Personal information management device, program, and personal information management system

Abstract

To provide a personal information management device, a terminal and a terminal program, improving a convenience regarding reliable personal information.SOLUTION: A personal information management server 1 is communicatively connected to each of a user terminal 4 and provider servers 9 of providers that provide services to a user of the user terminal 4. The personal information management server includes a personal information DB 8 storing personal information of the user whose identity has been confirmed through identity confirmation processing using a personal identification document conducted between itself and the user terminal 4 and who has been granted an authentication from a first authentication station. The personal information management server confirms an expiry date of the personal identification document stored in the personal information DB 8 as one item of the personal information, and stops providing the personal information of the user when having reached the expiry date to the providers.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to a personal information management device. , P Program and personal information management system Regarding. [Background technology]

[0002] Conventionally, a person who wants to use a certain service on the Internet first accesses the service's website, registers as a user, registers necessary information including personal information such as the user's name, and sets a password. The user can then use the service by inputting into a terminal the user ID and password that the user has set or that have been assigned by the system. This mechanism of registering various information required for each service and using it is common.

[0003] However, it is troublesome for users to register information for each service. Therefore, the present invention provides an attribute information disclosure system including a service providing device that provides a service via a network, a user device that uses a service provided by the service providing device, and an attribute information management device that manages personal attribute information composed of information on a plurality of attribute items related to a user of the user device, and controls disclosure of personal attribute information from the attribute information management device to the service providing device, the user device including: a setting means for setting, for each service providing device that is permitted to disclose personal attribute information, a permission attribute item for identifying personal attribute information that is permitted to be disclosed, to the attribute information management device; and a response reply means for replying, when a disclosure confirmation request for confirmation as to whether or not to permit disclosure of the permission attribute item is received from the attribute information management device, a response indicating whether or not to permit disclosure to the service providing device, the attribute information management device includes a disclosure policy management means for managing, for each user information that identifies a user of each user device, service providing device information for identifying a service providing device that is permitted to disclose personal attribute information and a disclosure policy including the permission attribute item, based on the setting received from the user of the user device. a disclosure policy determination means for, when receiving a personal attribute information request including user information of a service requester from a service providing device, referring to a disclosure policy managed by the disclosure policy management means, determining and acquiring attribute items that match with the attribute items targeted by the personal attribute information request among the permission attribute items corresponding to both the service providing device information for identifying the service providing device that is the sender of the personal attribute information request and the user information included in the personal attribute information request, by referring to a disclosure policy managed by the disclosure policy management means, a disclosure confirmation request transmission means for transmitting a disclosure confirmation request to a user device of a user corresponding to the user information of the service requester, requesting confirmation as to whether or not to permit disclosure of personal attribute information corresponding to the permission attribute items acquired by the disclosure policy determination means, and an attribute information providing means for providing the service providing device with personal attribute information corresponding to the permission attribute items based on a reply indicating whether or not to permit disclosure of personal attribute information corresponding to the permission attribute items returned from the user device in response to the disclosure confirmation request transmitted by the disclosure confirmation request transmission means (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2009-199573 A Summary of the Invention [Problem to be solved by the invention]

[0005] The personal attribute information provided by the system described in Patent Document 1 includes, for example, email address, address, gender, hobbies, etc., of the personal attribute information registrant. However, this information may change. For example, if the personal attribute information registrant moves, their address and telephone number may change, and their name may change due to marriage, etc. However, Patent Document 1 is based on the assumption that the personal attribute information is up to date. Furthermore, documents used to verify a person's identity, such as a My Number card or a driver's license, are set with an expiration date, and the expiration date is updated periodically. Users' personal information is the basis for a variety of services. Therefore, it is necessary for the information to be reliable. In particular, when the service provider is, for example, a financial institution, a high degree of reliability is required for the information they handle.

[0006] SUMMARY OF THE PRESENT EMBODIMENTS An object of the present invention is to provide a personal information management device, a terminal, and a terminal program that improve the convenience of managing reliable personal information. [Means for solving the problem]

[0007] The present invention solves the above problems by the following solving means. Note that, for ease of understanding, the following description will be given with reference numerals corresponding to the embodiments of the present invention, but the present invention is not limited to these. Furthermore, the configurations described with reference numerals may be appropriately improved, and at least a part of the configurations may be replaced with other configurations.

[0008] The first invention is a personal information management device (1) communicatively connected to a user terminal (4) and each of business operators' devices (9) that provide services to a user of the user terminal, the personal information management device comprising: a personal information database (8) that stores personal information of the user whose identity has been verified by a personal identification process using a personal identification document performed with the user terminal and whose identity has been authenticated by a first authentication authority (6); an expiration date confirmation means (12) that confirms the expiration date of the personal information stored in the personal information database as one item of the personal information; and a provision suspension means (16) that suspends provision of the personal information whose expiration date has arrived to each business operator. A second invention is a personal information management device comprising: in the personal information management device (1) of the first invention, an availability memory unit (33) storing availability information regarding whether the personal information can be provided to each business for each user; a usage request receiving means (21) receiving a request to use the personal information from the business device (9); a provision status confirmation means (22) confirming the usage provision status of the personal information that satisfies the usage request received by the usage request receiving means; and a personal information providing means (23) that, when the provision of the personal information has not been stopped, extracts the personal information that satisfies the usage request received by the usage request receiving means from the personal information database (8) by referring to the availability memory unit and transmits the extracted personal information to the business device. A third invention is a personal information management device which, in the personal information management device (1) of the second invention, further includes an item level memory unit (32) which stores each item of the personal information in association with a level indicating importance, and the provision feasibility memory unit (33) further stores the provision feasibility information in association with the level, and when the provision of the personal information is stopped, the personal information providing means (23) refers to the item level memory unit to extract from the personal information database (8) the personal information corresponding to the item at a predetermined level among the items of the personal information related to the use request received by the use request receiving means (21), and transmits the extracted personal information to the business device (9). A fourth invention is a personal information management device (1) of the second or third invention, further comprising a non-provision notification means (23) for notifying the business operator device (9) that the personal information cannot be provided when the personal information providing means (23) does not transmit the personal information. A fifth invention is a personal information management device, comprising: a deadline notification means (13) for notifying the user terminal of the expiration date when the expiration date confirmed by the expiration date confirmation means (12) has not arrived but will arrive within a predetermined period of time in the personal information management device (1) of any of the first to fourth inventions. The sixth invention is a personal information management device according to any one of the first to fifth inventions, further comprising an information confirmation means (14) for confirming a change in the personal information corresponding to the personal identification information from a second authentication authority (7) that authenticates the personal information based on the personal identification document by using the personal identification information of the personal identification document stored as one item of the personal information in the personal information database (8), and the provision suspension means (16) is a personal information management device that, when the information confirmation means confirms the change in the personal information, stops providing the personal information corresponding to the personal identification information in the personal information database to each business operator. A seventh invention is a personal information management device according to the sixth invention, further comprising an operator confirmation memory unit (35) which stores, for each operator, information regarding the necessity of information confirmation using the second authentication authority (7), and a provision possibility memory unit (33) which stores, for each user, provision possibility information regarding the possibility of providing the personal information to each operator, and the information confirmation means (14) refers to the provision possibility memory unit and confirms changes to the personal information associated with the operator for which the necessity of information confirmation stored in the operator confirmation memory unit is necessary. An eighth invention is a personal information management device, comprising a provision suspension notification means (17) for notifying the user terminal (4) of the suspension of provision in any of the personal information management devices (1) of the first to seventh inventions. A ninth invention is a personal information management device comprising: a business operator notification storage unit (35) which stores, for each business operator, information regarding whether or not notification to each business operator is required, in a personal information management device (1) of any of the first to eighth inventions; and a suspended user notification means (17) which, in response to the suspension of provision of the personal information to each business operator by the provision suspension means (16), refers to the business operator notification storage unit and notifies the business operator for which the notification is required of information regarding the suspended user. A tenth invention is a personal information management device, comprising, in any one of the first to ninth inventions, an update request receiving means (25) for receiving an information update request from the user terminal (4), a personal information updating means (25) for updating the personal information database (8) using the personal information of the user included in the information update request received by the update request receiving means, and a suspension lifting means (18) for lifting the suspension of the provision of the personal information of the user in the personal information database updated by the personal information updating means. An eleventh invention is a personal information management device according to the tenth invention, further comprising an authentication request means (25) for requesting the first authentication authority (6) to authenticate the personal information of the user included in the information update request received by the update request receiving means (25), and the personal information update means (25) updates the personal information database (8) using the personal information authenticated by the first authentication authority requested by the authentication request means. A twelfth invention is a personal information management device which is any of the first to eleventh inventions, further comprising a withdrawal notification receiving means (26) for receiving a withdrawal notification from the user terminal (4), and the provision suspension means (16) suspends the provision of the personal information to each business operator when the withdrawal notification receiving means receives the withdrawal notification. A thirteenth invention is a terminal (4) communicatively connected to a personal information management device (1) that manages personal information of a user, the terminal comprising: a notification receiving means (42) for receiving a notification relating to the expiration date of an identification document; an information output means (43) for outputting information based on a notification received by the notification receiving means; and an update request sending means (45) for sending an information update request including the accepted new personal information to the personal information management device when input of the new personal information is accepted in accordance with the information output by the information output means. The fourteenth invention is a terminal program (51a) that causes a computer, which is a terminal (4) communicatively connected to a personal information management device (1) that manages personal information of a user, to function as a notification receiving means for receiving a notification related to the expiration date of an identification document, an information output means for outputting information based on a notification received by the notification receiving means, and an update request sending means for sending an information update request including the accepted new personal information to the personal information management device when input of the new personal information is accepted in accordance with the information output by the information output means. Effect of the Invention

[0009] According to the present invention, it is possible to provide a personal information management device, a terminal, and a terminal program that improve the convenience of managing reliable personal information. [Brief description of the drawings]

[0010] [Figure 1] 1 is a diagram showing an overall configuration of a personal information management system according to an embodiment of the present invention; [Diagram 2] FIG. 2 is a diagram showing functional blocks of a personal information management server according to the embodiment; [Diagram 3] 4 is a diagram illustrating an example of a storage unit of a personal information management server according to the embodiment; [Figure 4] 4 is a diagram illustrating an example of a storage unit of a personal information management server according to the embodiment; [Diagram 5] FIG. 2 is a diagram showing functional blocks of a user terminal according to the present embodiment. [Figure 6] FIG. 4 is a diagram showing example items of a personal information DB according to the embodiment. [Figure 7] 1 is a diagram for explaining a process related to maintenance based on the expiration date of an identification document in the personal information management system according to the embodiment. FIG. [Figure 8] 13 is a flowchart showing an expiration date confirmation process of the personal information management server according to the embodiment; [Figure 9] 10 is a flowchart showing information provision stop processing of the personal information management server according to the embodiment; [Figure 10A] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 10B] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 11] 10 is a flowchart showing an update request process of a user terminal according to the present embodiment. [Figure 12] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 13] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 14] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 15] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Figure 16] 10 is a flowchart showing an information update process of the personal information management server according to the embodiment; [Figure 17] 10 is a flowchart showing an information update process of the personal information management server according to the embodiment; [Figure 18] 1 is a diagram for explaining a process related to maintenance using a certification authority of an identification document in the personal information management system according to the present embodiment. FIG. [Figure 19] 13 is a flowchart showing an information change confirmation process of the personal information management server according to the embodiment; [Figure 20] FIG. 2 is a diagram for explaining a process related to a transaction in the personal information management system according to the embodiment. [Figure 21]10 is a flowchart showing an information use confirmation process of the personal information management server according to the embodiment; [Figure 22] 10 is a flowchart showing an information use confirmation process of the personal information management server according to the embodiment; [Figure 23] 11 is a diagram for explaining a process relating to withdrawal in the personal information management system according to the embodiment. FIG. [Figure 24] FIG. 11 is a diagram showing a display example of a user terminal according to the embodiment. [Diagram 25] 10 is a flowchart showing a withdrawal process of the personal information management server according to the embodiment; [Figure 26] 13 is a flowchart showing an expiration date confirmation process of the personal information management server according to a modified embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Note that this is merely an example, and the technical scope of the present invention is not limited to this example.

[0012] (Embodiment) FIG. 1 is a diagram showing the overall configuration of a personal information management system 100 according to this embodiment. The personal information management system 100 is a platform system related to personal information in which a personal information management server 1 (personal information management device) performs identity verification of users on behalf of each business operator, thereby reducing the input burden on users and each business operator and managing reliable personal information. The personal information management system 100 includes a personal information management server 1, a biometric authentication server 3, a user terminal 4 (terminal), a first authentication server 6, a second authentication server 7, a personal information DB (database) 8, and a business server 9 (business device). The personal information management server 1, the biometric authentication server 3, the first authentication server 6, the second authentication server 7, the personal information DB 8, and the business server 9 are communicatively connected via a communication network N. The user terminal 4 is connectable to the communication network N via a base station R.

[0013] The personal information management server 1 is owned by, for example, a company that specializes in managing personal information and is different from each business. The personal information management server 1 performs identity verification processing of the user on behalf of each business, and performs part of the identity authentication processing on behalf of the business. The personal information management server 1 also registers the personal information of the user acquired in the identity verification processing in the personal information DB8. Furthermore, the personal information management server 1 manages the personal information registered in the personal information DB8.

[0014] Here, the difference between identity confirmation and identity authentication in this specification will be explained. Identity confirmation refers to confirmation using an official certificate such as a driver's license or a My Number card. On the other hand, identity authentication refers to confirmation performed at the time of a transaction or the like when identity confirmation has already been completed, in order to prevent identity theft, etc.

[0015] The biometric authentication server 3 is a server used to verify the identity of a user by using a facial image (biometric information) of the user acquired during identity verification processing or update request processing and a facial photograph image on an identity verification document. Examples of identity verification documents include a My Number card and a driver's license. The biometric authentication server 3 verifies whether or not the user is the same person by using a facial image matching program that calculates the degree of match between the facial image and the facial photograph image as a score. The biometric authentication server 3 includes a control unit, a storage unit, a communication interface unit, and the like, which are not shown in the figure.

[0016] The user terminal 4 is a terminal used by a user who wants to use a service provided by each operator. The user terminal 4 is, for example, a mobile phone that also has computer functions, such as a smartphone. The user terminal 4 may also be a tablet, a personal computer (PC), or the like.

[0017] The first authentication server 6 is a server of a first certification authority (certification authority) that authenticates personal information of a user confirmed by identity verification processing. The first certification authority is, for example, a third-party certification authority that assigns time stamps and issues digital certificates. The first authentication server 6 includes a control unit, a storage unit, a communication interface unit, etc., which are not shown.

[0018] The second authentication server 7 is a server of the second authentication authority used to verify the existence of the identity document obtained from the user in the process of identity verification processing or renewal request processing. In this example, the identity document is registered in the second authentication authority with identity identification information and password information associated with each other. If the identity document is a My Number card, the identity identification information is the My Number, and if the identity document is a driver's license, the identity identification information is the license number. The password is, for example, an 8-digit number determined and registered by the user when the identity document is issued to the user. If the identity verification document is a My Number card, the second authentication authority corresponds to a server of the Japan Agency for Local Government Information Systems (J-LIS), and if the identity verification document is a driver's license, the second authentication authority corresponds to a server of a system such as the National Police Agency that manages driver's license information. As described above, the second authentication server 7 has an information DB that stores identity identification information and password information in association with each other. The second authentication server 7 also includes a control unit, a storage unit, a communication interface unit, etc., which are not shown in the figure.

[0019] The personal information DB8 is a database that stores personal information of users managed by the personal information management server 1. As shown in Fig. 1, the personal information DB8 may be independent of the personal information management server 1, but may be, for example, in a storage unit of the personal information management server 1. The personal information DB8 may also be a cloud.

[0020] The business operator server 9 is, for example, a server managed by each business operator. The business operator server 9 performs processing at each business operator. In the example of FIG. 1, the device managed by business operator A is described as business operator server 9A, and the device managed by business operator B is described as business operator server 9B, but this is just an example. In the following explanation, when the business operator is not specified, it will be simply described as the business operator server 9. If the business operator is, for example, a bank, the business operator server 9 is a server that performs transaction processing such as account opening, transfer, and balance inquiry. Although not shown, the business operator server 9 includes a control unit, a memory unit, a communication interface unit, etc.

[0021] The base station R is a base station for wireless communication, and relays communication between the user terminal 4 and the personal information management server 1 and the carrier server 9. The base station R is, for example, a base station for a wireless LAN (Local Area Network) or a base station for a mobile terminal communication network of a carrier. The communication network N is a network between various servers or between various servers and the base station R, and is an Internet line, a mobile terminal communication network, or the like.

[0022] Next, the functional configuration of the personal information management server 1 will be described. FIG. 2 is a diagram showing functional blocks of the personal information management server 1 according to this embodiment. 3 and 4 are diagrams showing examples of the storage unit 30 of the personal information management server 1 according to this embodiment.

[0023] The personal information management server 1 shown in FIG. The control unit 10 is a CPU (Central Processing Unit) that controls the entire personal information management server 1. The control unit 10 appropriately reads and executes an operating system (OS) and various application programs stored in the storage unit 30, thereby cooperating with the above-mentioned hardware to realize various functions. The control unit 10 includes an information confirmation unit 11, an information provision processing unit 15, a usage processing unit 20, an update processing unit 25 (update request receiving means, personal information update means, authentication request means), and a withdrawal processing unit 26 (withdrawal notification receiving means).

[0024] The information confirmation unit 11 periodically performs a process of confirming the personal information registered in the personal information DB 8. When the personal information that has been confirmed by the identity confirmation process the first time is registered in the personal information DB 8, even if the personal information is changed after that, the personal information management server 1 does not know of the change unless the user takes action, for example. Therefore, the information is confirmed at regular intervals, for example, monthly. The information confirmation unit 11 includes an expiration date confirmation unit 12 (expiration date confirmation means), an expiration date notification unit 13 (expiration date notification means), and an inquiry confirmation unit 14 (information confirmation means).

[0025] The expiration date confirmation unit 12 confirms the expiration date written on the identity verification document registered in the personal information DB 8. If the identity verification document is, for example, a My Number card, the expiration date is the 10th birthday (or the 5th birthday) from the date of issue. Also, even if the identity verification document is, for example, a driver's license, it also has an expiration date. When the expiration date confirmed by the expiration date confirmation unit 12 has not arrived but will arrive within a predetermined period of time, the expiration date notification unit 13 notifies the user terminal 4 of the expiration date. If the predetermined period is, for example, three months, the expiration date notification unit 13 can be configured to notify the user terminal 4 if the expiration date will arrive within three months. The reference confirmation unit 14 uses the personal identification information stored in the personal information DB 8 to confirm changes to the personal information corresponding to the personal identification information from the second authentication server 7. Here, the personal identification information is information that identifies the personal identification document, for example, the My Number for a My Number card, or the driver's license number for a driver's license. In addition, the reference confirmation unit 14 may, for example, check the business information storage unit 35 and confirm changes to the personal information only for users associated with businesses that have registered that information confirmation by the second authentication authority is required.

[0026] The information provision processing unit 15 performs processing related to the provision of personal information of the user to the business operator. The information provision processing unit 15 includes a provision stopping unit 16 (provision stopping means), a notification unit 17 (provision stop notification means, stopped user notification means), and a stop release unit 18 (stop release means). When the expiration date confirmation unit 12 confirms that the expiration date has arrived, the provision suspension unit 16 stops providing the personal information of the user whose expiration date has arrived and that has been registered in the personal information DB8 to each business operator. Furthermore, when the reference confirmation unit 14 confirms that the personal information has been changed, the provision suspension unit 16 stops providing the personal information of the user whose change has been confirmed and that has been registered in the personal information DB8 to each business operator. Furthermore, when the withdrawal processing unit 26 receives a notice of withdrawal, the provision suspension unit 16 stops providing the personal information of the contacted user that has been registered in the personal information DB8 to each business operator. Then, the provision stopping unit 16 updates the provision status storage unit 34. More specifically, the provision stopping unit 16 changes the provision status of the user in the provision status storage unit 34 to unprovisionable.

[0027] When the provision of the user's personal information to each business is stopped by the provision stopping unit 16, the notification unit 17 notifies the user terminal 4 of the suspension of provision. This notification of suspension of provision is, for example, a notification that the provision of the user's personal information to each business has been suspended. Furthermore, when the provision stopping unit 16 stops the provision of the user's personal information to each business, the notification unit 17 refers to the business information storage unit 35 and notifies the business server 9 of the business for which notification is required of information about the suspended user. Here, the business that notifies information about the user is a business for which the provision of the user's personal information is possible. When the personal information DB8 is updated based on new personal information, the suspension release unit 18 releases the suspension of the provision of the personal information of the user. More specifically, the suspension release unit 18 changes the provision status of the user in the provision status storage unit 34 to "available."

[0028] The utilization processing unit 20 performs processing in response to a request from a business entity for utilization of the user's personal information. The utilization processing unit 20 includes a utilization request receiving unit 21 (utilization request receiving means), a status checking unit 22 (provision status checking means), and a result processing unit 23 (personal information providing means, provision unavailability notifying means). The usage request receiving unit 21 receives a request to use personal information from the business server 9 so that the business server 9 can perform processing using the user's personal information. The usage request includes, for example, a user ID (IDentifier) ​​and items. The user ID is identification information that identifies a user who wishes to use the personal information. The user ID may be uniquely assigned by the personal information management server 1, or may be the terminal ID of the user terminal 4, etc. The items are name, address, etc. Examples of items will be described later.

[0029] The status confirmation unit 22 confirms the use provision status of the personal information of the target user of the use request. Specifically, the status confirmation unit 22 refers to the provision status storage unit 34 and confirms whether the provision status corresponding to the user ID included in the use request is available or not.

[0030] The result processing unit 23 performs processing according to the confirmation result of the usage provision status of the status confirmation unit 22. If the confirmation result of the usage provision status of the status confirmation unit 22 is "provision possible," the result processing unit 23 refers to the provision possibility storage unit 33 and extracts personal information of the user that satisfies the usage request from the personal information DB 8. Then, the result processing unit 23 transmits the extracted personal information to the business operator server 9. Note that, if the result processing unit 23 cannot extract personal information of the user that satisfies the usage request by referring to the provision possibility storage unit 33, it transmits a message to the business operator server 9 that there is no information to be provided.

[0031] Also, when the confirmation result of the status confirmation unit 22 in the use provision status is not available, the result processing unit 23 refers to the item level storage unit 32 to identify an item of the use request, for example, with a level of 3, and refers to the provision availability storage unit 33 to extract personal information of the user corresponding to the identified item from the personal information DB 8 if the permission level is allowed to be level 3. Then, the extracted personal information is transmitted to the business entity server 9. Here, when the items of the use request do not include, for example, an item with a level of 3, the result processing unit 23 transmits to the business entity server 9 a message that the provision has been stopped and the provision has been impossible. Also, when the items of the use request include, for example, an item with a level of 3, but the permission level is not allowed to be level 3 with reference to the provision availability storage unit 33, the result processing unit 23 transmits to the business entity server 9 a message that the provision has been stopped and the provision has been impossible. Then, the result processing unit 23 notifies the user terminal 4 that a usage request has been made and whether or not information has been provided.

[0032] The update processing unit 25 performs update processing for the personal information registered in the personal information DB8. More specifically, when the update processing unit 25 receives an information update request from the user terminal 4, it performs identity verification again and then updates the personal information DB8 using the personal information of the user included in the information update request. At that time, the update processing unit 25 requests the first authentication server 6 to authenticate the received personal information of the user. Then, the update processing unit 25 updates the personal information DB8 with the personal information authenticated by the first authentication server 6.

[0033] The withdrawal processing unit 26, in response to a communication from the user terminal 4, performs processing for stopping a service provided by a business operator through a system provided by the personal information management server 1. More specifically, when the withdrawal processing unit 26 receives a notice of withdrawal from the user terminal 4, it performs a process of deleting the record of the user from the provision feasibility storage unit 33. The withdrawal processing unit 26 also changes the provision status of the user in the provision status storage unit 34 to unprovisionable. Furthermore, the withdrawal processing unit 26 temporarily stores the user ID and the date and time when the withdrawal was accepted in the storage unit 30, and deletes the record of the user ID registered in the personal information DB 8 at a predetermined timing such as the end of the month.

[0034] The storage unit 30 is a storage area such as a hard disk, a semiconductor memory device, etc. for storing programs, data, etc. required for the control unit 10 to execute various processes. The storage unit 30 includes a program storage unit 31, an item level storage unit 32, a provision availability storage unit 33, a provision status storage unit 34, and a business information storage unit 35 (a business confirmation storage unit, a business notification storage unit). The program storage unit 31 is a storage area for storing various programs. The program storage unit 31 stores, for example, programs for performing various functions executed by the control unit 10 of the personal information management server 1. The programs for performing various functions executed by the control unit 10 of the personal information management server 1 may be configured by multiple programs for each function.

[0035] The item level storage unit 32 stores the levels regarding the handling of personal information in association with each item of the personal information DB 8. An example of the item level storage unit 32 is shown in FIG. The item level storage unit 32 shown in FIG. 3(A) has three security levels, from 1 to 3, with level 1 being the highest level of security. Level 1 requires personal information to be treated as the most confidential information. In the example of FIG. 3(A), level 1 corresponds to items such as biometric information, terminal information, and a combination of a number and expiration date written on an identification document. On the other hand, level 3 corresponds to items with a relatively low level of confidentiality, including items such as purchase history and hobbies and preferences. The item level storage unit 32 shown in FIG. 3(A) is an example, and other items may or may not be included. The levels of each item are also an example.

[0036] The provision permission storage unit 33 stores permission information regarding the provision of personal information to a business operator for each user. An example of the provision permission storage unit 33 is shown in FIG. 3B, the provision permission storage unit 33 stores a user ID, a business ID, and a permission level in association with each other. In this example, the user can set the permission level for each business. The user ID is identification information for identifying a user. The business operator ID is identification information for identifying a business operator. The permission level corresponds to the level of the item level storage unit 32 and is used to specify the items of personal information to be provided. The permission levels "1, 2, 3" indicate that, among the personal information stored in the personal information DB8, the contents of each item corresponding to levels 1, 2, 3 in the item level storage unit 32 can be provided to the business. Also, the permission level "2" indicates that, among the personal information stored in the personal information DB8, the contents of each item corresponding to level 2 in the item level storage unit 32 can be provided to the business. In this case, the personal information management server 1 will not provide the business with the contents of each item corresponding to levels 1 and 3 in the item level storage unit 32. Also, the permission level "None" in the item level storage unit 32 indicates that no personal information will be provided to the business.

[0037] The provision status storage unit 34 stores the provision status of personal information for each user to the business operator. An example of the provision status storage unit 34 is shown in FIG. The provision status storage unit 34 shown in FIG. 4(A) stores a user ID and a provision status in association with each other. The user ID is identification information for identifying a user. The provision status is, for example, flag information indicating whether the service is available or not.

[0038] The business information storage unit 35 is a storage area that stores information related to each business. Fig. 4(B) shows an example of the business information storage unit 35. The business information storage unit 35 stores the business name, whether or not notification is required, and whether or not information confirmation is required, in association with each other, using the business ID as a key. The business operator ID is identification information for identifying a business operator. The notification necessity is, for example, flag information, which indicates whether or not the business entity needs to notify the user when the provision of personal information of the user becomes impossible. The information confirmation necessity indicates whether or not to confirm changes to the user's personal information using the second authentication server 7, and is, for example, flag information. The business operator information storage unit 35 may store various other information related to the business operator.

[0039] The provision availability storage unit 33 and the provision status storage unit 34 are registered in advance in the settings when the user uses the personal information management system 100. The registration method and the like will be described later. Moreover, the business information storage unit 35 is registered in advance in the setting when the business uses the personal information management system 100. The personal information management server 1 provides, for example, a tool for data transmission to the business server 9. Then, the business can register its own information in the personal information management server 1 by transmitting the information to the personal information management server 1 using the tool.

[0040] Additionally, the storage unit 30 may have a user ID storage unit used to manage users. The user ID storage unit is a storage area that stores the user ID of a user who receives a service provided by a business using the personal information management system 100, together with the date and time of the start of use. When a user stops using the service, the user ID may be stored in association with the date and time of withdrawal. The communication interface unit 39 is an interface for performing communication with the personal information DB 8, various servers such as the business server 9, the user terminal 4, and the like via the communication network N.

[0041] Next, the functional configuration of the user terminal 4 will be described. FIG. 5 is a diagram showing functional blocks of the user terminal 4 according to this embodiment. As shown in FIG. 5, the user terminal 4 includes a control unit 40, a storage unit 50, a camera 54, a touch panel display 55, and a communication interface unit 59.

[0042] The control unit 40 is a CPU that controls the entire user terminal 4. The control unit 40 appropriately reads and executes the OS and various application programs stored in the storage unit 50, thereby cooperating with the above-mentioned hardware and executing various functions. The control unit 40 includes a notification processing unit 41, an update request unit 45 (an update request transmission means), and a withdrawal request unit 47. The notification processing unit 41 performs processing related to notifications from the personal information management server 1. The notification processing unit 41 includes a notification receiving unit 42 (notification receiving means) and a notification screen output unit 43 (information output means).

[0043] The notification receiving unit 42 receives various notifications transmitted by the personal information management server 1. For example, the notification receiving unit 42 receives a notification related to the expiration date of an identification document. The notification receiving unit 42 also receives a notification related to the suspension of provision of personal information to a business operator, for example. Furthermore, when personal information is provided to a business operator, the notification receiving unit 42 may receive a notification that personal information has been provided together with the name of the business operator. The notification screen output unit 43 outputs to the touch panel display 55 a notification screen based on the notification received by the notification receiving unit 42 .

[0044] The update request unit 45 performs processing related to updating personal information. First, the update request unit 45 outputs an update screen for updating personal information to the touch panel display 55. Then, the update request unit 45 transmits an information update request including new personal information that has been input as new personal information on the update screen to the personal information management server 1. In addition, the update request unit 45 receives an update result related to the information update request from the personal information management server 1.

[0045] The withdrawal request unit 47 performs processing related to withdrawal from the service provided by the personal information management system 100. First, the withdrawal request unit 47 outputs a withdrawal screen to the touch panel display 55 in accordance with a user's operation. Then, in response to receiving an instruction related to withdrawal, the withdrawal request unit 47 transmits a message related to withdrawal to the personal information management server 1. In addition, when the withdrawal request unit 47 receives, for example, a notice that the withdrawal procedure has been completed from the personal information management server 1, the withdrawal request unit 47 may uninstall an application program related to the service provided by the personal information management system 100, which is stored in the program storage unit 51.

[0046] The storage unit 50 is a storage area such as a semiconductor memory element for storing programs, data, etc. required for the control unit 40 to execute various processes. The storage unit 50 includes a program storage unit 51 . The program storage unit 51 is a storage area for storing various application programs (hereinafter, the application programs are referred to as applications, apps, programs, etc.). The program storage unit 51 stores a personal information processing application 51a (terminal program) and a transaction application 51b.

[0047] The personal information processing application 51a and the transaction application 51b are installed in advance in the user terminal 4, or are downloaded to the user terminal 4 by communicating with an application distribution server (not shown) via the communication network N. The personal information processing application 51a is a program for carrying out various functions executed by the control unit 40 of the user terminal 4. More specifically, the personal information processing application 51a is a program used, for example, when changing personal information for using this service, canceling membership, etc. The transaction application 51b is a program for carrying out various transactions by the business server 9. More specifically, the transaction application 51b is a program used for, for example, financial transactions and payment transactions. Here, one transaction application 51b is illustrated as an example, but the program storage unit 51 may store a plurality of transaction applications that differ for each business.

[0048] The camera 54 is a photographing device. The camera 54 has an in-camera 54a and an out-camera 54b. The in-camera 54a is a camera provided on the side of the touch panel display 55 of the user terminal 4. The out-camera 54b is a camera provided on the back side of the user terminal 4. The touch panel display 55 functions as a display unit constituted by a liquid crystal panel or the like, and also functions as an input unit for inputting various operations using a user's finger. The communication interface unit 59 is an interface for communicating with various servers via the communication network N, and serves as a transmitter and a receiver.

[0049] Next, examples of personal information items stored in the personal information DB 8 will be described. FIG. 6 is a diagram showing example items of the personal information DB 8 according to this embodiment. The personal information DB 8 stores, for example, a name, a date of birth, an address, a document classification, a number, an expiration date, a document image, a face image, and the like, using a user ID as a key. The user ID is identification information for identifying a user. The name is the name of the user. The name (hiragana) may be included as a separate item from the name. The date of birth is the date of birth of the user, and the address is the address of the user. The postal code may be included as a separate item from the address. The address may also be included as a separate item for each division, such as prefecture, city, ward, town, or village.

[0050] The document type is the document used for identity verification, for example, a driver's license, My Number card, or other identification document type. The number is obtained from the document and is personal identification information such as a driver's license number or My Number. The expiration date is the expiration date (year, month, day) information written on the voucher obtained from the voucher. The document image is the image of the identification document itself. The face image is the user's face image itself.

[0051] In addition, the personal information DB 8 also has each item in the item level storage unit 32. The personal information of each user does not need to have data for all items. In addition, each item is stored in association with a date. The date is the most recent registration date. For example, if the date is immediately after identity verification, the date is the registration date of the personal information, and if the information for the item has been updated, the date is the update date.

[0052] The personal information registered in the personal information DB8 is information whose identity has been verified by an identification document when the user's own personal information is registered at the user's request. More specifically, the personal information registered in the personal information DB8 is information whose existence has been verified by transmitting the identity specification information written on the identification document and a password that only the user can know to the second authentication server 7. The personal information registered in the personal information DB8 is information whose authenticity has been verified by the first authentication server 6.

[0053] Here, a computer refers to an information processing device equipped with a control unit, a memory device, etc., and the personal information management server 1, the user terminal 4, the first authentication server 6, the second authentication server 7 and the business server 9 are each information processing devices equipped with a control unit, a memory device, etc., and are included in the concept of a computer.

[0054] Next, the processing of the personal information management system 100 will be described. (Pre-processing) A user who wishes to use a service provided by the personal information management system 100 starts the personal information processing application 51a installed in the user terminal 4 and registers personal information. When the user starts the personal information processing application 51a in the user terminal 4, a menu screen (not shown) is output to the touch panel display 55. When the user selects personal information registration from the menu screen, the control unit 40 of the user terminal 4 outputs a guide screen (not shown) related to personal information registration to the touch panel display 55. Thereafter, the user terminal 4 performs processing according to the guide screen. First, the control unit 40 of the user terminal 4 outputs a selection screen (not shown) for the identification document, and when the user selects one, the control unit 40 controls the outer camera 54b. The user operates the outer camera 54b to shoot an image of the identification document while pointing the outer camera 54b at the user's identification document, and the control unit 40 shoots the image and obtains an image of the identification document. The identification document is, for example, a My Number card, a driver's license, etc.

[0055] Next, the control unit 40 reads the image of the identification document, extracts the text, and outputs a read confirmation screen to the touch panel display 55 for confirming the text of each item such as the name, date of birth, address, My Number, and driver's license number. The control unit 40 also outputs an information input screen to the touch panel display 55 for inputting personal information to be registered in the personal information DB8. The user checks the read contents by looking at the read confirmation screen, and corrects any errors. In addition, the user inputs his / her PIN and personal information according to the information input screen. Thereafter, the control unit 40 controls the user's front camera 54a. When the user performs an operation for photographing with the front camera 54a directed toward the user's face, the control unit 40 photographs the user's face and obtains a facial image. When the series of processes is completed, the control unit 40 transmits the various acquired information to the personal information management server 1 to request identity verification.

[0056] The control unit 10 of the personal information management server 1 that has received a request for identity verification transmits the received image of the identity verification document and the user's own facial image to the biometric authentication server 3. The biometric authentication server 3 that has received both images calculates the degree of match between the two images as a score and transmits the calculated score to the personal information management server 1 as a result of identity, and the control unit 10 of the personal information management server 1 confirms whether or not they are the same person based on the score. Furthermore, the control unit 10 transmits the personal identification information and the password from among the various pieces of information received to the second authentication server 7, and requests confirmation of the existence of the information. Here, the password is, for example, a password consisting of an eight-digit number, which is registered when the personal identification document is issued. The second authentication server 7 confirms whether or not the received information combination is real, based on whether or not the combination is registered in an information DB (not shown) held by the second authentication server 7. The second authentication server 7 transmits the confirmation result to the personal information management server 1, and the control unit 10 of the personal information management server 1 confirms the existence of the information based on the confirmation result. Then, the control unit 10 of the personal information management server 1 determines that the identity has been confirmed if the existence and identity of the same person can be confirmed, and determines that the identity has not been confirmed if either the existence or identity of the same person cannot be confirmed.

[0057] Once the user's identity has been confirmed, the control unit 10 of the personal information management server 1 requests the first authentication server 6 to authenticate the personal information. Then, when the control unit of the first authentication server 6 assigns authentication information to the personal information, the control unit 10 receives the personal information after the authentication information has been assigned from the first authentication server 6, and registers the received personal information in the personal information DB 8. Then, the control unit 10 transmits the result of the request for user identity confirmation to the user terminal 4. When the user terminal 4 receives a result from the personal information management server 1 indicating that the user's identity has been verified and that the personal information has been registered, the user terminal 4 outputs on the touch panel display 55 a message indicating that the user's identity has been verified and that the personal information has been registered.

[0058] The user also registers the scope of provision of personal information for each business. When the user selects business setting registration from a menu screen (not shown) output on the touch panel display 55 of the user terminal 4, a business setting screen is output on the touch panel display 55. The business setting screen is a screen on which it is possible to set whether or not personal information can be provided for each business, and if provision is permitted, the permission level of the information. Once the user has made the settings, the control unit 40 of the user terminal 4 requests registration of the scope of provision by transmitting provision permission information to the personal information management server 1.

[0059] In response to receiving the provision availability information, the control unit 10 of the personal information management server 1 registers the provision availability information in the provision availability storage unit 33. The control unit 10 also sets the provision status in the provision status storage unit 34 to "available." Thereafter, the control unit 10 transmits to the user terminal 4, as a processing result, a message indicating that setting of the provision availability information has been completed. When the user terminal 4 receives the notification that the provision availability information setting has been completed, the user terminal 4 outputs the notification to the touch panel display 55.

[0060] (Information maintenance processing) Next, a process flow relating to information maintenance of user personal information will be described. FIG. 7 is a diagram for explaining the process of maintenance based on the expiration date of the personal identification document in the personal information management system 100 according to this embodiment. FIG. 8 is a flowchart showing the expiration date confirmation process of the personal information management server 1 according to this embodiment. FIG. 9 is a flowchart showing the information provision stop processing of the personal information management server 1 according to this embodiment. 10A and 10B are diagrams showing examples of displays on the user terminal 4 according to this embodiment. FIG. 11 is a flowchart showing the update request process of the user terminal 4 according to this embodiment. 12 to 15 are diagrams showing examples of displays on the user terminal 4 according to this embodiment. 16 and 17 are flowcharts showing the information update process of the personal information management server 1 according to this embodiment.

[0061] For example, in response to the arrival of a predetermined timing, such as once a month, the control unit 10 of the personal information management server 1 starts the process of FIG. In step S1 of FIG. 7 (hereinafter, "step S" will be simply referred to as "S"), the control unit 10 of the personal information management server 1 performs an expiration date confirmation process.

[0062] Here, the expiration date confirmation process will be described with reference to FIG. In S11 of FIG. 8, the control unit 10 (expiration date confirmation unit 12) confirms the expiration dates of all personal information stored in the personal information DB8. In S12, the control unit 10 (expiration date confirmation unit 12) extracts records of personal information whose expiration date has not yet arrived but whose expiration date will arrive after a predetermined period of time. Here, the predetermined period is, for example, three months, and is preferably within the renewal period of the personal identification document. Specifically, if the execution date of the expiration date confirmation process is October 23rd and the predetermined period is three months, the control unit 10 (expiration date confirmation unit 12) extracts records of personal information whose expiration date is before January 23rd of the following year.

[0063] In S13, the control unit 10 (expiration date notification unit 13) notifies the user terminal 4 of the user included in the extracted record of the expiration date. The control unit 40 (notification receiving unit 42, notification screen output unit 43) of the user terminal 4 starts the personal information processing application 51a and outputs the expiration date advance notification screen 70 shown in FIG. 10A to the touch panel display 55. The expiration date advance notification screen 70 includes information that the expiration date of the personal identification document will soon arrive. The expiration date advance notification screen 70 also includes buttons 70a to 70c. Button 70a is for performing information update processing, button 70b is for performing membership cancellation processing, and button 70c is for skipping and doing nothing at the current time.

[0064] When the user selects button 70a, the control unit 40 (update request unit 45) of the user terminal 4 performs an update request process to make an information update request for personal information to the personal information management server 1 (see S2 in FIG. 7 described later). When the user selects button 70b, the control unit 40 (withdrawal request unit 47) of the user terminal 4 performs a withdrawal request by sending a withdrawal request to the personal information management server 1 (see S81 in FIG. 23 described later). When the user selects button 70c, the control unit 40 of the user terminal 4 performs a process to close the deadline advance notice screen 70. In S14, the control unit 10 (expiration date confirmation unit 12) extracts records of personal information whose expiration date has already arrived. In S15, the control unit 10 performs a process of stopping the provision of information.

[0065] Here, the provision information stopping process will be described with reference to FIG. In S21 of FIG. 9, the control unit 10 (provision stopping unit 16) updates the provision status of the provision status storage unit 34 corresponding to the user of the extracted personal information to provision unavailable. In S22, the control unit 10 (provision suspension unit 16) identifies businesses to which the user of the extracted personal information has given permission to provide the personal information, by referring to the provision permission storage unit 33. Then, the control unit 10 (notification unit 17) refers to the business information storage unit 35 among the identified businesses, and notifies the business server 9 of the business for which notification is required of the suspension of provision of the personal information of the user. In S23, the control unit 10 (notification unit 17) notifies the user terminal 4 corresponding to the personal information of the suspension of provision of the personal information to the business server 9, and ends this process.

[0066] In response to receiving a notification of the suspension of provision of personal information from the personal information management server 1, the control unit 40 (notification receiving unit 42, notification screen output unit 43) of the user terminal 4 starts the personal information processing application 51a and outputs a deadline notification screen 71 shown in FIG. 10B to the touch panel display 55. The deadline notification screen 71 includes a message that the validity period of the identification document has expired and that, if the document is to be continued for use, an update registration of the information is to be carried out. The deadline notification screen 71 also includes a button 71a for carrying out an information update process. When the user selects the button 71a, the control unit 40 (update request unit 45) of the user terminal 4 performs an update request process in S2 of FIG. 7, which makes an information update request for personal information to the personal information management server 1.

[0067] Here, the identity update request process of the user terminal 4 will be described with reference to FIG. First, in S101 of FIG. 11, the update request unit 45 outputs a selection screen 60 of the identification document shown in FIG. 12 to the touch panel display 55. The selection screen 60 shown in FIG. 12 is a screen for selecting an individual number card or a driver's license as the identification document. In the example of FIG. 12, the user has selected the selection area 60a of the driver's license. When selected by the user, a check indicating that the selection area 60a has been selected is added to the selection area 60a. In addition, a button 60b for transitioning to the next screen is displayed selectably.

[0068] When the button 60b in FIG. 12 is selected, in S102 in FIG. 11, the renewal request unit 45 outputs a document photographing screen 61 for photographing an identification document shown in FIG. 13 to the touch panel display 55 and activates the outer camera 54b. In the example of FIG. 13, the document photographing screen 61 is displayed and the user is about to photograph the user's driver's license. The user adjusts the position of the user terminal 4 so that the driver's license fits within the frame of the document photographing screen 61. Then, when the user touches the button 61a, which is the shutter button, in S103 in FIG. 11, the renewal request unit 45 controls the outer camera 54b to photograph the driver's license (identification document) and temporarily stores the obtained image of the driver's license in the storage unit 50.

[0069] 11, the renewal request unit 45 reads the image of the driver's license and extracts the text. Then, the renewal request unit 45 outputs a reading confirmation screen (not shown) for confirming the text of each item such as the name, date of birth, address, and license number to the touch panel display 55. The user checks the items that match while looking at the reading confirmation screen. Next, the update request unit 45 outputs an information input screen 62 shown in Fig. 14 to the touch panel display 55. In the example of Fig. 14, input of a name is shown, and characters read from the driver's license and confirmed by the user are shown in a manner that makes it clear. The user uses the information input screen 62 to input personal information to be registered in the personal information DB8.

[0070] 11, the update request unit 45 accepts the selection, outputs, for example, a face image capturing screen 63 shown in FIG. 15 for capturing a face image of the user to the touch panel display 55, and activates the in-camera 54a. Then, the user aligns the position of his / her face with the face frame 63b on the through screen 63a while checking the touch panel display 55. In S106 of FIG. 11, the update request unit 45 performs known face recognition processing on the captured image acquired from the inner camera 54a to detect the eyes. In S107, the update request unit 45 determines whether or not a blink has been detected. If a blink has been detected (S107: YES), the control unit 40 moves the process to S108. On the other hand, if a blink has not been detected (S107: NO), the control unit 40 remains in this process until a blink is detected. In S108, the update request unit 45 temporarily stores in the storage unit 50 the face image captured after the blink is detected.

[0071] When the user completes a series of inputs and performs an operation to proceed to the next process, the update request unit 45 accepts each piece of information that has been confirmed and input in S109 of Fig. 11. Then, the update request unit 45 transmits an information update request including each piece of information to the personal information management server 1. The order of guidance on the guidance screen described above is merely an example, and for example, the order of preceding and following processes may be changed.

[0072] In S3, when the control unit 10 (update processing unit 25) of the personal information management server 1 receives an information update request from the user terminal 4, it performs information update processing. Here, the information update process will be described with reference to FIGS. In S31 of FIG. 16, the control unit 10 of the personal information management server 1 transmits to the biometric authentication server 3 the face image included in the information update request and the face photograph image included in the image of the driver's license. In S32, the control unit of the biometric authentication server 3 compares the received face image with the face photograph image. The control unit of the biometric authentication server 3 performs image matching processing by a face image matching program, and calculates the degree of match between the face image and the face photograph image as, for example, a score. Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a result of identity, and ends this process. In S33, the control unit 10 of the personal information management server 1 transmits the personal identification information and the password included in the information update request to the second authentication server 7. In S34, the control unit of the second authentication server 7 confirms the existence of the received information based on the received information. More specifically, it confirms whether the received information combination is registered in an information DB (not shown) held by the second authentication server 7, thereby confirming whether the information actually exists. Then, the control unit of the second authentication server 7 transmits the confirmation result to the personal information management server 1, and ends this process.

[0073] In S35, the control unit 10 of the personal information management server 1 judges whether or not the presence and identity of the person have been confirmed. For example, when the score received from the biometric authentication server 3 is equal to or greater than a predetermined value and the confirmation result received from the second authentication server 7 is indicative of the presence of the person, the control unit 10 judges that the presence and identity of the person have been confirmed. Here, the score received from the biometric authentication server 3 is expressed by a numerical value ranging from 0 to 100, for example, and the higher the degree of match, the higher the numerical value. If the score is equal to or greater than a predetermined value, the control unit 10 judges that the person is the same. On the other hand, if either the presence or identity of the person has not been confirmed, the control unit 10 judges that the presence and identity of the person have not been confirmed. If the control unit 10 is able to confirm the existence and identity of the person (S35: YES), the control unit 10 shifts the process to S37 in Fig. 17. On the other hand, if the control unit 10 is unable to confirm the existence and identity of the person (S35: NO), the control unit 10 shifts the process to S36.

[0074] If the score received from the biometric authentication server 3 is less than a predetermined value, the process of S33 may not be performed, and the process of S35 may be performed after receiving the process result of S32. Furthermore, the order of the process of S31 and the process of S33 is not limited to this, and the process of S31 may be performed after the process of S33. In S36, the control unit 10 determines that the user identity could not be verified, and ends this process. The control unit 10 transmits a message to the user terminal 4 indicating that the user identity could not be verified. In response, the control unit 40 of the user terminal 4 outputs a message to the touch panel display 55 indicating that the user identity could not be verified, so that the user can take action such as performing the update request process again.

[0075] In S37 of FIG. 17, the control unit 10 (update processing unit 25) requests the first authentication server 6 to authenticate the personal information of the user included in the received information update request. In S38, the control unit of the first authentication server 6 adds authentication information to the received personal information. Then, the control unit of the first authentication server 6 transmits the personal information after the authentication information has been added to the personal information management server 1. In S39, the control unit 10 (update processing unit 25) of the personal information management server 1 updates the personal information DB 8 with the personal information received from the first authentication server 6 and authenticated by the first authentication server 6.

[0076] When the updating of the personal information to the personal information DB 8 is completed, in S4 of Fig. 7, the control unit 10 (update processing unit 25) of the personal information management server 1 lifts the suspension of the provision of the personal information of the user. The update processing unit 25 changes the provision status of the user ID related to the user in the provision status storage unit 34 to "available for provision." In addition, the control unit 10 of the personal information management server 1 notifies the business server 9, which needs notification, of the resumption of the provision of the personal information. By doing so, the personal information of the user whose suspension of provision of personal information has been lifted can be provided to the business server 9 again.

[0077] In the above process, the control unit 10 of the personal information management server 1 notifies the business server 9, which needs to be notified, of the suspension of provision of personal information for personal information whose expiration date has arrived, when an update occurs, but the present invention is not limited to this. For example, the control unit 10 of the personal information management server 1 may not notify the business server 9, which needs to be notified, of the suspension of provision when an update occurs, and may notify the business server 9, which needs to be notified, only when provision of personal information is resumed.

[0078] Next, the flow of processing related to information maintenance of the user's personal information, which is confirmed with the second authentication server 7, will be described. FIG. 18 is a diagram for explaining a process related to maintenance using a certification authority of personal identification documents in the personal information management system 100 according to this embodiment. FIG. 19 is a flowchart showing the information change confirmation process of the personal information management server 1 according to this embodiment.

[0079] For example, at a predetermined timing, such as once a month, the control unit 10 of the personal information management server 1 starts the process of FIG. In S1-1 of FIG. 18, the control unit 10 of the personal information management server 1 performs an information change confirmation process. Here, the information change confirmation process will be described with reference to FIG. In S41 of FIG. 19, the control unit 10 (reference confirmation unit 14) of the personal information management server 1 refers to the business information storage unit 35 and identifies a business for which information confirmation is required. In S42, the control unit 10 (reference confirmation unit 14) refers to the provision permission storage unit 33 and identifies users who have given permission for the identified business to provide information. In S43, the control unit 10 (reference confirmation unit 14) extracts the personal identification information of the specified user from the personal information DB 8, and transmits it to the second authentication server 7.

[0080] In S44, the control unit of the second authentication server 7 checks whether the personal information has been changed based on the received information. Then, the control unit of the second authentication server 7 transmits the check result to the personal information management server 1. In S45, the control unit 10 (reference confirmation unit 14) of the personal information management server 1 judges whether or not the personal information has been changed based on the received confirmation result. If the personal information has been changed (S45: YES), the control unit 10 moves the process to S46. On the other hand, if the personal information has not been changed (S45: NO), the control unit 10 ends this process. In S46, the control unit 10 performs information provision stop processing. This information provision stop processing is the same as the processing in Fig. 9 described above, and is processing for stopping the provision of personal information for a user whose personal information has been changed.

[0081] When the control unit 40 (notification receiving unit 42, notification screen output unit 43) of the user terminal 4 receives the notification of suspension of provision of personal information, it outputs a notification screen (not shown) to the effect that there has been a change in the identification document to the touch panel display 55. The notification screen includes information that there has been a change in the identification document but it has not been updated, and that if the user continues to use the document, the information will be updated and registered. When the user performs work for update registration, the user operates the user terminal 4, and in S2 of Fig. 18, the control unit 40 (update request unit 45) of the user terminal 4 makes an information update request for personal information to the personal information management server 1. The subsequent processing is the same as in Fig. 7, and therefore the description will be omitted.

[0082] For example, the control unit 10 of the personal information management server 1 may start the process of Fig. 18 at the timing requested by the business operator. In that case, the control unit 10 does not perform the process of S41, but in the process of S42, identifies the user who permits the business operator to provide information, and performs the subsequent processes.

[0083] (Usage processing) Next, the flow of processing for using the user's personal information will be described. FIG. 20 is a diagram for explaining a process related to a transaction in the personal information management system 100 according to this embodiment. 21 and 22 are flowcharts showing the information use confirmation process of the personal information management server 1 according to this embodiment. Here, an example will be described in which the user uses the transaction application 51b to carry out transaction processing at business A. However, transactions at other businesses can also be carried out in the same manner.

[0084] First, the user launches the transaction application 51b installed in the user terminal 4. Then, the user performs an operation to request a transaction. In this example, to request a transaction, the user selects a transaction type and takes a picture of the user's own face for identity authentication. Thereby, in S51 of FIG. 20, the control unit 40 of the user terminal 4 transmits a transaction request to the business server 9A of business A. The transaction request includes the transaction type and a face image of the user.

[0085] When the business entity server 9 receives a transaction request from the user terminal 4, in S52, the control unit of the business entity server 9 performs a personal authentication request process. In the personal authentication request process, the control unit of the business entity's server 9 transmits a face image of the user to the personal information management server 1, thereby requesting the personal information management server 1 to perform personal authentication. In S53, the control unit 10 of the personal information management server 1 performs identity authentication processing. More specifically, the control unit 10 of the personal information management server 1 transmits the face image of the user used in the identity verification processing (this face image is stored in the personal information DB 8) managed by the personal information management server 1 and the face image of the user received from the business server 9 to the biometric authentication server 3. In the biometric authentication server 3, the control unit compares the two received face images. The control unit of the biometric authentication server 3 performs image matching processing by a face image matching program and calculates the degree of match between the two face images as, for example, a score. Then, the control unit of the biometric authentication server 3 transmits, for example, the calculated score to the personal information management server 1 as a matching result, and the control unit 10 of the personal information management server 1 transmits the matching result to the business server 9.

[0086] If the business entity server 9 is able to authenticate the individual based on the received comparison result, the control unit of the business entity server 9 transmits a request for use of information to the personal information management server 1 in S54. In S55, the control unit 10 (the usage processing unit 20) of the personal information management server 1 performs information usage confirmation processing.

[0087] Here, the information use confirmation process will be described with reference to FIGS. In S61 of FIG. 21, the control unit 10 (the usage request receiving unit 21) of the personal information management server 1 receives a usage request from the business server 9. In S62, the control unit 10 (status confirmation unit 22) checks the usage provision status of the personal information of the user who is the target of the usage request by referring to the provision status storage unit . In S63, the control unit 10 (status confirmation unit 22) judges whether or not the personal information can be provided as a result of the confirmation. If the personal information can be provided (S63: YES), the control unit 10 shifts the process to S66 in Fig. 22. On the other hand, if the personal information cannot be provided (S63: NO), the control unit 10 shifts the process to S64.

[0088] In S64, the control unit 10 (result processing unit 23) refers to the item level storage unit 32 and determines whether or not the permission level for the item of the usage request is 3. If the permission level is 3 (S64: YES), the control unit 10 shifts the process to S67 in Fig. 22. On the other hand, if the permission level is not 3 (S64: NO), the control unit 10 shifts the process to S65. In S65, the control unit 10 (result processing unit 23) transmits to the business server 9 a message that the provision of the personal information has been stopped, and ends this process.

[0089] 22, the control unit 10 (result processing unit 23) extracts personal information of the target user who satisfies the usage request from the personal information DB 8. At that time, the result processing unit 23 refers to the provision permission storage unit 33 and confirms the permission level of the target user for the business A. Then, the result processing unit 23 refers to the item level storage unit 32 to confirm the items corresponding to the permission level, and extracts the contents of the confirmed items that are included in the usage request from the personal information DB 8. After that, the control unit 10 moves the process to S68. In S67, the control unit 10 (result processing unit 23) extracts from the personal information DB8 personal information of the target user that is included in the usage request and has a permission level of 3. In S68, the control unit 10 (result processing unit 23) judges whether or not the specified personal information has been extracted. The specified personal information refers to the personal information of the items included in the usage request among the extracted personal information. Here, if the contents of even one of the items included in the usage request has been extracted, it is deemed that the specified personal information has been extracted. If the specified personal information has been extracted (S68: YES), the control unit 10 transfers the process to S69. On the other hand, if the specified personal information has not been extracted (S68: NO), the control unit 10 transfers the process to S70.

[0090] In S69, the control unit 10 (result processing unit 23) transmits the predetermined personal information to the business server 9, and ends this process. In S70, the control unit 10 (result processing unit 23) transmits a message to the business entity server 9 indicating that the personal information could not be extracted, and ends this process. The control unit 10 (result processing unit 23) notifies the user terminal 4 of the fact that there has been a request to use the personal information and of the presence or absence of information provision.

[0091] 20, the control unit of the business entity server 9 receives a result of the utilization request from the personal information management server 1. When a flag indicating utilization is possible or personal information is received as a result of the utilization request, this is a case where the personal information has been provided, and in S56a, the control unit of the business entity server 9 performs transaction processing with the user terminal 4. On the other hand, if a flag indicating that the service is unavailable or no personal information is received as a result of the usage request, this means that no personal information was provided or only partial information was provided, and in S56b, the control unit of the business server 9 receives the necessary personal information individually and directly from the user terminal 4 as necessary, and then performs transaction processing with the user terminal 4.

[0092] In the above example, a case where a transaction request is made from the user terminal 4 has been described as an example, but the same applies to a case where no transaction request is made from the user terminal 4. When the business entity server 9 performs processing using personal information of a user, for example, in batch processing, the control unit of the business entity server 9 may perform processing from S54 onwards. In that case, the transaction processing of S56a or S56b is performed only by the business entity server 9.

[0093] (Cancellation process) Next, a process flow when a user discontinues a service provided by personal information management system 100 will be described. FIG. 23 is a diagram for explaining the process relating to withdrawal in the personal information management system 100 according to this embodiment. FIG. 24 is a diagram showing a display example of the user terminal 4 according to this embodiment. FIG. 25 is a flowchart showing the withdrawal process of the personal information management server 1 according to this embodiment.

[0094] First, the user starts the personal information processing application 51a. Then, an operation to select withdrawal from a menu screen (not shown) is performed. By doing so, the control unit 40 of the user terminal 4 outputs, for example, a withdrawal screen 72 shown in FIG. 24 to the touch panel display 55. The withdrawal screen 72 includes an explanation regarding withdrawal and a button 72a for proceeding with the withdrawal process. When the user performs an operation to select the button 72a, in S81 of FIG. 23, the control unit 40 (withdrawal request unit 47) of the user terminal 4 transmits a withdrawal request to the personal information management server 1. In S82, the control unit 10 (withdrawal processing unit 26) of the personal information management server 1 performs withdrawal processing.

[0095] Here, the withdrawal process will be described with reference to FIG. In S91 of FIG. 25, the control unit 10 receives a withdrawal notification from the user terminal 4. In S92 , the control unit 10 identifies the record of the relevant user stored in the provision permission storage unit 33 . In S93, the control unit 10 checks whether or not notification is required for the business associated with the identified record. Then, the control unit 10 (notification unit 17) notifies the business server 9 for which notification is required that the user will withdraw from the business. In S94, the control unit 10 deletes the record of the user in the provision permission storage unit 33 identified in S92.

[0096] In S95, the control unit 10 updates the provision status of the user stored in the provision status storage unit 34 to "provision unavailable." In S96, the control unit 10 deletes the record of the relevant user from the personal information DB8. In S97, the control unit 10 transmits a processing result regarding the withdrawal procedure to the user terminal 4. After that, the control unit 10 ends this process. The control unit 10 may delete the record from the provision availability storage unit 33 or the personal information DB 8, for example, when a predetermined time has elapsed. The control unit 10 may also delete the record of the user in the provision status storage unit 34.

[0097] As described above, according to this embodiment, the personal information management system 100 has the following advantages. (1) The personal information DB8 registers personal information of users whose identities have been verified and who have been granted authentication by the first authentication server 6. The personal information management server 1 then checks the expiration date of the identity verification document registered in the personal information DB8, and when it is confirmed that the expiration date has arrived, it stops providing the personal information of the user to each business operator. Therefore, provision of expired personal information can be stopped, and old information can be prevented from being used by businesses. In addition, personal information registered in the personal information DB8 can be held as highly secure information because any falsification or impersonation can be detected.

[0098] (2) The personal information management server 1 is provided with a provision possibility memory unit 33 which stores provision possibility information regarding whether or not personal information can be provided to each business for each user. When a request for use is received from the business server 9, if the provision of the personal information of that user to each business has not been stopped, the personal information of that user is provided to the business server 9 that made the request for use after checking the provision possibility memory unit 33. Therefore, when the provision of personal information has not been suspended, such as when the expiration date of the personal identification document registered in the personal information DB8 has not arrived, personal information that satisfies the usage request can be used by the business operator, provided that the business operator is set as available for provision in the provision availability memory unit 33.

[0099] (3) The personal information management server 1 is equipped with an item level memory unit 32 which stores each item of personal information in association with a level indicating the importance, and the provision feasibility memory unit 33 further stores the provision feasibility information in association with a level. When a request for use is received from the business server 9, even if the provision of the user's personal information to each business has been suspended, the personal information of the user in the items corresponding to the specified level is provided to the business server 9 that made the request after checking the provision feasibility memory unit 33. Therefore, even if the provision of information is suspended, if the personal information corresponds to a specified level of items, the information can be provided to the business operator. If the specified level is, for example, information that does not identify an individual, such as gender, hobbies, or prefecture-level address, the information can be provided regardless of the freshness of the information, and the needs of the business operator can be met.

[0100] (4) If the personal information management server 1 does not transmit personal information in response to a request for use from the business server 9, it notifies the business server 9 that the information cannot be provided. As a result, some kind of response is given to the request for use, so the business server can grasp the situation.

[0101] (5) The personal information management server 1 checks the expiration date of the identification document registered in the personal information DB 8, and if the expiration date has not yet arrived but will arrive within a specified period of time, notifies the user terminal 4 of the expiration date. This makes it possible to prompt the user to update his / her personal information using his / her personal identification document.

[0102] (6) The personal information management server 1 uses the personal identification information on the personal identification document to confirm any changes to the personal information corresponding to the personal identification information from the second authentication server 7, which authenticates the personal information based on the personal identification document, and if any changes to the personal information are confirmed, the personal information management server 1 stops providing the personal information corresponding to the personal identification information in the personal information DB 8 to each business operator. Therefore, by using the information of the second authentication server 7, it is possible to check whether the information in the personal information DB 8 is the latest.

[0103] (7) The personal information management server 1 is provided with an operator information storage unit 35 which stores, for each operator, information regarding the necessity of information verification using the second authentication server 7, and by referring to the provision feasibility storage unit 33, confirms changes to the personal information of the user associated with an operator for which information verification is necessary as stored in the operator information storage unit 35. Therefore, the target of checking the information in the personal information DB8 using the second authentication server 7 can be limited to the personal information of users who require the information checking by the business and who are allowed to provide the information to the business. For example, when checking the information in the personal information DB8 using the second authentication server 7 requires paying a fee corresponding to the number of users to the second authentication authority, the cost burden on the business can be reduced by limiting the processing target.

[0104] (8) When the personal information management server 1 stops providing the user's personal information to each business operator, it notifies the user terminal 4 of the suspension of provision. Thus, the user can know that the provision of his / her personal information has been suspended. (9) When the personal information management server 1 stops providing the personal information of a user to each business, it notifies the business, which needs to notify the business, of information about the stopped user. Thus, the business can know the user whose personal information is stopped from being provided.

[0105] (10) When the personal information management server 1 receives a request to update the personal information from the user terminal 4, it updates the personal information DB8 and cancels the suspension of the provision of the personal information. In addition, the personal information management server 1 updates the personal information DB8 using the personal information authenticated by the first authentication server 6. Therefore, even when updating the personal information in the personal information DB8, it can be updated using a highly secure mechanism, similar to the initial registration of the personal information.

[0106] (10) When the personal information management server 1 receives a notice of withdrawal from the user terminal 4, it stops providing the personal information of the user to each business operator. Therefore, it is possible to disable the provision of information to businesses in accordance with the user's intention to withdraw.

[0107] Although the embodiments of the present invention have been described above, the present invention is not limited to the above-mentioned embodiments. Furthermore, the effects described in the embodiments are merely a list of the most preferable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the embodiments. The above-mentioned embodiments and the modified forms described below can be used in appropriate combination, but detailed description will be omitted.

[0108] (Variations) (1) In the present embodiment, the expiration date is checked for all personal information in the personal information DB8 at once for each process, but the present invention is not limited to this. Personal information may be checked one by one. FIG. 26 is a flowchart showing the expiration date confirmation process of the personal information management server according to the modified embodiment. In S111 of FIG. 26, the control unit 10 extracts one piece of personal information from the personal information DB8. In S112, the control unit 10 (expiration date confirmation unit 12) confirms the expiration date of the extracted personal information. In S113, the control unit 10 (expiration date confirmation unit 12) judges whether the expiration date has not yet arrived, but will arrive after a predetermined period of time. If the expiration date will arrive after the predetermined period of time (S113: YES), the control unit 10 moves the process to S114. On the other hand, if the expiration date will not arrive after the predetermined period of time (S113: NO), the control unit 10 moves the process to S115. Note that if the expiration date has already arrived, the result in this process is NO. In S114, the control unit 10 (expiration date notification unit 13) notifies the user terminal 4 of the user included in the extracted record of the expiration date. The process in the user terminal 4 is the same as the process in S13 in Fig. 8. After that, the control unit 10 moves the process to S117.

[0109] In S115, the control unit 10 (expiration date confirmation unit 12) extracts a personal information record to determine whether the expiration date has already arrived. If the expiration date has already arrived (S115: YES), the control unit 10 moves the process to S116, performs a provision information stop process (see FIG. 9), and then moves the process to S117. On the other hand, if the expiration date has not arrived (S115: NO), the control unit 10 moves the process to S117. In S117, the control unit 10 judges whether or not all personal information in the personal information DB 8 has been processed. If all personal information in the personal information DB 8 has been processed (S117: YES), the control unit 10 ends this process. On the other hand, if all personal information in the personal information DB 8 has not been processed (S117: NO), the control unit 10 moves the process to S111, extracts unprocessed personal information, and repeats the process of checking the expiration date. In this manner, the validity period of the personal information in the personal information DB 8 can be checked one by one.

[0110] (2) In the present embodiment, the personal information of a user set as not available in the provision status storage unit is allowed to be provided if it is for an item of a predetermined level, but this is not limiting. Items may be further limited among the predetermined levels. In addition, for the personal information of a user set as not available for each business, the allowance for providing may be set, for example, as to whether or not a predetermined level of information is required.

[0111] (3) In the present embodiment, it has been described that each user sets the permission level of personal information for each business operator, but this is not limited to the above. Each user may set the provision items of personal information for each business operator. By doing so, more detailed settings can be made. It is preferable that the setting of the provision items of personal information is a mechanism in which a permission level is set and items that can be provided and items that cannot be provided can be easily registered by checking or the like.

[0112] (4) In the present embodiment, the user terminal registers in advance whether or not to provide personal information to the business server, but the present invention is not limited to this. The business server transmits items that the user wants to allow to the personal information management server, and the query transmission means of the personal information management server queries the user terminal for permission to provide the personal information, and obtains the provision permission information from the user terminal by receiving a response to the query from the user terminal.

[0113] (5) In the present embodiment, both the first certification authority and the second certification authority are used as an example, but the present invention is not limited to this. For example, if there is no system (mechanism) that corresponds to the second certification authority, the process by the second certification authority does not need to be performed.

[0114] (6) In the present embodiment, the personal information DB 8 is described as a database. The personal information DB 8 may be provided as a database server, or may be distributed among multiple computers using block chain technology. [Explanation of symbols]

[0115] 1 Personal information management server 3. Biometric authentication server 4. User terminal 6 First authentication server 7 Second authentication server 8 Personal information DB 9, 9A, 9B Business Server 10,40 Control section 12 Expiration date confirmation section 13 Deadline notification section 14. Inquiry and Verification Section 16 Discontinuation section 17 Notification Department 18 Stop release section 21 Usage request receiving unit 22 Status Check Department 23 Result Processing Section 25 Update processing section 26 Withdrawal Processing Unit 30,50 storage section 32 Item-level storage 33 Provision availability storage unit 34 Provision status memory section 35 Business information storage section 41 Notification processing section 42 Notification Receiving Unit 43 Notification screen output section 45 Renewal Request Department 47 Withdrawal Request Department 51a Personal information processing application 51b Trading App 54a In-camera 54b Rear camera 55 Touch Panel Display 100 Personal Information Management System

Claims

1. A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; an item level storage unit that stores each item of the personal information in association with a level indicating the importance of the item; a provision possibility storage unit that stores provision possibility information regarding whether the personal information can be provided to each business entity for each of the users in association with the level; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; a utilization request receiving means for receiving a utilization request for the personal information from the business device; a provision status confirmation means for confirming a provision status of the personal information that satisfies the use request received by the use request receiving means; a personal information providing means for extracting the personal information that satisfies the use request received by the use request receiving means from the personal information database by referring to the provision availability storage unit when the provision of the personal information is not stopped, and transmitting the extracted personal information to the business device; Equipped with The personal information providing means, when the provision of the personal information is stopped, refers to the item level memory unit, extracts from the personal information database the personal information corresponding to the items of the personal information related to the usage request received by the usage request receiving means that are at a predetermined level, and refers to the provision feasibility memory unit, and transmits the extracted personal information to the business device.

2. In the personal information management device according to claim 1, a personal information management device comprising: a provision non-availability notification means for notifying said business device that provision is not possible when said personal information provision means does not transmit said personal information;

3. A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; a deadline notification means for notifying the user terminal of the expiration date when the expiration date confirmed by the expiration date confirmation means has not yet arrived but will arrive within a predetermined period of time; A personal information management device comprising:

4. A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; an information verification means for verifying, from a second authentication authority which authenticates the personal information based on the identification document by using the identification information of the identification document stored as one item of the personal information in the personal information database, a change in the personal information corresponding to the identification information; Equipped with The provision suspension means, when the information confirmation means confirms a change in the personal information, stops providing the personal information corresponding to the individual identifying information in the personal information database to each business operator.

5. In the personal information management device according to claim 4, an operator confirmation storage unit that stores, for each operator, information regarding whether or not information confirmation using the second certificate authority is required; a provision possibility storage unit that stores provision possibility information regarding whether the personal information can be provided to each business for each user; Equipped with The information confirmation means of the personal information management device refers to the provision feasibility memory unit and confirms changes to the personal information associated with the business for which the information confirmation stored in the business confirmation memory unit is necessary.

6. A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; a service suspension notification means for notifying the user terminal of the suspension of service; A personal information management device comprising:

7. A personal information management device communicably connected to a user terminal and a service provider device of each service provider that provides a service to a user of the user terminal, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; a business operator notification storage unit that stores, for each business operator, information regarding whether or not a notification is required for each business operator; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; a suspended user notification means for referring to the business notification storage unit in response to the suspension of provision of the personal information to each business by the provision suspension means, and notifying the business that needs the notification of information about the suspended user to the business; A personal information management device comprising:

8. 8. The personal information management device according to claim 1, An update request receiving means for receiving an information update request from the user terminal; a personal information update means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means; a suspension cancellation means for cancelling the suspension of the provision of the personal information of the user in the personal information database updated by the personal information update means; A personal information management device comprising:

9. In the personal information management device according to claim 8, an authentication request means for requesting the first authentication authority to authenticate the personal information of the user included in the information update request received by the update request receiving means; The personal information update means updates the personal information database using the personal information authenticated by the first authentication authority requested by the authentication request means.

10. 10. The personal information management device according to claim 1, a withdrawal notification receiving means for receiving a withdrawal notification from the user terminal, The provision suspension means, when the withdrawal notification receiving means receives the withdrawal notification, suspends the provision of the personal information to each business operator.

11. A program for causing a computer to function as a personal information management device described in any one of claims 1 to 10.

12. a personal information management device for managing personal information of a user; a user terminal communicably connected to the personal information management device; A personal information management system comprising: The personal information management device includes: A communication device is connected to a service provider device of each service provider that provides services to the user, a personal information database storing personal information of the user whose identity has been verified by a personal identification process using an identity verification document performed between the user terminal and the user and whose authentication has been granted by a first authentication authority; an expiration date confirmation means for confirming the expiration date of the personal identification document stored in the personal information database as one item of the personal information; a provision suspension means for suspending provision of the personal information whose expiration date has arrived to each business operator; a deadline notification means for notifying the user terminal of the expiration date when the expiration date confirmed by the expiration date confirmation means has not yet arrived but will arrive within a predetermined period of time; Equipped with The user terminal, A notification receiving means for receiving the notification regarding the validity period of the identification document; an information output means for outputting information based on the notification received by the notification receiving means; an update request sending means for, when receiving an input of new personal information according to the information output by the information output means, sending an information update request including the received new personal information to the personal information management device; A personal information management system comprising:

13. In the personal information management system according to claim 12, The personal information management device includes: An update request receiving means for receiving an information update request from the user terminal; a personal information update means for updating the personal information database using the personal information of the user included in the information update request received by the update request receiving means; a suspension cancellation means for cancelling the suspension of the provision of the personal information of the user in the personal information database updated by the personal information update means; A personal information management system comprising:

Images