the matching information is a user associated with attribute association information including a linkage state indicating "linked". An example of a user not associated with the matching information is a user associated with attribute association information including a linkage state indicating "unlinked".

[0061] FIG. 9(a) is a diagram showing an example of user attribute conditions. The promotion in FIG. 9(a) is the activation of a region using an electronic stamp card. For example, the Internet comprehensive service includes a stamp card service. The stamp card service is a service that gives stamps to users who visit a specific facility. A user who has acquired a predetermined number of stamps can obtain some kind of privilege. For example, a privilege is given by a sponsor, a facility, or the operator of the stamp card service. For each stamp card, one or more facilities where a user can obtain stamps are predetermined. In addition to the promotion DB 24a, the storage unit 24 of the promotion server 2 may store a database showing the facilities where a user can obtain stamps for each stamp card, a database showing the issuance status of each stamp card for each user, a database showing the stamp acquisition status for each issued stamp card, a database showing the information of each facility, and the like. The promotion unit 2102 may determine whether a user has visited a facility. For example, the promotion unit 2102 may make a determination based on the location information of the user terminal 5 and the location information of the facility. The location information of the user terminal 5 is information indicating the location of the user terminal 5. For example, the user terminal 5 may periodically calculate the location information of the user terminal 5 using a satellite positioning system such as GPS (Global Positioning System). The user terminal 5 may transmit the location information to the promotion server 2. The location information of the facility indicates the location of the facility. The location information of the facility is set in advance. The promotion unit 2102 may also determine whether a user has visited a facility based on the usage status of the services available to the user at the facility among the services included in the Internet comprehensive service. Examples of such services include a point program, credit card settlement, app settlement, electronic money settlement, and the like. When a user uses a service at a facility, for example, an unillustrated terminal device installed at the facility may transmit the usage information of the service to an unillustrated predetermined server device included in the Internet comprehensive service. This usage information may include information for identifying the user who used the service and information for identifying the facility visited by the user.By obtaining usage information, the Promotion Department 2102 can determine whether a user has visited the facility. As shown in Fig. 9(a), the promotion name is "Fukushima Limited Stamp Card". There are no conditions set for name, gender, and age. The condition for the address is "Fukushima Prefecture". Therefore, users residing in Fukushima Prefecture are the targets of the promotion using the stamp card. Fig. 9(b) is a diagram showing an example of information about a certain user. As shown in Fig. 9(b), the address of user U11 is within Fukushima Prefecture. Therefore, the attributes of user U11 meet the user attribute conditions. However, the linkage status is "unlinked". Therefore, user U11 is not a target of the promotion. Fig. 9(c) is a diagram showing an example of information about another user. As shown in Fig. 9(c), the address of user U12 is within Fukushima Prefecture. Also, the linkage status is "linked". Therefore, user U12 is a target of the promotion. Fig. 9(d) is a diagram showing an example of information about yet another user. As shown in Fig. 9(d), the address of user U13 is within Kanagawa Prefecture. Also, the linkage status is "linked". Since the attributes of user U13 do not meet the user attribute conditions in the first place, user U13 is not a target of the promotion.

[0062] Determination of whether a certain user is a user targeted for a promotion and extraction of users targeted for a promotion may vary depending on the type of promotion. For example, when an advertisement of the type displayed on the screen is implemented, when any user terminal 5 displays the screen, the promotion unit 2102 may obtain the user ID of the user of the user terminal 5 from the user terminal 5. The promotion unit 2102 may obtain member information and attribute linkage information associated with the user ID and make a determination. When an advertisement by email or direct mail is implemented, the promotion unit 2102 may, for example, search the member DB 14a for member information including attribute information that satisfies the user attribute conditions, and search the attribute linkage information DB 14b for attribute linkage information including a linkage status indicating "linked". The promotion unit 2102 may extract users targeted for the promotion based on these search results. When a promotion using a stamp card is implemented, the promotion unit 2102 may, for example, determine whether the user is targeted for the promotion based on the user attribute conditions of the stamp card and the member information and attribute linkage information of the user when the user selects the issuance of any stamp card. Alternatively, the promotion unit 2102 may determine whether the user is targeted for the promotion at the timing when it is detected that the user has visited a facility set to be able to obtain a stamp with the stamp card after the issuance of the stamp card.

[0063] The processing for the promotion of the users determined to be the targets of the promotion may also vary depending on the type of promotion. For example, when an advertisement of the type displayed on the screen is implemented, the promotion unit 2102 may display the advertisement on the screen by sending the data of the content of the advertisement to the user terminal 5. When an advertisement by email is implemented, the promotion unit 2102 may send an email including the advertisement to the user targeted for the promotion. When an advertisement by direct mail is implemented, the promotion unit 2102 may generate information including the postal code, address, name, etc. of the user targeted for the promotion as information for printing the addressee of the direct mail. Further, the promotion unit 2102 may acquire or generate information indicating an image or text printed on the direct mail as the advertisement. The promotion unit 2102 may send at least the information for printing the addressee among these information to, for example, a computer (not shown) used for printing the direct mail. This computer may be connected to a predetermined printing machine. Then, based on the transmitted information, the direct mail may be printed by the printing machine. When a promotion using a stamp card is implemented, the promotion unit 2102 may execute a process of issuing, for example, a stamp card requested by the user. Alternatively, when it is detected that the user has visited a facility where stamps can be acquired with the stamp card owned by the user, the promotion unit 2102 may perform a process of updating the number of stamps already acquired by the user on the database. Further, the promotion unit 2102 may send a message indicating that the user has acquired a stamp to the user terminal 5 used by the user.

[0064] The promotion department 2102 may target users associated with match information indicating a match date where the length of the period elapsed since the match date when the attribute information stored in the member DB 14a matches the confirmed attribute information is equal to or less than a predetermined length, for a predetermined promotion. On the other hand, the promotion department 2102 may exclude users for whom the length of the period elapsed since the match date exceeds the predetermined length from the target of that promotion. As described above, the attribute information that matches the confirmed attribute information is likely to be correct information about the user at that time. However, the attributes of the user may change. On the other hand, information such as name and address does not change frequently. Therefore, for a certain period from the date when the attribute information matches the confirmed attribute information, it may be interpreted that the attribute information is valid when implementing the promotion. The period of the predetermined length is referred to as the attribute validity period. Examples of the length of the attribute validity period include 3 months, 6 months, 1 year, etc.

[0065] For users associated with match information indicating that there was no consent to update the attribute information with the updated confirmed attribute information when the attribute information stored in the member DB 14a changed after matching the confirmed attribute information, if the length of the period elapsed since the match date is equal to or less than the predetermined length, they may be included in the target of a predetermined promotion. On the other hand, for users associated with match information indicating that there was consent to update the attribute information with the updated confirmed attribute information when the attribute information stored in the member DB 14a changed after matching the confirmed attribute information, regardless of the length of the period elapsed since the match date, they may be included in the target of that promotion. Even if a user who consented to update the attribute information with the updated confirmed attribute information changes their attributes, the attribute information stored in the member DB 14a for that user is updated to reflect the latest attributes. Therefore, it may not be necessary to limit the period during which such users can be included in the target of the promotion.

[0066] FIG. 10(a) is a diagram showing an example of determining whether or not to include a certain user in a promotion. For example, user U21 selected to use the attribute information linking function. Here, user U21 did not consent to updating the attribute information with the confirmed attribute information after the change when the attribute information stored in the member DB14a matched the confirmed attribute information. Therefore, as shown in FIG. 10(a), the linked state is set to "linked", and the consent information is set to "link only for the first time". Assume that the link date is January 1st. Also assume that the length of the attribute validity period is 6 months. Therefore, from January 1st to June 30th, user U21 can be a target of the promotion. Therefore, for example, at the time of March 10th, user U21 is a target of the promotion. Also, for example, at the time of August 20th, user U21 is not a target of the promotion.

[0067] FIG. 10(b) is a diagram showing an example of determining whether or not to include another user in a promotion. For example, user U22 selected to use the attribute information linking function. Here, user U21 consented to updating the attribute information with the confirmed attribute information after the change when the attribute information stored in the member DB14a matched the confirmed attribute information. Therefore, as shown in FIG. 10(b), the linked state is set to "linked", and the consent information is set to "continuous link". Assume that the link date is January 1st. In this case, for example, at the time of August 20th, user U22 is also a target of the promotion.

[0068] [1-4. Operation of the Communication System] Next, the operation of the communication system S will be described with reference to FIGS. 11 to 13. The processes shown in these figures are examples, and any process may be executed as long as the object is achieved. The order of the processes is not limited to the order shown in these figures. Also, at least one of the steps shown in these figures may not be executed. The system control unit 11 of the member information management server 1 may execute the processes shown in FIGS. 11 and 12 according to various program codes included in the member information management server program. The system control unit 21 of the promotion server 2 may execute the processes shown in FIGS. 11 to 13 according to various program codes included in the promotion server program.

[0069] FIG. 11 is a sequence diagram showing an example of processing by the communication system S when selecting the use of the attribute information linking function. For example, the user operates the user terminal 5 to select the use of the attribute information linking function. At this time, the user selects whether to consent to updating the attribute information with the confirmed attribute information after the change when the attribute information stored in the member DB 14a matches the confirmed attribute information. Also, the user causes the user terminal 5 to read the electronic certificate and electronic signature from the My Number card. Thereafter, as shown in FIG. 11, the user terminal 5 transmits the electronic certificate, the electronic signature, the consent information set to either "link only for the first time" or "continuous link" according to the user's selection, and the user ID of the user to the member information management server 1 (step S101). The attribute information acquisition unit 1101 of the member information management server 1 that has received this information transmits a signature verification request to the signature verification server 3 (step S102). The signature verification request includes, for example, the electronic certificate and the electronic signature.

[0070] Upon receiving a signature verification request, the signature verification server 3 performs signature verification (step S103). For example, the signature verification server 3 may determine the validity of the electronic certificate by verifying the authentication path based on the issuer's identification information and the issuer's electronic signature included in the electronic certificate. Also, the signature verification server 3 may determine whether the expiration date included in the electronic certificate has passed. Further, the signature verification server 3 may decrypt the electronic signature into the original hash value using the public key included in the electronic certificate. Additionally, the signature verification server 3 may calculate the hash value of the information that was the basis for the electronic signature. The signature verification server 3 may determine the validity of the electronic signature by determining whether these hash values match. If the electronic certificate is valid, its expiration date has not passed, and the electronic signature is valid, the signature verification server 3 sends a validity confirmation request to the certification authority server 4 (step S104). The validity confirmation request may include, for example, the issuance number of the electronic certificate. The issuance number may be included in the electronic certificate. The certification authority server 4 sends a validity confirmation result indicating whether the electronic certificate corresponding to the issuance number included in the validity confirmation request is valid or invalid to the signature verification server 3 (step S105). When the signature verification server 3 obtains a validity confirmation result indicating that the electronic certificate is valid, it acquires the attribute information included in the electronic certificate as the confirmed attribute information (step S106). The signature verification server 3 sends this confirmed attribute information to the member information management server 1 (step S107). At this time, the signature verification server 3 may generate a new serial number. The signature verification server 3 may store this serial number in association with the issuance number of the electronic certificate. Also, the signature verification server 3 may send the serial ID together with the confirmed attribute information to the member information management server 1.

[0071] When the attribute information acquisition unit 1101 of the member information management server 1 receives the confirmed attribute information, the attribute information matching unit 1102 rewrites the attribute information stored in the member DB 14a in association with the user ID transmitted from the user terminal 5 with the confirmed attribute information (step S108). Next, the matching information storage control unit 1103 changes the attribute linking information stored in the attribute linking information DB 14b in association with the user ID transmitted from the user terminal 5 (step S109). For example, the matching information storage control unit 1103 may change the linking status to "linked", change the linking date to today's date, and change the consent information to the consent information transmitted from the user terminal 5. Further, the matching information storage control unit 1103 may add the serial ID received from the signature verification server 3 to the attribute linking information.

[0072] If the result of the signature verification by the signature verification server 3 is poor or the electronic certificate has expired, the signature verification server 3 does not transmit the confirmed attribute information to the member information management server 1. In this case, the member information management server 1 does not rewrite the attribute information in the member DB 14b and does not change the attribute linking information in the attribute linking information DB 14b. The member information management server 1 may transmit a message indicating that the attribute information linking function is unavailable to the user terminal 5. Here, if the result of the signature verification is good and the electronic certificate has expired, the signature verification server 3 may obtain, from the certification authority server 4, the attribute information indicating the changed attributes as the confirmed attribute information. The member information management server 1 may rewrite the attribute information in the member DB 14b with this confirmed attribute information and change the attribute linking information.

[0073] FIG. 12 is a sequence diagram showing an example of processing by the communication system S when the attributes of a user are changed. For example, the user undergoes a procedure for changing attributes at a government office. In response to this change procedure, the certification authority server 4 changes the attribute information of that user to attribute information indicating the changed attributes. Further, the certification authority server 4 issues a new electronic certificate to the user whose attributes have been changed and invalidates the old electronic certificate of that user. The certification authority server 4 associates the issue number of the new electronic certificate with the issue number of the old electronic certificate. Also, as shown in FIG. 12, the certification authority server 4 transmits a revocation list to the signature verification server 3, for example, every day (step S201). For example, the certification authority server 4 may transmit a revocation list in response to a request from the signature verification server 3. The revocation list may be, for example, a list of the issue numbers of the most recently invalidated electronic certificates.

[0074] When the signature verification server 3 that has received the revocation list recognizes that the issue number associated with any serial ID that the signature verification server 3 has stored is included in the revocation list, it recognizes that the electronic certificate corresponding to that issue number has been invalidated (step S202). In response to this recognition, the signature verification server 3 transmits an information provision request to the certification authority server 4 (step S203). The information provision request may include, for example, the issue number of the invalidated electronic certificate. The certification authority server 4 transmits the attribute information indicating the changed attributes to the signature verification server 3 as verified attribute information based on the issue number included in the information provision request (step S204). The signature verification server 3 transmits the verified attribute information received from the certification authority server 4 to the member information management server 1 together with the serial ID associated with the issue number of the invalidated electronic certificate (step S205). The attribute information matching unit 1102 of the member information management server 1 that has received the verified attribute information and the serial ID acquires the user ID associated with this serial ID from the attribute association information DB 14b. The attribute information matching unit 1102 rewrites the attribute information stored in the member DB 14a in association with this user ID with the verified attribute information (step S206).

[0075] FIG. 13 is a flowchart showing an example of promotion control processing executed by the system control unit 21 of the promotion server 2 according to the present embodiment. The processing example shown in FIG. 13 is an example in the case of determining whether or not a specific single user is a target of promotion. For example, when the promotion is an advertisement of the type displayed on the screen or a promotion using a stamp card, the processing shown in FIG. 13 may be executed.

[0076] As shown in FIG. 13, the condition information acquisition unit 2101 acquires the user attribute condition of the promotion to be determined from the promotion DB 24a (step S301). Next, the promotion unit 2102 acquires the user ID of the user to be determined (step S302). For example, the promotion unit 2102 may acquire the user ID from the user terminal 5 of the user. Next, the promotion unit 2102 acquires the attribute information associated with this user ID from the member DB 14a (step S303). Next, the promotion unit 2102 determines whether or not the attribute of the user indicated by this attribute information satisfies the user attribute condition (step S304). When the attribute of the user does not satisfy the user attribute condition (step S304: NO), the promotion unit 2102 does not execute the processing for the promotion (step S305), and the promotion control processing ends.

[0077] When the user's attributes satisfy the user attribute conditions (step S304: YES), the promotion unit 2102 acquires the attribute linkage information associated with the acquired user ID from the attribute linkage information DB14b (step S306). Next, the promotion unit 2102 determines whether the linkage status included in the attribute linkage information is "linked" (step S307). If the linkage status is "unlinked" (step S307: NO), the process proceeds to step S305. If the linkage status is "linked" (step S307: YES), the promotion unit 2102 determines whether the consent information included in the attribute linkage information is "continuous linkage" (step S308). If the consent information is "linkage only for the first time" (step S308: NO), the promotion unit 2102 determines whether today is within the attribute validity period from the linkage date included in the attribute linkage information (step S309). If today is outside the attribute validity period (step S309: NO), the process proceeds to step S305. If the consent information is "continuous linkage" (step S308: YES), or if today is within the attribute validity period (step S309: YES), the promotion unit 2102 executes the process for promotion (step S310), and the promotion control process ends.

[0078] As described above, according to the present embodiment, the membership information management server 1 may acquire the confirmed attribute information for any user. Further, the membership information management server 1 may match the attribute information stored in the membership DB14a in association with the user with the confirmed attribute information. Further, the membership information management server 1 may store the matching information in the attribute linkage information DB14b in association with the user. Further, the promotion server 2 may acquire the user attribute conditions. Further, the promotion server 2 may execute the process for a predetermined promotion for the users associated with the attribute information indicating the attributes that satisfy the user attribute conditions and associated with the matching information. In this case, the users to be targeted for promotion can be appropriately specified and the promotion can be implemented.

[0079] Here, the membership information management server 1 may cause the matching information storage means to store matching information indicating the matching date in which the attribute information matches the confirmed attribute information. Further, the promotion server 2 may target, as the target of a predetermined promotion, a user associated with the matching information indicating the matching date in which the length of the period elapsed from the matching date is equal to or less than a predetermined length, among the users associated with the attribute information indicating the attributes that satisfy the user attribute conditions. In this case, a user for whom a predetermined length of period has not elapsed since the date when the attribute information stored in the membership DB 14a matches the confirmed attribute information may be targeted for the promotion. As time elapses from the date when the attribute information matches the confirmed attribute information, the actual attributes of the user may be changed. Therefore, it is possible to target, as the target of the promotion, a user within a period in which the attribute information is likely to be accurate.

[0080] At this time, the membership information management server 1 may store in the attribute link information DB 14b matching information indicating whether any user has consented to the update of the attribute information with the updated confirmed attribute information when there is a change in the confirmed attribute information after the attribute information matches the confirmed attribute information. Also, for a user associated with the matching information indicating no consent, the promotion server 2 may include the user in the target of a predetermined promotion when the length of the period elapsed from the matching date is equal to or less than a predetermined length. Further, for a user associated with the matching information indicating consent, the promotion server 2 may include the user in the target of a predetermined promotion regardless of the length of the period elapsed from the matching date. In this case, a user who permits the attribute information stored in the member DB 14a to match the confirmed attribute information can select whether to consent to the update of the attribute information with the updated confirmed attribute information when there is a change in the confirmed attribute information after the match. A user who does not consent to this may be subject to promotion when the predetermined period has not elapsed since the date when the attribute information matched the confirmed attribute information. A user who consents to this may be subject to promotion even if the length of the period elapsed from the date when the attribute information matched the confirmed attribute information exceeds the predetermined length. The attribute information stored in the member DB 14a is updated with the updated confirmed attribute information at any time. Therefore, for a user who has selected consent, the accuracy of the attribute information is likely to be maintained, so the user can be included in the target of the promotion regardless of the timing.

[0081] [2. Second Embodiment] Next, the second embodiment will be described with reference to FIGS. 14 to 18. The first embodiment may be the same as the second embodiment except for the points described below.

[0082] FIG. 14 is a diagram showing an example of the schematic configuration of the communication system S according to the present embodiment. In FIG. 14, the same reference numerals as those in FIG. 1 are given to the same components. The difference between FIG. 14 and FIG. 1 is that the communication system S shown in FIG. 14 further includes one or more service servers 6 and one or more delivery carrier servers 7. The service server 6 and the delivery carrier server 7 are connected to the network NW.

[0083] The service server 6 may be a server device that executes processing for providing a predetermined service to members or operators of the Internet comprehensive service. For the sake of convenience, this service is referred to as a specific service. The specific service may be, for example, a service included in the Internet comprehensive service. In the specific service, a delivery service is used. The delivery service may be a service for delivering a predetermined type of shipment to a delivery destination. The shipment may be at least one of a package and a postal item. The delivery service may be provided by a delivery carrier. For example, an operator of a specific service may use the delivery service to provide this specific service. Alternatively, a member or operator of the Internet comprehensive service may use the delivery service. Examples of the specific service include mediation of commodity transactions in an online shopping mall, mediation of commodity transactions in a free market, a direct mail service, etc. In an online shopping mall, a plurality of operators each sell commodities to members of the Internet comprehensive service. An operator that has received an order for a commodity in the online shopping mall ships the commodity to the user of the sales destination. In a free market, commodities are bought and sold among members of the Internet comprehensive service. The user of the purchase destination of the commodity ships the commodity to the user of the purchase source. In a direct mail service, based on a request from an advertiser, the operator of the advertising service sends a direct mail to a member of the Internet comprehensive service. A service server 6 may be installed for each provided specific service. Also, the server device that executes processing related to the direct mail service may be any one of the promotion servers 2.

[0084] The delivery service provider server 7 may be a server device managed by a delivery service provider. The delivery service provider server 7 may be a server device that manages the delivery status of shipments handled by the delivery service provider. For example, it may be possible to check the delivery status of a shipment through a website operated by the delivery service provider. A delivery service provider server 7 may be installed for each delivery service provider.

[0085] FIG. 15 is a diagram showing an example of information stored in the databases of the service server 6 and the delivery business operator server 7. As shown in FIG. 15, the service server 6 may store databases such as a shipping information DB61. In the shipping information DB61, shipping information necessary for shipping shipped items in a specific service may be stored for each shipped item or for each conclusion of a transaction within the specific service. The actual shipping information may be included in appropriate information according to the type of the specific service. For example, when the specific service is transaction mediation in an online shopping mall, the shipping information may be included in purchase information or the like. The purchase information may be information indicating the content of the purchase of a product. Also, for example, when the specific service is transaction mediation in a free market, the shipping information may be included in transaction information or the like. The transaction information may be information indicating the content of the transaction of a product. In the shipping information DB61, as shipping information, for example, a user ID, a name, a shipping destination address, a shipping destination postal code, a shipping method, a delivery business operator ID, an inquiry number, etc. may be stored in association with each other. The user ID indicates the user of the shipping destination of the shipped item. The name indicates the name of the other party of the shipping destination of the shipped item. The shipping destination address indicates the address of the shipping destination of the shipped item. The shipping destination postal code is the postal code corresponding to the shipping destination address. When the specific service is transaction mediation in an online shopping mall or a free market, the name and address stored in the member DB14a may be used as the name and the shipping destination address. Alternatively, the name and address pre-registered by the user in the specific service may be used as the name and the shipping destination address. Alternatively, at the time of purchasing a product, the user may input the name and the shipping destination address. When the specific service is a direct mail service, the name and address stored in the member DB14a may be used as the name and the shipping destination address. The shipping method indicates how the shipped item is to be shipped. The delivery business operator ID is identification information for identifying the delivery business operator to which the request for delivery of the shipped item is sent. When the specific service is transaction mediation in an online shopping mall or a free market, the shipping method and the delivery business operator may be specified by the purchaser or the seller of the product. When the specific service is a direct mail service, the shipping method and the delivery business operator may be predetermined.The inquiry number is identification information for the delivery carrier to identify the shipped item. For example, the inquiry number may be pre-printed on the delivery slip attached to the shipped item. Alternatively, in response to the shipper of the shipped item requesting the delivery carrier to deliver the item, the delivery carrier may notify the shipper of the inquiry number. The shipper may register the inquiry number with a specific service. Alternatively, the service server 6 may automatically obtain the inquiry number from the delivery carrier server 7. The service server 6 may provide an API for accessing the shipping information DB61 to server devices such as the promotion server 2.

[0086] As shown in FIG. 15, the delivery service provider server 7 may store databases such as a delivery status information DB 71. In the delivery status information DB 71, delivery status information indicating the delivery status of the shipped item may be stored each time the delivery service provider receives a request for delivery of the shipped item. For example, in the delivery status information DB 71, as the delivery status information, an inquiry number, a delivery status, a delivery date and time, etc. may be stored in association with each other. The inquiry number is a number associated with the shipped item. The delivery status may be set to any one of, for example, "Received", "Transporting to the delivery base", "Arrived at the delivery base", "Delivering", "Delivery completed", and "Return". "Received", "Transporting to the delivery base", "Arrived at the delivery base", and "Delivering" all indicate that the shipped item is in the process of being delivered. "Delivery completed" indicates that the delivery of the shipped item has been completed. "Return" indicates that the shipped item could not be delivered, so the shipped item has been returned to the sender. The delivery date and time indicates the date and time when the delivery of the shipped item was completed. An employee of the delivery service provider may input the delivery status into a terminal device (not shown) each time the actual delivery status changes. The delivery service provider server 7 may update the delivery status information stored in the delivery status information DB 71 based on the input information. The delivery service provider server 7 may provide an API for accessing the delivery status information DB 71 to parties outside the delivery service provider. Also, the delivery status information may be included in the shipping information stored in the shipping information DB 61. For example, the service server 6 may obtain the delivery status information from the delivery service provider server 7 and add the delivery status information to the shipping information.

[0087] FIG. 16 is a diagram showing an example of a functional block of the system control unit 21 in the promotion server 2. In FIG. 16, the same elements as those in FIG. 8 are denoted by the same reference numerals. The difference between FIG. 16 and FIG. 8 is that the system control unit 21 shown in FIG. 16 further functions as a delivery status information acquisition unit 2103.

[0088] The delivery status information acquisition unit 2103 may acquire delivery status information indicating the delivery status of a shipped item with the address indicated by any one of the attribute information stored in the member DB 14a as the delivery destination. For example, the delivery status information acquisition unit 2103 may search the shipping information DB 61 for the shipping information associated with the user ID of the user for whom it is determined whether or not they are a promotion target. When the delivery destination address included in the retrieved shipping information matches the address stored in the member DB 14a for that user, the delivery status information acquisition unit 2103 may acquire an inquiry number from that shipping information. The delivery status information acquisition unit 2103 may acquire the delivery status information associated with that inquiry number from the delivery status information DB 71. Note that the delivery status information acquisition unit 2103 may acquire the delivery status information only when the combination of the name and the delivery destination address included in the shipping information matches the combination of the name and the address stored in the member DB 14a.

[0089] The promotion unit 2102 may include, as a target of a predetermined promotion, a user associated with the attribute information indicating an attribute that satisfies the user attribute condition acquired by the condition information acquisition unit 2101 and associated with the attribute information indicating the delivery destination address where delivery is shown to be completed by the delivery status information acquired by the delivery status information acquisition unit 2103. In this case, the promotion unit 2102 may include this user as a target of a predetermined promotion regardless of whether or not this user is a user associated with the matching information stored in the attribute association information DB 14b by the matching information storage control unit 1103. The completion of the delivery of the shipped item to the address of that user stored in the member DB 14a indicates that there is a high possibility that that user lives at the address. That is, even without using the attribute information association function, the validity of the address stored in the member DB 14a can be confirmed. Therefore, the user does not need to perform a procedure for using the attribute information association function in order to include that user as a target of the promotion.

[0090] Note that the Promotion Department 2102 may include a user as a promotion target only when the length of the period elapsed from the delivery completion date of the shipped item indicated by the delivery date and time included in the delivery status information, for example, is equal to or less than a predetermined length. The length of this period may be the same as or different from the length of the attribute validity period.

[0091] FIG. 17(a) is a diagram showing an example of user attribute conditions. As shown in FIG. 17(a), in a certain promotion, no conditions are set for name, gender, and age. The condition for the address is "Saitama Prefecture". Therefore, users residing in Saitama Prefecture are targets of the promotion. FIG. 17(b) is a diagram showing an example of information regarding a certain user. As shown in FIG. 17(b), the address stored in the member DB14a for user U31 is "Saitama City, Saitama Prefecture, STUVWXYZ". Therefore, user U31 meets the user attribute conditions. The linkage status stored in the attribute linkage information DB14b for user U31 is set to "unlinked". Therefore, originally, user U31 should be excluded from the promotion target. On the other hand, user U31 purchased a product at an online shopping mall. The purchased product was delivered to the address of user U31. The shipping information DB61 of the service server 6 of the online shopping mall stores shipping information regarding the shipment of the product to user U31. The shipping address included in this shipping information is "Saitama City, Saitama Prefecture, STUVWXYZ". Also, the shipping company ID included in the shipping information indicates ZZZ Co., Ltd., and the inquiry number is "12345678". The delivery status information DB71 of the shipping company server 7 of ZZZ Co., Ltd. stores delivery status information including the inquiry number "12345678". The delivery status included in this delivery status information is set to "delivery completed". Therefore, the Promotion Department 2102 may include user U31 as a promotion target.

[0092] FIG. 18 is a flowchart showing an example of promotion control processing executed by the system control unit 21 of the promotion server 2 according to the present embodiment. In FIG. 18, the same processes as those in FIG. 13 are denoted by the same reference numerals.

[0093] As shown in FIG. 18, first, steps S301 to S304 are executed in the same manner as in the first embodiment. When the user's attributes satisfy the user attribute conditions (step S304: YES), the delivery status information acquisition unit 2103 searches the shipping information DB 61 for shipping information including the user ID of the user to be determined. As a result of the search, the delivery status information acquisition unit 2103 determines whether there is corresponding shipping information (step S401). If there is no corresponding shipping information (step S401: NO), the process proceeds to step S306. Then, in the same manner as in the first embodiment, steps S306 to S310 and S305 are executed.

[0094] If there is corresponding shipping information (step S401: NO), the delivery status information acquisition unit 2103 determines whether the address included in the user's attribute information matches the delivery destination address included in the corresponding shipping information (step S402). If the addresses do not match (step S402: NO), the process proceeds to step S306. If the addresses match (step S402: YES), the delivery status information acquisition unit 2103 acquires the inquiry number from the shipping information. The delivery status information acquisition unit 2103 acquires the delivery status information including the inquiry number from the delivery status information DB 71 (step S403). Next, the delivery status information acquisition unit 2103 determines whether the delivery status included in the acquired delivery status information is "delivery completed" (step S404). If the delivery status is not "delivery completed" (step S404: NO), the process proceeds to step S306. If the delivery status is "delivery completed" (step S404: YES), the promotion unit 2102 executes the processing for promotion (step S310), and the promotion control processing ends.

[0095] As described above, according to the present embodiment, when a shipment is sent with the user's address stored in the member DB 14a as the delivery destination and the delivery of the shipment is shown to be completed by the delivery status information, the user can be the target of a promotion even if no matching information is stored for that user. The completion of the delivery of the shipment to the address stored in the member DB 14a indicates that the address is likely to be accurate information for the user. Therefore, it is possible to appropriately identify the users who are the targets of the promotion and implement the promotion while omitting the labor of matching the attribute information stored in the member DB 14a with the confirmed attribute information.

[0096] (Appendix 1) For each of a plurality of users, attribute information storage means for storing, in association with the user, attribute information indicating the attributes of the user; confirmed attribute information acquisition means for acquiring confirmed attribute information indicating an attribute that has been confirmed to be a fact for any one of the plurality of users using an electronic certificate; matching means for matching the attribute information stored in the attribute information storage means in association with the any one user with the acquired confirmed attribute information; storage control means for storing, in association with the any one user, matching information indicating that the attribute information matches the confirmed attribute information in matching information storage means; condition information acquisition means for acquiring condition information indicating the conditions of the attributes of the users who are the targets of a predetermined promotion; and promotion means for executing processing for the predetermined promotion for the users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information and associated with the matching information. A promotion system characterized by comprising:

[0097] (Appendix 2) The memory control means causes the match information storage means to store the match information indicating the match date on which the attribute information matches the confirmed attribute information by the matching means, and the promotion means includes, among the users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, the match information indicating the match date on which the length of the period elapsed from the match date is equal to or less than a predetermined length. The promotion system according to Appendix 1, characterized in that the user associated with the match information is targeted for the predetermined promotion.

[0098] (Appendix 3) The memory control means stores, in the attribute information storage means, the match information indicating whether any of the users has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information has changed after the attribute information matches the confirmed attribute information. For the users associated with the match information indicating that there is no consent, when the length of the period elapsed from the match date is equal to or less than the predetermined length, the promotion means includes them in the target of the predetermined promotion, and for the users associated with the match information indicating that there is consent, regardless of the length of the period elapsed from the match date, the promotion means includes them in the target of the predetermined promotion. The promotion system according to Appendix 2, characterized in that it is included.

[0099] (Appendix 4) Among the attribute information stored in the attribute information storage means, the attribute indicated by at least one of the attribute information includes an address. The condition indicated by the acquired condition information includes an address condition. The system further includes a delivery status information acquisition means for acquiring delivery status information indicating the delivery status of a shipment sent to the address indicated by any of the attribute information stored in the attribute information storage means as the delivery destination. The promotion means includes, among the users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, the user associated with the attribute information indicating the address of the delivery destination where delivery is shown to be completed by the acquired delivery status information, regardless of whether the user is associated with the matching information, as a target of the predetermined promotion. The promotion system according to any one of Appendices 1 to 3, characterized in that it is included.

[0100] (Appendix 5) The verified attribute information acquisition means acquires the electronic certificate from the terminal device of any of the users and acquires the verified attribute information included in the acquired electronic certificate. The promotion system according to any one of Appendices 1 to 4, characterized in that it does so.

[0101] (Appended Note 6) In a promotion method executed by a computer, for each of a plurality of users, attribute information indicating the attributes of the user is stored in an attribute information storage means in association with the user. A confirmed attribute information acquisition step of acquiring confirmed attribute information indicating an attribute that is an attribute of any one of the plurality of users and has been confirmed to be a fact using an electronic certificate for the any one user; A matching step of matching the attribute information stored in the attribute information storage means in association with the any one user with the acquired confirmed attribute information; A storage control step of storing, in a matching information storage means, matching information indicating that the attribute information matches the confirmed attribute information, in association with the any one user; A condition information acquisition step of acquiring condition information indicating a condition of an attribute of a user who is a target of a predetermined promotion; A promotion step of executing processing for the predetermined promotion for users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information and associated with the matching information. A promotion method characterized by including.

Explanation of Signs

[0102] 1 Membership Information Management Server 2 Promotion Server 3 Signature Verification Server 4 Certification Authority Server 5 User Terminal 6 Service Server 7 Delivery Business Operator Server 11 System Control Unit 12 System Bus 13 Input / Output Interface 14 Storage Unit 14a Member DB 14b Attribute Linkage Information DB 15 Communication Unit 21 System Control Unit 22 System Bus 23 Input / Output Interface 24 Storage Unit 24a Promotion DB 25 Communication Unit 61 Information DB for Sending 71 Delivery Status Information DB 1101 Attribute Information Acquisition Unit 1102 Attribute Information Matching Unit 1103 Matching Information Storage Control Unit 2101 Condition Information Acquisition Unit 2102 Promotion Unit 2103 Delivery Status Information Acquisition Unit NW Network S Communication System

Claims

1. an attribute information storage means for storing attribute information indicating attributes of each of a plurality of users in association with the user; a confirmed attribute information acquiring means for acquiring confirmed attribute information indicating an attribute of any one of the plurality of users, the attribute being confirmed as true for the any one of the users using a digital certificate; a matching means for matching the attribute information stored in the attribute information storage means in association with any one of the users with the acquired confirmed attribute information; a storage control means for storing, in a storage means for storing matching information indicating that the attribute information matches the confirmed attribute information, the matching information being associated with any one of the users; A condition information acquiring means for acquiring condition information indicating conditions of attributes of a user who is a target of a predetermined promotion; a promotion means for executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information; A promotion system comprising:

2. The storage control means stores, in the matching information storage means, the matching information indicating a matching date on which the attribute information matched with the confirmed attribute information by the matching means; The promotion system described in claim 1, characterized in that the promotion means targets, among users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information, users associated with the matching information indicating the matching date where the length of time that has elapsed since the matching date is less than a predetermined length, for the specified promotion.

3. the storage control means stores, in the attribute information storage means, the matching information indicating whether or not any of the users has consented to updating the attribute information with the changed confirmed attribute information when the confirmed attribute information is changed after the attribute information matches the confirmed attribute information; The promotion system described in claim 2, characterized in that the promotion means includes users associated with the matching information indicating that the consent was not given as targets of the specified promotion if the length of time that has elapsed since the matching date is less than or equal to the specified length, and includes users associated with the matching information indicating that the consent was given as targets of the specified promotion regardless of the length of time that has elapsed since the matching date.

4. The attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address, the conditions indicated by the acquired condition information include an address condition; The method further includes a delivery status information acquisition means for acquiring delivery status information indicating a delivery status of a delivery item that has been sent to the address indicated by any of the attribute information stored in the attribute information storage means, The promotion system according to any one of claims 1 to 3, characterized in that the promotion means includes, among users associated with the attribute information indicating the attributes that satisfy the conditions indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination where delivery is indicated to be completed by the acquired delivery status information, as targets of the specified promotion, regardless of whether they are associated with the matching information.

5. A promotion system as described in any one of claims 1 to 3, characterized in that the confirmed attribute information acquisition means acquires the electronic certificate from a terminal device of any one of the users and acquires the confirmed attribute information contained in the acquired electronic certificate.

6. 1. A computer-implemented promotion method comprising: Attribute information indicating attributes of each of a plurality of users is stored in an attribute information storage means in association with the user; a confirmed attribute information acquiring step of acquiring confirmed attribute information indicating an attribute of any one of the plurality of users, the attribute being confirmed as true for the any one of the users using a digital certificate; a matching step of matching the attribute information stored in the attribute information storage means in association with any one of the users with the acquired confirmed attribute information; a storage control step of storing, in a storage unit, matching information indicating that the attribute information matches the confirmed attribute information, in association with any one of the users; a condition information acquisition step of acquiring condition information indicating conditions of attributes of a user who is a target of a predetermined promotion; a promotion step of executing a process for the predetermined promotion for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information; A promotion method comprising:

Images