Access control device, access control method, reminder notification processing device, reminder notification processing method, and program

Abstract

Control access to biological information. [Solution] The access control device acquires the biological identification information of the target organism and the personal identification information of the target person. Using administrator information that associates the biological identification information of the managed organism with the personal identification information of the person in charge of the managed organism, the device identifies the person in charge of the target organism. If the target person is different from the person in charge of the target organism, the device determines whether or not to allow the target person to access the managed organism information relating to the target organism, based on the relationship between the target person and the person in charge of the target organism.

Description

Technical Field

[0001] The present disclosure relates to an access control device, an access control method, a reminder notification processing device, a reminder notification processing method, and a program.

Background Art

[0002] A system for handling information on organisms that requires management has been developed. For example, Patent Document 1 discloses an animal individual management system that supports the individual management of animals. In this animal individual management system, a service provider that provides a service to a managed animal can register information on the service provided to the animal as the living information of the animal.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the system of Patent Document 1, only the owner of an animal and the service provider that has provided a service to the animal can access information on the animal. The present disclosure has been made in view of this problem, and one of its purposes is to provide a new technology for controlling access to information on organisms.

Means for Solving the Problems

[0005] The access control device relating to this disclosure includes: acquisition means for acquiring biological identification information of a target organism and personal identification information of a target person; identification means for identifying the manager of a target organism using manager information that associates the biological identification information of the managed organism with the personal identification information of the manager of the managed organism; and determination means for determining whether to permit the target person to access the managed organism information relating to the target organism, based on the relationship between the target person and the manager of the target organism, if the target person is different from the manager of the target organism.

[0006] The access control method relating to this disclosure is performed by a computer. The method includes: an acquisition step of acquiring biological identification information of a target organism and personal identification information of a target person; an identification step of identifying the manager of the target organism using manager information that associates the biological identification information of the managed organism with the personal identification information of the manager of the managed organism; and a determination step of determining whether to allow the target person to access the managed organism information relating to the target organism, based on the relationship between the target person and the manager of the target organism, if the target person is different from the manager of the target organism.

[0007] The program relating to this disclosure causes a computer to perform the following steps: an acquisition step of acquiring biological identification information of a target organism and personal identification information of a target person; an identification step of identifying the manager of the target organism using manager information that associates the biological identification information of the managed organism with the personal identification information of the manager of the managed organism; and a determination step of determining whether to allow the target person to access the managed organism information relating to the target organism, based on the relationship between the target person and the manager of the target organism, if the target person is different from the manager of the target organism.

[0008] The reminder notification processing device relating to this disclosure includes identification means for identifying an administrator whose address shown in the administrator information differs from the current address shown in the current address information, based on biological identification information of the managed organism, personal identification information of the administrator of the managed organism, and administrator information showing the address of the administrator, and personal identification information of the person and current address information showing the current address of the person, and processing means for executing a process to send a reminder notification to the identified administrator prompting them to update the administrator information.

[0009] The method for processing reminder notices relating to this disclosure is performed by a computer. The method includes an identification step of identifying an administrator whose address shown in the administrator information differs from the current address shown in the current address information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and the administrator information showing the address of the administrator, and the personal identification information of the person and the current address information showing the current address of the person; and a processing step of performing a process to send a reminder notice to the identified administrator prompting them to update the administrator information. [Effects of the Invention]

[0010] This disclosure provides new technologies for controlling access to biological information. [Brief explanation of the drawing]

[0011] [Figure 1] This diagram illustrates the general operation of the access control device. [Figure 2] This is a block diagram illustrating the functional configuration of an access control device. [Figure 3] This is a block diagram illustrating the hardware configuration of a computer that implements an access control device. [Figure 4] This flowchart illustrates the flow of processing performed by the access control device. [Figure 5] This diagram illustrates specific methods for obtaining biological identification information for target organisms and personal identification information for target individuals. [Figure 6]This diagram illustrates the structure of administrator information. [Figure 7] This diagram illustrates the overview of a reminder notification processing device. [Figure 8] This is a block diagram illustrating the functional configuration of a reminder notification processing device. [Figure 9] This flowchart illustrates the processing flow performed by the reminder notification processing device. [Modes for carrying out the invention]

[0012] Embodiments of the present disclosure will be described in detail below with reference to the drawings. In each drawing, the same or corresponding elements are denoted by the same reference numerals, and redundant explanations are omitted as necessary for clarity. Unless otherwise specified, predetermined values ​​such as specified values ​​and thresholds are stored in advance in a storage device accessible from the device that uses those values. Furthermore, unless otherwise specified, the storage unit is composed of one or any number of storage devices.

[0013] [Embodiment 1] <Overview> Figure 1 illustrates an overview of the operation of the access control device 2000. Herein, Figure 1 is intended to facilitate understanding of the overview of the access control device 2000, and the operation of the access control device 2000 is not limited to the operation shown in Figure 1.

[0014] The access control device 2000 controls access to managed organism information, which is information about managed organisms. Here, the managed organism from which access to the managed organism information is attempted is referred to as target organism 10. The person attempting to access the managed organism information of target organism 10 is referred to as target person 20.

[0015] Managed organisms are organisms that are managed by specific managers. Managed organisms are organisms for which registration of managers is required by, for example, a country or a local government. Specifically, managed organisms are dogs or other specific types of wild organisms, specific dangerous organisms, or specific alien organisms, etc. Note that managed organisms are not limited to animals and may be plants.

[0016] The correspondence relationship between a managed organism and its manager is shown in the manager information 200. The manager information 200 shows the identification information of the managed organism and the identification information of the manager of the managed organism in association with each other. Here, the identification information assigned to a managed organism is expressed as biological identification information. Also, the identification information assigned to a person is expressed as personal identification information. Personal identification information is, for example, a My Number, etc.

[0017] Managed organism information shows various information regarding a managed organism. For example, the managed organism information shows the biological identification information of the managed organism, the type of the managed organism, or the date and time when the managed organism was registered, etc. Also, when the managed organism is an animal, for example, the managed organism information may also show the date of birth of the managed organism and the history of preventive vaccinations received by the managed organism.

[0018] Note that the manager information 200 may be a part of the managed organism information. In this case, the managed organism information shows the identification information of the manager of each managed organism. The biological identification information of the managed organism shown in the managed organism information and the personal identification information of the managed organism are treated as the manager information 200.

[0019] [[ID=B]]The access control device 2000 operates as follows, for example. First, the access control device 2000 acquires the biological identification information of the target organism 10 and the personal identification information of the target person 20. Further, the access control device 2000 identifies the manager of the target organism 10 using the manager information 200.

[0020] The access control device 2000 determines whether the person 20 is the administrator of the target organism 10. If the person 20 is the administrator of the target organism 10, the access control device 2000 permits the person 20 to access the managed organism information of the target organism 10.

[0021] If the target person 20 is not the administrator of the target organism 10, the access control device 2000 uses the person information 300 to determine whether the relationship between the target person 20 and the administrator of the target organism 10 satisfies specific conditions (hereinafter referred to as access permission conditions). The person information 300 contains various information about each of multiple individuals. For example, the person information 300 may include family register information.

[0022] Relationships between individuals include, for example, legal relationships such as family registration and address. For instance, an access permission condition might be, "Person 20 is a relative of the administrator of Person 10."

[0023] If the relationship between the person 20 and the administrator of the target organism 10 satisfies the access permission conditions, the access control device 2000 allows the person 20 to access the managed organism information of the target organism 10. On the other hand, if the relationship between the person 20 and the administrator of the target organism 10 does not satisfy the access permission conditions, the access control device 2000 does not allow the person 20 to access the managed organism information of the target organism 10.

[0024] <Examples of effects and benefits> According to the access control device 2000 of this embodiment, it is determined whether the person 20 attempting to access the managed organism information of the target organism 10 is the administrator of the target organism 10. Furthermore, if the person 20 is not the administrator of the target organism 10, it is determined whether the relationship between the person 20 and the administrator of the target organism 10 satisfies certain conditions. If the relationship between the person 20 and the administrator of the target organism 10 satisfies the certain conditions, the person 20 is permitted to access the managed organism information of the target organism 10. In this way, the access control device 2000 provides a new technology for controlling access to information related to managed organisms.

[0025] For example, as mentioned above, let's assume that access control is performed based on legal relationships. In this case, access to the managed organism information of the target organism 10 can be granted to a person who has a predetermined legal connection to the administrator of the target organism 10.

[0026] For example, the parents or children of the administrator of target organism 10 are considered to have a reasonably high probability of viewing or updating the managed organism information of target organism 10 on behalf of the administrator. According to the access control device 2000, it is possible to grant permission to view or update the managed organism information of target organism 10 to such individuals who are highly likely to view or update the managed organism information of target organism 10 on behalf of the administrator of target organism 10. Therefore, it becomes relatively easy for the administrator of target organism 10 to manage target organism 10.

[0027] In addition, access control could be based on address relationships, for example, if "the address of person 20 is the same as the address of the administrator of target organism 10." In this case, access to the managed organism information of target organism 10 can be granted to individuals who have a specific relationship with the administrator of target organism 10 in terms of address.

[0028] For example, there may be a person who does not have a legal connection to the administrator of target organism 10 but lives with the administrator of target organism 10. Such a person is also considered to have a reasonably high probability of viewing or updating the managed organism information of target organism 10 on behalf of the administrator of target organism 10. According to the access control device 2000, even when performing access control based on address-related relationships in this way, it is possible to grant permission to view or update the managed organism information of target organism 10 to a person who is highly likely to view or update the managed organism information of target organism 10 on behalf of the administrator of target organism 10. Therefore, it becomes relatively easy for the administrator of target organism 10 to manage target organism 10.

[0029] The access control device 2000 of this embodiment will be described in more detail below.

[0030] <Example of functional configuration> Figure 2 is a block diagram illustrating the functional configuration of the access control device 2000. For example, the access control device 2000 includes an acquisition unit 2020, a identification unit 2040, and a determination unit 2060. The acquisition unit 2020 acquires biological identification information of the target organism 10 and human identification information of the target person 20. The identification unit 2040 uses administrator information 200 to identify the administrator of the target organism 10.

[0031] The determination unit 2060 determines whether the target person 20 is the administrator of the target organism 10. If the target person 20 is not the administrator of the target organism 10, the determination unit 2060 uses the person information 300 to determine whether the relationship between the target person 20 and the administrator of the target organism 10 satisfies the access permission conditions. If the relationship between the target person 20 and the administrator of the target organism 10 satisfies the access permission conditions, the determination unit 2060 allows the target person 20 to access the managed organism information of the target organism 10. If the relationship between the target person 20 and the administrator of the target organism 10 does not satisfy the access permission conditions, the determination unit 2060 does not allow the target person 20 to access the managed organism information of the target organism 10.

[0032] <Example of hardware configuration> Each functional component of the access control device 2000 may be implemented by hardware (e.g., hardwired electronic circuits) or by a combination of hardware and software (e.g., a combination of electronic circuits and programs that control them). The following will further explain the case where each functional component of the access control device 2000 is implemented by a combination of hardware and software.

[0033] Figure 3 is a block diagram illustrating the hardware configuration of computer 1000, which implements the access control device 2000. Computer 1000 is any computer. For example, computer 1000 is a stationary computer such as a PC (Personal Computer) or a server machine. Alternatively, computer 1000 could be a portable computer such as a smartphone or tablet terminal. Computer 1000 may be a dedicated computer designed to implement the access control device 2000, or it may be a general-purpose computer.

[0034] For example, by installing a predetermined application on computer 1000, the various functions of the access control device 2000 are realized on computer 1000. The above application consists of programs that realize each functional component of the access control device 2000. The method of obtaining the above program is arbitrary. For example, the program can be obtained from a storage medium (such as a DVD (Digital Versatile Disc) or USB (Universal Serial Bus) memory) on which the program is stored. Alternatively, the program can be obtained by downloading it from a server device that manages the storage device on which the program is stored.

[0035] Computer 1000 includes a bus 1020, a processor 1040, memory 1060, a storage device 1080, an input / output interface 1100, and a network interface 1120. The bus 1020 is a data transmission path for the processor 1040, memory 1060, storage device 1080, input / output interface 1100, and network interface 1120 to send and receive data from each other. However, the method of connecting the processor 1040 and other components is not limited to bus connection.

[0036] The processor 1040 is a variety of processors such as a CPU (Central Processing Unit), GPU (Graphics Processing Unit), DSP (Digital Signal Processor), or FPGA (Field-Programmable Gate Array). The memory 1060 is the main memory, implemented using RAM (Random Access Memory), etc. The storage device 1080 is the auxiliary storage, implemented using a hard disk, SSD (Solid State Drive), memory card, or ROM (Read Only Memory), etc.

[0037] The input / output interface 1100 is an interface for connecting the computer 1000 with input / output devices. For example, input devices such as keyboards and output devices such as display devices are connected to the input / output interface 1100.

[0038] The network interface 1120 is an interface for connecting computer 1000 to a network. This network may be a LAN (Local Area Network) or a WAN (Wide Area Network).

[0039] The storage device 1080 stores programs that implement each functional component of the access control device 2000 (programs that implement the aforementioned applications). The processor 1040 reads these programs into memory 1060 and executes them to implement each functional component of the access control device 2000.

[0040] The access control device 2000 may be implemented on a single computer 1000 or on multiple computers 1000. In the latter case, the configuration of each computer 1000 does not need to be identical and can be different.

[0041] <Processing flow> Figure 4 is a flowchart illustrating the processing flow performed by the access control device 2000. The acquisition unit 2020 acquires the biological identification information of the target organism 10 and the person identification information of the target person 20 (S102). The identification unit 2040 identifies the manager of the target organism 10 (S104). The determination unit 2060 determines whether the target person 20 is the manager of the target organism 10 or not (S106).

[0042] If the person 20 is the administrator of the target organism 10 (S106: YES), the determination unit 2060 permits the person 20 to access the managed organism information of the target organism 10 (S108). If the person 20 is not the administrator of the target organism 10 (S106: NO), the determination unit 2060 uses the person information 300 to determine whether the relationship between the person 20 and the administrator of the target organism 10 satisfies the access permission conditions (S110). If the relationship between the person 20 and the administrator of the target organism 10 satisfies the access permission conditions (S112: YES), the determination unit 2060 permits the person 20 to access the managed organism information of the target organism 10 (S108). If the relationship between the person 20 and the administrator of the target organism 10 does not satisfy the access permission conditions (S112: NO), the determination unit 2060 does not permit the person 20 to access the managed organism information of the target organism 10 (S114).

[0043] <Acquisition of biological identification information for target organism 10: S102> The acquisition unit 2020 acquires the biological identification information of the target organism 10 (S102). There are various methods for acquiring the biological identification information of the target organism 10. For example, the biological identification information of the target organism 10 is acquired by manually entering the biological identification information of the target organism 10 by the target person 20. In this case, the acquisition unit 2020 provides the target person 20 with an input interface for entering the biological identification information of the target organism 10. The acquisition unit 2020 acquires the biological identification information of the target organism 10 entered via the input interface. The interface for entering the biological identification information of the target organism 10 may be, for example, an input screen or a web page.

[0044] In addition, for example, to obtain the biological identification information of the target organism 10, an IC (Integrated Circuit) chip containing the biological identification information of the target organism 10 is used. In this case, the biological identification information of the target organism 10 is read from the IC chip by using a reader that can read information from the IC chip. The acquisition unit 2020 acquires the biological identification information of the target organism 10 that has been read from the IC chip in this way. The IC chip containing the biological identification information of the target organism 10 is, for example, a microchip implanted in the body of the target organism 10.

[0045] In addition, for example, to obtain the biological identification information of the target organism 10, a code (such as a two-dimensional code) representing the biological identification information of the target organism 10 is used. For example, the target person 20 has a piece of paper on which a code representing the biological identification information of the target organism 10 is printed, or a mobile device on which a code representing the biological identification information of the target organism 10 is stored. The acquisition unit 2020 acquires the biological identification information of the target organism 10 by reading the code printed on the piece of paper or the code displayed on the display device of the mobile device.

[0046] <Acquisition of identification information for target individuals 20: S102> The acquisition unit 2020 acquires the person identification information of the target person 20 (S102). There are various methods for acquiring the person identification information of the target person 20. For example, the person identification information of the target person 20 is acquired by manually entering the person identification information of the target person 20. The method for having the target person 20 manually enter their person identification information is the same as the method for having the target organism 10 manually enter its biological identification information.

[0047] In addition, for example, to obtain the identification information of target person 20, an IC chip containing the identification information of target person 20 is used. The method for obtaining the identification information of target person 20 stored on the IC chip is the same as the method for obtaining the biological identification information of target organism 10 stored on the IC chip. The IC chip containing the identification information of target person 20 is, for example, an IC chip embedded in a card such as a My Number Card.

[0048] In addition, for example, to obtain the identification information of person 20, a code representing the identification information of person 20 is used. The method for obtaining the identification information of person 20 from the code representing the identification information of person 20 is the same as the method for obtaining the biological identification information of target organism 10 from the code representing the biological identification information of target organism 10.

[0049] <Example of a specific process for obtaining identification information> Here, we will provide a more specific example of how to obtain biological identification information for target organism 10 and personal identification information for target person 20. The method described here is merely one example, and the method for obtaining this identification information is not limited to the method shown in the example below.

[0050] Figure 5 illustrates a specific method for obtaining biological identification information of the target organism 10 and human identification information of the target person 20. As a prerequisite, the target person 20 possesses a paper document 60 on which code 62 is printed. Code 62 is a code that encodes the URL (Unified Resource Locator) of the login page provided by the access control device 2000 and the URL parameters representing the biological identification information of the target organism 10.

[0051] For example, the target person 20 reads code 62 using user terminal 70. As a result, a request is sent from user terminal 70 to access control device 2000 requesting the login page 80. This request also includes the biological identification information of the target organism 10 read from code 62. In response to this request, access control device 2000 sends the login page 80 to user terminal 70. As a result, the login page 80 is displayed on the display device of user terminal 70.

[0052] Login page 80 displays the biological identification information of the target organism 10, which was read from code 62. Login page 80 also displays buttons 82 and 84 for selecting an action. Button 82 is for selecting the action "View managed organism information." Button 84 is for selecting the action "Update managed organism information."

[0053] Person 20 presses either button 82 or button 84. As a result, page 90 is displayed on the user terminal 70's display device. Page 90 displays a message prompting the user to read the person identification information of person 20.

[0054] Person 20 holds their ID (identifier) ​​card over a reader on the user terminal 70. The ID card has an embedded IC chip containing the person identification information of Person 20. The reader on the user terminal 70 reads the person identification information of Person 20 from the IC chip on the ID card. Then, it transmits the read person identification information to the access control device 2000.

[0055] As a result of the above series of processes, the user terminal 70 transmits the biological identification information of the target organism 10, data representing the type of operation selected (for example, a number assigned to the operation), and the person identification information of the target person 20 to the access control device 2000. The access control device 2000 receives the transmitted biological identification information of the target organism 10 and the person identification information of the target person 20, thereby acquiring the biological identification information of the target organism 10 and the person identification information of the target person 20. In addition, the access control device 2000 identifies the type of operation that the target person 20 is attempting to perform by receiving the data representing the type of operation selected, which was transmitted from the user terminal 70.

[0056] <Regarding Administrator Information 200> Here, we will explain in detail the administrator information 200 used to identify the administrator of the target organism 10. The administrator information 200 shows the biological identification information of the managed organism and the personal identification information of the administrator of that managed organism in association. Figure 6 is a diagram illustrating the structure of the administrator information 200. The administrator information 200 shows the managed organism identification information 202 and the administrator identification information 204 in association.

[0057] The managed organism identification information 202 indicates the biological identification information of the managed organism. The administrator identification information 204 indicates the personal identification information of the administrator for the managed organism identified by the corresponding managed organism identification information 202. For example, the first record in Figure 6 indicates that the administrator of the organism identified by the biological identification information "o001" is the person identified by the personal identification information "h013".

[0058] When a new controlled organism is registered, a record is added to the administrator information 200. For example, the administrator of a newly registered controlled organism registers the organism using the organism's biological identification information and their own personal identification information. This registration is carried out, for example, by submitting a registration application to a specific government office. Alternatively, the administrator may register the controlled organism by accessing a web system that allows for the registration of controlled organisms.

[0059] Here, the manager of a managed organism may be changed. A change in the manager of a managed organism is performed by changing the manager identification information 204 in the record where the biological identification information of the managed organism is shown in Managed Organism Identification Information 202 to the personal identification information of the new manager. Such updates to records may be performed by application in writing, similar to the registration of a managed organism, or by using a web system.

[0060] <Identification of the manager of target organism 10: S104> The identification unit 2040 uses the administrator information 200 to identify the administrator of the target organism 10 (S104). For example, the identification unit 2040 obtains the person identification information shown in the administrator identification information 204 from the record of the administrator information 200 in which the biological identification information of the target organism 10 is shown in the managed organism identification information 202. The person identification information obtained here is the person identification information of the administrator of the target organism 10. In this way, the identification unit 2040 can identify the administrator of the target organism 10 by obtaining the person identification information of the administrator of the target organism 10 using the administrator information 200.

[0061] There are various ways in which the identification unit 2040 can access the administrator information 200. For example, the administrator information 200 is stored in any storage unit in advance in a manner that is accessible from the access control device 2000. The identification unit 2040 obtains part or all of the administrator information 200 by reading it from the storage unit. In the former case, the identification unit 2040 obtains only the record from the storage unit that shows the biological identification information of the target organism 10 in the managed organism identification information 202 of the administrator information 200.

[0062] As a more specific example, administrator information 200 may be managed by a predetermined database system. In this case, for example, the identification unit 2040 requests this database system to retrieve administrator identification information 204 using the biological identification information of the target organism 10 as a search key. As a response to this request, the database system transmits the personal identification information of the administrator of the target organism 10 to the access control device 2000. Upon receiving this response, the identification unit 2040 retrieves the personal identification information of the administrator of the target organism 10.

[0063] <Determination of whether subject person 20 is the caretaker of subject organism 10: S106> The determination unit 2060 determines whether the subject person 20 is the manager of the subject organism 10 (S106). To do this, the determination unit 2060 determines whether the person identification information of the subject person 20 matches the person identification information of the manager of the subject organism 10. If the person identification information of the subject person 20 matches the person identification information of the manager of the subject organism 10, the determination unit 2060 determines that the subject person 20 is the manager of the subject organism 10. On the other hand, if the person identification information of the subject person 20 does not match the person identification information of the manager of the subject organism 10, the determination unit 2060 determines that the subject person 20 is not the manager of the subject organism 10.

[0064] <Determination of whether access permission conditions are met: S110> If the person 20 is not the administrator of the target organism 10 (S106: NO), the determination unit 2060 uses the person information 300 to determine whether the relationship between the administrator of the target organism 10 and the person 20 satisfies the access permission conditions (S110). The information indicating the access permission conditions is pre-stored in an arbitrary memory unit in a manner accessible from the access control device 2000, for example.

[0065] Various conditions can be used as access permission conditions. For example, access permission conditions can represent conditions related to legal relationships in the family register. For example, any of the following conditions can be used as access permission conditions related to legal relationships in the family register. • Person 20 has a legal connection to the manager of Person 10. • Person 20 is the parent of the caretaker of subject organism 10. • Subject 20 is the child of the caretaker of subject organism 10. • Person 20 is a relative within N degrees of kinship to the manager of subject organism 10 (where N is a predetermined natural number).

[0066] If the access permission conditions relate to legal relationships, for example, the determination unit 2060 obtains the legal information of the target person 20, the legal information of the administrator of the target organism 10, or both, as person information 300, and determines whether the access permission conditions are met. The legal information of a certain person indicates information about other people who have a legal relationship with that person. Legal information can be obtained, for example, by using a database provided by a local government.

[0067] Here, it is possible that personal identification information such as My Number is not used in family register information. For example, in family register information, each person may be identified by their name, etc. Therefore, the access control device 2000 may further acquire information used to identify individuals in family register information (such as names) from the administrator of the target person 20, the target organism 10, or both.

[0068] The name of the target person 20 can be obtained, for example, by having the target person 20 manually input the information or by reading it from the target person 20's My Number Card. The name of the manager of the target organism 10 is stored in the manager information 200, for example, along with the manager's personal identification information. In this case, the acquisition unit 2020 acquires the name of the manager of the target organism 10 along with the manager's personal identification information.

[0069] Access permission conditions may also express conditions related to addresses. A more specific example of an access permission condition might be, "The address of person 20 is the same as the address of the administrator of organism 10."

[0070] If the access permission condition is related to an address, for example, the determination unit 2060 uses, as person information 300, address information showing the address of the target person 20 and address information showing the address of the administrator of the target organism 10. For example, the Basic Resident Register can be used as address information. Address information can be obtained using, for example, a database provided by a local government. The determination unit 2060 obtains the address information of the target person 20 and the address information of the administrator of the target organism 10 and determines whether the access permission condition is met.

[0071] The address of the administrator of the target organism 10 may be shown in the administrator information 200. In this case, the acquisition unit 2020 acquires the address of the administrator of the target organism 10 along with the person identification information of the target organism 10.

[0072] Access permission conditions may include multiple conditions. If access permission conditions include multiple conditions, for example, the determination unit 2060 determines that the access permission conditions are met if all of those conditions are met. On the other hand, if one or more of the conditions are not met, the determination unit 2060 determines that the access permission conditions are not met.

[0073] If the access permission conditions include multiple conditions, the access permission conditions may include conditions other than those relating to the relationship between the person 20 and the administrator of the target organism 10. For example, the access permission conditions may include conditions relating to the trustworthiness of person 20.

[0074] Conditions that indicate the reliability of Subject 20 include, for example, conditions regarding Subject 20's tax payments. Specifically, conditions such as "Subject 20 is not delinquent in paying taxes" may be adopted. This is because tax delinquents may be less reliable than those who are not delinquent in paying taxes. Whether or not Subject 20 is delinquent in paying taxes can be determined, for example, using tax payment status information managed by the tax office.

[0075] Other conditions that indicate the reliability of Subject 20 include conditions related to Subject 20's cognitive abilities. Specifically, these include conditions such as "Subject 20 has not been diagnosed with dementia" and "Subject 20 is not receiving prescribed welfare services." Prescribed welfare services are services received by people with dementia or those suspected of having dementia. This is because people with dementia or those suspected of having dementia may be less reliable than others. Information regarding Subject 20's cognitive abilities, such as whether or not they have dementia, can be obtained, for example, using Subject 20's hospital visit history. Whether or not they are receiving prescribed welfare services can be obtained, for example, using information on the provision of welfare services managed by local governments.

[0076] <<Regarding setting access permission conditions>> Operations on managed organism information can be selected from several types, such as viewing and updating. Therefore, access permission conditions may be set for each type of operation. For example, the access permission condition for person 20 to view managed organism information may be set as "a relative within N degrees of kinship," while the access permission condition for person 20 to update managed organism information may be set as "a relative within M degrees of kinship" (where N and M are any two distinct natural numbers).

[0077] By allowing access permission conditions to be set for each type of operation, appropriate access permission conditions can be set for each operation according to its importance (for example, the magnitude of the impact the operation has on the administrator of the target organism 10). For example, in the above example, by setting N > M, the range of relatives who can update the managed organism information can be narrowed compared to the range of relatives who can view the managed organism information.

[0078] Furthermore, individuals 20 who meet the access permission conditions for updating information on managed organisms may be granted the ability to view the information on managed organisms in addition to updating it.

[0079] If access permission conditions are set for each type of operation, the acquisition unit 2020 acquires the biological identification information of the target organism 10, the person identification information of the target person 20, and data representing the type of operation. The data representing the type of operation can be acquired from a user terminal 70, for example, as illustrated in Figure 5. The determination unit 2060 acquires the access permission conditions corresponding to the type of operation specified by the target person 20, and uses the acquired access permission conditions to determine whether or not to allow the target person 20 to access the managed organism information.

[0080] Furthermore, the access control device 2000 does not need to allow the target person 20 to select an operation. For example, the operations permitted to persons other than administrators are predetermined. The operations permitted to persons other than administrators may be pre-configured in the access control device 2000, or they may be configured by each administrator.

[0081] Access permission conditions may be set for all administrators in the same place, or they may be set for each administrator individually. Furthermore, access permission conditions common to all administrators may be set, and additional access permission conditions may be added for each individual administrator. Hereafter, access permission conditions common to all administrators will be referred to as common conditions, and access permission conditions set for each administrator will be referred to as individual conditions.

[0082] Individual conditions can be set, for example, using the access control device 2000. In this case, the access control device 2000 provides its users with an interface (e.g., a web page) for setting individual conditions. Users use this interface to set individual conditions. Individual conditions are set, for example, by the administrator to whom those conditions apply.

[0083] Individual conditions are stored in a memory unit accessible from the access control device 2000, for example, in association with the personal identification information of the administrator to whom the individual conditions apply. The determination unit 2060 retrieves the individual conditions corresponding to the administrator's identification information of the target organism 10 from the memory unit. The determination unit 2060 then uses the retrieved individual conditions and common conditions to determine whether or not to allow the target person 20 to access the managed organism information.

[0084] When individual conditions are set, it may be possible to exclude common conditions from the access permission conditions. For example, suppose the common condition is "being a relative within the third degree of kinship," while an individual condition set by a certain administrator is "being a relative within the fourth degree of kinship." If the target person 20 is a fourth-degree relative to the administrator of the target organism 10, the individual condition is met, but the common condition is not. Therefore, in order to allow the target person 20 who meets the individual condition to access the managed organism information, it is preferable for the administrator who sets the individual condition to exclude the common condition from the access permission conditions.

[0085] Furthermore, if an individual administrator sets an individual condition that is less restrictive than the common condition, the access control device 2000 may automatically exclude the common condition from the access permission conditions for that administrator. Note that "condition B is less restrictive than condition A" means that if condition B is met, condition A is always met, but if condition A is met, condition B is not necessarily met.

[0086] Similarly, if an administrator sets individual conditions that conflict with the common conditions, the access control device 2000 may automatically exclude the common conditions from the access permission conditions for that administrator.

[0087] In this case, it is possible that one administrator may manage multiple managed organisms. Therefore, individual conditions may be set for each managed organism.

[0088] The conditions set as individual conditions are arbitrary. For example, individual conditions may be related to legal relationships or addresses. In addition, individual conditions may be conditions that deny access to a specific person, such as "not person X". By making it possible to set individual conditions that deny access to a specific person, it is possible to realize access control that takes into account the individual circumstances of the manager of the managed organism.

[0089] <Permission to access: S108> Suppose the determination unit 2060 determines that it is permissible for the target person 20 to access the managed organism information. In this case, the specific processing performed by the access control device 2000 can vary. For example, the access control device 2000 redirects access to the access control device 2000 (for example, access from the user terminal 70 to the access control device 2000) to a database system that manages the managed organism information. As a result, the user terminal 70, which has been permitted to access the managed organism information, can access the database system that manages the managed organism information and use the managed organism information of the target organism 10.

[0090] For example, suppose that the managed organism information is managed by the access control device 2000. In this case, the access control device 2000 provides the managed organism information of the target organism 10 to the target person 20. Also, if permission is granted to update the managed organism information, the access control device 2000 obtains the details of the update to the managed organism information from the user terminal 70 or the like, and updates the content of the managed organism information.

[0091] <Access Denied: S114> Suppose the determination unit 2060 determines that it does not permit the target person 20 to access the managed organism information. In this case, the specific processing performed by the access control device 2000 varies. For example, the access control device 2000 outputs a predetermined error message. This allows the target person 20 to know that access to the managed organism information was not permitted.

[0092] [Embodiment 2] <Overview> Figure 7 is an illustrative diagram of the overview of the reminder notification processing device 3000. Here, Figure 7 is a diagram intended to facilitate understanding of the overview of the reminder notification processing device 3000, and the operation of the reminder notification processing device 3000 is not limited to the operation shown in Figure 7.

[0093] As a prerequisite, assume that administrator information 200 further indicates the address of the administrator of the controlled organism. The address of the administrator of the controlled organism shown in administrator information 200 is used, for example, to mail notices concerning the controlled organism to the administrator. Notices concerning the controlled organism may include, for example, notices regarding vaccinations that the controlled organism should receive, notices regarding periodic checks (such as health examinations) that the controlled organism should undergo, or notices regarding procedures that should be carried out for the controlled organism.

[0094] Furthermore, it is assumed that updates to the current address information (current address information 400), which indicates each person's current address, are not automatically reflected in the administrator information 200. The current address information 400 is, for example, the resident registry.

[0095] Assuming that updates to the current address in the current address information 400 are not automatically reflected in the administrator information 200, suppose the administrator of a managed organism has completed the necessary procedures for moving (such as changing their address) with the local government. In this case, the administrator's current address shown in the current address information 400 will change, but the administrator's address shown in the administrator information 200 will not. Therefore, the administrator of the managed organism must also separately perform the procedures and processes to update the administrator information 200. However, there is a possibility that the administrator may forget to update the administrator information 200. As a result, there is a risk that notifications regarding the managed organism sent by mail using the administrator's address shown in the administrator information 200 may not reach the administrator.

[0096] The reminder notification processing device 3000 then identifies the administrator of the managed organism whose address shown in the administrator information 200 differs from the current address shown in the current address information 400 as the administrator requiring notification. The reminder notification processing device 3000 then processes a notification (hereinafter referred to as the reminder notification) to the administrator requiring notification, urging them to update the administrator information 200. The reminder notification may be sent as an electronic message, such as by email or a designated application, or as a physical medium such as a document.

[0097] <Examples of effects and benefits> According to the access control device 2000 of this embodiment, administrators whose address shown in administrator information 200 differs from the current address shown in current address information 400 are identified as administrators requiring notification, and a process is performed to send a reminder notice to the administrators requiring notification prompting them to update their administrator information 200. As mentioned above, there is a risk that administrators whose address shown in administrator information 200 differs from the current address shown in current address information 400 may not receive notifications regarding managed organisms. The reminder notice processing device 3000 can send reminder notices to administrators requiring notification, thereby reducing the number of cases where administrators do not receive notifications regarding managed organisms.

[0098] The reminder notification processing device 3000 will be explained in more detail below.

[0099] <Example of functional configuration> Figure 8 is a block diagram illustrating the functional configuration of the reminder notification processing device 3000. For example, the reminder notification processing device 3000 has an identification unit 3020 and a processing unit 3040. The identification unit 3020 identifies administrators whose address shown in the administrator information 200 differs from the current address shown in the current address information 400 as administrators requiring notification. The processing unit 3040 performs processing to send reminder notifications to the identified administrators requiring notification.

[0100] <Example of hardware configuration> The reminder notification processing device 3000 may have a hardware configuration similar to that of the access control device 2000. Therefore, the hardware configuration of the reminder notification processing device 3000 may be represented in Figure 3, similar to the hardware configuration of the access control device 2000. However, the storage device of the computer used to implement the reminder notification processing device 3000 stores programs for implementing each function of the reminder notification processing device 3000.

[0101] <Processing flow> Figure 9 is a flowchart illustrating the processing flow performed by the reminder notification processing device 3000. The identification unit 3020 identifies administrators whose address shown in the administrator information 200 differs from the current address shown in the current address information 400 as administrators requiring notification (S202). The processing unit 3040 executes the process to send a reminder notification to the identified administrators requiring notification (S204).

[0102] <Identification of administrators requiring notification: S202> The identification unit 3020 identifies the manager who needs to be notified (S202). To this end, for example, the identification unit 3020 identifies the manager of the managed organism whose address, as shown in the current address information 400, has changed.

[0103] Here, the situation requiring the sending of a reminder notice can occur repeatedly. Therefore, the reminder notice processing device 3000 operates repeatedly (for example, periodically). For example, the identification unit 3020 first identifies the manager of the managed organism whose current address, as shown in the current address information 400, has changed since the last operation.

[0104] As a more specific example, local governments will be provided with information on residents whose current address has changed, as indicated in the current address information 400 (hereinafter referred to as change information), at a regular frequency, such as once a month. The identification unit 3020 will determine whether the person identification information of each individual indicated in the change information is shown in the administrator information 200. If the person identification information of a person indicated in the change information is shown in the administrator information 200, the identification unit 3020 will identify that person as the administrator of the managed organism whose current address has changed, as indicated in the current address information 400.

[0105] The identification unit 3020 determines whether the current address shown in the current address information 400 and the address of the identified administrator shown in the administrator information 200 match. The current address shown in the current address information 400 may be obtained from the change information. If the current address shown in the current address information 400 and the address shown in the administrator information 200 do not match for the administrator, the identification unit 3020 identifies the administrator as an administrator requiring notification.

[0106] <Processing to send a reminder notice: S104> The processing unit 3040 executes a process to send a reminder notice to the administrator who requires notification (S204). For example, the processing unit 3040 sends the reminder notice in various forms, such as email or push notification. The recipient of such electronic notifications (such as email address or terminal identification information used for push notifications) is pre-included in the administrator information 200, for example.

[0107] In addition, the processing unit 3040 may perform processes to facilitate the mailing of reminder notices. For example, the processing unit 3040 generates list information representing a list of administrators who require notification. The list information includes, for example, the names and current addresses of the administrators who require notification. The list information is stored in a memory unit accessible from the terminal of the person in charge of mailing the reminder notices. The person in charge refers to the list information to create reminder notices to be mailed to the administrators who require notification and to send the notices. The processing unit 3040 may further create the reminder notices.

[0108] Furthermore, the reminder notification processing device 3000 may be implemented as an integral part of the access control device 2000. That is, the access control device 2000 may have the functions of both the specific unit 3020 and the processing unit 3040.

[0109] Although the present disclosure has been described above with reference to embodiments, the present disclosure is not limited to the embodiments described above. Various modifications to the structure and details of the present disclosure can be made as can be understood by those skilled in the art within the scope of the present disclosure. Furthermore, each embodiment can be combined with other embodiments as appropriate.

[0110] Each drawing is merely illustrative to illustrate one or more embodiments. Each drawing may be associated with one or more other embodiments rather than with only one specific embodiment. As those skilled in the art will understand, various features or steps described with reference to any one drawing can be combined with features or steps shown in one or more other drawings, for example, to create embodiments not explicitly shown or described. Not all features or steps shown in any one drawing to illustrate an exemplary embodiment are necessarily required, and some features or steps may be omitted. The order of steps shown in any of the drawings may be changed as appropriate.

[0111] The program, when loaded into a computer, includes a set of instructions (or software code) for causing the computer to perform one or more of the functions described in the embodiments. The program may be stored on a non-temporary computer-readable medium or a physical storage medium. Examples, but not limited to, include random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technologies, CD-ROM, digital versatile disc (DVD), Blu-ray® disc or other optical disc storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices. The program may be transmitted over a temporary computer-readable medium or a communication medium. Examples, but not limited to, include temporary computer-readable medium or a communication medium that includes electrically, optically, acoustically or otherwise propagating signals.

[0112] Some or all of the above embodiments may also be described as follows, but are not limited to the following: (Note 1) A means for acquiring biological identification information of a target organism and personal identification information of a target person, A means for identifying the manager of the target organism, using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, An access control device having, if the person concerned is different from the manager of the target organism, a determination means for determining whether or not to permit the person concerned to access the managed organism information relating to the target organism, based on the relationship between the person concerned and the manager of the target organism. (Note 2) The access control device described in Appendix 1, wherein the determination means determines whether or not to permit access to the managed organism information based on the registered relationship between the person concerned and the manager of the organism concerned. (Note 3) The access control device described in Appendix 1, wherein the determination means determines whether or not to permit access to the managed organism information based on the relationship between the address of the person concerned and the address of the manager of the organism concerned. (Note 4) The determination means determines whether or not to permit access to the information of the controlled organism using a plurality of conditions, At least one of the aforementioned conditions is a condition relating to the relationship between the person concerned and the manager of the organism concerned, The access control device according to any one of the appendices 1 to 3, wherein at least one of the conditions is a condition relating to the trustworthiness of the person concerned. (Note 5) The access control device described in Appendix 4, wherein the conditions relating to the trustworthiness of the subject person are conditions relating to the subject person's tax arrears, conditions relating to the subject person's cognitive abilities, or conditions relating to the welfare services the subject person is receiving. (Note 6) The acquisition means further acquires information representing the type of operation performed by the target person on the managed biological information, The conditions for whether or not to permit the person concerned to access the information of the controlled organism are defined for each type of operation performed on the information of the controlled organism. The access control device according to any one of the appendices 1 to 3, wherein the determination means determines whether or not to permit the person to access the managed biological information using the conditions corresponding to the type of operation the person performs on the managed biological information. (Note 7) An acquisition step to obtain biological identification information of the target organism and personal identification information of the target person, A step of identifying the manager of the target organism by using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, A computer-based access control method comprising: a determination step of determining whether to allow the person concerned to access information about the controlled organism relating to the target organism, based on the relationship between the person concerned and the administrator of the target organism, if the person concerned is different from the administrator of the target organism. (Note 8) An acquisition step to obtain biological identification information of the target organism and personal identification information of the target person, A step of identifying the manager of the target organism by using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, A program that causes a computer to perform a determination step, which determines whether or not to allow the person concerned to access information about the controlled organism relating to the organism, based on the relationship between the person concerned and the administrator of the organism concerned, if the person concerned is different from the administrator of the organism concerned. (Note 9) A means for identifying an administrator whose address differs from the current address indicated in the administrator information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and administrator information indicating the address of the administrator, and the personal identification information of the person and current address information indicating the person's current address, A reminder notification processing device having processing means for executing a process to send a reminder notification to the identified administrator prompting them to update the administrator information. (Note 10) A selection step to identify an administrator whose address shown in the administrator information differs from the current address shown in the current address information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and administrator information showing the address of the administrator, and the personal identification information of the person and current address information showing the current address of the person, A computer-based method for processing reminder notifications, comprising a processing step of performing a process to send a reminder notification to the identified administrator prompting them to update the administrator information. (Note 11) A selection step to identify an administrator whose address shown in the administrator information differs from the current address shown in the current address information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and administrator information showing the address of the administrator, and the personal identification information of the person and current address information showing the current address of the person, A program that causes a computer to perform a processing step of sending a reminder notice to the identified administrator prompting them to update the administrator information.

[0113] Some or all of the elements (e.g., configuration and function) described in Appendices 2 through 6 that are dependent on Appendice 1 may also be dependent on Appendices 7 and 8 in the same manner as those described in Appendices 2 through 6. Some or all of the elements described in any appendice may be applicable to various hardware, software, recording means, systems, and methods for recording software. [Explanation of Symbols]

[0114] 10 Target organisms 20 Target Persons 60 Paper media 62 Codes 70 User terminals 80 Login Page 82 buttons 84 buttons Page 90 200 Administrator information 202 Identification information of managed organisms 204 Administrator identification information 300 Personal information 400 Current Address Information 1000 computers 1020 Bus 1040 processor 1060 memory 1080 Storage Devices 1100 Input / Output Interface 1120 Network Interface 2000 Access Control Device 2020 Acquisition Department 2040 Specific section 2060 Judgment section 3000 Reminder Notification Processing Device 3020 Specific section 3040 Processing Unit

Claims

1. A means for acquiring biological identification information of a target organism and personal identification information of a target person, A means for identifying the manager of the target organism, using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, An access control device having, if the person concerned is different from the manager of the target organism, a determination means for determining whether or not to permit the person concerned to access the managed organism information relating to the target organism, based on the relationship between the person concerned and the manager of the target organism.

2. The access control device according to claim 1, wherein the determination means determines whether or not to permit access to the managed organism information based on the registered relationship between the person concerned and the manager of the organism concerned.

3. The access control device according to claim 1, wherein the determination means determines whether or not to permit access to the managed organism information based on the relationship between the address of the person concerned and the address of the manager of the organism concerned.

4. The determination means determines whether or not to permit access to the information of the controlled organism using a plurality of conditions, At least one of the aforementioned conditions is a condition relating to the relationship between the person concerned and the manager of the organism concerned, The access control device according to any one of claims 1 to 3, wherein at least one of the conditions is a condition relating to the reliability of the person concerned.

5. The access control device according to claim 4, wherein the conditions relating to the reliability of the subject person are conditions relating to the subject person's tax arrears, conditions relating to the subject person's cognitive abilities, or conditions relating to the welfare services the subject person is receiving.

6. The acquisition means further acquires information representing the type of operation performed by the target person on the managed biological information, The conditions for whether or not to permit the person concerned to access the information of the controlled organism are defined for each type of operation performed on the information of the controlled organism. The access control device according to any one of claims 1 to 3, wherein the determination means determines whether or not to permit the person to access the managed biological information using the conditions corresponding to the type of operation the person performs on the managed biological information.

7. An acquisition step to obtain biological identification information of the target organism and personal identification information of the target person, A step of identifying the manager of the target organism by using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, A computer-based access control method comprising: a determination step of determining whether to allow the person concerned to access information about the controlled organism relating to the target organism, based on the relationship between the person concerned and the administrator of the target organism, if the person concerned is different from the administrator of the target organism.

8. An acquisition step to obtain biological identification information of the target organism and personal identification information of the target person, A step of identifying the manager of the target organism by using manager information that shows the association between the biological identification information of the managed organism and the personal identification information of the manager of the managed organism, A program that causes a computer to perform a determination step, which determines whether or not to allow the person concerned to access information about the controlled organism relating to the organism, based on the relationship between the person concerned and the administrator of the organism concerned, if the person concerned is different from the administrator of the organism concerned.

9. A means for identifying an administrator whose address differs from the current address indicated in the administrator information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and administrator information indicating the address of the administrator, and the personal identification information of the person and current address information indicating the person's current address, A reminder notification processing device having processing means for executing a process to send a reminder notification to the identified administrator prompting them to update the administrator information.

10. A selection step to identify an administrator whose address shown in the administrator information differs from the current address shown in the current address information, based on the biological identification information of the managed organism, the personal identification information of the administrator of the managed organism, and administrator information showing the address of the administrator, and the personal identification information of the person and current address information showing the current address of the person, A computer-based method for processing reminder notifications, comprising a processing step of performing a process to send a reminder notification to the identified administrator prompting them to update the administrator information.

Images