Information processing terminal

Abstract

To provide an information processing terminal that is also adaptable to an application other than settlement and capable of reading necessary information in a short time from both of a contact type information storage medium and a non-contact type information storage medium.SOLUTION: Disclosed is an information processing terminal including: a contact type reading unit capable of reading information from an information storage medium; a non-contact type reading unit capable of reading information from an information storage medium; and an information processing unit that processes the information read by each of the contact type reading unit and the non-contact type reading unit. The information processing unit processes the information read by the contact type reading unit or the information read by the non-contact type reading unit while maintaining each of the contact type reading unit and the non-contact type reading unit in a standby state in which information can be read from an information storage medium.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present disclosure relates to an information processing terminal.

Background Art

[0002] There is known a technique in which a payment terminal device performs processing and display for prompting a user to perform a reading operation of a card used for payment after receiving payment-related information such as amount information, payment method, and information on the card brand used for payment from the user through user input.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the conventional technology as described above, since the configuration is such that processing and display for prompting a reading operation of a card used for payment are performed after the user inputs payment-related information, it is difficult to apply it to uses other than payment.

[0005] Therefore, an object of the present disclosure is to provide an information processing terminal applicable to uses other than payment and capable of reading necessary information in a short time from any of contact-type and non-contact-type information storage media.

Means for Solving the Problems

[0006] In one aspect, a contact-type reading unit capable of reading information from an information storage medium, a non-contact-type reading unit capable of reading information from an information storage medium, and an information processing unit that processes information read by each of the contact-type reading unit and the non-contact-type reading unit are provided. The information processing unit provides an information processing terminal that maintains each of the contact-type reading unit and the non-contact-type reading unit in a standby state capable of reading information from an information storage medium, and processes the information read by the contact-type reading unit or the information read by the non-contact-type reading unit.

Advantages of the Invention

[0007] According to the present disclosure, it is possible to provide an information processing terminal applicable to uses other than settlement, which can read necessary information from any of contact-type and non-contact-type information storage media in a short time.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7A

Figure 7B

Figure 7C

Figure 7D

Figure 8

Figure 9

Figure 10

Mode for Carrying Out the Invention

[0009] Hereinafter, each embodiment will be described in detail with reference to the accompanying drawings. Hereinafter, the first user refers to the user who causes the reading terminal 21 to read his / her own information storage medium, and the second user refers to the user who reads information from the information storage medium using the reading terminal 21.

[0010] The information storage medium is arbitrary as long as it has information to be read by the reading terminal 21, and may be in the form of a card, for example, or in the form of a user terminal (for example, a smartphone).

[0011] FIG. 1 is a schematic diagram showing an example of a reading terminal 21 (an example of an information processing terminal) according to the present embodiment. The reading terminal 21 is portable and can be easily carried by hand by the second user. For example, the second user can carry the reading terminal 21 by hand to near the first user who is a client. Further, the reading terminal 21 preferably includes an internal battery and can operate without the need for a wired connection from an outlet.

[0012] The reading terminal 21 may have a display 215, a secure keyboard 217, etc. on the front.

[0013] FIG. 2 is a block diagram showing an example of the internal configuration of the reading terminal 21.

[0014] The reading terminal 21 includes a non-contact reader 211, a contact reader 212, and an information processing unit 213.

[0015] The non-contact reader 211 forms a non-contact reading unit. The position of the non-contact reader 211 in the reading terminal 21 is arbitrary. The non-contact reader 211 may be provided, for example, in an insertion space into which a card-type information storage medium can be inserted. The non-contact reader 211 is connected to the information processing unit 213.

[0016] The non-contact reader 211 can communicate with an information storage medium located within a predetermined distance from the non-contact reader 211 by wireless communication conforming to, for example, the NFC (Near Field Communication) standard. For example, when the information storage medium is located within a predetermined distance from the non-contact reader 211, the non-contact reader 211 can communicate with the information storage medium to retrieve various information from the information storage medium and exchange various information with the information storage medium. In this case, the non-contact reader 211 may be of Type A / B specification, and for payment, various contactless payments such as so-called EMV (Euro pay, MasterCard, VISA protocol) contactless may be realized.

[0017] The non-contact reader 211 is capable of transitioning between a standby state and a non-standby state. The standby state corresponds to a state in which, when an information storage medium is located within a predetermined distance from the non-contact reader 211 in this state, communication with the information storage medium can be immediately started.

[0018] In this embodiment, in the standby state, when an information storage medium is located within a predetermined distance from the non-contact reader 211, the non-contact reader 211 immediately starts communication with the information storage medium and acquires an application ID (identifier) (hereinafter, "AID") from the information storage medium.

[0019] The contact-type reader 212 forms a contact-type reading unit. The position of the contact-type reader 212 in the reading terminal 21 is arbitrary. The contact-type reader 212 may be in the form of a pin pad that can contact the IC (Integrated Circuit) of the inserted information storage medium. The contact-type reader 212 may be provided, for example, on the side portion of the reading terminal 21. In this case, it becomes easy for the first user to set his / her card-type information storage medium against the contact-type reader 212. The contact-type reader 212 is connected to the information processing unit 213.

[0020] The contact-type reader 212 is, for example, a contact-type reader compliant with the EMV standard and can communicate with the IC of the information storage medium. For example, when the information storage medium makes contact, the contact-type reader 212 can communicate with the information storage medium to retrieve various information from the information storage medium and exchange various information with the information storage medium.

[0021] The contact-type reader 212 can transition between a standby state and a non-standby state. The standby state corresponds to a state in which, when the information storage medium makes contact, communication with the information storage medium can be immediately started.

[0022] In this embodiment, when the contact-type reader 212 detects the IC of the information storage medium in the standby state, it immediately starts communicating with the information storage medium and acquires the AID from the information storage medium.

[0023] The information processing unit 213 is, for example, a microcontroller with tamper resistance, and controls and executes all functions of the reading terminal 21 as the main processor.

[0024] As other components, the reading terminal 21 includes an image scan engine barcode 214, a display 215, a secure magnetic head 216, a secure keyboard 217, a buzzer 218, a communication unit 219A based on USB (Universal Serial Bus), a communication unit 219B such as UART (Universal Asynchronous Receiver / Transmitter), and a communication unit 219C based on Bluetooth Low Energy (registered trademark). Each of these components is connected to the information processing unit 213.

[0025] The image scan engine barcode 214 executes a function of reading product barcodes and various two-dimensional codes. The image scan engine barcode 214 may have a function of reading an image (such as a barcode) displayed on the user terminal of the first user.

[0026] The display 215 is arranged on the front part of the reading terminal 21 (see FIG. 1) and displays various information (including messages).

[0027] The secure magnetic head 216 executes a function of reading the magnetic part of a credit card or a card conforming to the JIS2 standard.

[0028] The secure keyboard 217 is arranged on the front part of the reading terminal 21 (see FIG. 1) and is a user interface for the first user. The secure keyboard 217 constitutes a user interface for inputting an encryption key by pressing buttons.

[0029] The buzzer 218 outputs beep sounds for success / failure of payment and acquisition of various information.

[0030] The communication unit 219A executes a function of performing data communication with an external terminal (such as a personal computer) while the external terminal is connected to a USB port.

[0031] The communication unit 219B executes a function of performing data communication with an external terminal while the external terminal is connected to a serial port.

[0032] The communication unit 219C executes a function of performing wireless data communication with an external terminal.

[0033] In addition, as a power supply system, the reading terminal 21 includes a power supply unit 210A, a main battery 210B, a battery gauge 210C, a coin battery 210D, and a charging circuit 210E.

[0034] The power supply unit 210A generates a power supply voltage at which the information processing unit 213 and the like can operate, based on the power from the main battery 210B.

[0035] The main battery 210B is an externally rechargeable battery, and may be, for example, a lithium ion battery. For example, the main battery 210B is connected to the charging circuit 210E. The charging circuit 210E charges the main battery 210B based on the power that can be supplied from an external charger.

[0036] The battery gauge 210C detects the charge state and the like of the main battery 210B, and provides the detection result to the information processing unit 213.

[0037] Unlike the main battery 210B, the coin battery 210D cannot be externally charged. The coin battery 210D supplies power for the RTC (Real-Time Clock: current time) and for storing an encryption key.

[0038] Next, with reference to FIG. 3, the processing executed by the reading terminal 21 of the present embodiment will be described.

[0039] FIG. 3 is a schematic flowchart showing an example of the processing executed by the reading terminal 21 of the present embodiment. Note that a part of the processing shown in FIG. 3 may be realized in cooperation with an information processing apparatus 22 (see FIG. 4) described later.

[0040] The process shown in FIG. 3 may be executed at regular intervals at all times (for example, while the main battery 210B of the reading terminal 21 is normal). In a modification, it may have a power saving mode, and in the power saving mode, the predetermined period may be set longer.

[0041] In step S300, the reading terminal 21 sets each of the non-contact reader 211 and the contact reader 212 in a waiting state simultaneously.

[0042] In step S302, the reading terminal 21 determines whether information to be processed (for example, AID) has been input from either the non-contact reader 211 or the contact reader 212. If the determination result is “YES”, the process proceeds to step S304, and in other cases, the waiting state for detecting the information storage medium is maintained. In FIG. 3, the information to be processed is AID, but it may include other information.

[0043] In step S304, the reading terminal 21 determines whether the information storage medium has been detected by the non-contact reader 211 or whether the information storage medium has been detected by the contact reader 212. For example, the reading terminal 21 may determine whether the information storage medium has been detected by the non-contact reader 211 or whether the information storage medium has been detected by the contact reader 212 based on whether AID has been input from either the non-contact reader 211 or the contact reader 212. That is, the reading terminal 21 makes a determination as to whether either the non-contact reader 211 or the contact reader 212 has functioned (denoted as “IC / NFC determination” in FIG. 3). If the information storage medium has been detected by the non-contact reader 211 (denoted as “NFC” in FIG. 3), the process proceeds to step S314 to execute the second subsequent process, and if the information storage medium has been detected by the contact reader 212 (denoted as “IC” in FIG. 3), the process proceeds to step S306 to execute the first subsequent process.

[0044] In step S306, the reading terminal 21 determines whether the information storage medium is a credit card or a My Number card (an example of the first type) as the type of the information storage medium based on the AID read by the contact-type reader 212. Currently, My Number cards are equipped with an IC chip and NFC (Near Field Communication) and store two types of electronic certificates: an electronic signature certificate and an electronic user authentication certificate.

[0045] Note that in this specification, the type of the information storage medium is a type related to the function. Therefore, for various credit cards (differences in card brands, etc.), since the functions are the same, they are regarded as the same type. If the information storage medium is a credit card, the process proceeds to step S308. If the information storage medium is a My Number card, the process proceeds to step S330.

[0046] In step S308, the reading terminal 21 determines the card brand based on the AID read by the contact-type reader 212.

[0047] In step S310, the reading terminal 21 exits from the processing routine shown in FIG. 3 and executes a settlement process corresponding to the card brand based on the card brand determined in step S308. Note that this type of settlement process is optional and will not be described in detail here.

[0048] In step S314, the reading terminal 21 determines whether the information storage medium is a credit card, a My Number card (an example of the first type), a foreign resident card, or a driver's license, based on the AID read by the non-contact reader 211 as the type of the information storage medium. In other embodiments, instead of or in addition to either or both of the determination of whether it is a foreign resident card or a driver's license, it may be determined whether the information storage medium is a health insurance card. If the information storage medium is a credit card, the process proceeds to step S318. If the information storage medium is a My Number card, the process proceeds to step S330. Also, if the information storage medium is a foreign resident card, the process proceeds to step S322. If the information storage medium is a driver's license, the process proceeds to step S324.

[0049] In step S316, the reading terminal 21 determines the card brand based on the AID read by the non-contact reader 211.

[0050] In step S318, the reading terminal 21 exits from the processing routine shown in FIG. 3 and executes a settlement process according to the card brand based on the card brand determined in step S316. Note that this type of settlement process is optional and will not be described in detail here.

[0051] In step S322, the reading terminal 21 exits from the processing routine shown in FIG. 3 and executes a process according to the foreign resident card. Note that the process according to the foreign resident card is optional and will not be described in detail here.

[0052] In step S324, the reading terminal 21 exits from the processing routine shown in FIG. 3 and executes a process according to the driver's license. Note that the process according to the driver's license is optional and will not be described in detail here.

[0053] In step S330, the reading terminal 21 outputs a PIN input screen for the first user to input a PIN (Personal Identification Number) on the display 215 (see FIG. 1), and enters a standby state for PIN input from the first user. When the first user inputs a PIN via the secure keyboard 217 (see FIG. 1), the process proceeds to step S332.

[0054] In step S332, the reading terminal 21 determines whether the PIN (an example of code input) input from the first user is valid based on the verification result obtained from the My Number card (denoted as "PIN determination" in FIG. 3). For example, the reading terminal 21 sends the PIN input from the first user to the My Number card to obtain the verification result executed in the My Number card. The My Number card generates a verification result by comparing the regular PIN (password) stored in itself with the PIN sent from the reading terminal 21. If the determination result is "YES", the process proceeds to step S334; otherwise, the process proceeds to step S342.

[0055] In step S334, the reading terminal 21 starts the reading process of the My Number card by the non-contact reader 211 or the contact reader 212.

[0056] In step S336, the reading terminal 21 determines whether the reading process has succeeded. If the determination result is "YES", the process proceeds to step S338; otherwise (for example, if a read error occurs), the process proceeds to step S340.

[0057] In step S338, the reading terminal 21 completes the reading process, and when the reading process is completed, the process of FIG. 3 ends.

[0058] In step S340, the reading terminal 21 performs guidance processing for switching to another reading method. For example, if the current reading of the My Number card is performed by the non-contact reader 211, the first user (or the second user) is guided to read the My Number card with the contact reader 212. Also, if the current reading of the My Number card is performed by the contact reader 212, the first user (or the second user) is guided to read the My Number card with the non-contact reader 211. Such guidance processing may be realized, for example, by outputting a message and / or a guidance diagram on the display 215. Also, the guidance processing may be executed by voice or the like.

[0059] In step S342, the reading terminal 21 determines whether the number of failed PIN inputs is equal to or greater than a predetermined number. The predetermined number may be 3 in the case of obtaining an electronic certificate for user authentication from the My Number card, and may be 5 in the case of obtaining an electronic signature certificate from the My Number card. If the determination result is "YES", the process shown in FIG. 3 ends. Otherwise, the process returns to step S330, and a PIN input screen for the user to perform a PIN input again is output to the display 215, and the reading terminal 21 waits for a PIN input from the first user.

[0060] Note that when the number of failed PIN inputs reaches or exceeds the predetermined number, a password lock process is executed on the My Number card. The determination of subsequent processing according to the number of failures may be realized in cooperation with the information processing device 22, rather than by the reading terminal 21 alone. If the first user unlocks the password, the user may apply for password initialization and reset the password at the window of the municipality where the family register is held, together with unlocking the password.

[0061] Incidentally, the My Number card is an information storage medium that can be read by either the non-contact reader 211 or the contact reader 212.

[0062] Therefore, when the first user causes the reading terminal 21 to read the electronic certificate stored in the My Number card, either the non-contact reader 211 or the contact reader 212 can be used.

[0063] Particularly according to this embodiment, as described above, when the reading terminal 21 is not processing the information storage medium, the non-contact reader 211 and the contact reader 212 maintain a standby state simultaneously regardless of whether there is input of information related to settlement. As a result, the first user can cause the reading terminal 21 to read the electronic certificate in the My Number card by using either one as desired without being conscious of which one is in the standby state. Further, when both the non-contact reader 211 and the contact reader 212 are in the standby state, the first user can read the electronic certificate in the My Number card in a short time by using either the non-contact reader 211 or the contact reader 212. Thereby, convenience is improved as compared with a comparative example that requires a predetermined input to transition either or both of the non-contact reader 211 and the contact reader 212 to the standby state.

[0064] Also, according to this embodiment, even if reading of the My Number card cannot be performed by either one of the non-contact reader 211 and the contact reader 212 due to some abnormality (for example, damage to the IC of the My Number card, etc.) ( "NO" in step S336 of FIG. 3), guidance processing (step S340 of FIG. 3) is executed, so the first user can cause the reading terminal 21 to read the electronic certificate in the My Number card by using the other of the non-contact reader 211 and the contact reader 212. Thereby, even if there is damage to the IC of the My Number card, for example, the first user can continue to use it for the purpose related to the reading terminal 21 without reissuing the My Number card or the like.

[0065] Next, with reference to FIG. 4 and later, a usage mode of the reading terminal 21 suitable when the information storage medium is a My Number card will be described.

[0066] FIG. 4 is a schematic diagram showing the overall configuration of the personal information utilization system 1 incorporating the reading terminal 21. In FIG. 4, as other elements related to the personal information utilization system 1 (elements not belonging to the personal information utilization system 1), a My Number card MC (an example of a My Number card), a general-purpose base station 90, an invalidation confirmation service server 92, etc. are also shown. The invalidation confirmation service server 92 is a server related to the Japan Agency for Local Authority Information Systems (J-LIS).

[0067] The personal information utilization system 1 is a system for realizing an identity confirmation escrow service that utilizes personal information linked to the My Number card MC.

[0068] Note that a data sequence called APDU (Application Protocol Data Unit) is used to read an electronic certificate from the My Number card, and a response message (R-APDU) is returned from the My Number card MC to the command message (C-APDU) sent by the reading system. PC / SC is an interface for handling this APDU command sequence in a Windows (registered trademark) environment. With PC / SC, an application on a Windows (registered trademark) personal computer (PC) can easily access the IC card.

[0069] Hereinafter, a user refers to a person who uses the personal information utilization system 1, a first user refers to a user who possesses the My Number card MC, and a second user refers to a user who provides a predetermined service or a predetermined product to the first user. The second user is typically a business operator who provides a predetermined service or a predetermined product and / or its employee. The predetermined service or the predetermined product is arbitrary. For example, the predetermined service may be providing a guest room in a hotel, providing food in a restaurant, etc. The predetermined product may be, for example, a car, a ship, a mobile phone, etc. The predetermined product may also be a product whose purchase is restricted by regulations (for example, drugs or firearms).

[0070] The personal information utilization system 1 includes a terminal device 2, a first server 3, and a second server 4.

[0071] The terminal device 2 includes the above-described reading terminal 21 and an information processing device 22.

[0072] The reading terminal 21 is used by a second user. The reading terminal 21 is a terminal that can read various information stored in the IC (Integrated Circuit) chip of the my number card MC by performing various communications with the my number card MC. The reading terminal 21 is, for example, in the form of a reader that communicates (reads data) non - contactly with the IC chip of the my number card MC through an antenna. The reading terminal 21 may be a reading - only terminal related to the my number card MC, or may be a terminal that also has other functions such as a function to assist in settlement related to a credit card or the like.

[0073] The reading terminal 21 may be a device that reads various information from the my number card MC in a contact method and / or a non - contact method. Note that four types of applications are installed in the IC chip of the my number card MC, and here, a public personal authentication application may be used.

[0074] The information processing device 22 may be various types of personal computers, laptop computers, or the like. Further, the information processing device 22 may be a portable terminal different from the reading terminal 21. In this case, the information processing device 22 may be a tablet terminal, a smartphone, or the like. The OS (Operating System) of the information processing device 22 may be arbitrary and may be Android (registered trademark), Windows (registered trademark), iOS (registered trademark), or the like. For example, one user may use the information processing device 22 with Android (registered trademark), another user may use the information processing device 22 with Windows (registered trademark), and a further user may use the information processing device 22 with iOS (registered trademark). Thus, in this embodiment, by providing the virtual device driver 33 described later, it is possible to support various OSs.

[0075] The information processing device 22 preferably includes a SIM (Subscriber Identity Module) for a closed network, and the communication between the information processing device 22 and the reading terminal 21 is realized via the closed network. Thereby, when reading the certification information, which is highly private information, from the My Number card MC and transmitting it to the information processing device 22, high security can be ensured.

[0076] The first server 3 may be, for example, a cloud server. The operation of the first server 3 may be realized by a third user different from the second user (for example, the operator of the personal information utilization system 1). The OS of the first server 3 is, for example, Windows (registered trademark). However, in this embodiment, as described later, the first server 3 has a virtual device driver 33 so that information can be exchanged with the information processing device 22 having Android (registered trademark) or iOS (registered trademark) as the OS.

[0077] The first server 3 can communicate with the information processing device 22 via the closed network NW1. In the example shown in FIG. 4, the first server 3 can communicate with the information processing device 22 via the gateway device 5 and the general-purpose base station 90. In this case, the communication between the gateway device 5 and the general-purpose base station 90 is realized via the closed network NW1. Thereby, the security when transmitting the certification information (encrypted information) read from the My Number Card MC from the information processing device 22 to the first server 3 can be ensured. Note that the data transmitted and received between the information processing device 22 and the first server 3 may be in JSON format (char type array).

[0078] The first server 3 can communicate with the second server 4 via the closed network NW1. In the example shown in FIG. 4, it can communicate with the second server 4 via the gateway device 5 and the closed network NW1.

[0079] Note that the closed network NW1 may be, for example, a secure network based on LTE (Long Term Evolution) (registered trademark). Note that instead of or in addition to LTE (registered trademark), LTE-A (LTE-Advanced), the fifth-generation mobile communication system, UMB (Ultra Mobile Broadband), etc. may be used. Also, from the viewpoint of enhancing security, the gateway device 5 may be a gateway dedicated to a specific user (for example, the operator of the personal information utilization system 1).

[0080] The second server 4 is a server for an escrow service. The second server 4 is operated by an administrative agency, a local public body information system organization, or an organization or institution having a high level of reliability such as that. This is because the second server 4 has a function of storing personal information as will be described later.

[0081] FIG. 5 is a diagram schematically showing functions related to the personal information utilization system 1 among various functions provided in the information processing device 22.

[0082] As shown in FIG. 5, the information processing apparatus 22 includes a reader / writer control library 221, a business application 222, and a card reading library 223.

[0083] The information processing apparatus 22 functions to exchange various information with the reading terminal 21 and acquire certification information from the My Number Card MC via the reading terminal 21. At this time, the business application 222 cooperates with the reader / writer control library 221 and the card reading library 223 to exchange various information with the reading terminal 21 and exchange various information with the first server 3.

[0084] In this embodiment, in the case of the escrow service use, the information processing apparatus 22 acquires, from the My Number Card MC, the signature electronic certificate as the certification information among the signature electronic certificate and the user certification electronic certificate. However, for another use (for example, use for personal identification), the information processing apparatus 22 may acquire, from the My Number Card MC, the user certification electronic certificate as the certification information among the signature electronic certificate and the user certification electronic certificate.

[0085] For example, when the business application 222 acquires the certification information from the My Number Card MC via the reading terminal 21, it encrypts the acquired certification information, associates additional information with the encrypted certification information, and transmits it to the first server 3. The additional information may include an identifier unique to each operator (hereinafter referred to as "operator ID") and acquisition date and time information of the certification information. Note that the additional information may also be encrypted together with the certification information and transmitted to the first server 3. As the operator ID, an operator number or the like may be used, or it may be assigned at the time of registration performed by each operator when using the personal information utilization system 1.

[0086] In addition, when the business application 222 obtains the certification information from the My Number card MC via the reading terminal 21, as described above, after transmitting the certification information to the first server 3, it discards the certification information. As a result, the certification information can be supplied to the first server 3 via the information processing device 22 without leaving the certification information in the information processing device 22. Note that the business application 222 may discard the certification information immediately after transmitting it to the first server 3, or may discard the certification information when receiving a predetermined signal (for example, a notification indicating that the certification information has been received) from the first server 3.

[0087] FIG. 6 is a diagram schematically showing the functions of the first server 3.

[0088] As shown in FIG. 6, the first server 3 includes a web application 31, a card reading library 32, a virtual device driver 33, a decryption module 34, and a CGI (Common Gateway Interface) 35. Note that the card reading library 32 may be implemented in a manner added to the web application 31. Note that the card reading library 32 may be a card reading library provided by a local public entity information system organization.

[0089] The web application 31, in cooperation with the card reading library 32, obtains from the invalidation confirmation service server 92 a determination result of the validity of the certification information (for example, a determination result as to whether a signature electronic certificate is valid) based on the certification information obtained from the information processing device 22. When the certification information is valid, the web application 31 transmits to the second server 4 information (for example, name, gender, date of birth, and address, which are called basic four information) included in the signature electronic certificate that is the certification information. Further, the web application 31 may transmit the determination result (valid / invalid) of the validity of the certification information to the information processing device 22 (see the solid line arrow from the first server 3 to the information processing device 22 via the gateway device 5 and the general-purpose base station 90 in FIG. 4).

[0090] The Web application 31 may transmit all the information contained in the electronic certificate to the second server 4, or may transmit only a part of the electronic certificate (for example, basic information) to the second server 4. Hereinafter, the information transmitted by the Web application 31 to the second server 4 in this way is also simply referred to as "personal information". Note that the Web application 31 may encrypt the personal information and then transmit it to the second server 4.

[0091] Preferably, the Web application 31 transmits the personal information while associating the above-described additional information with the personal information. For example, the personal information obtained based on one piece of certification information is transmitted to the second server 4 while associating the additional information associated with the one piece of personal information with the personal information. Thereby, on the second server 4 side, it becomes possible to classify / extract the personal information based on the additional information. This will be described later.

[0092] Preferably, after transmitting the personal information to the second server 4, the Web application 31 discards the certification information (signature electronic certificate) related to the personal information. Thereby, the personal information can be supplied to the second server 4 via the information processing device 22 in a manner that does not leave the certification information in the first server 3. Note that the Web application 31 may discard the certification information related to the personal information immediately after transmitting the personal information to the second server 4, or may discard the certification information when receiving a predetermined signal (for example, a notification indicating that the personal information has been received) from the first server 3.

[0093] The virtual device driver 33 performs conversion between commands adapted to different application interfaces. In this embodiment, the Web application 31 is adapted to the application interface for Windows (registered trademark), and the virtual device driver 33 constitutes a PC / SC (Personal Computer / Smart Card) virtual driver. Specifically, the virtual device driver 33 performs conversion between PC / SC commands and APDU commands. Note that APDU is a data sequence transmitted and received between a reading terminal (reading terminal 21) and a card (My Number card MC) when reading an IC card, and is defined in ISO7816-4, which is an international standard for IC cards. Also, PC / SC is a standard application interface provided by Microsoft for using IC cards in a Windows (registered trademark) environment. Note that the PC / SC specification defines four application interfaces: a card, a card reader, a resource manager for managing card resources, and a card application.

[0094] The decryption module 34 decrypts the encrypted information (such as the above-described authentication information) received from the information processing device 22, and provides the decrypted information to the Web application 31 via the virtual device driver 33. Specifically, as shown in FIG. 3, the decryption module 34 decrypts the encrypted APDU response stream from the CGI 35, and provides it to the virtual device driver 33 as the decrypted APDU response stream.

[0095] The CGI 35 realizes an interface between the business application 222 on the information processing device 22 side and the Web application 31. The CGI 35 exchanges commands between the business application 222 and the Web application 31 via the virtual device driver 33, and through this exchange, realizes from the reading of the My Number card MC by the above-described reading terminal 21 to the supply of authentication information to the Web application 31.

[0096] As described above, according to this embodiment, since the virtual device driver 33 is provided in the first server 3, in the first server 3, the virtual device driver 33 can convert commands adapted to different application interfaces. As a result, the information processing device 22 side can adopt a specification that is not originally compatible with the Web application 31 on the first server 3 side (i.e., a specification based on PC / SC). Thereby, good accessibility to the IC card by the information processing device 22 based on PC / SC can be maintained. In this way, according to this embodiment, the versatility of the first server 3 is increased, and the variations of the information processing device 22 that can receive various services (various services related to personal information) via the first server 3 can be efficiently increased.

[0097] FIG. 7A is a schematic flowchart showing a processing sequence from the reading of the My Number Card MC by the reading terminal 21 to the transmission of authentication information to the Web application 31. In FIG. 7A, the information processing device 22 is denoted as "client", and the application is abbreviated as "app".

[0098] In step S400, the reader / writer control library 221 of the information processing device 22 detects the My Number Card MC.

[0099] In step S402, the CGI 35 of the first server 3 receives a POST from the information processing device 22 and sends card detection information to the virtual device driver 33.

[0100] In step S404, the CGI 35 of the first server 3 sets a reading instruction for the Web application 31.

[0101] In step S406, the Web application 31 of the first server 3 transmits a command message (C-APDU) to the information processing device 22 via the virtual device driver 33 and the CGI 35.

[0102] In step S408, the reader / writer control library 221 of the information processing apparatus 22 communicates with the reading terminal 21 and receives an encrypted response message (R-APDU).

[0103] In step S410, the business application 222 of the information processing apparatus 22 transmits the response message (R-APDU) to the CGI 35.

[0104] In step S412, after decrypting the response message (R-APDU), the CGI 35 of the first server 3 sends it to the web application 31 via the virtual device driver 33.

[0105] In step S414, steps S406 to S412 are repeated. For example, it is repeated 45 times. Thereby, a reading result (certification information) is obtained in the first server 3. At this time, the command message (C-APDU) may not be encrypted, and only the information from the my number card MC may be encrypted.

[0106] FIG. 7B is a schematic flowchart showing a processing sequence executed subsequent to the processing of FIG. 7A in the case of an escrow service.

[0107] In step S500, the first server 3 inquires of the invalidation confirmation service server 92 about the validity of the certification information.

[0108] In step S502, the first server 3 enters a standby state to receive the determination result of the validity of the certification information from the invalidation confirmation service server 92. When the determination result of the validity of the certification information is received from the invalidation confirmation service server 92 (''YES'' in step S502), the process proceeds to step S504.

[0109] In step S504, the first server 3 determines whether the certification information is valid based on the determination result of the validity. If the certification information is valid, the process proceeds to step S506, and otherwise, the process proceeds to step S510.

[0110] In step S506, the first server 3 extracts personal information from the certification information using the card reading library 32.

[0111] In step S508, the first server 3 transmits the personal information extracted in step S506 to the second server 4.

[0112] In step S510, the first server 3 transmits the determination result of the validity of the certification information to the information processing device 22. Note that the process of step S510 may be executed prior to step S506 and step S508.

[0113] FIG. 7C is a schematic flowchart showing a processing sequence executed subsequent to the processing of FIG. 7A when the client side acquires personal information.

[0114] In step S600, the first server 3 inquires about the validity of the certification information from the expiration confirmation service server 92.

[0115] In step S602, the first server 3 enters a standby state to receive the determination result of the validity of the certification information from the expiration confirmation service server 92. When receiving the determination result of the validity of the certification information from the expiration confirmation service server 92 (''YES'' in step S602), the process proceeds to step S604.

[0116] In step S604, the first server 3 determines whether the certification information is valid based on the determination result of the validity. If the certification information is valid, the process proceeds to step S606; otherwise, the process proceeds to step S610.

[0117] In step S606, the first server 3 extracts personal information (e.g., basic four information) from the certification information using the card reading library 32.

[0118] In step S608, the first server 3 transmits to the information processing device 22 the determination result of the validity of the personal information and the certification information retrieved in step S606. Note that the determination results of the validity of the personal information and the certification information may be transmitted simultaneously or separately. Alternatively, only the personal information may be transmitted to the information processing device 22.

[0119] In step S610, the first server 3 transmits to the information processing device 22 the determination result of the validity of the certification information.

[0120] FIG. 7D is a schematic flowchart showing a processing sequence executed subsequent to the processing of FIG. 7A when only identity verification is performed. When only identity verification is performed, although not shown, in the processing of FIG. 7A, from the My Number card MC, the user certification electronic certificate among the signature electronic certificate and the user certification electronic certificate as the certification information is acquired.

[0121] In step S700, the first server 3 inquires of the expiration confirmation service server 92 about the validity of the certification information.

[0122] In step S702, the first server 3 enters a standby state to receive the determination result of the validity of the certification information from the expiration confirmation service server 92. When the determination result of the validity of the certification information is received from the expiration confirmation service server 92 ( "YES" in step S702), the process proceeds to step S704.

[0123] In step S704, the first server 3 transmits to the information processing device 22 the determination result of the validity of the certification information.

[0124] As described above, according to this embodiment, since the virtual device driver 33 is provided in the first server 3 as described above, in the first server 3, the virtual device driver 33 can perform conversion between commands adapted to different application interfaces.

[0125] FIG. 8 is a diagram schematically showing the functions of the second server 4.

[0126] As shown in FIG. 8, the second server 4 includes a personal information management application 41 and a personal information database 42.

[0127] When the personal information management application 41 receives personal information from the first server 3 as described above, it stores the personal information in the personal information database 42. The personal information management application 41 stores the personal information received from the first server in an inaccessible state in a manner that it can be accessed only when a predetermined information access condition is satisfied.

[0128] The predetermined information access condition is preferably set to strict conditions so that easy access to personal information is not permitted. For example, the predetermined information access condition may be satisfied only in the so-called emergency situation related to human life or the crisis of the whole society. In this case, the predetermined information access condition is preferably determined by an administrative agency (for example, determined by an ordinance of a municipality). Thereby, appropriate management of personal information can be expected. Also, the success or failure of the predetermined information access condition is preferably judged by an administrative agency. Thereby, it can be expected that the success or failure of the predetermined information access condition is appropriately judged.

[0129] The personal information management application 41 manages the storage period of personal information in the personal information database 42. For example, when a predetermined time has elapsed from the storage time of a piece of personal information, the personal information management application 41 may delete the piece of personal information. In this case, for example, the personal information management application 41 may judge whether or not a predetermined time has elapsed from the acquisition date and time based on the additional information (acquisition date and time information of the certification information) associated with each piece of personal information.

[0130] The personal information database 42 stores the personal information received from the first server 3 as described above. FIG. 9 is a diagram showing an example of the data in the personal information database 42. In the example shown in FIG. 9, for each acquisition ID, personal information and attached information (acquisition date and time information and business operator ID) are stored.

[0131] In this case, the personal information of a person who received a predetermined service at a specific store on a specific date can be easily extracted based on the acquisition date and time information and the business operator ID (the business operator ID related to the specific store). Specifically, assume that on a certain day, there is a disaster and a fire breaks out at a certain hotel. In this case, assume that the predetermined information access conditions are met. As a result, the administrative agency can obtain the personal information of the people staying at the hotel and use it for purposes such as confirming their safety.

[0132] Next, with reference to FIG. 10, a personal information utilization method related to the personal information utilization system 1 will be described.

[0133] FIG. 10 is a timing chart schematically showing the personal information utilization method related to the personal information utilization system 1. Here, the provision of guest rooms in a hotel will be described, but the same applies to other services and products. In FIG. 10, the dotted arrows indicate the communication between people. Also, in FIG. 10, the My Number Card MC is abbreviated as "MC".

[0134] First, the first user who has made a hotel reservation requests check-in at the hotel front desk (step S700).

[0135] The second user, who is an employee of the hotel, requests proof information from the My Number Card MC (step S702).

[0136] The first user or the second user sets the My Number Card MC held by the first user on the reading terminal 21 (step S704).

[0137] Next, the terminal device 2 and the first server 3 execute the process from the reading of the My Number Card MC by the reading terminal 21 described above to the supply of proof information to the web application 31 (denoted as "proof information escrow process" in FIG. 10) (step S706, step S708).

[0138] The first server 3 inquires the expiration confirmation service server 92 about the validity of the supplied certification information (step S710).

[0139] The expiration confirmation service server 92 supplies (issues) the determination result of the validity of the certification information (electronic certificate) to the first server 3 (step S712).

[0140] The first server 3 transmits the determination result as to whether the certification information is valid (the determination result by the expiration confirmation service server 92) to the terminal device 2 (step S714).

[0141] If the certification information is valid, the second user completes the check-in (step S716). Note that the information processing device 22 may record various pieces of accommodation-related information based on the certification information read from the My Number card MC (step S718). Note that when information (for example, name, gender, date of birth, address, which is called basic four information) included in the certification information is sent from the first server 3 to the information processing device 22 by another service or application different from the escrow service, the information processing device 22 may record various pieces of accommodation-related information based on the information. In this case, the information (information included in the certification information) supplied to the information processing device 22 may be discarded immediately after recording the various pieces of accommodation-related information.

[0142] The first user uses the hotel guest room upon completion of the check-in (step S720).

[0143] If the certification information is valid, the first server 3 transmits personal information to the second server 4 (step S722).

[0144] When the second server 4 receives personal information from the first server 3, it stores (keeps) the personal information in the personal information database 42 (Fig. 9) (step S724). At this time, the second server 4 stores the personal information received from the first server 3 in an inaccessible state in such a manner that it can be accessed only when a predetermined information access condition is satisfied.

[0145] After that, when it is determined that predetermined information access conditions are satisfied due to the occurrence of an emergency (step S730), the second server 4 enables the inquiry of personal information. In this case, for example, if it is determined that the predetermined information access conditions are satisfied regarding the hotel on the day the first user stayed at the hotel, the personal information of the first user becomes accessible (usable) (step S732).

[0146] As described above in detail for each embodiment, the present invention is not limited to specific embodiments, and various modifications and changes are possible within the scope described in the claims. Also, it is possible to combine all or a plurality of the constituent elements of the above-described embodiments.

Explanation of Reference Numerals

[0147] 1 Personal information utilization system 2 Terminal device 3 First server 4 Second server 5 Gateway device 21 Reading terminal 22 Information processing device 31 Web application 32 Card reading library 33 Virtual device driver 34 Decryption module 41 Personal information management application 42 Personal information database 90 General base station 92 Expiration confirmation service server 210A Power supply unit 210B Main battery 210C Battery gauge 210D Coin battery 210E Charging circuit 211 Non-contact reader 212 Contact reader 213 Information processing unit 214 Image scan engine barcode 215 Display 216 Secure Magnetic Head 217 Secure Keyboard 218 Buzzer 219A Communication Unit 219B Communication Unit 219C Communication Unit 221 Writer Control Library 222 Business Application 223 Card Reading Library

Claims

1. An information processing terminal applicable in uses other than settlement, comprising: a contact-type reading unit capable of reading information from an information storage medium; a non-contact-type reading unit capable of reading information from the information storage medium; an information processing unit that processes information read by each of the contact-type reading unit and the non-contact-type reading unit, wherein the contact-type reading unit and the non-contact-type reading unit are capable of reading information to be read from the information storage medium in which no information related to settlement is input, the information processing unit maintains each of the contact-type reading unit and the non-contact-type reading unit in a waiting state capable of reading information from the information storage medium simultaneously, and processes information read by the contact-type reading unit or information read by the non-contact-type reading unit. When it is the former information, a first subsequent process is executed, and when it is the latter information, a second subsequent process is executed. The information storage medium includes a first type in which unique certification information for each individual is stored as a processable type, the first subsequent process corresponding to the first type and the second subsequent process corresponding to the first type each include a predetermined information reading process to be performed when authentication based on code input is successful, and a guiding process for guiding the user to another reading method when an error occurs in the predetermined information reading process. An information processing terminal.

2. The information processing unit determines whether information to be processed has been input from either the contact-type reading unit or the non-contact-type reading unit. When it is determined that the information to be processed has been input, it is determined whether the information to be processed is any one of the information read by the contact-type reading unit or the information read by the non-contact-type reading unit. When it is determined that the information to be processed has not been input, each of the contact-type reading unit and the non-contact-type reading unit is maintained in the waiting state simultaneously. The information processing terminal according to Claim 1.

3. The information storage medium can cause at least one of the contact-type reading unit and the non-contact-type reading unit to read information including an application ID. When the information processing unit determines that the input information to be processed is the information read by the contact-type reading unit, the information processing unit executes the first subsequent process according to the type of the information storage medium based on the application ID included in the information to be processed. The information processing terminal according to claim 2.

4. When the information processing unit determines that the input information to be processed is the information read by the non-contact-type reading unit, the information processing unit executes the second subsequent process according to the type of the information storage medium based on the application ID included in the information to be processed. The information processing terminal according to claim 3.

5. In the information processing terminal according to claim 4, the number of types of the information storage media for which the second subsequent process is processable is larger than that of the first subsequent process.

6. The first subsequent process according to the first type and the second subsequent process according to the first type each include a process of obtaining a code input, a process of performing authentication based on the code input, and the predetermined information reading process to be performed when the authentication based on the code input is successful. The information processing terminal according to claim 4 or 5.

Images