Information management server, information management method, and program

Abstract

To provide an information management server, an information management method, and a program, capable of confirming whether a mobile phone number applied by a user is correct.SOLUTION: In a moving procedures service providing system, an information management server 30 comprises: a number confirmation section 335 for obtaining a message that is notified using a communication application from a user terminal of a user who has requested procedures, and if a mobile phone number applied when the procedures are requested by the user matches a mobile phone number representing a notification source of the message, determining that the mobile phone number of the user is correct; a phone number obtainment section (moving information obtainment section 331) for obtaining the mobile phone number of the user determined to be correct by the number confirmation section 335; and a procedures execution section 333 for executing the procedures requested by the user using the mobile phone number of the user obtained by the phone number obtainment section.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to an information management server, an information management method, and a program. [Background technology]

[0002] When moving, people need to notify various government agencies and private businesses of their name, new address, and other information, which creates a burden for them each time they move. Furthermore, the procedures required vary from person to person, and there are a wide variety of parties to whom procedures must be carried out. For this reason, people are unable to grasp the full picture of the necessary procedures, and they are prone to overlooking procedures.

[0003] In response to these problems, services are being promoted to reduce the burden of procedures associated with moving and to prevent oversight of procedures. In such services, for example, a portal site is provided that serves as a one-stop window for procedures associated with moving with government agencies (local governments) and private businesses. By registering information such as name and new address on the portal site, users can complete procedures associated with moving online with government agencies and private businesses in one go via the portal site. For example, Patent Document 1 discloses a technology that collectively accepts notifications of changes in user information such as name and address registered with multiple businesses, such as government agencies and private businesses, and provides the accepted information to each business. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2002-215844 A Summary of the Invention [Problem to be solved by the invention]

[0005] In such services, registration is handled based on personal information such as mobile phone numbers entered by users via a portal site. However, in this case, there is a problem that the mobile phone number is likely to be entered incorrectly due to input errors, etc., and if the entered mobile phone number is used as is, there is a possibility that the correct procedure will not be carried out.

[0006] The present invention has been made in consideration of the above situation, and aims to provide an information management server, an information management method, and a program that can check whether there are any errors in the mobile phone number applied for by a user. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems of the present invention, the present invention ,hand From the user terminal of the user who requested the continuation , addressed to a mobile phone number a number determination unit that obtains a message notified using a call application, and determines that the mobile phone number of the user is correct if the mobile phone number applied when the user requested a procedure matches the mobile phone number of the message notification source; a telephone number acquisition unit that acquires the mobile phone number of the user that is determined to be correct by the number determination unit; and a procedure execution unit that executes the procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit. the number determination unit acquires information including an encryption code in which user identification information identifying the user in the message is encrypted and a mobile phone number applied for by the user, and determines whether the user identification information has been tampered with; and if the user identification information has not been tampered with and the mobile phone number notified in the message matches the mobile phone number of the source of the message, determines that there is no error in the mobile phone number of the user; It is an information management server.

[0010] In addition, in the information management server of the present invention, a storage unit that stores customer information regarding a customer who uses a company account set in the calling application, the customer information including a mobile phone number that the customer has contracted with a mobile carrier; The system further includes an identity verification unit that performs identity verification to determine whether the user and the procedure subject that is the subject of the procedure requested by the user are the same person based on the telephone number acquired by the telephone number acquisition unit and the customer information stored in the memory unit, and the procedure execution unit executes the procedure requested by the user in accordance with the result of the identity verification by the identity verification unit.

[0011] The present invention also relates to ,KoAn information management method performed by an information management server which is a computer device, in which a number determination unit obtains a message notified by using the calling application from a user terminal of a user who has requested a procedure, and if the mobile phone number applied when the procedure was requested by the user matches the mobile phone number from which the message was notified, determines that the mobile phone number of the user is correct, a telephone number acquisition unit acquires the mobile phone number of the user determined to be correct by the number determination unit, and a procedure execution unit executes the procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit. The number determination unit acquires information including a cryptographic code in which user identification information identifying the user in the message is encrypted and a mobile phone number applied for by the user, and determines whether the user identification information has been tampered with. If the user identification information has not been tampered with and the mobile phone number notified in the message matches the mobile phone number of the source of the message, it determines that there is no error in the mobile phone number of the user. This is an information management method.

[0012] The present invention also provides a program for causing a computer to operate as the information management server described above, the program causing the computer to function as each unit included in the information management server. Effect of the Invention

[0013] According to the present invention, it is possible to check whether the mobile phone number applied for by the user is correct. [Brief description of the drawings]

[0014] [Figure 1] 1 is a diagram showing an overview of a process flow in a moving procedure service providing system 1 to which an information management server 30 according to an embodiment is applied. [Diagram 2] 1 is a block diagram showing an example of a configuration of a user terminal 10 according to an embodiment. [Diagram 3] 2 is a block diagram showing an example of the configuration of a moving procedure window server 20 according to an embodiment. FIG. [Figure 4] FIG. 2 is a diagram showing an example of the configuration of moving information 220 according to the embodiment. [Diagram 5] 2 is a block diagram showing an example of a configuration of an information management server 30 according to the embodiment. FIG. [Figure 6] FIG. 2 is a diagram showing an example of the configuration of customer information 320 according to the embodiment. [Figure 7] A figure showing an example of the configuration of procedure information 321 relating to the embodiment. [Figure 8] FIG. 4 is a sequence diagram showing a process flow for creating customer information 320 according to the embodiment. [Figure 9] 2 is a sequence diagram showing the flow of processing performed by a moving procedure service providing system 1 according to the embodiment. FIG. [Figure 10A] 4 is a diagram showing an example of a screen displayed on a display unit 14 according to the embodiment. FIG. [Figure 10B] 4 is a diagram showing an example of a screen displayed on a display unit 14 according to the embodiment. FIG. [Figure 10C] 4 is a diagram showing an example of a screen displayed on a display unit 14 according to the embodiment. FIG. [Figure 11] 4 is a diagram showing an example of a screen displayed on a display unit 14 according to the embodiment. FIG. [Figure 12] 2 is a sequence diagram showing the flow of processing performed by a moving procedure service providing system 1 according to the embodiment. FIG. [Figure 13] FIG. 11 is a sequence diagram showing the flow of processing performed by a moving procedure service providing system 1 according to a modified example of the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, an embodiment of the invention will be described with reference to the drawings. The following will be described by taking as an example a case where procedures related to moving are performed, but is not limited to this. This embodiment can be widely applied to cases where various procedures for government agencies, private businesses, etc. are performed in a lump sum through a portal site that serves as a window.

[0016] FIG. 1 is a diagram showing an outline of a process flow in a moving procedure service providing system 1 to which an information management server 30 according to an embodiment is applied.

[0017] The moving procedure service providing system 1 is a system that provides a moving procedure service. The moving procedure service is a service that collectively executes various procedures that arise in association with a move online.

[0018] In the moving procedure service providing system 1, procedures associated with moving are divided into procedures that do not require identity verification and procedures that do, and each procedure is carried out accordingly. Identity verification here refers to confirming the identity of the person applying for the procedure and the person who is the subject of the procedure. In the moving procedure service providing system 1, for procedures that require identity verification, the procedure is carried out after confirming the identity of the user and the subject of the procedure.

[0019] The following describes procedures that occur when moving, taking as an example a procedure with an administrative agency, a procedure related to a lifeline, and other procedures related to moving. The procedure with an administrative agency is, for example, a procedure for submitting a moving-out notification and a moving-in notification for moving a residence certificate. The procedure related to a lifeline is a procedure related to the use of water, electricity, gas, etc. The procedure related to a lifeline is, for example, a procedure related to stopping or starting the use of a lifeline, and a procedure that occurs when applying for direct debit to pay the usage fee. The other procedures related to moving are procedures that occur when moving other than the use of a lifeline, such as a procedure for canceling a contract with an Internet provider that was contracted at the moving source, a procedure for signing up with a new Internet provider at the moving destination, and a procedure that occurs when applying for direct debit to pay the provider fee. In addition, the following describes procedures that require identity verification, taking as an example a procedure with an administrative agency, and a procedure related to direct debit among the procedures for using a lifeline and other procedures related to moving.

[0020] However, this is not a limitation, and which of the procedures associated with moving is to be the procedure requiring identity verification may be arbitrarily determined. For example, a procedure for which identity verification is required by law, etc. may be determined to be the procedure requiring identity verification, or a specific procedure that is not required by law, etc., but is considered in terms of the content of the procedure, from the viewpoint of preventing crime or protecting personal information, may be determined to be the procedure requiring identity verification.

[0021] As shown in Figure 1, the moving procedure service providing system 1 includes, for example, a user terminal 10, a moving procedure counter server 20, an information management server 30, an administrative procedure counter server 40, a local government server 50, a lifeline operator server 60, a contractor server 70, and a mobile carrier server 80.

[0022] The user terminal 10 is a computer device of a user who uses the moving procedure service. The user terminal 10 is, for example, a smartphone, a tablet terminal, a mobile phone, a PC, or the like.

[0023] (Step S11) The user terminal 10 submits an application for use to the moving procedure window server 20. The application for use is an application to use the moving procedure service. (Step S12) The user terminal 10 receives a result notification from the moving procedure window server 20. The result notification is a notification of the result of the procedure requested by the application for use, etc.

[0024] The moving procedure counter server 20 is a computer device that operates a portal site that serves as a counter for the moving procedure service. The moving procedure counter server 20 is, for example, a server device or a PC. The moving procedure counter server 20 accepts a usage application from the user terminal 10 and obtains information necessary to use the moving procedure service from the user terminal 10. The moving procedure counter server 20 uses the moving information 220 to carry out the procedure requested by the user.

[0025] (Step S13) The moving procedure window server 20 submits procedures to the contractor server 70 for some of the procedures requested by the user, and receives the results of the procedures. Here, the procedures requested by the moving procedure window server 20 to the contractor server 70 are administrative procedures and procedures other than the use of lifelines that occur with moving, such as procedures that do not require identity verification.

[0026] (Step S14) The moving procedure window server 20 submits an application for other procedures among those requested by the user to the lifeline operator server 60 and receives the results of the procedures. Here, the procedures requested by the moving procedure window server 20 to the lifeline operator server 60 are procedures related to the use of a lifeline, and for example, are procedures that do not require identity verification.

[0027] (Step S15) The moving procedure counter server 20 notifies the information management server 30 of information regarding procedures that require identity verification among the procedures requested by the user, and requests the information management server 30 to execute the procedures that require identity verification. The moving procedure counter server 20 receives the results of executing the procedures that require identity verification from the information management server 30.

[0028] The information management server 30 is a computer device that executes procedures that require identity verification among the procedures requested by the user. The information management server 30 is, for example, a server device or a PC operated by a company. The information management server 30 acquires information about the user from the moving procedure counter server 20, and uses the acquired information to verify the identity of the user and the person who will be the subject of the procedure. The information management server 30 uses information obtained from the mobile carrier server 80 to verify the identity of the user and the person who will be the subject of the procedure (symbol M). The method by which the information management server 30 verify the identity of the user and the person who will be the subject of the procedure will be explained in detail later.

[0029] (Step S16) The information management server 30 submits procedures to the lifeline operator server 60 for some of the procedures requested by the moving procedure counter server 20, and receives the results of the procedures. Here, the procedures requested by the information management server 30 to the lifeline operator server 60 are procedures related to the use of lifelines and require identity verification.

[0030] (Step S17) The information management server 30 submits procedures to the contractor server 70 for other procedures among those requested by the moving procedure counter server 20, and receives the results of the procedures. Here, the procedures requested by the information management server 30 to the contractor server 70 are administrative procedures and other procedures that occur with the move other than the use of lifelines, and require identity verification.

[0031] (Step S18) The information management server 30 submits an application for administrative procedures among the procedures requested by the moving procedure counter server 20 to the administrative procedure counter server 40 and receives the results of the procedures.

[0032] The administrative procedure counter server 40 is a computer device that operates a portal site that serves as a counter for administrative procedure services. The administrative procedure counter server 40 is, for example, a server device or a PC operated by a government ministry or agency. The administrative procedure counter server 40 accepts applications for administrative procedures from the information management server 30 and acquires information necessary for the administrative procedures.

[0033] (Step S19) The administrative procedure counter server 40 uses the information acquired from the information management server 30 to apply for an administrative procedure to the local government server 50 and receives the results of the procedure from the local government server 50.

[0034] The local government server 50 is a computer device that performs administrative procedures. The local government server 50 is, for example, a server device or a PC operated by a local government. The local government server 50 receives from the administrative procedure counter server 40 an application for an administrative procedure and information required for the administrative procedure, and performs the administrative procedure based on the received information. The local government server 50 notifies the administrative procedure counter server 40 of the result of the procedure.

[0035] The lifeline provider server 60 is a computer device that performs procedures related to the use of lifelines such as water, electricity, and gas. The lifeline provider server 60 is, for example, a server device, a PC, or the like operated by a lifeline provider. The lifeline provider server 60 performs procedures based on an application from the moving procedure window server 20 for a procedure that does not require identity verification, and notifies the moving procedure window server 20 of the results of the procedures. In addition, the lifeline provider server 60 performs procedures based on an application from the information management server 30 for a procedure that requires identity verification, and notifies the information management server 30 of the results of the procedures.

[0036] The contractor server 70 is a computer device that performs procedures that occur in association with moving, other than for lifelines. The contractor server 70 is, for example, a server device or a PC operated by a private business operator. The contractor server 70 performs procedures based on an application for a procedure that does not require identity verification from the moving procedure window server 20, and notifies the moving procedure window server 20 of the results of the procedures. The contractor server 70 also performs procedures based on an application for a procedure that requires identity verification from the information management server 30, and notifies the information management server 30 of the results of the procedures.

[0037] The mobile carrier server 80 is a computer device that provides communication and call services via mobile phones. The mobile carrier server 80 is a server device, PC, etc. operated by a mobile carrier (mobile phone operator) with which a user has a contract. The mobile carrier server 80 provides an application program (hereinafter referred to as a calling application) that enables mobile phones to send and receive messages such as text, photos, still images, and moving images. In the calling application, messages are sent and received with the phone number of the mobile phone as the destination.

[0038] In the calling app, corporate accounts (hereafter referred to as corporate accounts) are set up. Mobile phone subscribers can follow (use) corporate accounts on the calling app to exchange messages and information with the companies.

[0039] In order to provide a place for such companies and contractors to exchange information, the calling app has a mechanism to improve the security of transactions between companies and contractors. Specifically, the company accounts set up in the calling app are limited to companies that have passed the screening of the mobile phone carrier. In addition, when the calling app is used, the phone number of the mobile phone using the calling app is checked to see if it is an illegal number, and only numbers that have been confirmed to be illegal are notified to the company. In this way, only mobile phones that have been confirmed to be illegal numbers can use the calling app. An illegal number here is a phone number of a mobile phone that has been obtained illegally, for example, a phone number of a mobile phone for which the mobile phone carrier has not performed identity verification at the time of contract.

[0040] The moving procedure service providing system 1 uses the mechanism of this calling app to verify the identity of the user. Specifically, it is assumed that a corporate account related to the information management server 30 (for example, a corporate account of a company that operates the information management server 30) is set in the calling app. It is also assumed that the calling app is installed in the user terminal 10, and that the corporate account related to the information management server 30 is followed by the user terminal 10. In other words, it is assumed that the mobile phone number of the user terminal 10 has been notified to the company related to the information management server 30, unless the user terminal 10 has been obtained illegally.

[0041] 2 is a block diagram showing an example of the configuration of the user terminal 10 according to the first embodiment. The user terminal 10 includes, for example, a communication unit 11, a storage unit 12, a control unit 13, and a display unit 14. The communication unit 11 communicates with the moving procedure counter server 20 and the information management server 30. The storage unit 12 stores programs for executing various processes of the user terminal 10, and temporary data used when performing various processes. For example, the storage unit 12 stores an application program downloaded when installing a calling app. The display unit 14 includes a display screen, and displays an image on the display screen based on the control of the control unit 13.

[0042] The control unit 13 performs overall control of the user terminal 10. For example, the control unit 13 accesses a predetermined URL (Uniform Resource Locator) corresponding to a portal site provided by the moving procedure window server 20 in response to an input operation by the user. The control unit 13 acquires a predetermined input form screen for applying to use the moving procedure service from the accessed site, and displays the acquired screen on a display unit (not shown). When the information required for the application is input into the displayed input form screen by the user's operation or the like, and an operation is performed to send the input information, the control unit 13 transmits information related to the move to the moving procedure window server 20. As a result, an application for use is made from the user terminal 10 to the moving procedure window server 20.

[0043] 3 is a block diagram showing an example of the configuration of the moving procedure office server 20 according to the first embodiment. The moving procedure office server 20 includes, for example, a communication unit 21, a storage unit 22, and a control unit 23. The communication unit 21 communicates with the user terminal 10, the information management server 30, the lifeline operator server 60, and the contractor server 70.

[0044] The memory unit 22 stores programs for executing various processes of the moving procedure window server 20, and temporary data used when performing various processes. The memory unit 22 stores, for example, moving information 220. The moving information 220 is information related to the user's move. The moving information 220 is composed of information notified from the user terminal 10, for example, in association with an application for use of the moving procedure service by the user terminal 10. The moving information 220 is information indicating, for example, the user's name, old address, new address, moving date, and details of the procedures to be performed using the moving procedure service.

[0045] The control unit 23 performs overall control of the moving procedure window server 20. For example, the control unit 23 executes various processes related to the portal site. In response to a request from the user terminal 10 that has accessed the portal site, the control unit 23 notifies the user terminal 10 of information such as a predetermined input form screen for using the moving procedure service. In addition, when the communication unit 21 receives information related to an application for use of information inputted into the input form screen from the user terminal 10, the control unit 23 acquires the information via the communication unit 21, creates moving information 220 using the acquired information, and stores the created moving information 220 in the storage unit 22.

[0046] Furthermore, when the procedures requested in the application for use include a procedure requiring identity verification, the control unit 23 notifies the information management server 30 of the moving information 220. When the procedures requested in the application for use include a procedure to be performed with a lifeline provider, the control unit 23 notifies the lifeline provider server 60 of the moving information 220. When the procedures requested in the application for use include a procedure with another provider, the control unit 23 notifies the provider server 70 of the moving information 220.

[0047] When the control unit 23 notifies the information management server 30 of the moving information 220, the control unit 23 receives the procedure result from the information management server 30. When the control unit 23 notifies the lifeline provider server 60 of the moving information 220, the control unit 23 receives the procedure result from the lifeline provider server 60. When the control unit 23 notifies the contractor server 70 of the moving information 220, the control unit 23 receives the procedure result from the contractor server 70.

[0048] FIG. 4 is a diagram showing an example of the configuration of the moving information 220 according to the embodiment. The moving information 220 is created for each application for use in the moving procedure service. The moving information 220 includes items such as a moving information ID, user attribute information, and moving-related information. The moving information ID is identification information that uniquely identifies the moving information 220. The user attribute information is information indicating the attributes of a user who has applied to use the moving procedure service, and is information indicating at least a user code and a mobile phone number of the user. In the example of this figure, a case is shown in which the user attribute information includes a user code, a name, a mobile phone number, a date of birth, a kana name, a kanji name, and the like. The user code is information that identifies a user. The user code is created by the moving procedure window server 20, for example, when a user applies for use. The moving-related information is information related to the move applied for at the time of the application for use identified by the moving information ID. The moving-related information includes items such as moving date, old address, new address, procedure 1, procedure 2, etc. The moving date is information indicating the date on which the move is planned to take place. The old address is information indicating the address from which the move is to be made. The new address is information indicating the address to which the move is to be made. Procedure 1, procedure 2, etc. are information indicating the procedures to be carried out by using the moving procedure service.

[0049] 5 is a block diagram showing an example of the configuration of the information management server 30 according to the embodiment. The information management server 30 includes, for example, a communication unit 31, a storage unit 32, and a control unit 33. The communication unit 31 communicates with the user terminal 10, the moving procedure counter server 20, the administrative procedure counter server 40, the lifeline operator server 60, the contractor server 70, and the mobile carrier server 80.

[0050] The storage unit 32 is configured by a storage medium, for example, a hard disk drive (HDD), a flash memory, an electrically erasable programmable read only memory (EEPROM), a random access read / write memory (RAM), a read only memory (ROM), or any combination of these storage media. The storage unit 32 stores programs for executing various processes of the information management server 30, and temporary data used when performing various processes.

[0051] The storage unit 32 stores, for example, customer information 320 and procedure information 321. The customer information 320 is information about mobile phone subscribers (customers) who follow (use) a company account set in the calling application. The customer information 320 includes at least information indicating the customer's mobile phone number. The customer's mobile phone number is notified to the company's device (for example, information management server 30) from the mobile carrier server 80 when the customer follows the company account and creates a customer account for the customer to exchange information with the company account.

[0052] The procedure information 321 is information on procedures that require identity verification among procedures requested by a user in the moving procedure service. The procedure information 321 is information created using all or part of the information of the moving information 220 notified from the moving procedure window server 20.

[0053] The control unit 33 controls each component of the information management server 30. The control unit 33 is realized, for example, by a central processing unit (CPU) of the information management server 30 executing a program pre-stored in the storage unit 52. The control unit 33 may also be realized as an integrated circuit such as an application specific integrated circuit (ASIC). The control unit 33 includes, for example, a company account control unit 330, a moving information acquisition unit 331, a personal identification unit 332, a procedure execution unit 333, a device control unit 334, and a number determination unit 335.

[0054] The company account control unit 330 provides services via a company account set in the calling application. The content of the services via the company account may be arbitrary, but may be, for example, a service in which personal information of a customer is kept and, with the customer's consent, the personal information of the customer is linked to a procedure destination to perform various procedures online. By using the services via the company account, the customer can perform various procedures safely and with less effort.

[0055] For example, the company account control unit 330 acquires the customer's mobile phone number notified from the mobile carrier server 80. The customer's mobile phone number here is a mobile phone number assigned to a subscriber (customer) who has subscribed to a mobile phone that follows the company account. The company account control unit 330 uses the acquired information to create new customer information 320 for that customer. In addition, the company account control unit 330 notifies a message to the acquired mobile phone number of the customer.

[0056] The message sent here, for example, encourages the customer to register for a service via a corporate account. In response to the message, the customer inputs, for example, a login password for using the service via the corporate account, the destination of the procedure to be performed using the service, and personal information required for the procedure, and performs a send operation after confirming the input contents. As a result, the corporate account control unit 330 acquires the personal information of the customer, updates the customer information 320 of the customer based on the acquired information, and stores the updated customer information 320 in the storage unit 32.

[0057] In the above, the functional unit (corporate account control unit 330) of the information management server 30 operates a corporate account, but the present invention is not limited to this. The information management server 30 only needs to store at least the customer information 320. For example, the corporate account may be operated by an external server different from the information management server 30, and the mobile phone number and personal information of the customer may be notified to the information management server 30. In this case, when the information management server 30 is notified of the mobile phone number of the customer from the external server, the information management server 30 creates new customer information 320 using the information, and when the information management server 30 is notified of the personal information of the customer, the information management server 30 updates the customer information 320 of the customer.

[0058] The moving information acquisition unit 331 acquires the moving information 220 notified from the moving procedure window server 20. The moving information acquisition unit 331 creates procedure information 321 using the acquired information, and stores the created procedure information 321 in the storage unit 32. The moving information acquisition unit 331 outputs the user's mobile phone number from the acquired moving information 220 to the identity verification unit 332.

[0059] Here, in the identity verification performed before the procedure, the moving information acquisition unit 331 needs to acquire at least the user's mobile phone number from the moving information 220 and output the acquired phone number to the identity verification unit 332. This is because the user's mobile phone number is used for identity verification by the identity verification unit 332. In this case, when the identity of the user and the subject related to the procedure requested by the user is confirmed in the identity verification, the moving information acquisition unit 331 acquires the remaining information (information other than the user's mobile phone number from the moving information 220).

[0060] The identity verification unit 332 verifies the identity of the user and the subject of the procedure requested by the user. The identity verification unit 332 references the procedure information 321 and acquires the user's mobile phone number. The identity verification unit 332 uses the acquired mobile phone number to search the customer information 320 and judges whether or not there is customer information 320 in which a telephone number identical to the user's mobile phone number is registered. If there is customer information 320 in which a telephone number identical to the user's mobile phone number is registered, it is determined that the customer who has signed up for a mobile phone with the same telephone number as the user's mobile phone number is not a fictitious person but an actual person. It is also determined that the customer's mobile phone is not a mobile phone that has been obtained illegally.

[0061] Furthermore, when there is customer information 320 in which the same number as the user's mobile phone number is registered, the identity verification unit 332 verifies that the user and the customer (the corresponding customer) corresponding to the customer information 320 linked with the same phone number match. When the user and the corresponding customer match, the identity verification unit 332 determines that the identity of the user and the entity related to the procedure requested by the user has been confirmed.

[0062] In this embodiment, the user is asked to respond with information (specific information) that can identify the corresponding customer, thereby confirming that the user and the corresponding customer match. The specific information is, for example, information about matters that only the corresponding customer can (presumably) know. By having the user respond with "matters that only the corresponding customer can know," it is confirmed that the user and the corresponding customer match. In the following, an example will be described in which "the password used by the corresponding customer to log in to a corporate account" is used as "matters that only the corresponding customer can know."

[0063] The password here may be at least information shared between the corresponding customer and the corporate account and not disclosed to others. It may be information notified by the corporate account when the corresponding customer follows the corporate account, may be information set by the corresponding customer and notified to the corporate account, or may be information changed by the corresponding customer after being set by the corporate account. In addition, the "items that only the corresponding customer knows" are not limited to passwords. The "items that only the corresponding customer knows" may be information shared between the corresponding customer and the corporate account in the process of the corresponding customer following the corporate account and subsequently exchanging information with the corporate account, and may be information not disclosed to others. Instead of a password, biometric information such as a user's fingerprint or face may be used as the specific information.

[0064] If there is customer information 320 of a customer with the same registered mobile phone number as the user, the identity verification unit 332 creates a message displaying a one-time URL. A one-time URL is a URL with restrictions, such as being accessible only once, or only during a limited time period or a limited number of times. The identity verification unit 332 then sends the created message to the telephone number of the user terminal 10. Here, it is assumed that the site corresponding to the one-time URL is set to display a screen showing an input field for the customer to input a password for logging in to the company account, and a send button for sending the text entered in the input field.

[0065] In this case, the message may include a comment along with the one-time URL. The comment may, for example, request the user to access the one-time URL shown in the message and verify their identity, and may inform the user that the move procedure will not be carried out unless identity verification is performed, or that the one-time URL will expire.

[0066] The user visually checks the message sent from the information management server 30 and accesses the one-time URL indicated in the message. The user enters a password (a password for the corresponding customer to log in to the company account) in the input field according to the screen displayed on the site corresponding to the URL. The user also touches the send button after checking the password entered in the input field. This causes the password entered by the user to be notified to the information management server 30.

[0067] The identity verification unit 332 acquires the password entered by the user. The identity verification unit 332 compares the acquired password with the customer information 320 of the corresponding customer. If the acquired password matches the password set in the customer information 320 of the corresponding customer, the identity verification unit 332 determines that the user and the corresponding customer are the same. In other words, it determines that the identity of the user and the entity related to the procedure requested by the user has been confirmed. The identity verification unit 332 outputs the result of the identity verification (confirmation result) to the procedure execution unit 333.

[0068] The procedure execution unit 333 executes the procedure requested by the user. The procedure execution unit 333 obtains the result of identity verification from the identity verification unit 332. When the identity verification unit 332 confirms that the user is the same as the subject of the procedure requested by the user, the procedure execution unit 333 executes the procedure.

[0069] The procedure execution unit 333 first performs a process of obtaining consent from the user to link information. Here, "linking information" means transmitting personal information used in the procedure to the procedure destination device (the administrative procedure window server 40, the lifeline provider server 60, or the contractor server 70). For example, the procedure execution unit 333 creates a message asking whether the user agrees to link information, and transmits the created message to the telephone number of the user terminal 10. When the procedure execution unit 333 receives a response from the user terminal 10 indicating consent to linking information, the procedure execution unit 333 obtains information necessary for the procedure from the procedure information 321 or the moving procedure window server 20, and transmits the obtained information to the procedure destination (the administrative procedure window server 40, the lifeline provider server 60, or the contractor server 70). Then, the procedure execution unit 333 receives the procedure result from the procedure destination.

[0070] The device control unit 334 comprehensively controls the information management server 30. For example, the device control unit 334 outputs the moving information 220 received by the communication unit 31 from the moving procedure window server 20 to the moving information acquisition unit 331. The device control unit 334 transmits a message created by the identity verification unit 332 or the procedure execution unit 333 to the user terminal 10 via the communication unit 31, and when a response to the message is obtained from the user terminal 10, outputs the content of the response to the identity verification unit 332 or the procedure execution unit 333.

[0071] The number determination unit 335 cooperates with the moving procedure window server 20 to determine (confirm) whether there is an error in the mobile phone number of the user applied for by the user. When the number determination unit 335 determines that there is no error in the mobile phone number of the user, it confirms the number. In other words, when the number determination unit 335 determines that there is no error in the mobile phone number of the user, it causes the moving information acquisition unit 331 to acquire the error-free (confirmed) mobile phone number.

[0072] For example, the number determination unit 335 notifies the moving procedure office server 20 that the mobile phone number has been determined. As a result, the moving procedure office server 20 notifies the information management server 30 of the determined mobile phone number (and all or part of the corresponding moving information 220). Alternatively, the number determination unit 335 may notify the moving procedure office server 20 that the mobile phone number has been determined, and output the determined mobile phone number to the moving information acquisition unit 331. The method by which the number determination unit 335 determines the mobile phone number will be explained in detail later.

[0073] FIG. 6 is a diagram showing an example of the configuration of customer information 320 according to the embodiment. The customer information 320 is created for each customer when a customer account is created for following a corporate account and exchanging information with the corporate account. When a customer account is created, the information management server 30 performs, for example, identity verification of the customer, and if the identity is verified, acquires the customer information 320 and stores the acquired information in the storage unit 32. The customer information 320 includes items such as a customer information ID, a mobile phone number, a login PW (password), and customer attribute information. The customer information ID is identification information that uniquely identifies the customer information 320. The mobile phone number is a telephone number notified by the mobile carrier server 80 when the customer follows the corporate account. The login PW is a password for logging in to the corporate account. The customer attribute information is attribute information of a customer corresponding to the customer information 320 identified by the customer information ID. The customer attribute information includes items such as a name, an address, a date of birth, a driver's license number, and an account number. The customer's personal information, such as the customer's name, address, date of birth, driver's license number, and account number, is obtained by inputting the customer's name when the customer registers for a corporate account.

[0074] FIG. 7 is a diagram showing an example of the configuration of the procedure information 321 according to the embodiment. The procedure information 321 is created for each moving information 220 notified from the moving procedure window server 20. The procedure information 321 includes items such as a procedure information ID, a moving information ID, a result of identity verification, consent to information linkage, user attribute information, and moving-related information. The procedure information ID is identification information that uniquely identifies the procedure information 321. The moving information ID is the moving information ID of the moving information 220 associated with the procedure information 321 identified by the procedure information ID. The result of identity verification is the result of identity verification performed by the identity verification unit 332. The consent to information linkage is information indicating whether consent to information linkage performed by the procedure execution unit 333 has been obtained. The user attribute information is the user attribute information of the moving information 220 identified by the moving information ID. The moving-related information is the moving-related information of the moving information 220 identified by the moving information ID.

[0075] FIG. 8 is a sequence diagram showing the flow of a process for creating customer information 320 according to the embodiment. (Step S30) When a user performs an operation to start the calling application, such as by touching the icon of the calling application displayed on the screen, the user terminal 10 transmits a request to start the calling application to the mobile carrier server 80. (Step S31) When the mobile carrier server 80 receives a request to start the calling application from the user terminal 10, the mobile carrier server 80 starts the calling application on the user terminal 10, for example, by transmitting a chat screen of the calling application to the user terminal 10. (Step S32) When a user performs an operation to follow a company account set in a calling application, such as by touching a company account displayed on the screen of the calling application, the user terminal 10 sends a request to follow the company account to the mobile carrier server 80.

[0076] (Step S33) Meanwhile, the information management server 30 periodically (for example, once a day) queries the mobile carrier server 80 and requests a list (customer list) showing the mobile phone numbers of customers who follow the company account. (Step S34) In response to an inquiry from the information management server 30, the mobile carrier server 80 transmits to the information management server 30 a list of mobile phone numbers of customers who follow the company account, excluding fraudulent numbers, as a customer list. (Step S35) The information management server 30 uses the customer list notified by the mobile carrier server 80 to newly create customer information 320 relating to the customers who follow the company account. (Step S36) The information management server 30 notifies the customers who follow the company account of a message and prompts them to register their personal information in the company account. Here, the information management server 30 may set a password for the customers to log in to the company account. (Step S37) The user terminal 10 responds to the message notified by the information management server 30 and transmits the customer's personal information to the information management server 30 . (Step S38) The information management server 30 uses the personal information of the customer notified by the user terminal 10 to update the customer information 320 of the customer.

[0077] FIG. 9 is a sequence diagram showing the flow of processing performed by the moving procedure service providing system 1 according to the embodiment.

[0078] This sequence diagram shows the processing flow when first only a portion of the moving information 220 (the mobile phone number of the user terminal 10) is notified from the moving procedure window server 20 to the information management server 30, and then the remaining moving information 220 is notified after identity verification is completed.

[0079] (Step S40) The user terminal 10 notifies the moving procedure window server 20 of an application to use the moving procedure service. The user terminal 10 applies for use, for example, by inputting the necessary information according to an input form related to the application displayed on the portal site of the moving procedure window server 20 and performing an operation to send the input information. When applying for use, the content of the procedure to be requested from the moving procedure service and the user's mobile phone number are notified to the moving procedure window server 20. (Step S41) The moving procedure window server 20 executes a process for determining the mobile phone number of the user (number determination process). The process for determining the mobile phone number of the user will be described in detail later. (Step S42) When the mobile phone number of the user is confirmed, the moving procedure window server 20 notifies the information management server 30 of the mobile phone number of the user. Prior to this process, the moving procedure window server 20 may obtain consent to link the user's moving information with the information management server 30. In this case, for example, the moving procedure window server 20 displays a screen on a portal site for the user to select a link destination for the moving information. The moving procedure window server 20 displays the company account corresponding to the information management server 30 as a candidate for a link destination for the moving information. Then, when the moving procedure window server 20 receives a notification from the user terminal 10 to select the company account corresponding to the information management server 30 as a link destination for the moving information and the user's mobile phone number is confirmed, the moving procedure window server 20 notifies the information management server 30 of the user's mobile phone number.

[0080] (Step S43) The information management server 30 acquires the user's mobile phone number and creates procedure information 321 based on the acquired phone number. (Step S44) The information management server 30 creates a one-time URL. Here, when the information management server 30 receives the user's mobile phone number from the moving procedure window server 20, it refers to the customer information 320 based on the received mobile phone number of the user. When the information management server 30 stores customer information 320 of a customer (corresponding customer) who has signed up for a mobile phone to which the same number as the user's mobile phone number is assigned, the information management server 30 creates a one-time URL. (Step S45) The information management server 30 notifies the telephone number of the user terminal 10 of a message with the one-time URL, which displays the created one-time URL, via the company account. The message may include a comment. The comment may include, for example, a request to access the one-time URL shown in the message and verify the user's identity, and may include information such as the fact that the moving procedure will not be carried out unless the user's identity is verified and the expiration date of the one-time URL.

[0081] (Step S46) The user accesses the site corresponding to the one-time URL according to the message notified from the information management server 30. The user follows the screen displayed on the site to input information that can identify the corresponding customer (such as a password used by the corresponding customer to log in to a corporate account, an example of "specific information") and performs an operation to transmit the input information. As a result, information that only the corresponding customer knows (such as a password used by the corresponding customer to log in to a corporate account) is notified to the information management server 30 as a response from the user terminal 10.

[0082] (Step S47) The information management server 30 acquires the password entered by the user and performs identity verification based on the acquired password. The information management server 30 compares the password entered by the user with the password shown in the customer information 320 of the corresponding customer. If the two passwords match, the information management server 30 determines that identity verification has been successful. On the other hand, if the two passwords do not match, or if the password is not entered into the site corresponding to the one-time URL within a predetermined time limit, the information management server 30 determines that identity verification has not been successful. In this case, for example, the information management server 30 may notify the moving procedure window server 20, etc., that the identity verification of the user has not been successful.

[0083] (Step S48) If the information management server 30 can verify the identity of the user, it creates a message to the telephone number of the user terminal 10 to confirm consent to information sharing. The message may, for example, request a response as to whether or not the user consents to sending personal information required for the procedure to the procedure destination, and indicate that if the user does not consent, personal information will not be sent to the procedure destination. Note that the information sharing here includes the information management server 30 acquiring the user's moving information 220 from the moving procedure counter server 20. (Step S49) The information management server 30 notifies the user terminal 10 of the message created in step S48 via the company account. For example, the message may include a question such as "May I send personal information required for the procedure to the procedure destination?" along with selection buttons such as "Yes" and "No" for the user to indicate whether or not they agree. (Step S50) The user visually checks the message notified from the information management server 30 and touches either the selection button showing "Yes" or "No." As a result, a response message showing whether the user agrees or not is notified from the user terminal 10 to the information management server 30.

[0084] (Step S51) If the response message from the user terminal 10 indicates that the user agrees, the information management server 30 requests the moving procedure counter server 20 for the user's moving information 220 (information other than the mobile phone number). (Step S52) In response to a request from the information management server 30, the moving procedure window server 20 transmits the user's moving information 220 (information other than the mobile phone number) to the information management server 30. (Step S53) The information management server 30 acquires the user's moving information 220 (information other than the mobile phone number) and updates the procedure information 321 based on the acquired information.

[0085] In the above sequence diagram, the flow is described for the case where the customer information 320 is created in step S43, and then identity verification is performed in steps S44 to S47, but the flow is not limited to this. The information management server 30 may create the customer information 320 after identity verification.

[0086] Also, in step S45, the information management server 30 may notify the telephone number of the user terminal 10 of the one-time URL via the destination business with which the corporate account is linked. In this case, the information management server 30 sends the one-time URL, but it appears to the user of the user terminal 10 as if the one-time URL was sent from the destination business. Such aspects are included in the configuration in which "the information management server 30 notifies the telephone number of the user terminal 10 of the one-time URL."

[0087] Also, in step S49, a case has been described in which the information management server 30 notifies the telephone number of the user terminal 10 of a message confirming consent to information sharing. However, this is not limited to this. The moving procedure counter server 20 may notify a message confirming consent to information sharing. In this case, in step S48, if the information management server 30 has been able to verify the identity of the user, it notifies the moving procedure counter server 20 of that fact. When the moving procedure counter server 20 receives notification from the information management server 30 that the identity has been verified, it creates a message confirming consent to information sharing and notifies the created message to the telephone number of the user terminal 10.

[0088] Here, the process of determining the user's mobile phone number will be described in detail.

[0089] When the moving procedure window server 20 receives a usage application from the user terminal 10, it creates a user code. The user code is information that identifies the user. For example, the moving procedure window server 20 uses a randomly generated number or character string (random key) as the user code. Alternatively, the moving procedure window server 20 may use a randomly generated number or character string (random key) linked with the user's personal information (date of birth, kana name, etc.) as the user code. The user's personal information such as date of birth and kana name is notified to the moving procedure window server 20 from the user terminal 10 by, for example, inputting the personal information into a predetermined input form screen for applying to use the moving procedure service at the time of application. Alternatively, all or part of the information stored in the user attribute information section of the moving information 220 may be used as the user's personal information.

[0090] The moving procedure window server 20 creates an encryption code by encrypting the user code and mobile phone number. In the following explanation, the information before being encrypted in the encryption code (here, the user code and mobile phone number) is referred to as "pre-encryption information". The moving procedure window server 20 creates the encryption code by encrypting the pre-encryption information using, for example, a pre-stored encryption key. Alternatively, the encryption may be performed by calculating a hash value of the pre-encryption information, and using the calculated hash value as the encryption code.

[0091] The moving procedure window server 20 displays the mobile phone number and encryption code applied by the user on the screen on which the user applied for use. At this time, the moving procedure window server 20 displays information (hereinafter referred to as link information) indicating a link (so-called deep link) that connects to a talk room where messages are exchanged using a calling app, together with the encryption code, etc.

[0092] 10A, 10B, and 10C show examples of screens that the moving procedure window server 20 displays on the portal site.

[0093] Fig. 10A shows an example of a screen that moving procedure window server 20 displays on the portal site when a user applies for use. As shown in the example of this figure, moving procedure window server 20 displays the user's mobile phone number (reference symbol N1), encryption code (reference symbol N2), and button L along with the text providing guidance "Click the button below...". Link information is embedded in button L. Note that in the example of this figure, the user's mobile phone number is shown as "customer phone number" and the encryption code as "passcode". The screen that the moving procedure window server 20 displays on the portal site is not limited to the example in FIG. 10A. For example, when link information is embedded in the button L such that a calling application is launched based on the user's mobile phone number (N1) and encryption code (N2), the moving procedure window server 20 may display only the button L on the portal site. Also, for example, when link information is embedded in the button L such that a calling application is launched based on the user's mobile phone number (N1), but the contents of the message (e.g., encryption code (N2)) to be notified to the talk room of the launched calling application are not automatically set, it is necessary to display not only the button L but also the encryption code (N2) on the portal site.

[0094] 10A displayed on the display unit 14, the user visually checks the phone number, and then taps (touches) the button L. By tapping the button L, a calling application is launched based on the link information embedded in the button L, and a talk room of the launched calling application is displayed.

[0095] FIG. 10B shows an example of a screen displayed on the display unit 14 when the button L is tapped. As shown in the example of this figure, when the button L is tapped, a talk room of a calling application is displayed. In the example of this figure, a talk room in which the communication partner is a corporate account is shown. The communication partner of the talk room is not limited to a corporate account, and may be set arbitrarily by link information embedded in the button L. For example, the communication partner of the talk room may be set to the moving procedure window server 20.

[0096] Also, as shown in the example of this figure, the contents of the message to be notified (e.g., encryption code) may be automatically set in the message input field MG of the chat room. In this case, the contents of the message to be notified may be automatically set by link information embedded in the button L. Alternatively, the user may manually input the contents of the message to be notified in the message input field MG. When the user taps the send button B, the message (encryption code) is sent to the communication partner.

[0097] 10C shows an example of a screen displayed on the display unit 14 when the send button B is tapped. As shown in the example of this figure, when the send button B is tapped, a message is notified, and for example, a balloon image MG1 containing the contents of the notified message (encryption code) is displayed. In the example of this figure, a balloon image MG2 is shown containing a response message indicating that a response has been made to the notified message and that the user's mobile phone number has been confirmed.

[0098] In this embodiment, a process of confirming the mobile phone number applied for by the user is executed by the number confirmation unit 335 of the information management server 30. If the communication partner in the talk room is a corporate account, the contents of the message are notified to the information management server 30. In this case, the information management server 30 executes a process of confirming the phone number by the number confirmation unit 335, and notifies the result of the process as a response to the notified message as shown in FIG. 10C.

[0099] If the communication partner of the talk room is set to the moving procedure office server 20, the moving procedure office server 20 is notified of the contents of the message. In this case, the moving procedure office server 20 responds, for example, by expressing gratitude for receiving the message. The moving procedure office server 20 then transmits the contents of the received message (encryption code) and the mobile phone number (the mobile phone number notified to the moving procedure office server 20 by the carrier as the source of the message) to the information management server 30. The information management server 30 performs a process of determining the phone number using the number determination unit 335, and transmits the processing result to the moving procedure office server 20. The moving procedure office server 20 notifies the talk room of the processing result received from the information management server 30.

[0100] FIG. 11 shows another example of a screen that the moving procedure window server 20 displays on the portal site. FIG. 11 shows an example of a portal site provided by a Web service (hereinafter, referred to as a Web version of the portal site). When a user uses a PC or the like to use the moving procedure service, the user accesses the Web version of the portal site. In this case, when a user applies for use, the moving procedure window server 20 displays an image with a two-dimensional code C as shown in the example of this figure on the portal site. Link information is embedded in the two-dimensional code C. In this case, the user acquires the link information embedded in the two-dimensional code C by, for example, capturing an image of the two-dimensional code C with the user terminal 10, and based on the acquired link information, a talk room as shown in FIG. 10B is displayed.

[0101] FIG. 12 is a sequence diagram showing the flow of processing performed by the moving procedure service providing system 1 according to the embodiment.

[0102] (Step S60) The user terminal 10 submits an application for use of the moving procedure service to the portal site provided by the moving procedure window server 20, in the same manner as in step S40. (Step S61) The moving procedure window server 20 creates a user code. The user code is identification information that uniquely identifies a user. For example, the moving procedure window server 20 uses a randomly generated number or character string (key) as the user code. Alternatively, the user code is created by concatenating a randomly generated number or character string (key) with the user's personal information (date of birth, kana name, etc.). (Step S62) The moving procedure window server 20 creates an encryption code. The encryption code is information obtained by encrypting the user code and mobile phone number (information before encryption). The moving procedure window server 20 encrypts the information before encryption, for example, using a pre-stored encryption key. Alternatively, the encryption code may be a hash value of the information before encryption. (Step S63) The moving procedure window server 20 creates link information. The link information is information that connects to a talk room. The moving procedure window server 20 may create link information that automatically sets the encryption code to be notified in the message input field MG of the talk room. (Step S64) The moving procedure window server 20 displays a button L with embedded link information on the portal site. In this case, the moving procedure window server 20 may display a guide such as "Click the button below..." as shown in Fig. 10A, as well as the mobile phone number and encryption code applied for by the user. (Step S65) The user clicks (tap) the button L of the portal site displayed on the display unit 14 of the user terminal 10. This causes the process indicated in the link information to be executed. (Step S66) The user terminal 10 launches the calling application based on the link information. If the calling application is not installed in the user terminal 10, a message prompting the user to install the calling application is displayed, and for example, a site where the calling application can be downloaded is displayed. (Step S67) The user terminal 10 displays the talk room of the calling application based on the link information. The content of the message to be notified (encryption code) is automatically set in the message input field of the talk room. A mobile phone number is embedded as part of the encryption code. Alternatively, the content of the message to be notified (encryption code) is manually input by the user. (Step S68) When the user taps the send button B, a message is sent from the user terminal 10 to the information management server 30, and the user's encryption code is sent to the information management server 30.

[0103] (Step S69) The information management server 30 receives a message from the user terminal 10 and acquires the user's encryption code. The number determination unit 335 of the information management server 30 decrypts the encryption code. If the encryption code has been encrypted using an encryption key, the number determination unit 335 decrypts the encryption code using a decryption encryption key corresponding to the encryption of the encryption code. Note that if the encryption code is a hash value, the number determination unit 335 does not decrypt the encryption code.

[0104] (Step S70) The number determination unit 335 determines (confirms) whether the notified encryption code has been tampered with. If the encryption code has been encrypted using an encryption key, the number determination unit 335 determines whether the encryption code has been tampered with based on the result of decrypting the encryption code. For example, if the number determination unit 335 cannot decrypt the encryption code, it determines that the encryption code has been tampered with. On the other hand, if the number determination unit 335 can decrypt the encryption code, it determines that the encryption code has not been tampered with.

[0105] If the encryption code is a hash value, the number determination unit 335 determines whether or not the hash value received in the message (called the first hash value) matches a hash value calculated from pre-encryption information (the second hash value). If the first hash value matches the second hash value, the number determination unit 335 determines that the encryption code has not been tampered with. On the other hand, if the first hash value does not match the second hash value, the number determination unit 335 determines that the encryption code has been tampered with.

[0106] When the number determination unit 335 calculates a hash value (second hash value) from pre-encryption information, the number determination unit 335 needs to obtain the pre-encryption information in advance. In this case, for example, when the moving procedure window server 20 creates a user code in step S61, the moving procedure window server 20 may notify the information management server 30 of the user code and the mobile phone number of the user as pre-encryption information. Alternatively, the number determination unit 335 may acquire a hash value (second hash value) in advance and determine whether the previously acquired hash value (second hash value) matches the hash value (first hash value) received in the message. In this case, for example, when the encryption code (hash value) is created by the moving procedure window server 20 in step S62, the number determination unit 335 notifies the information management server 30 of the encryption code created by the moving procedure window server 20. The number determination unit 335 may also perform identity verification based on a mobile phone number. For example, the number determination unit 335 determines that identity verification has been performed correctly when the mobile phone number of the user previously acquired matches the mobile phone number indicated in the currently acquired encryption code.

[0107] (Step S71) The number determination unit 335 judges (confirms) whether there is an error in the mobile phone number. The number determination unit 335 judges whether the mobile phone number (called the first number) obtained by decrypting the encryption code received in the message matches the mobile phone number (called the second number) notified by the carrier as the source of the message. If the first number and the second number match, the number determination unit 335 judges that there is no error in the mobile phone number applied by the user. On the other hand, if the first number and the second number do not match, the number determination unit 335 judges that there is an error in the mobile phone number applied by the user. If the encryption code received in the message has not been tampered with and the mobile phone number applied by the user is correct, the number confirmation unit 335 confirms the number. In this case, in addition to the mobile phone number of the user, it is possible to confirm whether the personal information of the user (date of birth, kana name, etc.) matches, and it is possible to confirm whether the personal information of the user is correct. (Step S72) When the number determination unit 335 determines the mobile phone number applied for by the user, it notifies the moving procedure window server 20 that the mobile phone number has been determined. When the number determination unit 335 determines the mobile phone number applied for by the user, it may be configured to link it to the customer information 320. Specifically, the number determination unit 335 extracts the customer information 320 in which the determined mobile phone number is stored, and links the customer of the extracted customer information 320 with the user who applied for the determined mobile phone number. Thereby, when linking with the customer information 320, it is possible to check whether the user's personal information (date of birth, kana name, etc.) matches in addition to the user's mobile phone number, and it is possible to improve the certainty that the user's personal information is free of errors.

[0108] As described above, the information management server 30 of the embodiment includes a number determination unit 335, a moving information acquisition unit 331 (an example of a "telephone number acquisition unit"), a storage unit 32, and a procedure execution unit 333. The storage unit 32 stores customer information 320. The customer information 320 is information about a customer who uses a corporate account set in a calling application, and is information including a mobile phone number of the customer who has a contract with a mobile carrier. The number determination unit 335 acquires a message notified by the user terminal of the user who requested the procedure using the calling application. If the mobile phone number applied when the user requested the procedure and the mobile phone number that is the notification source of the message match, the number determination unit 335 determines that the mobile phone number of the user is correct. The moving information acquisition unit 331 acquires the mobile phone number of the user that is determined to be correct by the number determination unit 335. The procedure execution unit 333 executes the procedure requested by the user using the mobile phone number of the user acquired by the moving information acquisition unit 331.

[0109] As a result, the information management server 30 of the embodiment can carry out various procedures using the confirmed number. Therefore, if the mobile phone number applied for by the user is notified from another mobile phone to which that number is not assigned, or if the wrong number is applied for due to a customer's input error, the number is not confirmed, and it is possible to prevent a situation in which a message is notified to a terminal of another person other than the user terminal 10 of the user.

[0110] In addition, in the information management server 30 of the embodiment, the number determination unit 335 obtains information including the encryption code and the mobile phone number applied for by the user in the message. The encryption code is information obtained by encrypting the pre-encryption information. The pre-encryption information is information consisting of a user code and a mobile phone number, and is an example of "user identification information for identifying a user". The number determination unit 335 judges whether the encryption code has been tampered with. If the encryption code has not been tampered with and the mobile phone number notified in the message matches the mobile phone number that is the source of the message, the number determination unit 335 determines the mobile phone number of the user. In this way, in the information management server 30 of the embodiment, it is possible to prevent the number from being determined when the encryption code has been tampered with. Therefore, it is possible to suppress fraudulent procedures due to user impersonation, etc.

[0111] Moreover, the information management server 30 of the embodiment further includes an identity verification unit 332. The identity verification unit 332 performs identity verification to determine whether the user and the procedure subject who is the subject of the procedure requested by the user are the same person, based on the telephone number acquired by the moving information acquisition unit 331 and the customer information 320 stored in the storage unit 32. The procedure execution unit 333 executes the procedure requested by the user according to the result of the identity verification by the identity verification unit 332. As a result, the information management server 30 of the embodiment can perform identity verification based on an error-free (confirmed) mobile phone number, and can perform the procedure more accurately.

[0112] (Modification of the embodiment) Fig. 13 is a sequence diagram showing the flow of processing performed by the moving procedure service providing system 1 according to a modified embodiment. In this modified embodiment, differences from the above-mentioned embodiment will be described, and the same reference numerals will be used to designate the same components as those in the above-mentioned embodiment, and the description thereof will be omitted. Specifically, steps S80-S81, S85-S92, and S94 are similar to steps S60-S61, S62-S70, and S72 in the above-mentioned embodiment, and therefore the description thereof will be omitted. That is, in this embodiment, steps S82, S83, and S71 are different from the above-mentioned embodiment.

[0113] (Step S82) The moving procedure window server 20 transmits to the information management server 30 the user code created in step S81 and the mobile phone number applied for by the user. (Step S82) The information management server 30 receives the user code and the mobile phone number applied for by the user from the moving procedure counter server 20, and stores the received information in the memory unit 32. (Step S84) The moving procedure window server 20 creates an encrypted code by encrypting the user code. In this case, the pre-encryption information is only the user code, and does not include the mobile phone number. The method by which the moving procedure window server 20 performs encryption is the same as in step S63, so a description thereof will be omitted. (Step S93) The number determination unit 335 checks the mobile phone number. The number determination unit 335 judges whether the mobile phone number (referred to as the first number) received from the moving procedure window server 20 in step S82 matches the mobile phone number (referred to as the second number) notified by the carrier as the source of the message notification. If the first number and the second number match, the number determination unit 335 judges that the mobile phone number applied by the user has been confirmed. On the other hand, if the first number and the second number do not match, the number determination unit 335 judges that the mobile phone number applied by the user has not been confirmed. In this case, the device control unit 334 may also determine whether the user code (referred to as the first code) received from the moving procedure window server 20 in step S82 matches the user code (referred to as the second code) obtained by decrypting the encrypted code notified by the carrier as the source of the message notification. In this case, in addition to the mobile phone number of the user, it is possible to check whether the personal information of the user (such as date of birth and kana name) matches, and it is possible to check whether there is an error in the personal information of the user.

[0114] As described above, in the information management server 30 according to the modified embodiment, the number determination unit 335 obtains the mobile phone number applied for by the user from the moving procedure office server 20 (the procedure office server that serves as the office for accepting the procedure). The number determination unit 335 obtains information including the encryption code in the message. The encryption code is information obtained by encrypting the pre-encryption information. The pre-encryption information here is a user code, which is an example of "user identification information that identifies the user". The number determination unit 335 judges whether the encryption code has been tampered with. If the encryption code has not been tampered with and the mobile phone number notified by the moving procedure office server 20 matches the mobile phone number that is the source of the message, the number determination unit 335 determines the mobile phone number of the user. In this way, in the information management server 30 according to the embodiment, it is possible to prevent the number from being determined when the encryption code has been tampered with. Therefore, it is possible to suppress fraudulent procedures due to user impersonation, etc. The user code may be composed of only a random key. Although the accuracy may be lower than when using the user's personal information (such as date of birth or kana name), it is possible to check for errors in the user's personal information using only a random key. In addition, the pre-encryption information may consist of only the user's mobile phone number.

[0115] Although an embodiment of the present invention has been described in detail above with reference to the drawings, the specific configuration is not limited to this embodiment, and designs that do not deviate from the gist of the present invention are also included. [Explanation of symbols]

[0116] 1. Moving procedure service provision system 10...User terminal 20...Moving procedure window server 30...Information management server 40...Administrative procedure window server 50…Municipal server 60…Lifeline provider server 70…Vendor server 80…Mobile carrier server 32...Storage section 320…Customer information 321...Procedural information 330…Corporate Account Control Unit 331...Moving information acquisition unit (telephone number acquisition unit) 332…Identification Department 333...Procedure Execution Division 334...Device control section 335…Number confirmation section

Claims

1. A number determination unit which receives a message sent from a user terminal of a user who has requested a procedure using a calling application addressed to a mobile phone number, and determines that the mobile phone number of the user is correct if the mobile phone number submitted when the user requested the procedure matches the mobile phone number sent from which the message was sent; a telephone number acquisition unit that acquires the mobile phone number of the user that is determined to be correct by the number determination unit; a procedure execution unit that executes a procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit; Equipped with The number determination unit Acquire information including a cryptographic code in which user identification information identifying the user in the message is encrypted and a mobile phone number applied for by the user, determining whether the user identification information has been tampered with; If the user identification information has not been tampered with and the mobile phone number notified in the message matches the mobile phone number of the sender of the message, it is determined that the mobile phone number of the user is correct. Information management server.

2. A number determination unit which receives a message sent from a user terminal of a user who has requested a procedure using a calling application addressed to a mobile phone number, and determines that the mobile phone number of the user is correct if the mobile phone number submitted when the user requested the procedure matches the mobile phone number sent as the source of the message; a telephone number acquisition unit that acquires the mobile phone number of the user that is determined to be correct by the number determination unit; a procedure execution unit that executes a procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit; Equipped with The number determination unit, The mobile phone number applied for by the user is obtained from a procedure window server that serves as a window for accepting procedures; obtaining information including an encryption code obtained by encrypting user identification information that identifies the user in the message; If the user identification information has not been tampered with and the mobile phone number acquired from the procedure window server matches the mobile phone number of the sender of the message, it is determined that there is no error in the user's mobile phone number. Information management server.

3. A storage unit that stores customer information regarding a customer who uses a corporate account set in the calling application, the customer information including a mobile phone number that the customer has contracted with a mobile carrier; and an identity verification unit that performs identity verification to determine whether the user is the same as a procedure subject that is a subject of a procedure requested by the user, based on the telephone number acquired by the telephone number acquisition unit and the customer information stored in the storage unit, the procedure execution unit executes the procedure requested by the user in accordance with a result of the identity verification by the identity verification unit.

3. The information management server according to claim 1 or 2.

4. An information management method performed by an information management server which is a computer device, comprising: A number determination unit obtains a message sent from a user terminal of a user who has requested the procedure using a calling application addressed to the mobile phone number, and if the mobile phone number applied for when the user requested the procedure matches the mobile phone number sent as the message source, determines that the mobile phone number of the user is correct; A telephone number acquisition unit acquires the mobile phone number of the user that is determined to be correct by the number determination unit, a procedure execution unit executes a procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit; The number determination unit, Acquire information including a cryptographic code in which user identification information identifying the user in the message is encrypted and a mobile phone number applied for by the user, determining whether the user identification information has been tampered with; If the user identification information has not been tampered with and the mobile phone number notified in the message matches the mobile phone number of the sender of the message, it is determined that the mobile phone number of the user is correct. Information management method.

5. A number determination unit obtains a message sent from a user terminal of a user who has requested a procedure using a calling application addressed to a mobile phone number, and if the mobile phone number applied for when the user requested the procedure matches the mobile phone number sent as the source of the message, determines that there is no error in the mobile phone number of the user; A telephone number acquisition unit acquires the mobile phone number of the user that is determined to be correct by the number determination unit, a procedure execution unit executes a procedure requested by the user using the mobile phone number of the user acquired by the telephone number acquisition unit; The number determination unit obtains the mobile phone number applied for by the user from a procedure window server that serves as a window for accepting procedures, obtaining information including an encryption code obtained by encrypting user identification information that identifies the user in the message; If the user identification information has not been tampered with and the mobile phone number acquired from the procedure window server matches the mobile phone number of the sender of the message, it is determined that there is no error in the user's mobile phone number. Information management method.

6. 4. A program for causing a computer to operate as the information management server according to claim 1, the program causing the computer to function as each unit included in the information management server.

Images