Information processing device, information processing system, information processing method, and program

Abstract

To utilize personal information of a user for providing a service to the user, more appropriately.SOLUTION: An information processing apparatus includes: an acquisition unit which acquires at least part of personal information of a series of personal information related to a person with first identification information allocated thereto; a storage unit which stores the acquired personal information in association with second identification information related to providing a predetermined service; and a determination unit which determines, upon a designation of a condition on the personal information, whether the personal information associated with the second identification information satisfies the condition or not. On the basis of a result of the determination, processing for providing the service is controlled.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present disclosure relates to an information processing device, an information processing system, an information processing method, and a program. [Background technology]

[0002] When providing a service to a user, a service with higher added value may be provided to the user depending on the user's attributes such as date of birth, age, address, sex, etc. One conventional example is a service that applies a discount on the fee (so-called fare) for using a means of transportation such as a train or bus if the user is a child under a certain age. Another example is a service that provides a specific service to residents of a local government such as a city, ward, town, or village.

[0003] In recent years, systems have been introduced that use cards (e.g., IC cards) that can be used as documents to prove personal numbers, such as the so-called My Number Card, or as official identification for identity verification and are also used to receive various government services. With the introduction of such systems, it has become possible to authenticate individual users based on highly reliable personal information protected by advanced security technology when providing various services to the users.

[0004] In light of this, particularly in recent years, the use of information about a user (so-called personal information) in providing various services to the user has been attracting attention. For example, Patent Document 1 discloses an example of a system in which a user's personal information is registered in advance through a procedure at a counter, and the personal information is used to provide the user with a service. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2003-256879 A Summary of the Invention [Problem to be solved by the invention]

[0006] On the other hand, under conventional systems, in order to enable the utilization of a user's personal information in providing services to the user, for example, the user may be required to go through cumbersome preliminary procedures, such as inputting personal information.

[0007] The present invention has been made in consideration of the above problems, and has an object to realize a more suitable mode of utilizing personal information of a user in providing services to the user. [Means for solving the problem]

[0008] The information processing device of the present invention is configured to: Used to provide specified services an acquisition unit that acquires at least a part of the personal information; a storage unit that stores the acquired personal information in advance in association with second identification information related to the provision of the service; and a determination unit that, when the service is provided, receives designation of a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition; The first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from the first recording medium on which the first identification information is recorded and is used to provide the service, the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, and when a first communication is established between the second recording medium and the reading device, the determination unit receives a condition regarding the personal information from the reading device and determines whether the personal information associated with the second identification information satisfies the condition when a first communication is established between the second recording medium and the reading device after the first communication is established, Based on the result of the judgment, According to the personal information A process related to the provision of the service is controlled; The information read from the second recording medium when providing the service is limited to information used for providing the service. .

[0009] In addition, the information processing device of the present invention, when providing a predetermined service, selects, from a series of personal information on an individual to whom the first identification information is assigned, The above an acquisition unit that acquires a result of a determination as to whether or not at least a part of the personal information previously stored in association with second identification information related to the provision of a service satisfies a predetermined condition related to the provision of the service; and a control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination. The first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from the first identification information recorded on the first recording medium and is used to provide the service, the second recording medium is an IC chip capable of communicating with a reading device via contactless communication, the acquisition unit acquires the result of the judgment based on the second identification information when a first communication is established between the second recording medium and the reading device, and the control unit controls the processing related to the provision of the service according to the personal information based on the acquired result of the judgment when a second communication is established between the second recording medium and the reading device after the first communication is established, and limits the information read from the second recording medium when providing the service to information used for providing the service.

[0010] The information processing system of the present invention includes a first information processing device and a second information processing device connected via a network, and the first information processing device processes a series of personal information relating to an individual to whom first identification information is assigned, Used to provide specified services A first acquisition unit that acquires at least a part of the personal information; The above services a storage unit that stores in advance the personal information associated with the second identification information related to the provision of the service in association with the second identification information, and a determination unit that, when providing the service, receives a designation of a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition, and the second information processing device includes a second acquisition unit that, when providing the service, acquires a result of the determination, and a control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination. The first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from the first identification information recorded on the first recording medium and is used to provide the service, the second recording medium is an IC chip capable of communicating with a reading device via contactless communication, the second acquisition unit acquires the result of the judgment based on the second identification information when a first communication is established between the second recording medium and the reading device, and the control unit controls the processing related to the provision of the service according to the personal information based on the acquired result of the judgment when a second communication is established between the second recording medium and the reading device after the first communication is established, and limits the information read from the second recording medium when providing the service to information used in providing the service. Effect of the Invention

[0011] According to the present invention, it is possible to realize a more suitable mode of utilizing personal information of a user for the provision of services to the user. [Brief description of the drawings]

[0012] [Figure 1] FIG. 1 illustrates an example of a system configuration of an information processing system. [Diagram 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of an information processing device. [Diagram 3] FIG. 2 is a block diagram illustrating an example of a functional configuration of an information processing system. [Figure 4] FIG. 2 is a sequence diagram showing an example of processing of the information processing system. [Diagram 5] FIG. 2 is a sequence diagram showing an example of processing of the information processing system. [Figure 6] FIG. 2 is a sequence diagram showing an example of processing of the information processing system. [Figure 7]FIG. 2 is a sequence diagram showing an example of processing of the information processing system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Hereinafter, preferred embodiments of the present disclosure will be described in detail with reference to the accompanying drawings. In this specification and the drawings, components having substantially the same functional configurations are denoted by the same reference numerals, and redundant description will be omitted.

[0014] <Introduction> When providing a service to a user, a service with higher added value may be provided to the user depending on the user's attributes such as date of birth, age, address, and sex. Furthermore, in recent years, various technologies have been considered for managing personal information of residents by linking it to identification information uniquely assigned to each resident, such as a so-called My Number, and making the personal information available for authentication, etc. of the individual resident. As a specific example, with the introduction of systems using My Number cards, it has become possible to authenticate individual users based on highly reliable personal information protected by advanced security technology when providing various services to users. Against this background, there are hopes, particularly in recent years, for the introduction of mechanisms that use My Number cards and other devices to protect users' personal information with a high level of security while enabling that personal information to be used when providing various services to users.

[0015] On the other hand, under conventional systems, in order to enable the utilization of a user's personal information when providing a service to the user, for example, the user may be required to go through cumbersome preliminary procedures, such as inputting personal information. As a specific example, in order to issue an IC card such as a transportation IC card called "Child Suica (Suica is a registered trademark)" that allows children of elementary school age or younger to receive discounts on fares for using transportation such as buses and trains, procedures such as the submission of documents and identification to a designated sales office may be required. Furthermore, in a situation where personal information is registered based on input by the user himself / herself, it is conceivable that a situation may occur in which the personal information of the user is erroneously registered due to erroneous input or the like.

[0016] In contrast, personal information managed in association with the My Number is based on management by public institutions (e.g., local governments such as cities, towns, and villages) and is protected by high levels of security, so it tends to be more trustworthy than other personal information (especially personal information registered by user input). On the other hand, there are also issues with the utilization of personal information managed in association with the My Number. Specifically, media used for authentication based on personal information protected by high security, such as My Number cards, have a high risk of being lost, and the procedures required for reissuance are complicated, which tends to be a burden on users. In this context, for example, it is conceivable that situations will arise where users avoid carrying media such as My Number cards when going out, which will become a factor that hinders the promotion of the utilization of personal information in the provision of services to users.

[0017] In consideration of the above problems, the present disclosure proposes a mechanism for more preferably utilizing a user's personal information in providing services to the user.

[0018] <System configuration> An example of a system configuration of an information processing system 1 according to this embodiment will be described with reference to FIG. The information processing system 1 according to the present embodiment is a system that realizes the provision of various services to a user based on electronic processing, such as electronic payment using a so-called IC card represented by "Suica". In addition, the information processing system 1 utilizes the characteristic of realizing the provision of various services to a user through electronic processing to control processing related to the provision of services to the user according to the attributes of the user, such as age, date of birth, address, and gender. At this time, the information processing system 1 uses personal information managed by a predetermined institution (for example, a public institution), such as personal information managed in association with the My Number, to determine the attributes of the user. With this mechanism, the information processing system 1 according to the present embodiment prevents the procedures for the user to use the service from becoming complicated, and makes it possible to guarantee the reliability of the service provided according to the attributes of the user.

[0019] 1, the information processing system 1 includes a front-end server 110, a business server 130, an account management server 150, a personal information management server 190, a personal information holding server 170, a terminal device 210, and a reading device 250. The various information processing devices included in the information processing system 1 illustrated above are connected to each other via a network N1 so as to be able to transmit and receive information to and from each other.

[0020] The type of the network N1 is not particularly limited. As a specific example, the network N1 may be configured by the Internet, a dedicated line, a LAN (Local Area Network), or a WAN (Wide Area Network). The network N1 may be configured by a wired network, or may be configured by a wireless network such as a network based on a communication standard such as 5G, LTE (Long Term Evolution), and Wi-Fi (registered trademark). The network N1 may include a plurality of networks, and a network of a different type from the other networks may be applied as a part of the network. In addition, it is sufficient that the communication between the various information processing devices described above is logically established, and the communication between the various information processing devices may be physically relayed by another communication device or the like.

[0021] The terminal device 210 is a schematic representation of a terminal device used to access various servers (e.g., the front-end server 110, the account management server 150, etc.) via the network N1 when a user uses various services. The terminal device 210 can be realized by an information processing device having a communication function, such as a so-called smartphone, a tablet terminal, or a PC (Personal Computer), etc.

[0022] Moreover, the terminal device 210 according to the present embodiment has a function of reading information stored in an IC chip included in an IC card. Note that, as long as it is possible to read information stored in an IC chip, the method is not particularly limited. As a specific example, the terminal device 210 may have various configurations for realizing short-distance wireless communication, typified by so-called non-contact communication. In this case, the terminal device 210 may read information stored in the IC chip by establishing short-distance wireless communication (non-contact communication) with the IC chip. As another example, a configuration may be applied in which a reading device such as a so-called IC card reader is externally attached to the terminal device 210, and the terminal device 210 reads information stored in the IC chip via the reading device.

[0023] Using the above configuration, the terminal device 210 reads information used for authenticating an individual user and accessing personal information of the user, which is stored in an IC chip of an IC card, such as a so-called My Number card. For example, the IC card 230 shown in Fig. 1 is a schematic diagram of a card that stores information used for authenticating an individual user and accessing personal information of the user. As a specific example, the IC card 230 includes an IC chip, and the above information is stored in the IC chip. The information used for authenticating an individual user or accessing the personal information of the user may be, for example, identification information individually assigned to each user, such as a so-called My Number, or may be information such as an electronic certificate issued in association with the identification information and assigned to the user. In the following description, the information used for authenticating an individual user or accessing the personal information of the user is also referred to as "first identification information" for convenience. The first identification information may be, for example, information individually assigned to each user by a predetermined institution (for example, a public institution that manages My Number, etc.) (for example, My Number, or an electronic certificate issued in association with the My Number, etc.). Also, IC card 230 (or an IC chip included in IC card 230) corresponds to an example of a "first recording medium." Note that, although the example shown in FIG. 1 shows a case where an IC card is applied as the first recording medium, the medium applied as the first recording medium is not necessarily limited. For example, in recent years, some mobile terminals such as so-called smartphones are equipped with IC chips, and such mobile terminals (or IC chips included in such mobile terminals) can also be applied as the first recording medium. In this way, any medium equipped with an IC chip (or an IC chip included in such medium) can be applied as the first recording medium.

[0024] The terminal device 210 may notify a desired server (for example, personal information holding server 170 described later) of the first identification information read from the IC chip included in the IC card 230. This enables the server to perform authentication of the individual user and access to the personal information of the user, etc., using the first identification information notified from the terminal device 210. Details of this process will be described separately below.

[0025] The front-end server 110 is a schematic representation of a server also called a front-end server that receives various requests for providing various services to a user and presents a UI (User Interface) and various information related to the provision of the services. For example, the front-end server 110 may receive a request for providing a service to a user from a terminal device 210, and request a business server 130 (described later) to execute a process related to the provision of the service in response to the request. The front-end server 110 may also receive information related to the result of the process executed in response to the request from the business server 130, and present the information to the user via the terminal device 210 that is the sender of the request.

[0026] The business server 130 is a server, also called a back-end server, which performs substantial processing related to the provision of various services to users. For example, the business server 130 may perform processing related to the provision of services to users (e.g. substantial processing related to electronic payment) in response to a request received by the front-end server 110. The business server 130 may also notify the front-end server 110 of information related to the results of the processing performed in response to the request received by the front-end server 110. This enables the front-end server 110 to present information related to the results of the processing performed by the business server 130 to the user via the terminal device 210 that is the sender of the request. The business server 130 corresponds to an example of a "second server."

[0027] The account management server 150 is a schematic representation of a server that manages accounts (in other words, membership information) for users to use various services. The account management server 150 creates or updates accounts, manages created accounts, and so on, in response to requests received by the front-end server 110. The account management server 150 may also issue an access token for accessing information managed in association with an account, based on identification information, a password, and so on, designated when creating or updating an account.

[0028] The personal information management server 190 manages a series of personal information of the user (e.g., date of birth, age, address, sex, etc.) in association with identification information individually assigned to each user, such as a so-called My Number. The personal information management server 190 has a function of authenticating the individual user based on a predetermined authentication method. As a specific example, the personal information management server 190 may authenticate the individual user using an electronic certificate individually issued to each user. Furthermore, the personal information management server 190 may use the personal information of the target user when performing the above authentication. This makes it possible, for example, to prove whether or not the user is an adult through the above authentication. Furthermore, the personal information management server 190 according to this embodiment may output at least a part of the personal information of the user that is being managed. In addition, at this time, the personal information management server 190 may allow the output of the personal information of the user on the premise of authentication of the individual user. This allows an information processing device (e.g., the personal information holding server 170 described later, etc.) that receives the output of the personal information to use the personal information of the user, for example, when providing a service to the user.

[0029] In addition, a server related to a public institution that has jurisdiction over management of identification information (such as My Number) assigned to each user and management of the user's personal information associated with the identification information may be applied as the personal information management server 190. By applying such a configuration, it is possible to realize the provision of services that require higher reliability for the personal information used, such as services related to public institutions such as local governments and financial institutions such as banks. In this disclosure, a server related to a public institution corresponds to a server for implementing various management functions under the jurisdiction of the public institution. As a specific example, a server related to a public institution may be a server managed by the public institution, or may be a server managed by another institution or another company based on a contract with the public institution.

[0030] The personal information holding server 170 manages the identification information related to the provision of various services to the user in association with the personal information (eg, date of birth, age, address, sex, etc.) of the user to whom the identification information is assigned. Specifically, the personal information holding server 170 requests the personal information management server 190 to authenticate the individual user (user to whom the first identification information is assigned) to the target user. Based on this request, the personal information management server 190, which will be described later, executes a process related to the authentication of the individual user according to the reading result of the IC card 230 (My Number card, etc.) between the target user's terminal device 210 and the target user's terminal device 210. Then, the personal information holding server 170 acquires at least a part of the personal information of the above-mentioned user managed by the personal information management server 190 from the personal information management server 190 according to the result of the authentication. The personal information management server 190 then manages the acquired personal information in association with the above-mentioned identification information related to the provision of various services to the user. In the following description, the above-mentioned identification information related to the provision of various services to the user is also referred to as "second identification information" for convenience. An example of the second identification information is identification information (identification number) assigned to an IC card used for electronic payment, such as Suica. As another example, identification information assigned to a user in order to provide the user with services via a network (e.g., identification information associated with an account, etc.) may be used as the second identification information. Of course, the above is merely an example, and the information used as the second identification information is not particularly limited as long as it is identification information that can uniquely identify the user himself or a medium owned by the user and is used to provide various services to the user.

[0031] Furthermore, the personal information holding server 170 receives a designation of a condition related to personal information and judges whether or not the personal information associated with the designated second identification information satisfies the condition. For example, the personal information holding server 170 may judge whether or not the address of the user associated with the designated second identification information is included in a predetermined area (e.g., a prefecture, a city, a ward, a town, a village, etc.). As another example, the personal information holding server 170 may judge whether or not the age of the user associated with the designated second identification information is below a threshold (e.g., whether or not the user is a minor). Then, the personal information holding server 170 may notify the result of the above-mentioned judgment to the source of the request for the judgment. The personal information holding server 170 corresponds to an example of a "first server".

[0032] The reading device 250 reads information used to provide a service to a user from a card that holds the information, and executes various processes related to the provision of the service based on the read information. For example, the reading device 250 may be realized by a so-called IC card reader or the like, and may read information held in an IC chip provided in an IC card. The IC card 270 shown in Fig. 1 is a schematic diagram of a card that holds information used to provide a service to a user. As a more specific example, the reading device 250 may read information stored in an IC chip of an IC card 270 used for electronic payment, such as Suica, and execute a process related to the electronic payment based on the information. At this time, for example, the reading device 250 may access a server (e.g., the business server 130) related to management of electronic money charged to each IC card 270, and request the server to execute substantial processes related to the electronic payment, such as managing the balance, based on the read information. As another example, the reading device 250 itself may execute substantial processes related to the electronic payment based on information read from the IC card 270. It should be noted that IC card 270 (or an IC chip included in IC card 270) corresponds to an example of a "second recording medium." It should be noted that, although the example shown in FIG. 1 shows a case where an IC card is applied as the second recording medium, this does not necessarily limit the medium applied as the second recording medium. For example, similar to the above-mentioned first recording medium, a mobile terminal equipped with an IC chip (or the IC chip included in the mobile terminal) can also be applied as the second recording medium. In this way, any medium equipped with an IC chip (or the IC chip included in the medium) can be applied as the second recording medium.

[0033] Furthermore, the reading device 250 may request the personal information holding server 170 to determine whether or not the personal information associated with the second identification information satisfies a predetermined condition by designating the second identification information read from the IC card 270. Then, the reading device 250 may control the execution of various processes related to the provision of the above-mentioned services to the user according to the result of the determination. As a specific example, when the address of the target user is included in a predetermined area (in other words, when the user is a resident of a predetermined area), the reading device 250 may apply a discounted fee as a fee for using the service and execute a process related to electronic payment of the fee. As another example, when the target user is a minor, the reading device 250 may restrict the execution of a process related to the sale of products and provision of services for adults.

[0034] 1 is merely an example and does not necessarily limit the system configuration of the information processing system 1 according to this embodiment. As a specific example, the functions of two or more of the various servers (e.g., the front-end server 110, the business server 130, the account management server 150, and the personal information holding server 170) shown in FIG. 1 may be realized by one server. As another example, the load related to the execution of processes by at least some of the various servers shown in FIG. 1 may be distributed to multiple servers.

[0035] An example of the system configuration of the information processing system 1 according to the present embodiment has been described above with reference to FIG.

[0036] <Hardware configuration> An example of a hardware configuration of an information processing device 100 applicable as various information processing devices constituting the information processing system 1 according to the present embodiment shown in Fig. 1 will be described with reference to Fig. 2. The information processing device 100 includes a CPU (Central Processing Unit) 101, an interface device 102, a HD (Hard Disk) 103, a ROM (Read Only Memory) 108, and a RAM (Random Access Memory) 109. The information processing device 100 may also include at least one of an input device 104 and an output device 105. The information processing device 100 may also include a recording medium drive device 106.

[0037] The CPU 101 controls various operations of the information processing device 100. The ROM 108 stores control programs, boot programs, and the like that can be executed by the CPU 101. The RAM 109 is the main memory of the CPU 101, and is used as a work area or a temporary storage area for loading various programs. The HD 103 stores various data and programs. The CPU 101 reads out a program stored in the HD 103, develops it in the RAM 109, and executes the program, thereby realizing various functions described later with reference to Fig. 5 and Fig. 6, and processes described later with reference to Fig. 7. Instead of the HD 103 or together with the HD 103, a storage device other than the HD 103, such as a non-volatile memory typified by an SSD (Solid State Drive), may be used.

[0038] The interface device 102 is an interface that connects the information processing device 100 to various networks such as the network N1. The device applied as the interface device 102 may be changed as appropriate depending on the type of the network N1 and the communication method applied. As a specific example, when the network N1 is a wired network, the interface device 102 may include a connector that connects a cable used as a transmission path, a device related to receiving data via the cable, and a device related to transmitting data via the cable. As another example, when the network N1 is a wireless network, the interface device 102 may include various devices for achieving wireless communication such as an antenna device and an RF circuit.

[0039] The input device 104 is a device for receiving instructions from an administrator of the information processing device 100. The input device 104 may be realized by, for example, an operating device such as a mouse, a keyboard, a touch panel, a button, a switch, a lever, or a pedal. In addition, the device applied as the input device 104 may be appropriately changed according to the method by which the user gives instructions to the information processing device 100 (in other words, the method of operating the information processing device 100). For example, when the information processing device 100 receives instructions from the user by voice input, the input device 104 may be realized by a sound collection device that receives voice input, such as a microphone.

[0040] The output device 105 is a device for presenting various information to the user of the information processing device 100. The output device 105 may be realized by a display device such as a display that presents information to the user by displaying various display information, screens, etc. Furthermore, the device applied as the output device 105 may be appropriately changed depending on the method of presenting information to the user. For example, when information is presented to the user by sound such as voice or electronic sound, the output device 105 may be realized by an audio output device that outputs sound such as a speaker.

[0041] The program of the information processing device 100 is provided to the information processing device 100 by a recording medium 107 such as a CD-ROM, or is downloaded via a network, etc. When the program of the information processing device 100 is provided by the recording medium 107, the recording medium 107 is set in the recording medium drive device 106, and the program recorded on the recording medium 107 is installed in the HD 103 via the recording medium drive device 106.

[0042] 2 is merely an example, and does not necessarily limit the hardware configuration of the information processing device constituting the information processing system 1 according to the present embodiment. As a specific example, some components such as the input device 104 and the output device 105 may not be included. As another example, a configuration according to the function realized by the information processing device 100 may be added as appropriate. As a specific example, the information processing device 100 may have a function of reading information from an IC chip and writing information to the IC chip by establishing short-range wireless communication, typically so-called non-contact communication, with the IC chip. In this case, the information processing device 100 may be provided with a communication device for realizing the short-range wireless communication.

[0043] <Functional configuration> 3, the functional configuration of the information processing system 1 according to this embodiment will be described below, particularly the functional configuration of the personal information management server 190, the personal information holding server 170, the terminal device 210, and the reading device 250. In addition, in FIG. 3, the same reference numerals as those in FIG. 1 indicate the same objects as those in FIG. 1.

[0044] (Personal information management server 190) The following describes an example of the functional configuration of the personal information management server 190. The personal information management server 190 includes a communication unit 191, an authentication processing unit 192, an access control unit 193, and a storage unit 194.

[0045] The communication unit 191 is an interface for each unit in the personal information management server 190 to transmit and receive information to and from other devices via the network N1. The communication unit 191 can be realized by, for example, the interface device 102. In the following description, when each unit in the personal information management server 190 transmits and receives information to and from other devices, it is assumed that the information is transmitted and received via the communication unit 191 unless otherwise specified.

[0046] The storage unit 194 is a schematic representation of a storage area for storing various data. For example, the storage unit 194 may store data and programs for each unit in the personal information management server 190 to execute processing. In addition, the storage unit 194 stores the personal information of each user in association with the first identification information assigned to the user (for example, identification information such as a My Number, or a certificate issued in association with the identification information). The hardware configuration for realizing the storage unit 194 is not particularly limited. For example, the storage unit 194 may be realized by a storage device built into the personal information management server 190. As another example, the storage unit 194 may be realized by an external storage device different from the personal information management server 190. As a specific example, the storage unit 194 may be realized by a storage device external to the personal information management server 190, or may be realized by a storage device connected to the personal information management server 190 via a network. As the storage unit 194, a so-called database system may be applied.

[0047] Furthermore, there is no particular limitation on the type of personal information stored in the storage unit 194. For example, the storage unit 194 may store personal information of a type predetermined by a specific public institution, or may store personal information of a type other than the type determined by the public institution. The type of personal information stored in the storage unit 194 may be determined according to a scene in which the information processing system 1 according to this embodiment is applied, or may be determined according to laws and regulations related to the management of personal information.

[0048] The authentication processing unit 192 executes a process related to authentication of an individual user to whom the first identification information is assigned, upon receiving a direct or indirect designation of the first identification information, i.e., designation of the first identification information itself or designation of other information capable of uniquely identifying the first identification information (e.g., electronic certificate, etc.). Note that as long as it is possible to authenticate the user to whom the first identification information is assigned based on the direct or indirect designation of the first identification information, the method is not particularly limited. As a specific example, the authentication processing unit 192 may receive a designation of an electronic certificate issued in association with identification information such as a My Number, and perform authentication of an individual user to whom the electronic certificate (and thus the identification information) is assigned. As another example, the authentication processing unit 192 may receive a designation of identification information such as a My Number, and a password registered in advance in association with the identification information, and perform authentication of an individual user to whom the identification information is assigned. Furthermore, the authentication processing unit 192 may use the personal information stored in association with the first identification information to authenticate the individual user to whom the first identification information is assigned. As a specific example, the authentication processing unit 192 may authenticate whether the user associated with the first identification information is an adult or not, depending on the date of birth and age of the user. Furthermore, instead of identification information such as My Number, other information (e.g., electronic certificate, etc.) that is issued in association with the identification information may be used as information for uniquely identifying each individual user (in other words, information for managing personal information). In this case, the other information may be used as the first identification information. It should be noted that the manner in which the authentication processing unit 192 authenticates the individual user may be selectively switched. As a specific example, the manner in which the authentication processing unit 192 authenticates the individual user may be selectively switched depending on the purpose of the authentication, the use of the result of the authentication, and the like.

[0049] The access control unit 193 controls access to the personal information stored in the storage unit 194. For example, the access control unit 193 may permit an apparatus (such as the personal information holding server 170 described later) that has designated the first identification information to access the personal information of the user, depending on the result of authentication of the individual user by the authentication processing unit 192 based on the first identification information. As a specific example, when the authentication processing unit 192 has successfully authenticated the individual user based on the first identification information, the access control unit 193 may issue an access token for accessing the personal information of the user to an apparatus that has requested the authentication, an apparatus that has directly or indirectly designated the first identification information, or the like. In addition, the access control unit 193 may transmit at least a part of the personal information designated by the apparatus, out of a series of personal information of the user stored in the storage unit 194, to an apparatus that uses the access token to access the personal information.

[0050] (Personal information holding server 170) The following describes an example of the functional configuration of the personal information holding server 170. The personal information holding server 170 includes a communication unit 171, a personal information management unit 172, a determination unit 173, and a storage unit 174.

[0051] The communication unit 171 is an interface for each unit in the personal information holding server 170 to transmit and receive information to and from other devices via the network N1. The communication unit 171 can be realized by, for example, the interface device 102. In the following description, when each unit in the personal information holding server 170 transmits and receives information to and from other devices, it is assumed that the information is transmitted and received via the communication unit 171 unless otherwise specified.

[0052] The storage unit 174 is a schematic representation of a storage area for storing various data. For example, the storage unit 174 may store data and programs for each unit in the personal information holding server 170 to execute processing. Furthermore, the storage unit 174 stores the personal information of the user in association with the second identification information in response to an instruction from the personal information management unit 172 described later. As a specific example, the storage unit 174 may store the personal information of the target user acquired from the personal information management server 190 in association with the second identification information used for providing a service to the user. In addition, the storage device for realizing the memory unit 174 is not particularly limited, similar to the memory unit 194 described above, and may be built into the personal information holding server 170 or may be provided outside the personal information holding server 170.

[0053] The personal information management unit 172 associates the second identification information, which is specified for each user by another device (e.g., the terminal device 210, the front-end server 110, etc.) and is used to provide a service to the user, with information about the user (e.g., a user account, etc.) and stores the second identification information in the storage unit 174. In this manner, the personal information management unit 172 manages the second identification information by registering the second identification information, which is used to provide a service to the user, for each user.

[0054] The personal information management unit 172 requests the personal information management server 190 to authenticate the target user in response to an instruction from another device (for example, the terminal device 210, the front-end server 110, etc.). At this time, the personal information management unit 172 may present information for accessing the terminal device 210 used by the target user to the personal information management server 190. Based on this request, the personal information management server 190 executes a process related to the authentication of the target user in response to the reading result of the IC card 230 (My Number card, etc.) between the personal information management server 190 and the terminal device 210 of the target user. As another example, the personal information management unit 172 may receive designation of first identification information in response to the reading result of the IC card 230 from another device and request the personal information management server 190 to authenticate the user to whom the first identification information is assigned. In this way, as long as the process related to the authentication of the target user in response to the reading result of the IC card 230 is executed in response to the request from the personal information management unit 172, the flow of the procedure related to the authentication and the process for realizing the procedure are not particularly limited. Furthermore, the type of information (particularly, information used for the authentication) transmitted and received between the devices in accordance with the flow of the authentication procedure is not particularly limited as long as the information is capable of implementing the procedure. Then, in response to the result of the authentication, the personal information management unit 172 acquires at least a part of the personal information to be used for providing the service to the user from among a series of personal information of the user to whom the first identification information is assigned, which is stored in the personal information management server 190. The type of personal information acquired from the personal information management server 190 may be determined in advance or may be determined in response to an instruction from another device. Then, the personal information management unit 172 stores the acquired personal information of the user in the storage unit 174 in association with second identification information used for providing a service to the user, which is registered in advance.

[0055] The determination unit 173 determines whether or not the personal information of the user, which is associated with the second identification information for each user and stored in the storage unit 174, satisfies a desired condition. For example, the determination unit 173 may receive second identification information from another device (for example, the terminal device 210, the front-end server 110, the reading device 250, etc.) and determine whether or not the personal information associated with the second identification information satisfies a predetermined condition. In this case, the determination unit 173 may notify the other device that has requested the determination of information according to the determination result. The conditions for the above-mentioned judgment may be determined in advance, or may be specified by another device that requests the judgment.

[0056] (Terminal device 210) The following describes an example of the functional configuration of the terminal device 210. The terminal device 210 includes a communication unit 211, a reading unit 212, an input unit 213, an output unit 214, a control unit 215, and a storage unit 216.

[0057] The communication unit 211 is an interface for each unit in the terminal device 210 to transmit and receive information to and from other devices via the network N1. The communication unit 211 can be realized by, for example, the interface device 102. In the following description, when each unit in the terminal device 210 transmits and receives information to and from other devices, it is assumed that the information is transmitted and received via the communication unit 211 unless otherwise specified.

[0058] The reading unit 212 reads information stored in a recording medium held by a user (for example, IC card 230 shown in FIG. 1, etc.) in a manner corresponding to the recording method of the information. As a specific example, the reading unit 212 may read information stored in an IC chip included in an IC card such as a My Number card by establishing short-range wireless communication, typically non-contact communication, with the IC chip.

[0059] Particularly, in the information processing system 1 according to the present embodiment, the reading unit 212 reads, from at least the IC card 230 shown in FIG. 1, information used for authenticating an individual user to which first identification information is assigned, which is held in the IC card 230. Examples of the information used for authenticating an individual user include the first identification information itself and an electronic certificate issued in association with the first identification information. The reading unit 252 outputs the information read from the IC card 230 to the control unit 215 described later. This enables the control unit 215 to request authentication of the individual user to a desired server based on the information read from the IC card 230 by the reading unit 212.

[0060] The reading unit 212 may also have a function of writing information to the recording medium and updating the information stored in the recording medium.

[0061] The storage unit 216 is a schematic representation of a storage area for storing various data. For example, the storage unit 216 may store data and programs for each unit in the terminal device 210 to execute processing. In addition, the storage device for realizing the memory unit 216 is not particularly limited, similar to the memory unit 194 described above, and may be built into the terminal device 210 or may be provided outside the terminal device 210.

[0062] The input unit 213 is a schematic representation of an input interface that allows the control unit 215 (described later) to receive various instructions from a user. The input unit 213 can be realized by the input device 104, for example. The output unit 214 is a schematic representation of an output interface that allows the control unit 215 (described later) to present various types of information to the user. The output unit 214 can be realized by the output device 105, for example.

[0063] The control unit 215 controls various processes related to the realization of the functions provided by the terminal device 210. For example, in response to instructions from a user via the input unit 213, the control unit 215 may access a specific server (e.g., the front-end server 110, etc.) via the network N1, and present the UI to the user by having the output unit 214 output a UI for the server to provide various services. The control unit 215 may also transmit a request for execution of a process for providing a service to a user to a predetermined server, and obtain information according to the execution result of the process as a response to the request. In this case, the control unit 215 may present the information obtained as the response to the user via the output unit 214.

[0064] Furthermore, the control unit 215 may obtain information read from the IC card 230 by the reading unit 212 from the reading unit 212, and use the information for various processes (e.g., authentication of the individual user, etc.). As a specific example, the control unit 215 may transmit a request for authentication of the individual user to the personal information management server 190 based on the information used for the authentication of the individual user read from the IC card 230 by the reading unit 212, to a desired server (e.g., personal information holding server 170).

[0065] (Reader 250) The following describes an example of the functional configuration of the reading device 250. The reading device 250 includes a communication unit 251, a reading unit 252, and a control unit 253. The reading device 250 may also include a storage unit 254.

[0066] The communication unit 251 is an interface for each unit in the reading device 250 to transmit and receive information to and from other devices via the network N1. The communication unit 251 can be realized by, for example, the interface device 102. In the following description, when each unit in the reading device 250 transmits and receives information to and from other devices, it is assumed that the information is transmitted and received via the communication unit 251 unless otherwise specified.

[0067] The storage unit 254 is a schematic representation of a storage area for storing various data. For example, the storage unit 254 may store data and programs for each unit in the reading device 250 to execute processing. In addition, the storage device for realizing the memory unit 254 is not particularly limited, similar to the memory unit 194 described above, and may be built into the reading device 250 or may be provided outside the reading device 250.

[0068] The reading unit 252 reads information stored in a recording medium held by a user (for example, IC card 270 shown in FIG. 1, etc.) in a manner corresponding to the recording method of the information. As a specific example, the reading unit 252 may read information stored in an IC chip included in an IC card used to provide services such as electronic payment, by establishing short-range wireless communication, typically non-contact communication, with the IC chip. The reading unit 252 may output the information read from the recording medium to the control unit 253, which will be described later.

[0069] Particularly, in the information processing system 1 according to this embodiment, the reading unit 252 reads, from at least the IC card 270 shown in Fig. 1, second identification information (identification information assigned to the IC card 270) held in the IC card 270. Furthermore, the reading unit 252 outputs the second identification information read from the IC card 270 to the control unit 253 described below. This enables the control unit 253 to execute various processes (for example, processes related to the provision of a service based on the designation of the second identification information) based on the second identification information read by the reading unit 252.

[0070] The reading unit 252 may also have a function of writing information to the recording medium and updating the information stored in the recording medium.

[0071] The control unit 253 controls various processes related to the realization of the functions provided by the reading device 250. For example, the control unit 253 may transmit a request for executing a process for providing a service to a user to a predetermined server, and obtain information corresponding to the execution result of the process as a response to the request. As another example, the control unit 253 itself may execute substantial processing for providing a service to a user. At this time, the control unit 253 may apply the information read by the reading unit 252 to the processing exemplified above.

[0072] For example, the control unit 253 may acquire, from the reading unit 252, the second identification information read from the IC card 270 by the reading unit 252, and execute a process related to providing a service to the user based on the second identification information. As a specific example, the control unit 253 may request a server (e.g., business server 130, etc.) that executes processing related to electronic payment to execute processing related to payment of fees by specifying the acquired second identification information. In this case, the server may execute processing related to electronic payment, such as settling the fee based on the balance managed in association with the second identification information. As another example, the control unit 253 itself may execute substantial processing related to electronic payment, such as settling the fee based on the balance managed in association with the specified second identification information.

[0073] Furthermore, the control unit 253 may request the personal information holding server 170 to determine whether or not the personal information stored in association with the second identification information satisfies a predetermined condition (condition related to the personal information) by designating the second identification information acquired from the reading unit 252. In this case, the control unit 253 may acquire the result of the determination from the personal information holding server 170, and control the process related to the provision of the service to the user according to the result of the determination.

[0074] As a specific example, the control unit 253 may request the personal information holding server 170 to determine whether or not the address of the user associated with the second identification information is included in a predetermined area. In this case, the control unit 253 may apply a discounted rate when electronically paying for various fees (e.g., transportation fees, etc.) if the address is included in the predetermined area. This makes it possible to realize, for example, an operation in which a discount is applied to the fee for various services provided to residents of a predetermined area (e.g., prefectures, cities, wards, towns, and villages). In addition, the results of the determination on other personal information such as the date of birth, age, and sex, not limited to the address, may be used to control the process related to the provision of services to the user. An example of the control of the process related to the provision of services to the user using the results of the determination on such personal information will be described in detail separately using a specific example as an embodiment.

[0075] <Processing> An example of the processing of the information processing system 1 according to this embodiment will be described below with reference to Figures 4 to 7. For convenience, in the examples shown in Figures 4 to 7, the example of the processing of the information processing system 1 will be described with a focus on a procedure for providing a service that applies a discount to residents of a specific area in a situation where an IC card is used to pay for transportation fees (fares) for trains, buses, and the like.

[0076] (Registration procedures for starting to use the service) First, an example of a process flow relating to a registration procedure for a user to start using a service will be described with reference to FIG.

[0077] In S101a, the front-end server 110, which serves as a window for receiving various instructions related to the provision of the service, receives a request for registering an account for using the service, based on an instruction from a user via the terminal device 210. Specifically, the front-end server 110 displays a UI related to account registration on the terminal device 210, and receives an instruction related to account registration from the user via the UI. At this time, the front-end server 110 may present the terms of use of the service to the user, and then request consent to the terms from the user, and may start processing related to account registration when consent to the terms is obtained. When the front-end server 110 receives a request for account registration from a user via the terminal device 210, in S101b, it instructs the account management server 150 to start the procedure for registering the user's account. At this time, the front-end server 110 may notify the account management server 150 of information on the terminal device 210 that is the other party in the procedure for registering the account. This allows the account management server 150 to access the terminal device 210 that is the other party in the procedure for registering the account, based on the information notified from the front-end server 110.

[0078] In S103, based on an instruction from the front-end server 110, the account management server 150 executes processing corresponding to the procedure for registering the account of the target user between the terminal device 210 of the target user and the account management server 150. As a specific example, the account management server 150 displays a UI on the terminal device 210 presenting an input form for various information (e.g., email address, password, etc.) related to the registration of an account, and accepts input of the various information from the user via the UI. At this time, the account management server 150 may send a confirmation code to the email address from which the input from the user was accepted, in order to confirm that the email address belongs to the user himself / herself. In this case, the account management server 150 may confirm that the email address belongs to the user himself / herself when the confirmation code accepted as input from the user via the UI displayed on the terminal device 210 matches the confirmation code sent to the previously specified email address. Then, the account management server 150 generates an account for the user based on various information related to the account registration input by the user.

[0079] When the creation of the account for the target user is completed, the account management server 150 issues an access token corresponding to the user's account to the front-end server 110 in S105. In S107, the front-end server 110 executes processing related to the login of the target user based on the access token issued by the account management server 150. Note that, for the subsequent processing, the login state of the user whose account was registered in the processing of S103 is maintained, and the subsequent processing is executed for that account.

[0080] In S109, the front-end server 110 checks with the target user whether or not to register an IC card related to the use of the service via the terminal device 210. In the example shown in Fig. 7, it is assumed that the user selects registration of an IC card. In S111a, the front-end server 110 receives a request from the user via the terminal device 210 regarding registration of an IC card related to the use of the service. When the front-end server 110 receives a request for registration of an IC card related to the use of a service from a user via the terminal device 210, in S111b, the front-end server 110 instructs the personal information holding server 170 to start a procedure for registering the IC card. At this time, the front-end server 110 may notify the personal information holding server 170 of information on the terminal device 210 that is the other party in the procedure for registering the IC card. This allows the personal information holding server 170 to access the terminal device 210 that is the other party in the procedure for registering the IC card, based on the information notified from the front-end server 110. In the following, for convenience, each process will be described assuming that the IC card 270 (IC card 270 shown in FIG. 1) used for electronic payment, such as so-called Suica, is the object of registration.

[0081] In S113, based on an instruction from the front-end server 110, the personal information holding server 170 executes processing corresponding to the procedure for registering the IC card 270 between the terminal device 210 of the target user. As a specific example, the personal information holding server 170 may display a UI on the terminal device 210, in which an input form for the second identification information assigned to the IC card 270 to be registered is presented, and may receive an input of the second identification information from the user via the UI. As another example, the personal information holding server 170 may instruct the user via the terminal device 210 to read the IC card 270 to be registered using the terminal device 210. In this case, the personal information holding server 170 may acquire the second identification information held in the IC card 270 from the terminal device 210 as a result of the IC card 270 being read by the terminal device 210. Then, the personal information holding server 170 stores the second identification information acquired from the terminal device 210 in a predetermined storage area (for example, the storage unit 174) in association with the account of the target user. As a result, the IC card 270 to which the second identification information is assigned is registered as the IC card to be used by the target user to use the service.

[0082] When the registration of the IC card 270 is completed, the personal information holding server 170 notifies the target user via the terminal device 210 that the registration of the IC card 270 is completed in S115.

[0083] An example of the process flow regarding the registration procedure for a user to start using a service has been described above with reference to FIG.

[0084] (Procedures for use of personal information) Next, an example of a process flow related to a procedure for allowing a user to use a service corresponding to his / her personal information when receiving the provision of the service will be described with reference to Fig. 5. In the example shown in Fig. 5, at least a part of personal information among a series of personal information managed in a personal information management server 190 related to a public institution is used for the provision of the service on the premise of authentication of the individual user using an IC card 230 such as a so-called My Number.

[0085] In S151, the personal information holding server 170 accepts an application from a target user via the terminal device 210 for use of the user's personal information in providing a service to the user. In the example shown in Fig. 5, the personal information holding server 170 accepts the application directly from the terminal device 210, but this does not necessarily limit the flow of the process related to the acceptance of the application. As a specific example, the personal information holding server 170 may accept the application from the terminal device 210 via the front-end server 110.

[0086] In S152, the personal information holding server 170 requests the personal information management server 190, which manages the personal information of the user, to authenticate the individual user who has applied to use the personal information for the provision of the service to the user. At this time, the personal information holding server 170 may notify the personal information management server 190 of information regarding the terminal device 210 that will be the other party in the procedure related to the authentication. This allows the personal information management server 190 to access the terminal device 210 that will be the other party in the procedure related to the authentication of the individual user, based on the information notified from the personal information holding server 170.

[0087] When the personal information management server 190 receives a request for authentication of an individual user from the personal information holding server 170, the personal information management server 190 executes processing according to a procedure related to the authentication of the individual user between the personal information management server 190 and the terminal device 210 of the target user. Note that in the example shown in Fig. 5, an example of a process flow related to the procedure related to the authentication will be described, focusing on a case where the authentication of the individual user is performed using electronic authentication information (electronic information used for authentication such as a so-called electronic certificate) held in the IC card 230.

[0088] In S155, the personal information management server 190 accepts, from the user to be authenticated, an input of a password preset for the electronic certificate assigned to the user, via the user's terminal device 210. As a specific example, the personal information management server 190 may cause the terminal device 210 to display a UI presenting an input form for the password, and accept the input of the password from the user via the UI.

[0089] If the personal information management server 190 confirms that the password entered in S155 matches the password set in the target electronic certificate, it instructs the terminal device 210 to send electronic authentication information in S157.

[0090] When terminal device 210 receives an instruction to transmit electronic authentication information from personal information management server 190, in S159, it reads the electronic authentication information (e.g., electronic certificate) held in IC card 230. Specifically, terminal device 210 notifies the user of predetermined notification information to prompt the user to perform an operation related to reading IC card 230. Then, in response to the operation from the user, terminal device 210 reads the electronic authentication information held in IC card 230 from IC card 230 placed within a range where information is read by reading unit 212. When the terminal device 210 reads the electronic authentication information from the IC card 230, it transmits the read electronic authentication information to the personal information management server 190 in S161.

[0091] When the personal information management server 190 receives the electronic authentication information from the terminal device 210, in S163, it authenticates the target user (i.e., the user to whom the electronic authentication information is issued) based on the electronic authentication information. Note that a method for authenticating an individual using electronic authentication information such as a so-called electronic certificate can be a known method, and therefore a detailed description thereof will be omitted.

[0092] When the personal information management server 190 completes the authentication of the individual user, in S165 it issues an access token for accessing the personal information of the user to the personal information holding server 170 that requested the authentication.

[0093] In S167, the personal information holding server 170 uses the access token issued in S165 to obtain from the personal information management server 190 at least a portion of the personal information to be used in providing the service from the set of personal information managed by the personal information management server 190. In S169, the personal information holding server 170 stores the personal information acquired in S167 in association with the second identification information stored in association with the target user's account. When a service is provided to a user, if the user's personal information is used, the personal information stored in personal information holding server 170 in S169 is used to provide the service.

[0094] Above, with reference to Figure 5, an example of the processing flow for the procedure for allowing a user to receive a service by permitting the use of his / her personal information in providing the service has been described.

[0095] (Service provision example 1: Provision of services associated with applications via a network) Next, an example of a process flow for providing a service using a user's personal information will be described with reference to Fig. 6, focusing in particular on a case where a service is provided to a user in response to an application received via a network. Fig. 6 shows an example of a process flow when a local government, such as a prefecture or a city, ward, town, or village, issues commuter passes for use in public transportation such as buses and trains to residents of the local government in response to an application received via a network. In the example shown in Fig. 6, it is assumed that the personal information holding server 170 performs various management related to the issuance of commuter passes to each user. Also, in the example shown in Fig. 6, it is assumed that the user making the application has previously logged in to the system for providing the service related to the issuance of commuter passes and that the logged-in state is maintained.

[0096] In S201, the front-end server 110 accepts an application for use of a service (that is, an application for issuance of a commuter pass) from a target user via the terminal device 210. In S203, the front-end server 110 requests the personal information holding server 170 to determine whether the user whose application was accepted in S101 is a resident of a specified area (in other words, to determine whether the user's address is included in the specified area).

[0097] In S205, in response to a request from the front-end server 110, the personal information holding server 170 determines whether the target user is a resident of a specified area based on the personal information (address) associated with the second identification information corresponding to the account of the target user. In S207, the personal information holding server 170 notifies the front-end server 110 of the result of the judgment in S205 (i.e., the result of the judgment as to whether the target user is a resident of the specified area or not). In the following explanation, for the sake of convenience, it is assumed that the target user is judged to be a resident of the specified area.

[0098] In S209, the front-end server 110 executes a procedure for registering the target user as a user of the service (in other words, a procedure for issuing a commuter pass to the user) based on the determination result notified in S207. As a specific example, the front-end server 110 may request the personal information holding server 170 to register the target user as a user of a commuter pass issued to local residents.

[0099] In S211, the personal information holding server 170 executes a process for registering the target user as a user of the service (in other words, a process related to issuing a commuter pass to the user) based on the request from the front-end server 110 in S209. As a specific example, the personal information holding server 170 may register the user as a user of the commuter pass by associating various information related to the use of the commuter pass (for example, the start date of use, the expiration date, etc.) with the second identification information corresponding to the user's account.

[0100] In S213, in response to the request from the front-end server 110 in S209, the personal information holding server 170 notifies the target user that he / she has been registered as a user of the service (in other words, that the issuance of the commuter pass has been completed). Furthermore, when the target user becomes able to use the service, the personal information holding server 170 may notify the terminal device 210 of the target user of the start of use of the service in S215. As a specific example, when a commuter pass becomes valid upon the arrival of the use start date of the commuter pass, the personal information holding server 170 may notify the terminal device 210 of the target user of the start of use of the commuter pass.

[0101] As described above, in the information processing system 1 according to the present embodiment, personal information used to provide a service to a user is stored in the personal information holding server 170, and the personal information stored in the personal information holding server 170 is used when providing a service to the user. That is, when using a service, the user does not necessarily need to hold the IC card 230 used for personal authentication of the user to the personal information management server 190, such as a My Number card. In particular, for media used for authentication based on personal information protected by high security, such as a My Number card, there is a high risk of loss, and the procedures required for reissuance are complicated, which tends to be a burden on the user. In contrast, according to the information processing system 1 according to the present embodiment, as described above, since the user does not necessarily need to hold the IC card 230 when using a service, it is expected to have the effect of preventing the risk of loss of the IC card 230 and the burden on the user. In addition, the personal information stored in the personal information holding server 170 can be limited to information used for providing services to the user, and the use of the information can be limited to the determination process within the personal information holding server 170. This configuration is expected to have the effect of preventing the occurrence of the risk of the user's personal information being used illegally by a malicious third party.

[0102] Above, with reference to Figure 6, an example of the process flow for providing a service using a user's personal information has been explained, focusing in particular on the case where a service is provided to a user upon receipt of an application via a network.

[0103] (Service provision example 2: Provision of services associated with reading IC cards) Next, with reference to Fig. 7, another example of the process flow relating to the provision of a service using personal information of a user will be described, focusing in particular on the case where a service is provided to a user in response to reading of IC card 270. Fig. 7 shows an example of the process flow when a discount is applied to the fare for use of a public transport facility such as a bus or train for residents of a specified area when electronic payment is made using IC card 270.

[0104] In S251, the reading device 250 detects the IC card 270 located within a predetermined detection range (detection range of the reading unit 252) and acquires the second identification information stored in the IC card 270. As a specific example, the reading device 250 may acquire the second identification information stored in the IC chip of the IC card 270 located within the detection range by establishing short-range wireless communication, typically non-contact communication, with the IC chip. In S253, the reading device 250 notifies the personal information holding server 170 of the second identification information read from the IC card 270, and requests the personal information holding server 170 to determine whether the user who owns the IC card 270 is a resident of a specified area.

[0105] In S255, in response to a request from the reading device 250, the personal information holding server 170 determines whether the target user is a resident of a specified area based on the personal information (address) associated with the second identification information also notified. In S257, the personal information holding server 170 notifies the result of the determination in S255 (i.e., the result of the determination as to whether the target user is a resident of the specified area) to the reading device 250. For the sake of convenience, in the following description, it is assumed that the target user is determined to be a resident of the specified area.

[0106] In S259, the reading device 250 again recognizes the IC card 270. At this time, if the reading device 250 does not detect the IC card 270, the reading device 250 may notify the user in a predetermined output mode of notification information that prompts the user to perform an operation to hold the IC card 270 in a predetermined detection range. When the reading device 250 recognizes the IC card 270 in S259, in S261, it reads the information related to electronic payment stored in the IC card 270, and executes processing related to the payment of the fee based on the determination result notified in S257. As a specific example, when the reading device 250 recognizes that the target user is a resident of a specified area based on the determination result notified in S257, it may apply a discount to the fee to be paid. The content of the process related to the payment of the fee is not particularly limited. As a specific example, the reading device 250 may request a process related to the payment of the fee to a predetermined business server 130. As another example, the reading device 250 itself may perform substantial processing related to the payment of the fee (for example, updating the balance of electronic money charged to the IC card 270, etc.).

[0107] 7, the reading device 250 recognizes the IC card 270 (in other words, establishes contactless communication with the IC chip) at two occasions shown as S251 and S259. After that, the reading device 250 uses the information read from the IC card 270 at each of S251 and S259 for a procedure to be executed immediately after (processing related to personal information determination shown as S253 to S257, and processing related to payment shown as S261). With this configuration, the reading device 250 can also limit the information read from the IC card 270 in conjunction with recognition of the IC card 270 to information to be used for a procedure to be executed immediately after the recognition.

[0108] As described above, the reading device 250 is not particularly limited in the manner of recognizing the IC card 270, so long as it is capable of recognizing the IC card 270 immediately before each procedure that is executed sequentially and reading information to be used in the procedure from the IC card 270. As a specific example, a so-called touch operation may be performed in which the IC card 270 is held over the reading unit 252 (e.g., a sensor surface for contactless communication) where the reading device 250 recognizes the IC card 270 for each procedure executed by the reading device 250. In this case, notification information that prompts the user to perform a touch operation of the IC card 270 over the reading unit 252 may be notified in a predetermined manner each time the reading device 250 recognizes the IC card 270. As another example, with IC card 270 held close to reading unit 252, reading device 250 may recognize IC card 270 (in other words, establish non-contact communication with IC card 270) each time a procedure is executed. In this case, notification information may be notified in a predetermined manner to prompt the user to maintain the state in which IC card 270 is held close to reading unit 252 until execution of a series of procedures by reading device 250 is completed.

[0109] In the example shown in Fig. 7, IC card 270 used for electronic payment and the like is used when the user receives the provision of a service. That is, in the example shown in Fig. 7, similar to the example described with reference to Fig. 6, the user does not necessarily need to hold IC card 230, such as a My Number card, used for authenticating the user to personal information management server 190, when using the service. Therefore, similar to the example shown in Fig. 6, it is expected to have the effect of preventing the risk associated with loss of IC card 230 and the burden on the user. 7, the personal information stored in the personal information holding server 170 can be limited to information used for providing services to the user, and the use of the information can be limited to the determination process within the personal information holding server 170. That is, such a configuration is expected to have the effect of preventing the occurrence of the risk of a malicious third party using the user's personal information illegally.

[0110] Above, with reference to FIG. 7, another example of the process flow for providing a service using a user's personal information has been described, focusing in particular on the case where a service is provided to a user upon reading IC card 270.

[0111] <Example> As an example, a specific example of a service that can be realized by applying the information processing system 1 according to this embodiment will be described.

[0112] (Applying discounts to local residents) As exemplified in the explanation of the process with reference to Figures 4 to 7, the information processing system 1 according to this embodiment can provide additional services, such as discounts on the usage fees of various services, to residents living in a specific area. In this case, as described above, information on the address of the target user is stored in the personal information holding server 170 as the personal information of the user, and the information on the address is used when the service is provided.

[0113] (Restrictions on the sale of products intended for adults to minors) According to the information processing system 1 of this embodiment, it is possible to prevent the occurrence of a situation where products such as alcohol and tobacco, which are sold to adults, are sold to minors. In this case, information on age (e.g., information that can identify age, such as date of birth) is stored in the personal information holding server 170 as personal information of the target user, and based on the information on age, it is determined whether the target user's age is below a threshold value (e.g., whether the user is a minor) when the service is provided. Then, when it is determined that the target user's age is below the threshold value, control (e.g., issuing a warning or suppressing payment processing) that restricts processing related to the sale of a specific product to the user may be applied. In addition, when providing services, not limited to goods, targeted at adults, it is also possible to prevent the provision of such services to minors by using a mechanism similar to that described above. In addition, services may be provided according to the age of the user. As a specific example, it is possible to provide additional services such as discounts on the usage fees of various services to elderly people. In this case, too, it is only necessary to determine whether or not the target user satisfies the conditions based on information on age as personal information of the target user, thereby controlling whether or not to provide the additional services described above to the user.

[0114] (Provision of gender-specific services) As an example, a ladies' day or a women-only car may be used, and services may be provided according to the gender of the user. According to the information processing system 1 of this embodiment, it is possible to provide such services according to the gender of the user in a more suitable manner. In this case, information on the gender of the target user is stored in the personal information holding server 170 as personal information of the target user, and it is possible to determine whether the target user is female (or male) or not based on the information on the gender when the service is provided. This makes it possible to realize, for example, restriction of entry to some sections, restriction of sale of a specific product or application of a discount on the price of the sale of the product, and restriction of provision of a specific service or application of a discount on the price of the service, etc., according to the gender of the target user.

[0115] (supplement) Of course, the above is merely an example, and does not limit the application of the information processing system 1 according to the present embodiment. In other words, the information processing system 1 according to the present embodiment can be applied under circumstances in which various services (including sales of products, etc.) are provided according to the attributes of the user by using the personal information of the user. Of course, the type of personal information to be used is not particularly limited as long as it indicates the attributes of the target user. As a specific example, even personal information set as information about the individual user according to the situation at the time, such as whether the user is a student or not, the user's occupation, etc., can be used by the information processing system 1 according to the present embodiment to realize various controls.

[0116] <Conclusion> As described above, the information processing system according to the present embodiment includes a first information processing device that stores personal information used to provide a service to a user, and a second information processing device that controls processing related to the provision of the service to the user according to the personal information stored in the first information processing device. The first information processing device includes a first acquisition unit, a storage unit, and a determination unit. The first acquisition unit acquires at least a part of personal information from a series of personal information related to an individual to whom a first identification information is assigned. The storage unit stores the acquired personal information in association with a second identification information related to the provision of a predetermined service. The determination unit receives a designation of a condition related to the personal information and determines whether or not the personal information associated with the second identification information satisfies the condition. The second information processing device also includes a second acquisition unit and a control unit. The second acquisition unit acquires a result of the determination. The control unit controls processing related to the provision of the service according to the personal information based on the acquired result of the determination.

[0117] With the above-described configuration, by using the user's personal information when providing services to the user, it is possible to provide services to the user in a more suitable manner according to the user's attributes, such as providing additional services to residents of a specific area. In particular, the information processing system according to this embodiment enables a user to receive services according to his / her attributes without going through cumbersome procedures such as inputting his / her personal information. Furthermore, the information processing system according to the present embodiment makes it possible to use, for example, highly reliable personal information managed by a public institution or the like to determine the attributes of a user when providing a service to the user. Therefore, the information processing system according to the present embodiment makes it possible to provide services that require higher reliability. Furthermore, according to the information processing system of this embodiment, when a service using the user's personal information is provided to the user, the user does not need to hold a medium used for authentication based on the personal information protected by high security, such as a My Number card, etc. Therefore, according to the information processing system of this embodiment, it is expected to be effective in preventing the risk of losing the medium and the burden on the user. As described above, according to the information processing system according to this embodiment, it is possible to realize more suitable utilization of a user's personal information for the provision of services to the user.

[0118] In the above, the description has been given mainly focusing on the case where a so-called IC card is used when providing a service to a user, but this does not necessarily limit the application of the information processing system 1 according to the present embodiment. As a specific example, a so-called magnetic stripe card or the like may be used, and the identification information assigned to the magnetic stripe card may be used as second identification information that is associated with and stored with personal information.

[0119] Furthermore, the information used as the second identification information is not limited to identification information assigned to a medium used to provide a service to a user, such as an IC card. In other words, any identification information capable of uniquely identifying a user when providing a service to the user can be used as the second identification information. As a specific example, identification information (e.g., an ID, etc.) used to identify an account created to provide a specific service to a user may be used as the above-mentioned second identification information.

[0120] In the above description, the personal information management server 190 is mainly assumed to be a server related to an institution that manages personal information of the user in association with identification information individually assigned to each user, such as a My Number, but this does not necessarily limit the application of the information processing system 1 according to this embodiment. In other words, the source of the personal information stored in the personal information holding server 170 to be used for providing services to the user is not particularly limited as long as the server manages pre-registered personal information and allows access to at least a part of the personal information based on a predetermined authentication. As a specific example, personal information managed in association with a medium such as a credit card or a driver's license may be stored in the personal information holding server 170 based on authentication of the individual user who used the medium, and used to provide services to the user. In other words, in this case, the information used as the first identification information may also be appropriately changed depending on the entity that manages the personal information used for providing services to the user.

[0121] In addition, the entity that stores the personal information used to provide the service to the user is not necessarily limited to a so-called server such as the above-mentioned personal information holding server 170. As a specific example, a terminal device 210 such as a smartphone used by a user may hold the personal information of the user used to provide the service to the user by storing it in a predetermined storage area. As another example, the personal information of the user used to provide the service to the user may be stored in a recording medium such as an IC card used by the user to receive the service.

[0122] In the above-described embodiment, the personal information holding server 170 judges whether the personal information of the user satisfies the desired condition based on the personal information held by storing the personal information in advance in the storage unit 174. On the other hand, if the personal information holding server 170 is capable of making the judgment, the personal information of the target user may not necessarily be held. As a specific example, when the personal information holding server 170 judges whether the personal information of the target user satisfies the desired condition, the personal information holding server 170 may access the personal information management server 190, view the personal information of the target user, and judge whether the personal information satisfies the condition. In this case, the personal information holding server 170 may hold an access token acquired according to the authentication result of the target user as information for accessing the personal information management server 190. In this case, the personal information holding server 170 may execute a procedure related to the authentication of the target user again when it is necessary to reissue the access token. [Explanation of symbols]

[0123] 1 Information processing system, 110 Front-end server, 130 Business server, 150 Account management server, 170 Personal information storage server, 171 Communication unit, 172 Personal information management unit, 173 Judgment unit, 174 Memory unit, 190 Personal information management server, 191 Communication unit, 192 Authentication processing unit, 193 Access control unit, 194 Memory unit, 210 Terminal device, 211 Communication unit, 212 Reading unit, 213 Input unit, 214 Output unit, 215 Control unit, 216 Memory unit, 250 Reading device, 251 Communication unit, 252 Reading unit, 253 Control unit, 254 Memory unit

Claims

1. an acquisition unit that acquires at least a part of a set of personal information related to an individual to whom a first identification information is assigned, the personal information being used to provide a predetermined service; a storage unit that stores the acquired personal information in advance in association with second identification information related to the provision of the service; a determination unit that, when providing the service, receives a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition; Equipped with the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, the determination unit, when a first communication is established between the second recording medium and the reading device, receives a condition related to the personal information from the reading device and determines whether the personal information associated with the second identification information satisfies the condition; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. Information processing device.

2. The acquisition unit is requesting a server that manages a series of personal information relating to the individual to authenticate the individual based on the first identification information; obtaining at least a part of the set of personal information from the server according to a result of the authentication; The information processing device according to claim 1 .

3. The server is a server related to a public institution involved in managing a series of personal information relating to the individual. The information processing device according to claim 2 .

4. The first identification information is an identification information issued by a public institution involved in managing a series of personal information relating to the individual.

4. The information processing device according to claim 1.

5. the acquiring unit acquires at least a part of the personal information from a series of personal information related to the individual to whom the first identification information is assigned, in response to a result of reading the first recording medium by a terminal device connected via a network; The information processing device according to any one of claims 1 to 4.

6. an acquisition unit that acquires, when providing a predetermined service, a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned, the personal information being stored in advance in association with a second identification information relating to the provision of the service, satisfies a predetermined condition relating to the provision of the service; A control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination; Equipped with the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, the acquiring unit acquires a result of the determination based on the second identification information when a first communication is established between the second recording medium and the reading device; when a second communication is established between the second recording medium and the reading device after the first communication is established, the control unit controls a process related to the provision of the service according to the personal information based on the acquired result of the determination, and limits information read from the second recording medium when providing the service to information used for providing the service. Information processing device.

7. the acquisition unit, when the first communication is established, accesses a first server and acquires a result of the determination from the first server; When the second communication is established, the control unit accesses a second server different from the first server, and requests the second server to control a process related to the provision of the service corresponding to the personal information based on the acquired result of the determination. The information processing device according to claim 6.

8. The personal information stored in association with the second identification information includes information regarding at least one of the address of the individual, the age of the individual, and the sex of the individual; 8. The information processing device according to claim 6 or 7.

9. The personal information stored in association with the second identification information includes at least information regarding the address of the individual; The acquisition unit acquires a result of a determination as to whether or not the address of the individual is included in a predetermined area, The control unit performs control so that a service according to the address of the individual is applied when the address of the individual is included in the predetermined area. The information processing device according to any one of claims 6 to 8.

10. The personal information stored in association with the second identification information includes at least information regarding the age of the individual; The acquisition unit acquires a result of a determination as to whether or not the age of the individual is less than a threshold value, The control unit controls so that, when the age of the individual is less than a threshold value, provision of services according to the age of the individual is restricted. The information processing device according to any one of claims 6 to 9.

11. A first information processing device and a second information processing device connected via a network, The first information processing device, a first acquisition unit that acquires at least a part of a set of personal information related to an individual to whom first identification information is assigned, the personal information being used to provide a predetermined service; a storage unit that stores the acquired personal information in advance in association with second identification information related to the provision of the service; a determination unit that, when providing the service, receives a condition related to the personal information and determines whether the personal information associated with the second identification information satisfies the condition; Equipped with The second information processing device, A second acquisition unit that acquires a result of the determination when the service is provided; A control unit that controls a process related to the provision of the service according to the personal information based on the acquired result of the determination; Equipped with the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, the second acquisition unit acquires a result of the determination based on the second identification information when a first communication is established between the second recording medium and the reading device; when a second communication is established between the second recording medium and the reading device after the first communication is established, the control unit controls a process related to the provision of the service according to the personal information based on the acquired result of the determination, and limits information read from the second recording medium when providing the service to information used for providing the service. Information processing system.

12. The computer obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service; storing the acquired personal information in advance in association with second identification information related to the provision of the service; When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition; Including, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a condition related to the personal information is specified by the reading device, and a determination is made as to whether or not the personal information associated with the second identification information satisfies the condition; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. Information processing methods.

13. The computer When providing a predetermined service, acquiring a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned, the personal information being stored in advance in association with a second identification information relating to the provision of the service, satisfies a predetermined condition relating to the provision of the service; Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination; Including, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. Information processing methods.

14. A system including a first information processing device and a second information processing device connected via a network, The first information processing device acquires at least a part of personal information used for providing a predetermined service from a set of personal information related to an individual to whom first identification information is assigned; The first information processing device pre-stores the acquired personal information in association with second identification information related to the provision of a predetermined service; The first information processing device, when providing the service, receives a designation of a condition related to the personal information and determines whether or not the personal information associated with the second identification information satisfies the condition; The second information processing device acquires a result of the determination when providing the service; and The second information processing device controls a process related to the provision of the service according to the personal information based on the acquired result of the determination; Including, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. Information processing methods.

15. On the computer, obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service; storing the acquired personal information in advance in association with second identification information related to the provision of the service; When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition; Run the command, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a condition related to the personal information is specified by the reading device, and a determination is made as to whether or not the personal information associated with the second identification information satisfies the condition; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service according to the personal information is controlled based on a result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. program.

16. On the computer, When providing a predetermined service, acquiring a result of a determination as to whether or not at least a part of a set of personal information relating to an individual to whom a first identification information is assigned, the personal information being stored in advance in association with a second identification information relating to the provision of the service, satisfies a predetermined condition relating to the provision of the service; Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination; Run the command, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. program.

17. A system including a first information processing device and a second information processing device connected via a network, The first information processing device, obtaining at least a portion of a set of personal information relating to an individual to whom a first identification has been assigned, the personal information being used to provide a predetermined service; storing the acquired personal information in advance in association with second identification information related to the provision of a predetermined service; When providing the service, receiving a condition related to the personal information and determining whether or not the personal information associated with the second identification information satisfies the condition; Run the command, The second information processing device, acquiring a result of the determination when providing the service; Controlling a process related to the provision of the service according to the personal information based on the acquired result of the determination; Run the command, the first identification information is information associated with a first recording medium, the second identification information is identification information assigned to a second recording medium that is different from a first recording medium on which the first identification information is recorded and is used to provide the service; the second recording medium is an IC chip capable of communicating with a reading device by non-contact communication, When a first communication is established between the second recording medium and the reading device, a result of the determination is obtained based on the second identification information; When a second communication is established between the second recording medium and the reading device after the first communication is established, a process related to the provision of the service corresponding to the personal information is controlled based on the acquired result of the determination, and information read from the second recording medium when providing the service is limited to information used for providing the service. program.

Images