Promotion system and promotion method

Abstract

To provide a promotion system and a method for properly identifying a user who is a target of promotion to implement the promotion.SOLUTION: In a communication system S that stores attribute information indicating attributes of users in association with the users in an attribute information storage, a member information management server is configured to: acquire verified attribute information indicating an attribute, which is the attribute of one of the users, verified for the user with an electronic certificate; identify the attribute information stored in association with the user as the verified attribute information; and store matching information indicating that the attribute information matches the verified attribute information in association with the user. A promotion server is configured to: acquire condition information indicating conditions for the attributes of a user who is a target of a predetermined promotion; and execute processing for the predetermined promotion with respect to the user associated with the matching information, out of users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the condition information.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a method for implementing promotions based on user attributes.

Background Art

[0002] Conventionally, promotions such as sales promotion activities for products and service utilization promotion activities have been widely carried out. Examples of promotions include display and distribution of advertisements, sending of direct mails, and giving of benefits such as coupons and points. It is also known that techniques such as targeting may be used in such promotions. For example, in targeting, the target users for promotion are narrowed down to a user group that satisfies specific conditions. An example of the conditions for target users is the attributes of the users. Examples of attributes include gender, address, age, etc. Such information is generally managed in databases of the services or companies as information of service members or customers of companies.

[0003] For example, Patent Document 1 discloses that basic attributes and histories such as gender, age, address, telephone, and occupation of users are stored in a user database, and in response to a content request from a user terminal, targeting information including the basic attributes and histories of the corresponding user is read out, optimal advertisement data is acquired based on the targeting information, and a distribution file obtained by synthesizing the advertisement data and the content data is transmitted to the user terminal.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, user attribute information registered in databases managed by services and companies is generally information entered by the user themselves. Therefore, the attributes in the database may not match the actual user's attributes. Consequently, there is a risk that it may not be possible to properly identify users who are suitable targets for promotion.

[0006] The present invention has been made in view of the above points, and one example of its objective is to provide a promotion system and a promotion method that enable the appropriate identification of target users for promotion and the implementation of promotions. [Means for solving the problem]

[0007] One aspect of the present invention includes: an attribute information storage means for storing attribute information indicating the attributes of a user in association with each of a plurality of users; a verified attribute information acquisition means for acquiring verified attribute information indicating an attribute of any of the plurality of users that has been confirmed to be factual using an electronic certificate for any of the users; a matching means for matching the attribute information stored in the attribute information storage means in association with any of the users with the acquired verified attribute information; a storage control means for storing matching information in the matching information storage means in association with any of the users that indicates that the attribute information matches the verified attribute information; a condition information acquisition means for acquiring condition information indicating the attribute conditions of a user who is the target of a predetermined promotion; and a promotion means for executing processing for the predetermined promotion targeting users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information. The memory control means causes the matching means to store the matching information indicating the date on which the attribute information matches the confirmed attribute information by the matching means in the matching information storage means, and the promotion means targets users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information, and whose matching date is less than or equal to a predetermined length, as targets for the predetermined promotion. This is a promotional system characterized by the following features.

[0008] According to this aspect, the attribute information storage means stores the attribute information of each user. For any user, the attribute information stored in the attribute information storage means is matched with verified attribute information that indicates attributes whose factual accuracy has been confirmed using an electronic certificate. For users whose attribute information matches the verified attribute information, matching information indicating that the attribute information matches the verified attribute information is stored. Among users whose attribute information stored in the attribute information storage means indicates attributes that satisfy the attribute conditions of users eligible for a predetermined promotion, users whose attribute information has previously matched the verified attribute information are eligible for that promotion. Whether or not attribute information has previously matched the verified attribute information can be determined by whether or not matching information is stored. Since the attributes indicated by the verified attribute information are attributes whose factual accuracy has been confirmed using an electronic certificate, attribute information that matches the verified attribute information is highly likely to be accurate information about that user. Since users eligible for promotion are identified based on such attribute information, it is possible to appropriately identify eligible users and implement promotions.

[0010] Also, According to this aspect, users who have not yet passed a predetermined period of time since the date on which their attribute information stored in the attribute information storage means matched the verified attribute information may be eligible for promotion. As time passes since the date on which their attribute information matched the verified attribute information, the user's actual attributes may change. Therefore, users who are within a period in which their attribute information is likely to be accurate can be eligible for promotion.

[0011] A further aspect of the present invention is a promotion system characterized in that the storage control means stores in the attribute information storage means the matching information indicating whether or not any of the users consented to updating the attribute information with the modified verified attribute information when the verified attribute information has been modified after the attribute information has matched the verified attribute information, and the promotion means includes users associated with the matching information indicating that consent was not given in the predetermined promotion if the length of time elapsed since the matching date is less than or equal to a predetermined length, and includes users associated with the matching information indicating that consent was given in the predetermined promotion regardless of the length of time elapsed since the matching date.

[0012] According to this aspect, users who allow attribute information stored in the attribute information storage means to be matched with verified attribute information can choose whether or not to consent to updating their attribute information with the modified verified attribute information if there are any changes to the verified attribute information after the match. Users who do not consent may be eligible for promotion if a predetermined period of time has not elapsed since the date their attribute information matched the verified attribute information. Users who consent may be eligible for promotion even if the period of time elapsed since the date their attribute information matched the verified attribute information exceeds the predetermined period. Attribute information stored in the attribute information storage means is updated with the modified verified attribute information at any time. Therefore, for users who choose to consent, the accuracy of their attribute information is likely to be maintained, and they can be included in the promotion regardless of the timing.

[0013] A further aspect of the present invention is an attribute information storage means for storing attribute information indicating the attributes of a user in association with the user, for each of a plurality of users; a verified attribute information acquisition means for acquiring verified attribute information indicating an attribute of any of the plurality of users that has been confirmed to be factual using an electronic certificate for any of the users; a matching means for matching the attribute information stored in the attribute information storage means in association with any of the users with the acquired verified attribute information; a storage control means for storing matching information in the matching information storage means in association with any of the users that indicates that the attribute information matches the verified attribute information; a condition information acquisition means for acquiring condition information indicating the attribute conditions of a user who is the target of a predetermined promotion; and a promotion means for executing processing for the predetermined promotion for users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information, and which is associated with the matching information. The promotion means further includes a delivery status information acquisition means that acquires delivery status information indicating the delivery status of an item shipped to an address indicated by any of the attribute information stored in the attribute information storage means, wherein the attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address, the condition indicated by the acquired condition information includes an address condition, and the promotion means includes, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination for which delivery has been completed as indicated by the acquired delivery status information, regardless of whether they are associated with the matching information or not, as targets of the predetermined promotion. This is a promotional system characterized by the following features.

[0014] According to this aspect, the attribute information storage means stores the attribute information of each user. For any user, the attribute information stored in the attribute information storage means is matched with verified attribute information that indicates attributes whose factual accuracy has been confirmed using an electronic certificate. For users whose attribute information matches the verified attribute information, matching information indicating that the attribute information matches the verified attribute information is stored. Among users whose attribute information stored in the attribute information storage means indicates attributes that satisfy the attribute conditions of users eligible for a predetermined promotion, users whose attribute information has previously matched the verified attribute information are eligible for that promotion. Whether or not attribute information has previously matched the verified attribute information can be determined by whether or not matching information is stored. Since the attributes indicated by the verified attribute information are attributes whose factual accuracy has been confirmed using an electronic certificate, attribute information that matches the verified attribute information is highly likely to be accurate information about that user. Since users eligible for promotion are identified based on such attribute information, it is possible to appropriately identify eligible users and implement promotions. Also, According to this aspect, if a shipment is sent to a user's address stored in the attribute information storage means, and the delivery status information indicates that the shipment has been completed, that user may be eligible for a promotion even if no matching information is stored for that user. The fact that a shipment has been delivered to an address stored in the attribute information storage means indicates that the address is likely to be accurate for the user. Therefore, it is possible to appropriately identify users eligible for promotions and implement promotions while eliminating the effort of matching the attribute information stored in the attribute information storage means with verified attribute information.

[0015] A further aspect of the present invention is a promotion system characterized in that the verified attribute information acquisition means acquires the electronic certificate from the terminal device of any of the users and acquires the verified attribute information contained in the acquired electronic certificate.

[0016] A further aspect of the present invention is a computer-based promotion method, comprising: for each of a plurality of users, attribute information indicating the user's attributes is stored in an attribute information storage means associated with the user; a verified attribute information acquisition step for acquiring verified attribute information indicating an attribute of any of the plurality of users that has been confirmed to be true using an electronic certificate for any of the users; a matching step for matching the attribute information stored in the attribute information storage means associated with any of the users with the acquired verified attribute information; a storage control step for storing matching information in the matching information storage means, indicating that the attribute information matches the verified attribute information, associated with any of the users; a condition information acquisition step for acquiring condition information indicating the attribute conditions of users who are the target of a predetermined promotion; and a promotion step for executing processing for the predetermined promotion targeting users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information. The memory control step causes the matching information, which indicates the date on which the attribute information matches the confirmed attribute information as a result of the matching step, to be stored in the matching information storage means, and the promotion step targets users associated with the attribute information, which indicates the attribute that satisfies the conditions indicated by the acquired condition information, and whose matching date is less than or equal to a predetermined length, as targets for the predetermined promotion. This is a promotional method characterized by the following: A further aspect of the present invention is a computer-based promotion method in which, for each of a plurality of users, attribute information indicating the user's attributes is stored in an attribute information storage means associated with the user; a verified attribute information acquisition step is to acquire verified attribute information indicating an attribute of any of the users that has been confirmed to be true using an electronic certificate for any of the users; a matching step is to match the attribute information stored in the attribute information storage means associated with any of the users with the acquired verified attribute information; a storage control step is to store matching information in the matching information storage means, indicating that the attribute information has matched the verified attribute information, associated with any of the users; a condition information acquisition step is to acquire condition information indicating the conditions of the user's attributes that are the target of a predetermined promotion; and among the users associated with the attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information, the matching A promotion method comprising: a promotion step of performing processing for the predetermined promotion for users associated with the information, wherein the attribute indicated by at least one of the attribute pieces of the attribute information stored in the attribute information storage means includes an address, the condition indicated by the acquired condition information includes an address condition, and the acquisition step of acquiring delivery status information indicating the delivery status of a shipment sent to the address indicated by any of the attribute pieces of the attribute information stored in the attribute information storage means is characterized in that the promotion step includes, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination for which the delivery has been completed as indicated by the acquired delivery status information, regardless of whether they are associated with the matching information or not, as targets of the predetermined promotion. [Effects of the Invention]

[0017] According to the present invention, it is possible to appropriately identify the target users for a promotion and implement the promotion accordingly. [Brief explanation of the drawing]

[0018] [Figure 1] This figure shows an example of the general configuration of a communication system S according to one embodiment. [Figure 2]It is a block diagram showing an example of the schematic configuration of the member information management server 1 according to an embodiment. [Figure 3] It is a diagram showing an example of information stored in the database of the member information management server 1. [Figure 4] It is a block diagram showing an example of the schematic configuration of the promotion server 2 according to an embodiment. [Figure 5] It is a diagram showing an example of information stored in the database of the promotion server 2. [Figure 6] It is a diagram showing an example of the functional block of the system control unit 11 in the member information management server 1. [Figure 7] (a) is a diagram showing an example of the contents of the member DB 14a and the attribute linkage information DB 14b at the time of member registration. (b) shows an example of the attribute information included in the electronic certificate stored in the My Number card. (c) is a diagram showing an example of the contents of the member DB 14a and the attribute linkage information DB 14b after the selection of using the attribute information linkage function. [Figure 8] It is a diagram showing an example of the functional block of the system control unit 21 in the promotion server 2. [Figure 9] (a) is a diagram showing an example of user attribute conditions. (b) is a diagram showing an example of information about a certain user. (c) is a diagram showing an example of information about another user. (d) is a diagram showing an example of information about yet another user. [Figure 10] (a) is a diagram showing an example of the determination of whether to include a certain user in the target of the promotion. (b) is a diagram showing an example of the determination of whether to include another user in the target of the promotion. [Figure 11] It is a sequence diagram showing an example of the processing by the communication system S at the time of selecting the use of the attribute information linkage function. [Figure 12] It is a sequence diagram showing an example of the processing by the communication system S when the user's attribute is changed. [Figure 13]This flowchart shows an example of a promotion control process executed by the system control unit 21 of the promotion server 2 according to one embodiment. [Figure 14] This figure shows an example of the general configuration of a communication system S according to one embodiment. [Figure 15] This figure shows an example of the information stored in the databases of service server 6 and delivery company server 7. [Figure 16] This figure shows an example of a functional block in the system control unit 11 of the member information management server 1. [Figure 17] (a) is a diagram showing an example of user attribute conditions. (b) is a diagram showing an example of information about a particular user. [Figure 18] This flowchart shows an example of a promotion control process executed by the system control unit 21 of the promotion server 2 according to one embodiment. [Modes for carrying out the invention]

[0019] Embodiments of the present invention will be described in detail below with reference to the drawings.

[0020] [1. First Embodiment] [1-1. Communication System Configuration] First, the configuration and functional overview of the communication system S according to this embodiment will be described with reference to Figure 1. Figure 1 is a diagram showing an example of the overview configuration of the communication system S according to this embodiment. As shown in Figure 1, the communication system S is composed of a member information management server 1, one or more promotion servers 2, a signature verification server 3, a certification authority server 4, and multiple user terminals 5. The member information management server 1, each promotion server 2, the signature verification server 3, the certification authority server 4, and each user terminal 5 are connected to a network NW. The network NW is constructed by, for example, the internet, a dedicated communication line (for example, a CATV (Community Antenna Television) line), a mobile communication network (including base stations, etc.), and a gateway, etc.

[0021] The Member Information Management Server 1 may be a server device that manages member information relating to members of a specified service. The specified service may be, for example, a service provided using a computer network or information and communication technology, or it may not be. A service provided using a computer network, etc., may or may not be an online service. An online service may be provided via a website. Examples of the specified service include online shopping malls, facility reservation services, service reservation services, online securities, online banking, web search, video distribution, point programs, mobile communication services, carrier billing, fiber optic connection services, credit card payments, app payments, electronic money payments, check-in services, social networking services, stamp card services, rich communication services, email services, etc. The specified service may also be a comprehensive internet service. A comprehensive internet service may be a service composed of multiple services. A comprehensive internet service may include at least one of the services shown in the examples above. For convenience, the specified service will be described as a comprehensive internet service from here on. When a user becomes a member of a comprehensive internet service, that user is assigned a user ID. The user ID may be identification information that identifies the user in the comprehensive internet service. Users may specify their own user ID, or the comprehensive internet service may automatically assign a user ID. Users who become members of the comprehensive internet service may be able to use many of the services included in that service. In order to use some services, users may be required to register separately, which is conditional on being a member of the comprehensive internet service. When registering as a member of the comprehensive internet service, or after registration, each user can register their attributes with the comprehensive internet service. Examples of attributes include name, gender, date of birth, address, etc.The member information stored by the member information management server 1 includes these attributes.

[0022] Furthermore, the member information management server 1 may provide an attribute information linking function to members of the comprehensive internet service. The attribute information linking function may be a service that matches the user's attributes included in the member information with attributes that have been verified as fact using the user's digital certificate. This is expected to make the user attribute information stored by the member information management server 1 more accurate. The digital certificate may include information about the user's attributes. The user's digital certificate may be, for example, a digital certificate stored on the user's My Number Card, or it may be stored or acquired by other means. A My Number Card is issued to an individual after the individual completes a procedure with a local government. The digital certificate may be issued by, for example, a specific certification authority or other organization. An example of a certification authority is the Local Government Information Systems Organization. In this embodiment, the attributes targeted by the attribute information linking function are name, gender, date of birth, and address. This information is also called the four basic pieces of information. However, the attributes targeted by the attribute information linking function are not limited to these. Each user can choose whether or not to use the attribute information linking function. If a user chooses to use the attribute information linking function, the Member Information Management Server 1 may be configured to allow the user to choose whether or not to automatically update the attributes stored in the Member Information Management Server 1 with the changed attributes if the user's actual attributes change afterward. Since the certification authority will provide information on the changed attributes to someone other than the user, the user's consent may be required for such information provision. Examples of events that change a user's attributes include changes of address, marriage, divorce, etc. In response to such events, the user will perform the necessary procedures with the relevant local government to change their attributes.

[0023] Promotion Server 2 may be a server device that executes processing for implementing a predetermined promotion for members of the comprehensive internet service. Examples of promotions include advertisements and the provision of benefits. Advertisements may be online or offline. Examples of advertisements include screen-based advertisements (e.g., display ads, search engine marketing ads), email advertisements, direct mail, and the provision of sample products. A separate Promotion Server 2 may be installed for each type of promotion. Examples of benefits to be provided include coupons, points from a points program, electronic money, cashback, and other prizes. Examples of promotion objectives include promoting product sales, promoting service use, promoting facility use, improving the image of a company or brand, and revitalizing a region. Promotions may be implemented only for users who meet predetermined conditions. These conditions may be determined, for example, by the advertiser or sponsor. This method may be equivalent to so-called targeting. For example, in the case of display ads and search engine marketing ads, when a user who meets the conditions views a web page or other screen that includes an ad space, the ad may be displayed on that screen. In the case of email advertisements, an email containing the ad may be sent to users who meet the conditions. In the provision of direct mail and samples, direct mail and samples may be sent to users who meet the conditions. In the provision of benefits, benefits may be given to users who meet the conditions. Alternatively, benefits may be given to all users, but users who meet the conditions may be given benefits of a higher value compared to other users. Promotion server 2 may extract users who are eligible for the promotion from among the members of the comprehensive internet service. If the promotion is conducted online, promotion server 2 may actually execute the promotion. For example, promotion server 2 may deliver advertisements, provide benefits, etc., to eligible users.If the promotion is conducted offline, the promotion server 2 may perform processing to prepare for sending direct mail or other mailings to the target users.

[0024] The signature verification server 3 may be a server device having a signature verification function in the personal authentication service. The signature verification function may include verification of digital certificates and verification of digital signatures. The personal authentication service may be, for example, a service that primarily provides online means of identity verification. Identity verification may be performed, for example, using digital certificates. Verification of digital certificates by the signature verification server 3 may include, for example, verification of the authentication path of the digital certificate, verification of the validity period of the digital certificate, verification of the revocation status of the digital certificate, etc. Verification of digital signatures may include, for example, calculating the hash value of the digital certificate or other information, decrypting the digital signature back to the original hash value using the public key contained in the digital certificate, and determining whether the hash values ​​match. Furthermore, the signature verification server 3 may provide the member information management server 1 with information on the user's attributes that have been confirmed to be factual using the digital certificate. In addition, the signature verification server 3 may obtain information on the changed attributes from the certification authority server 4 due to the revocation of the digital certificate caused by a change in the user's attributes, and provide the obtained information to the member information management server 1.

[0025] The Certificate Authority Server 4 may be a server device installed by the Certificate Authority. The Certificate Authority Server 4 may, for example, provide information on the revocation status of digital certificates. The Certificate Authority Server 4 may also manage attribute information indicating the attributes of each user to whom a digital certificate has been issued. The Certificate Authority Server 4 may also provide information on the changed attributes when a digital certificate is revoked due to a change in the user's attributes.

[0026] Each user terminal 5 may be a terminal device owned by a user who is able to use the comprehensive internet service. Examples of user terminals 5 include personal computers, smartphones, tablet computers and other portable information terminals, mobile phones, PDAs (Personal Digital Assistants), set-top boxes, etc. Each user terminal 5 may have a web browser installed. Furthermore, portable user terminals 5 may be capable of installing applications for using the comprehensive internet service. In addition, each user terminal 5 may be configured to read electronic certificates from My Number cards. For example, each user terminal 5 may have a built-in IC (Integrated Circuit) card reader compatible with NFC (Near Field Communication), etc., or may be able to connect to such a card reader.

[0027] Among the devices included in the communication system S, the combination of the member information management server 1 and the promotion server 2 is an example of the promotion system of the present invention. This example of the promotion system may or may not include the signature verification server 3.

[0028] [1-2.Device configuration] [1-2-1. Member Information Management Server] Next, the configuration of the member information management server 1 will be described with reference to Figures 2 and 3. Figure 2 is a block diagram showing an example of the overview configuration of the member information management server 1 according to this embodiment. As shown in Figure 2, the member information management server 1 includes a system control unit 11, a system bus 12, an input / output interface 13, a storage unit 14, and a communication unit 15. The system control unit 11 and the input / output interface 13 are connected via the system bus 12.

[0029] The system control unit 11 is composed of a CPU (Central Processing Unit) 11a, a ROM (Read Only Memory) 11b, a RAM (Random Access Memory) 11c, and the like.

[0030] The input / output interface 13 performs interface processing between the storage unit 14 and the communication unit 15 and the system control unit 11.

[0031] The storage unit 14 is composed of, for example, a hard disk drive. This storage unit 14 may store databases such as a member database 14a and an attribute linkage information database 14b. "DB" is an abbreviation for database.

[0032] Figure 3 shows an example of information stored in the database of the Member Information Management Server 1. Member DB 14a may store member information for each member of the Internet Comprehensive Service. This member information may include attribute information indicating the user's attributes. For example, Member DB 14a may store member information such as user ID, name, gender, date of birth, address, telephone number, and email address, all associated with each other. At least one of the name, gender, date of birth, address, telephone number, and email address may correspond to attribute information.

[0033] The attribute linkage information DB14b may store attribute linkage information related to the attribute information linkage function for each member of the Internet Comprehensive Service. For example, the attribute linkage information DB14b may store the user ID, linkage status, linkage date, consent type, and serial ID as attribute linkage information, linked to each other. The user ID indicates which user the attribute linkage information pertains to. The linkage status may indicate whether or not the user has used the attribute information linkage function. For example, the linkage status may be set to either "Not Linked" or "Linked". "Not Linked" indicates that the user has not used the attribute information linkage function. In this case, the user attributes stored in member B14a may not necessarily match the attributes confirmed by the electronic certificate. "Linked" indicates that the user has used the attribute information linkage function. In this case, the user attributes stored in member B14a have been matched with the attributes confirmed by the electronic certificate at least once. The linkage date, consent type, and serial ID are valid when the linkage status is set to "Linked". The linking date indicates the date on which the user chose to use the attribute information linking function. On the linking date, the user's attributes stored in member B14a are matched with the attributes confirmed by the digital certificate. Therefore, the linking date also indicates the date on which the attributes stored in member B14a matched the attributes confirmed by the digital certificate. The consent information may also indicate the user's consent status to the member information management server 1 using the user's information in order to implement the attribute information linking function. For example, the consent information may be set to either "link only once" or "link continuously". "link only once" indicates that the user consented to matching the user's attributes stored in member B14a with the attributes confirmed by the digital certificate only on the linking date. In order to match the attributes in this case, the member information management server 1 needs to obtain the user's attribute information contained in the digital certificate. "link only once" also indicates that the user consented only to obtaining this information. "Continuous Linking" indicates that, in addition to the linking date, the user has agreed to match the user's attributes stored in member B14a with the changed attributes if there are any changes to the user's actual attributes.In this case, to ensure attribute matching, the member information management server 1 needs to obtain the modified attribute information from the certification authority server 4 via the signature verification server 3. "Continuous linking" indicates that, in addition to obtaining the user attribute information contained in the digital certificate, the user has consented to obtaining the information from the certification authority server 4. The serial ID is identification information used by the signature verification server 3 to identify the user. The serial ID may be automatically assigned by the signature verification server 3 to each user utilizing the attribute information linking function. Alternatively, the signature verification server 3 may identify the user using the user ID. In this case, the serial ID is not required. Furthermore, the attribute linking information may be stored in the member DB 14a.

[0034] The member information management server 1 may provide an API (Application Programming Interface) to server devices such as the promotion server 2 for accessing the database stored in the storage unit 14. By using the API, the promotion server 2 may be able to retrieve information from the member DB 14ba and the attribute linkage information DB 14b.

[0035] Furthermore, the storage unit 14 stores various programs, including an operating system, a DBMS (Database Management System), and a member information management server program. The member information management server program is a program that causes the system control unit 11 to execute processes related to the management of member information. The member information management server program may be acquired from another device via a network NW, for example, or it may be stored on a storage medium such as a magnetic tape, optical disk, or memory card and read via a drive device.

[0036] The communication unit 15 is composed of, for example, a network interface card. The communication unit 15 connects to the promotion server 2, the signature verification server 3, or the user terminal 5, etc., via the network NW, and controls the communication status with the connected devices.

[0037] [1-2-2. Promotion Server] Next, the configuration of the promotion server 2 will be described with reference to Figures 4 and 5. Figure 4 is a block diagram showing an example of the schematic configuration of the promotion server 2 according to this embodiment. As shown in Figure 4, the promotion server 2 includes a system control unit 21, a system bus 22, an input / output interface 23, a storage unit 24, and a communication unit 25. The system control unit 21 and the input / output interface 23 are connected via the system bus 22.

[0038] The system control unit 21 is composed of a CPU 21a, ROM 21b, RAM 21c, etc.

[0039] The input / output interface 23 performs interface processing between the storage unit 24 and the communication unit 25 and the system control unit 21.

[0040] The storage unit 24 is composed of, for example, a hard disk drive. A database such as a promotion DB 24a may be stored in this storage unit 24.

[0041] Figure 5 shows an example of information stored in the database of the promotion server 2. Promotion DB24a may store promotion information for each promotion. Promotion information may be configurable by, for example, the advertiser or sponsor. For example, promotion DB24a may associate promotion information such as promotion ID, promotion name, and user attribute conditions with each other. The promotion ID is identification information that identifies the promotion. User attribute conditions may indicate the attribute conditions of the user who is the target of the promotion. The attributes to which conditions can be set may be limited to only the attributes that are the target of the attribute information linkage function, or other attributes may be included. User attribute conditions may include, for example, attribute item name and attribute value information for each attribute to which a condition is set. The attribute item name indicates the name of the attribute item to which the condition is set. Examples of attribute item names include "surname", "given name", "gender", "age", and "address". Attribute value information indicates the value of the attribute. An example of an attribute value corresponding to "surname" is "Yamada". An example of an attribute value corresponding to "given name" is "Taro". Examples of attribute values ​​corresponding to "gender" are "male" and "female". Examples of attribute values ​​corresponding to "age" include "15 years old," "45 years old," "20 years old or older," "under 60 years old," and "30 to 40 years old." Examples of "address" include "Tokyo," "Chiba Prefecture, Chiba City, Chuo Ward," and "Tohoku region." The combination of attribute item name and attribute value information indicates the conditions of the attribute. If conditions are defined for each of multiple attributes by the user attribute conditions, users who meet all of those conditions may be eligible for promotion.

[0042] This section explains examples of setting user attribute conditions. For example, if there is an age restriction on the use of a product or service, an age condition can be set. For instance, when promoting alcoholic beverages, the target users of the promotion may be limited to those 20 years of age or older. Similarly, when promoting a product or service targeted at consumers of a specific gender, such as cosmetics, the target users may be limited to a specific gender. Furthermore, when promoting a local area, the target users may be limited to a specific region. Promotions may also be limited to users with a specific surname or given name.

[0043] Furthermore, the promotion DB24a may store additional information depending on the type of promotion. For example, other information stored in the promotion DB24a may include the conditions for user behavior targeting the promotion, information identifying the advertiser or sponsor, advertising budget, advertising cost, information identifying the content presented to the user as an advertisement, the type of rewards granted, and the method for determining the content or value of the rewards granted. The storage unit 24 may also store databases and other information depending on the type of promotion.

[0044] Furthermore, the storage unit 24 stores various programs such as the operating system, DBMS, and promotion server program. The promotion server program is a program that causes the system control unit 21 to execute the processing necessary to carry out the promotion. The promotion server program may be acquired from another device via a network NW, for example, or it may be stored on a storage medium such as magnetic tape, optical disk, or memory card and read via a drive device.

[0045] The communication unit 25 is composed of, for example, a network interface card. The communication unit 25 connects to the member information management server 1 or user terminal 5, etc., via the network NW, and controls the communication status with the connected device.

[0046] [1-3. Overview of System Control Unit Functions] [1-3-1. Member Information Management Server] Next, with reference to Figures 6 and 7, the functional overview of the system control unit 11 in the member information management server 1 will be described. Figure 6 is a diagram showing an example of the functional blocks of the system control unit 11 in the member information management server 1. The system control unit 11 may function as an attribute information acquisition unit 1101, an attribute information matching unit 1102, and a matching information storage control unit 1103, etc., as shown in Figure 6, by the CPU 11a reading and executing various program codes included in the member information management server program.

[0047] The attribute information acquisition unit 1101 may acquire attribute information indicating the attributes of any of the multiple users who are members of the Internet Comprehensive Service. The acquired attribute information may also indicate attributes that have been confirmed as factual based on an electronic certificate for that user. This attribute information is also referred to as confirmed attribute information. Attributes that have been confirmed as factual based on an electronic certificate for a user may, for example, be attributes that have been confirmed or proven to be the user who possesses those attributes using an electronic certificate. Attribute information may also be included in the electronic certificate.

[0048] For example, suppose an electronic certificate is stored on the IC chip of a My Number Card. The My Number Card stores, for example, a digital signature certificate and a digital user authentication certificate. The digital signature certificate includes attribute information indicating the user's name, gender, date of birth, and address. For example, an application for the Internet Comprehensive Service may include a program to read the digital signature certificate from the My Number Card and send the certificate and digital signature to the Member Information Management Server 1. Alternatively, the Member Information Management Server 1 may send a web page for attribute information linking functionality to the user terminal 5 in response to a request from the user terminal 5. This web page may include a script to read the digital signature certificate from the My Number Card and send the certificate and digital signature to the Member Information Management Server 1. For example, the user may be able to select the attribute information linking functionality on the application or web page. The user may then perform an operation to consent to the Internet Comprehensive Service obtaining the user's verified attribute information. At this time, if there is a change in the verified attribute information, the user may be able to choose whether or not to consent to updating the attribute information stored in the member DB 14a with the changed verified attribute information. If the user consents to obtaining the verified attribute information, the user may, following instructions from the application or web page, enter a password to access the electronic certificate and have the electronic certificate stored in the My Number Card read into the user terminal 4. At this time, the IC chip on the My Number Card may electronically sign the electronic certificate or the specified information transmitted from the member information management server 1 to the user terminal 5, and transmit the electronic signature along with the electronic certificate to the user terminal 5. The user terminal 5 may transmit the electronic certificate and electronic signature to the member information management server 1. The attribute information acquisition unit 1101 may transmit the electronic certificate and electronic signature obtained from the user terminal 5 to the signature verification server 3. As a result, the attribute information acquisition unit 1101 may have the signature verification server 3 perform verification of the electronic certificate and electronic signature.If these verifications confirm or prove that the user of the user terminal 5 that sent the electronic certificate is the user indicated by the attribute information contained in the electronic certificate, the attribute information acquisition unit 1101 may acquire the attribute information contained in the electronic certificate as confirmed attribute information. Here, the member information management server 1 may directly acquire the attribute information from the electronic certificate. Alternatively, the signature verification server 3 may acquire the attribute information from the electronic certificate, and the member information management server 1 may acquire the attribute information from the signature verification server 3.

[0049] The attribute information acquisition unit 1101 may also acquire attribute information indicating the changed attributes from the certification authority server 4 via the signature verification server 3 if there is a change in the user's attributes.

[0050] The attribute information matching unit 1102 may match the attribute information stored in the member DB 14a, associated with a user whose verified attribute information has been obtained by the attribute information acquisition unit 1101, with the verified attribute information. The information associated with a user may be information associated with identification information that identifies that user. The identification information may be, for example, a user ID. Matching attribute information with verified attribute information may include, for example, overwriting the attribute information stored in the member DB 14a with the verified attribute information. Matching attribute information with verified attribute information may also include determining whether the attribute information stored in the member DB 14a matches the verified attribute information. If the attribute information matches the verified attribute information, the attribute information matching unit 1102 does not need to overwrite the attribute information stored in the member DB 14a. If the attribute information does not match the verified attribute information, the attribute information matching unit 1102 may overwrite the attribute information stored in the member DB 14a with the verified attribute information. The information matching determination and overwriting may be performed for each attribute.

[0051] If the attribute information stored in the member DB 14a by the attribute information matching unit 1102 matches the verified attribute information, the matching information storage control unit 1103 may store matching information in the attribute linkage information DB 14b, indicating that the attribute information matches the verified attribute information, in association with the user from whom the verified attribute information was obtained. This matching information may be attribute linkage information that includes a linkage status indicating, for example, "linked". The matching information may also be stored in the member DB 14a.

[0052] Figure 7(a) shows an example of the contents of Member DB 14a and Attribute Linkage Information DB 14b during member registration. For example, user U1 registered as a member of the Internet Comprehensive Service. At this time, user U1 also registered their name, gender, date of birth, and address. As shown in Figure 7(a), the attribute information of user U1 is stored in Member DB 14a. The date of birth in Member DB 14a is "August 1, 2000". However, the correct date of birth for user U1 is "August 11, 2000". User U1 entered their date of birth incorrectly. Also, the address in Member DB 14a is "ABCDEFGH, Chuo-ku, Tokyo". This address is correct. Furthermore, Member Information Management Server 1 stores attribute linkage information for user U1 in Attribute Linkage Information DB 14b. At this time, Member Information Management Server 1 sets the linkage status to "Not Linked".

[0053] Subsequently, user U1 moved and completed the procedure for changing their address. The new address is "IGKLMNOP, Yokohama City, Kanagawa Prefecture". Furthermore, user U1 applied for a My Number Card. Figure 7(b) shows an example of attribute information contained in the electronic certificate stored on the My Number Card. As shown in Figure 7(b), the date of birth contained in the electronic certificate is "August 11, 2000". Also, the address contained in the electronic certificate is "IGKLMNOP, Yokohama City, Kanagawa Prefecture".

[0054] Subsequently, user U1 selects to use the attribute information linking function. Figure 7(c) shows an example of the contents of member DB14a and attribute linking information DB14b after selecting to use the attribute information linking function. As shown in Figure 7(c), user U1's date of birth and address stored in member DB14a are updated to "August 11, 2000" and "IGKLMNOP, Yokohama City, Kanagawa Prefecture," respectively. In addition, the linking status stored in attribute linking information DB14b is changed to "Linked."

[0055] The matching information storage control unit 1103 may store matching information in the attribute linkage information DB 14b, indicating the date on which the attribute information stored in the member DB 14a matched the confirmed attribute information, based on the attribute information acquisition unit 1101. This matching date may also be a linkage date included in the attribute linkage information.

[0056] Furthermore, the matching information storage control unit 1103 may store matching information in the attribute linkage information DB 14b indicating whether or not the user consented to updating the attribute information with the modified verified attribute information after the attribute information stored in the member DB 14a has matched the verified attribute information. Whether or not the user consented may be indicated by the consent information included in the attribute linkage information. Consent information indicating "Continuous linkage" indicates that the user consented to updating the attribute information with the modified verified attribute information. Consent information indicating "Linkage only for the first time" indicates that the user did not consent to updating the attribute information with the modified verified attribute information.

[0057] In this embodiment, each user can select either "Initial Linkage Only" or "Continuous Linkage" as they prefer. However, the member information management server 1 may be configured to allow only "Initial Linkage Only" to be selected, or it may be configured to allow only "Continuous Linkage" to be selected.

[0058] [1-3-2. Promotion Server] Next, with reference to Figures 8 to 10, the functional overview of the system control unit 21 in the promotion server 2 will be described. Figure 8 is a diagram showing an example of the functional blocks of the system control unit 21 in the promotion server 2. The system control unit 21 may function as a condition information acquisition unit 2101 and a promotion unit 2102, etc., as shown in Figure 8, by having the CPU 21a read and execute various program codes included in the promotion server program.

[0059] The condition information acquisition unit 2101 may acquire user attribute conditions that indicate the attribute conditions of users who are eligible for a predetermined promotion. For example, the condition information acquisition unit 2101 may acquire user attribute conditions from the promotion DB 24a.

[0060] The promotion unit 2102 may target users associated with attribute information that shows attributes satisfying the conditions indicated by the user attribute conditions obtained by the condition information acquisition unit 2101, and who are associated with matching information stored in the attribute linkage information DB 14b by the matching information storage control unit 1103, and perform processing for a predetermined promotion. In this case, the promotion unit 2102 may not include users who are associated with attribute information that shows attributes satisfying the conditions indicated by the user attribute conditions, but who are not associated with matching information, as targets for promotion. The attribute information stored in the member DB 14a for users associated with matching information is attribute information that has been confirmed at least once as fact for that user based on an electronic certificate. Therefore, the attribute information of users associated with matching information is more accurate. Accordingly, by targeting only users who are associated with matching information among users whose attribute information stored in the member DB 14a satisfies the conditions, promotion can be carried out appropriately. An example of a user associated with matching information is a user associated with attribute linkage information that includes a linkage status indicating "linked". An example of a user not associated with matching information is a user associated with attribute linkage information that includes a linkage status indicating "not linked".

[0061] Figure 9(a) is a diagram illustrating an example of user attribute conditions. In Figure 9(a), the promotion is regional revitalization using electronic stamp cards. For example, an internet comprehensive service includes a stamp card service. A stamp card service is a service that awards stamps to users who visit specific facilities. Users who collect a predetermined number of stamps can receive some kind of benefit. For example, benefits may be awarded by a sponsor, facility, or operator of the stamp card service. For each stamp card, one or more facilities from which a user can collect stamps are predetermined. In addition to the promotion DB 24a, the storage unit 24 of the promotion server 2 may store a database showing the facilities from which a user can collect stamps for each stamp card, a database showing the issuance status of each stamp card for each user, a database showing the stamp acquisition status for each issued stamp card, a database showing information on each facility, etc. The promotion unit 2102 may determine whether or not a user has visited a facility. For example, the promotion unit 2102 may make this determination based on the location information of the user terminal 5 and the location information of the facility. The location information of the user terminal 5 is information indicating the location of the user terminal 5. For example, user terminal 5 may periodically calculate its location information using a satellite positioning system such as GPS (Global Positioning System). User terminal 5 may also transmit its location information to the promotion server 2. Facility location information indicates the location of the facility. Facility location information is set in advance. The promotion unit 2102 may determine whether or not a user has visited a facility based on the user's usage of services available at the facility from among the services included in the comprehensive internet service. Examples of such services include point programs, credit card payments, app payments, and electronic money payments. When a user uses a service at a facility, for example, a terminal device (not shown) installed at that facility may transmit information about the use of that service to a predetermined server device (not shown) included in the comprehensive internet service. This usage information may include information identifying the user who used the service and information identifying the facility the user visited.The promotion unit 2102 can determine whether a user has visited a facility by acquiring usage information. As shown in Figure 9(a), the promotion name is "Fukushima Limited Stamp Card". No conditions are set for name, gender, or age. The address condition is "Fukushima Prefecture". Therefore, users residing in Fukushima Prefecture are eligible for the stamp card promotion. Figure 9(b) shows an example of information about a certain user. As shown in Figure 9(b), user U11's address is in Fukushima Prefecture. Therefore, user U11's attributes satisfy the user attribute conditions. However, the linkage status is "not linked". Therefore, user U11 is not eligible for the promotion. Figure 9(c) shows an example of information about another user. As shown in Figure 9(c), user U12's address is in Fukushima Prefecture. Also, the linkage status is "linked". Therefore, user U12 is eligible for the promotion. Figure 9(d) shows an example of information about yet another user. As shown in Figure 9(d), user U13's address is in Kanagawa Prefecture. Also, the linkage status is "linked". Since user U13's attributes do not meet the user attribute requirements, user U13 is excluded from the promotion.

[0062] The determination of whether a user is eligible for a promotion and the extraction of eligible users may differ depending on the type of promotion. For example, when an advertisement is displayed on a screen, the promotion unit 2102 may obtain the user ID of the user on any user terminal 5 when that terminal displays the screen. The promotion unit 2102 may also obtain the member information and attribute linkage information associated with that user ID and make the determination. When an advertisement is sent via email or direct mail, the promotion unit 2102 may, for example, search the member DB 14a for member information containing attribute information that satisfies the user attribute conditions, and search the attribute linkage information DB 14b for attribute linkage information containing a linkage status indicating "linked". Based on these search results, the promotion unit 2102 may extract users eligible for the promotion. When a promotion using stamp cards is implemented, the promotion unit 2102 may, for example, when a user selects to issue any stamp card, determine whether that user is eligible for the promotion based on the user attribute conditions of that stamp card and the user's member information and attribute linkage information. Alternatively, the promotions department 2102 may determine whether or not a user is eligible for the promotion at the time it is detected that the user has visited a facility where stamps can be earned using the stamp card, after the stamp card has been issued.

[0063] The processing for promotions for users selected as targets may also differ depending on the type of promotion. For example, if a screen-based advertisement is implemented, the promotion unit 2102 may display the advertisement on the user terminal 5 by transmitting the content data of the advertisement to the terminal 5. If an email advertisement is implemented, the promotion unit 2102 may send an email containing the advertisement to the users who have been selected as targets of the promotion. If a direct mail advertisement is implemented, the promotion unit 2102 may generate information including the postal code, address, name, etc., of the users who have been selected as targets of the promotion, as information for printing addresses on the direct mail. The promotion unit 2102 may also acquire or generate information indicating images or text to be printed on the direct mail as an advertisement. The promotion unit 2102 may transmit at least the information for printing addresses from this information to a computer (not shown) used, for example, for printing the direct mail. This computer may be connected to a predetermined printer. Based on the transmitted information, the printer may then print the direct mail. When a promotion using stamp cards is implemented, the promotion unit 2102 may, for example, execute a process to issue a stamp card requested by the user. Alternatively, when the promotion unit 2102 detects that the user has visited a facility where stamps can be earned using the stamp card the user possesses, it may perform a process to update the number of stamps the user has earned in the database. Furthermore, the promotion unit 2102 may send a message to the user terminal 5 used by the user indicating that the user has earned a stamp.

[0064] The promotion unit 2102 may target users associated with matching information indicating a matching date, where the length of time elapsed since the matching date of attribute information stored in the member DB 14a matched the verified attribute information is less than or equal to a predetermined length, as targets for a predetermined promotion. On the other hand, the promotion unit 2102 may exclude users whose elapsed time since the matching date exceeds a predetermined length from the promotion. As mentioned above, attribute information that matches the verified attribute information is highly likely to be correct information about the user at that time. However, a user's attributes may change. On the other hand, information such as name and address does not change frequently. Therefore, it may be interpreted that attribute information is valid for a certain period of time from the date the attribute information matches the verified attribute information when implementing a promotion. The predetermined length of time is called the attribute validity period. Examples of attribute validity period lengths include 3 months, 6 months, 1 year, etc.

[0065] The Promotion Department 2102 may include users associated with matching information indicating that they did not consent to updating their attribute information with the modified verified attribute information if the attribute information stored in the Member DB 14a matches the verified attribute information and then changes to that verified attribute information, in the target of a predetermined promotion if the length of time elapsed since the matching date is less than or equal to a predetermined length. On the other hand, the Promotion Department 2102 may include users associated with matching information indicating that they consented to updating their attribute information with the modified verified attribute information if the attribute information stored in the Member DB 14a matches the verified attribute information and then changes to that verified attribute information, in the target of the promotion regardless of the length of time elapsed since the matching date. Even if a user who has consented to updating their attribute information with the modified verified attribute information changes their attribute, the attribute information stored in the Member DB 14a for that user will be updated to reflect the latest attribute. Therefore, it is not necessary to limit the period during which such users can be included in the promotion.

[0066] Figure 10(a) shows an example of how to determine whether or not to include a user in a promotion. For example, user U21 chose to use the attribute information linking function. Here, user U21 did not consent to updating the attribute information with the changed verified attribute information if the attribute information stored in member DB14a changed after it matched the verified attribute information. Therefore, as shown in Figure 10(a), the linking status is set to "Linked" and the consent information is set to "Link only for the first time". Assume the linking date is January 1st. Assume the attribute validity period is 6 months. Therefore, from January 1st to June 30th, user U21 may be eligible for the promotion. For example, as of March 10th, user U21 is eligible for the promotion. Also, as of August 20th, user U21 is not eligible for the promotion.

[0067] Figure 10(b) shows an example of how to determine whether or not to include another user in the promotion. For example, user U22 chose to use the attribute information linking function. Here, user U21 agreed that if the attribute information stored in member DB14a matches the verified attribute information and then changes to that verified attribute information, the attribute information will be updated with the changed verified attribute information. Therefore, as shown in Figure 10(b), the linking status is set to "Linked" and the consent information is set to "Continued Linking". Assume the linking date is January 1st. In this case, for example, user U22 will still be eligible for the promotion even on August 20th.

[0068] [1-4. Operation of the communication system] Next, the operation of the communication system S will be described with reference to Figures 11 to 13. The processes shown in these figures are illustrative, and any processes may be executed as long as the objective is achieved. The order of the processes is not limited to the order shown in these figures. Also, at least one of the steps shown in these figures may be omitted. The system control unit 11 of the member information management server 1 may execute the processes shown in Figures 11 and 12 according to the various program codes included in the member information management server program. The system control unit 21 of the promotion server 2 may execute the processes shown in Figures 11 to 13 according to the various program codes included in the promotion server program.

[0069] Figure 11 is a sequence diagram showing an example of processing by the communication system S when the user selects to use the attribute information linking function. For example, the user operates the user terminal 5 to select to use the attribute information linking function. At this time, the user selects whether or not to consent to updating the attribute information with the changed verified attribute information if there are any changes to the verified attribute information after the attribute information stored in the member DB 14a matches the verified attribute information. The user also has the user terminal 5 read the electronic certificate and electronic signature from the My Number Card. Subsequently, as shown in Figure 11, the user terminal 5 sends the electronic certificate, electronic signature, consent information set to either "link only once" or "link continuously" depending on the user's selection, and the user's user ID to the member information management server 1 (step S101). The attribute information acquisition unit 1101 of the member information management server 1, upon receiving this information, sends a signature verification request to the signature verification server 3 (step S102). The signature verification request includes, for example, the electronic certificate and electronic signature.

[0070] Upon receiving a signature verification request, the signature verification server 3 performs signature verification (step S103). For example, the signature verification server 3 may determine the validity of the digital certificate by verifying the authentication path based on the issuer's identification information and the issuer's digital signature contained in the digital certificate. The signature verification server 3 may also determine whether the digital certificate has expired. The signature verification server 3 may also decrypt the digital signature back to its original hash value using the public key contained in the digital certificate. The signature verification server 3 may also calculate the hash value of the information from which the digital signature originated. The signature verification server 3 may determine the validity of the digital signature by determining whether these hash values ​​match. If the digital certificate is valid, has not expired, and the digital signature is valid, the signature verification server 3 sends a validity verification request to the certification authority server 4 (step S104). The validity verification request may include, for example, the issuance number of the digital certificate. The issuance number may be included in the digital certificate. The Certificate Authority Server 4 sends a validity check result to the Signature Verification Server 3 indicating whether the digital certificate corresponding to the issue number included in the validity check request is valid or has expired (step S105). If the Signature Verification Server 3 obtains a validity check result indicating that the digital certificate is valid, it obtains the attribute information included in the digital certificate as verified attribute information (step S106). The Signature Verification Server 3 sends this verified attribute information to the Member Information Management Server 1 (step S107). At this time, the Signature Verification Server 3 may generate a new serial number. The Signature Verification Server 3 may associate this serial number with the issue number of the digital certificate and store it. The Signature Verification Server 3 may also send the serial ID along with the verified attribute information to the Member Information Management Server 1.

[0071] When the attribute information acquisition unit 1101 of the member information management server 1 receives verified attribute information, the attribute information matching unit 1102 overwrites the attribute information stored in the member DB 14a associated with the user ID transmitted from the user terminal 5 with the verified attribute information (step S108). Next, the matching information storage control unit 1103 modifies the attribute linkage information stored in the attribute linkage information DB 14b associated with the user ID transmitted from the user terminal 5 (step S109). For example, the matching information storage control unit 1103 may change the linkage status to "linked", change the linkage date to today's date, and change the consent information to the consent information transmitted from the user terminal 5. The matching information storage control unit 1103 may also add the serial ID received from the signature verification server 3 to the attribute linkage information.

[0072] If the signature verification result by the signature verification server 3 is poor, or if the digital certificate has expired, the signature verification server 3 does not send the verified attribute information to the member information management server 1. In this case, the member information management server 1 does not rewrite the attribute information in the member DB 14b, nor does it change the attribute linkage information in the attribute linkage information DB 14b. The member information management server 1 may also send a message to the user terminal 5 indicating that the attribute information linkage function is unavailable. If the signature verification result is good but the digital certificate has expired, the signature verification server 3 may obtain attribute information indicating the changed attributes from the certification authority server 4 as verified attribute information. The member information management server 1 may then rewrite the attribute information in the member DB 14b with this verified attribute information and change the attribute linkage information.

[0073] Figure 12 is a sequence diagram showing an example of processing by the communication system S when a user's attributes are changed. For example, a user performs an attribute change procedure at a government office. In response to this change procedure, the certification authority server 4 changes the user's attribute information to attribute information indicating the changed attributes. The certification authority server 4 also issues a new digital certificate to the user whose attributes have been changed and revokes the user's old digital certificate. The certification authority server 4 links the issuance number of the new digital certificate with the issuance number of the old digital certificate. As shown in Figure 12, the certification authority server 4 also sends a revocation list to the signature verification server 3, for example, daily (step S201). For example, the certification authority server 4 may send the revocation list in response to a request from the signature verification server 3. The revocation list may be, for example, a list of the issuance numbers of digital certificates that have recently been revoked.

[0074] Upon receiving the revocation list, the signature verification server 3 recognizes that the digital certificate corresponding to an issue number has been revoked if the issue number stored by the signature verification server 3 in association with any serial ID is included in the revocation list (step S202). In response to this recognition, the signature verification server 3 sends an information request to the certification authority server 4 (step S203). The information request may include, for example, the issue number of the revoked digital certificate. Based on the issue number included in the information request, the certification authority server 4 sends attribute information indicating the changed attributes to the signature verification server 3 as verified attribute information (step S204). The signature verification server 3 sends the verified attribute information received from the certification authority server 4, along with the serial ID associated with the issue number of the revoked digital certificate, to the member information management server 1 (step S205). The attribute information matching unit 1102 of the member information management server 1, having received the verified attribute information and serial ID, obtains the user ID associated with this serial ID from the attribute linkage information DB 14b. The attribute information matching unit 1102 overwrites the attribute information stored in the member DB 14a associated with this user ID with the verified attribute information (step S206).

[0075] Figure 13 is a flowchart showing an example of promotion control processing performed by the system control unit 21 of the promotion server 2 according to this embodiment. The processing example shown in Figure 13 is an example of determining whether a particular user is eligible for a promotion. For example, if the promotion is an advertisement displayed on a screen or a promotion using a stamp card, the processing shown in Figure 13 may be performed.

[0076] As shown in Figure 13, the condition information acquisition unit 2101 acquires the user attribute conditions of the promotion to be judged from the promotion DB 24a (step S301). Next, the promotion unit 2102 acquires the user ID of the user to be judged (step S302). For example, the promotion unit 2102 may acquire the user ID from the user terminal 5 of that user. Next, the promotion unit 2102 acquires attribute information associated with this user ID from the member DB 14a (step S303). Next, the promotion unit 2102 determines whether the user attributes indicated by this attribute information satisfy the user attribute conditions (step S304). If the user attributes do not satisfy the user attribute conditions (step S304: NO), the promotion unit 2102 terminates the promotion control process without executing any processing for the promotion (step S305).

[0077] If the user's attributes meet the user attribute conditions (Step S304: YES), the promotion unit 2102 retrieves attribute linkage information associated with the acquired user ID from the attribute linkage information DB 14b (Step S306). Next, the promotion unit 2102 determines whether the linkage status included in the attribute linkage information is "linked" or not (Step S307). If the linkage status is "not linked" (Step S307: NO), the process proceeds to Step S305. If the linkage status is "linked" (Step S307: YES), the promotion unit 2102 determines whether the consent information included in the attribute linkage information is "continuous linkage" or not (Step S308). If the consent information is "linked only for the first time" (Step S308: NO), the promotion unit 2102 determines whether today is within the attribute validity period from the linkage date included in the attribute linkage information (Step S309). If today is outside the attribute validity period (Step S309: NO), the process proceeds to Step S305. If the consent information is "continued linkage" (step S308: YES), or if today is within the attribute validity period (step S309: YES), the promotion unit 2102 executes the promotion process (step S310), and the promotion control process ends.

[0078] As described above, according to this embodiment, the member information management server 1 may acquire verified attribute information for any user. The member information management server 1 may also match the attribute information stored in the member DB 14a in association with that user with the verified attribute information. The member information management server 1 may also store the matching information in the attribute linkage information DB 14b in association with that user. The promotion server 2 may also acquire user attribute conditions. The promotion server 2 may also execute processing for a predetermined promotion targeting users associated with the matching information among users associated with attribute information that shows attributes that satisfy the user attribute conditions. In this case, the users to be promoted can be appropriately identified and the promotion can be carried out.

[0079] Here, the member information management server 1 may store matching information in the matching information storage means, indicating the date on which the attribute information matched the verified attribute information. Alternatively, the promotion server 2 may target users associated with attribute information that shows attributes satisfying user attribute conditions, and whose matching information indicates a matching date where the length of time elapsed from the matching date is less than or equal to a predetermined length, as targets for a predetermined promotion. In this case, users for whom the predetermined length of time has not elapsed since the date on which the attribute information stored in the member DB 14a matched the verified attribute information may be eligible for promotion. As time passes since the date on which the attribute information matched the verified attribute information, the actual attributes of the user may change. Therefore, users for whom the attribute information is likely to be accurate within a certain period can be targeted for promotion.

[0080] In this case, the member information management server 1 may store matching information in the attribute linkage information DB 14b indicating whether or not any user has consented to updating the attribute information with the modified verified attribute information if there are changes to the verified attribute information after the attribute information has matched the verified attribute information. Furthermore, the promotion server 2 may include users associated with matching information indicating that consent was not given in the target of the specified promotion if the length of time elapsed since the matching date is less than or equal to a predetermined length. Furthermore, the promotion server 2 may include users associated with matching information indicating that consent was given in the target of the specified promotion regardless of the length of time elapsed since the matching date. In this case, users who allow the attribute information stored in the member DB 14a to match the verified attribute information can choose whether or not to consent to updating the attribute information with the modified verified attribute information if there are changes to the verified attribute information after the match. Users who do not consent may be eligible for promotion if the predetermined length of time has not elapsed since the date the attribute information matched the verified attribute information. Users who consent may be eligible for promotion even if the length of time elapsed since the date the attribute information matched the verified attribute information exceeds the predetermined length. The attribute information stored in Member DB14a is updated with the verified attribute information as it changes. Therefore, for users who have chosen to consent, the accuracy of their attribute information is likely to be maintained, and they can be included in promotions regardless of the timing.

[0081] [2. Second Embodiment] Next, a second embodiment will be described with reference to Figures 14 to 18. Except for the points described below, the first embodiment may be identical to the second embodiment.

[0082] Figure 14 is a diagram showing an example of the schematic configuration of the communication system S according to this embodiment. In Figure 14, the same reference numerals are used for the same components as in Figure 1. The difference between Figure 14 and Figure 1 is that the communication system S shown in Figure 14 further includes one or more service servers 6 and one or more delivery service provider servers 7. The service servers 6 and delivery service provider servers 7 are connected to a network NW.

[0083] Service Server 6 may be a server device that performs processing to provide a predetermined service to a member or business of the Internet Comprehensive Service. For convenience, this service will be referred to as a "specific service." A specific service may be, for example, a service included in the Internet Comprehensive Service. In a specific service, a delivery service is used. The delivery service may be a service that delivers a predetermined type of shipment to a destination. The shipment may be at least one of parcels and postal items. The delivery service may be provided by a delivery company. For example, the operator of the specific service may use a delivery service to provide this specific service. Alternatively, a member or business of the Internet Comprehensive Service may use a delivery service. Examples of specific services include mediating product transactions in an online shopping mall, mediating product transactions in a flea market, and direct mail services. In an online shopping mall, multiple businesses each sell products to members of the Internet Comprehensive Service. Businesses that receive orders for products in an online shopping mall ship those products to the users who purchase them. In a flea market, products are bought and sold between members of the Internet Comprehensive Service. The user who purchases the product ships it back to the user who purchased it. In the direct mail service, the operator of the advertising service sends direct mail to members of the comprehensive internet service based on requests from advertisers. A service server 6 may be set up for each specific service provided. Alternatively, the server device that performs processing related to the direct mail service may be any of the promotion servers 2.

[0084] The delivery company server 7 may be a server device managed by the delivery company. The delivery company server 7 may also be a server device that manages the delivery status of shipments handled by the delivery company. For example, it may be possible to check the delivery status of shipments through a website operated by the delivery company. A separate delivery company server 7 may be installed for each delivery company.

[0085] Figure 15 shows an example of information stored in the databases of the service server 6 and the delivery company server 7. As shown in Figure 15, the service server 6 may store a database such as a shipping information DB 61. The shipping information DB 61 may store shipping information necessary for shipping items in a specific service, either for each item or for each transaction completed within the specific service. The actual shipping information may be included in appropriate information depending on the type of specific service. For example, if the specific service is transaction mediation in an online shopping mall, the shipping information may be included in purchase information, etc. Purchase information may be information indicating the details of the purchase of goods. Also, for example, if the specific service is transaction mediation in a flea market, the shipping information may be included in transaction information, etc. Transaction information may be information indicating the details of the transaction of goods. The shipping information DB 61 may store shipping information such as user ID, recipient name, shipping address, shipping postal code, shipping method, delivery company ID, and inquiry number, all associated with each other. The user ID indicates the user to whom the item is being sent. The recipient name indicates the name of the recipient of the item. The shipping address indicates the address to which the shipment will be sent. The shipping postal code is the postal code corresponding to the shipping address. If the specific service is a transaction mediation service for online shopping malls or flea markets, the name and address stored in Member DB14a may be used as the recipient name and shipping address. Alternatively, the name and address previously registered by the user for the specific service may be used as the recipient name and shipping address. Alternatively, the user may enter the recipient name and shipping address when purchasing the product. If the specific service is a direct mail service, the name and address stored in Member DB14a may be used as the recipient name and shipping address. The shipping method indicates how the shipment will be sent. The delivery carrier ID is identification information that identifies the delivery carrier to which the shipment will be requested. If the specific service is a transaction mediation service for online shopping malls or flea markets, the shipping method and delivery carrier may be specified by the buyer or seller of the product. If the specific service is a direct mail service, the shipping method and delivery carrier may be predetermined.The tracking number is identification information used by the delivery company to identify a shipment. For example, the tracking number may be pre-printed on the shipping label attached to the shipment. Alternatively, the delivery company may notify the sender of the tracking number when the sender requests delivery of the shipment. The sender may register the tracking number with a specific service. Alternatively, the service server 6 may automatically obtain the tracking number from the delivery company server 7. The service server 6 may provide an API to server devices such as the promotion server 2 for accessing the shipping information DB 61.

[0086] The delivery company server 7 may store a database such as a delivery status information DB 71, as shown in Figure 15. The delivery status information DB 71 may store delivery status information indicating the delivery status of an item each time the delivery company receives a request for delivery of an item. For example, the delivery status information DB 71 may store the inquiry number, delivery status, and delivery date and time in association with each other as delivery status information. The inquiry number is a number associated with the item. The delivery status may be set to one of the following, for example, "accepted," "in transit to delivery center," "arrived at delivery center," "out for delivery," "delivered," and "returned." "Accepted," "in transit to delivery center," "arrived at delivery center," and "out for delivery" all indicate that the item is in transit. "Delivered" indicates that the delivery of the item has been completed. "Returned" indicates that the item could not be delivered and has been returned to the sender. The delivery date and time indicates the date and time when the delivery of the item was completed. Employees of the delivery company may input the actual delivery status into a terminal device (not shown) whenever the delivery status changes. The delivery company server 7 may update the delivery status information stored in the delivery status information DB 71 based on the input information. The delivery company server 7 may also provide an API to parties outside the delivery company for accessing the delivery status information DB 71. In addition, the delivery status information may be included in the shipping information stored in the shipping information DB 61. For example, the service server 6 may obtain the delivery status information from the delivery company server 7 and add that delivery status information to the shipping information.

[0087] Figure 16 shows an example of the functional blocks of the system control unit 21 in the promotion server 2. In Figure 16, elements identical to those in Figure 8 are denoted by the same reference numerals. The difference between Figure 16 and Figure 8 is that the system control unit 21 shown in Figure 16 also functions as a delivery status information acquisition unit 2103.

[0088] The delivery status information acquisition unit 2103 may acquire delivery status information indicating the delivery status of an item sent to an address indicated by any of the attribute information stored in the member DB 14a. For example, the delivery status information acquisition unit 2103 may search the shipping information DB 61 for shipping information associated with the user ID of a user whose eligibility for promotion is being determined. If the shipping address included in the retrieved shipping information matches an address stored in the member DB 14a for that user, the delivery status information acquisition unit 2103 may acquire a query number from that shipping information. The delivery status information acquisition unit 2103 may acquire delivery status information associated with that query number from the delivery status information DB 71. The delivery status information acquisition unit 2103 may acquire delivery status information only if the combination of recipient name and shipping address included in the shipping information matches a combination of name and address stored in the member DB 14a.

[0089] The promotion unit 2102 may include users associated with attribute information indicating attributes that satisfy user attribute conditions obtained by the condition information acquisition unit 2101, and who are associated with attribute information indicating a delivery address for which delivery has been completed, as targets for a predetermined promotion, based on delivery status information obtained by the delivery status information acquisition unit 2103. In this case, the promotion unit 2102 may include this user as a target for a predetermined promotion regardless of whether or not this user is associated with matching information stored in the attribute linkage information DB 14b by the matching information storage control unit 1103. The completion of delivery of an item to that user's address stored in the member DB 14a indicates that the user is likely to be living at that address. In other words, the validity of the address stored in the member DB 14a can be confirmed without using the attribute information linkage function. Therefore, users do not need to go through the procedure of using the attribute information linkage function in order to include themselves as targets for a promotion.

[0090] Furthermore, the promotion unit 2102 may include a user in the promotion only if, for example, the length of time elapsed since the delivery completion date of the shipment, as indicated by the delivery date and time included in the delivery status information, is less than or equal to a predetermined length. This length of time may be the same as or different from the length of the attribute validity period.

[0091] Figure 17(a) shows an example of user attribute conditions. As shown in Figure 17(a), no conditions are set for name, gender, or age in a certain promotion. The address condition is "Saitama Prefecture". Therefore, users residing in Saitama Prefecture are eligible for the promotion. Figure 17(b) shows an example of information about a certain user. As shown in Figure 17(b), the address stored in member DB14a for user U31 is "Saitama Prefecture, Saitama City STUVWXYZ". Therefore, user U31 satisfies the user attribute conditions. The linkage status stored in attribute linkage information DB14b for user U31 is set to "Not linked". Therefore, user U31 should not be eligible for the promotion. On the other hand, user U31 purchased a product from an online shopping mall. The purchased product was delivered to user U31's address. The shipping information DB61 of the online shopping mall's service server 6 stores shipping information regarding the shipment of the product to user U31. The shipping address included in this shipping information is "STUVWXYZ, Saitama City, Saitama Prefecture". The shipping carrier ID included in the shipping information is ZZZ Corporation, and the inquiry number is "12345678". The shipping status information DB71 of ZZZ Corporation's shipping carrier server 7 stores shipping status information including inquiry number "12345678". The shipping status included in this shipping status information is set to "Delivered". Therefore, the promotion department 2102 may include user U31 as a target for the promotion.

[0092] Figure 18 is a flowchart showing an example of a promotion control process executed by the system control unit 21 of the promotion server 2 according to this embodiment. In Figure 18, the same reference numerals are used for processes that are the same as those in Figure 13.

[0093] As shown in Figure 18, steps S301 to S304 are executed first, as in the first embodiment. If the user's attributes satisfy the user attribute conditions (step S304: YES), the delivery status information acquisition unit 2103 searches the shipping information DB 61 for shipping information that includes the user ID of the user subject to determination. Based on the search results, the delivery status information acquisition unit 2103 determines whether or not there is any matching shipping information (step S401). If there is no matching shipping information (step S401: NO), the process proceeds to step S306. Then, as in the first embodiment, steps S306 to S310 and S305 are executed.

[0094] If there is relevant shipping information (Step S401: NO), the delivery status information acquisition unit 2103 determines whether the address included in the user's attribute information matches the shipping address included in the relevant shipping information (Step S402). If the addresses do not match (Step S402: NO), the process proceeds to Step S306. If the addresses do match (Step S402: YES), the delivery status information acquisition unit 2103 obtains an inquiry number from the shipping information. The delivery status information acquisition unit 2103 obtains delivery status information including that inquiry number from the delivery status information DB 71 (Step S403). Next, the delivery status information acquisition unit 2103 determines whether the delivery status included in the acquired delivery status information is "delivered" (Step S404). If the delivery status is not "delivered" (Step S404: NO), the process proceeds to Step S306. If the delivery status is "delivered" (step S404: YES), the promotion unit 2102 executes the promotion process (step S310), and the promotion control process ends.

[0095] As explained above, according to this embodiment, if a shipment is sent to a user's address stored in the member database 14a and the delivery status information indicates that the shipment has been delivered, that user may be eligible for a promotion even if no matching information is stored for that user. The fact that a shipment has been delivered to an address stored in the member database 14a indicates that the address is likely to be accurate for the user. Therefore, it is possible to appropriately identify users eligible for promotions and implement promotions while eliminating the effort of matching the attribute information stored in the member database 14a with verified attribute information.

[0096] (Note 1) A promotion system characterized by comprising: an attribute information storage means for storing attribute information indicating the attributes of a user in association with the user for each of a plurality of users; a verified attribute information acquisition means for acquiring verified attribute information indicating an attribute of any of the plurality of users that has been confirmed to be factual using an electronic certificate for any of the users; a matching means for matching the attribute information stored in the attribute information storage means in association with any of the users with the acquired verified attribute information; a storage control means for storing matching information in the matching information storage means in association with any of the users that indicates that the attribute information matches the verified attribute information; a condition information acquisition means for acquiring condition information indicating the attribute conditions of a user who is the target of a predetermined promotion; and a promotion means for executing processing for the predetermined promotion for users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information, and which is associated with the matching information.

[0097] (Note 2) The promotion system according to Note 1, characterized in that the memory control means causes the matching means to store the matching information indicating the date on which the attribute information matches the confirmed attribute information by the matching means in the matching information storage means, and the promotion means targets users associated with the matching information indicating the date on which the period elapsed from the matching date is less than or equal to a predetermined length, among users associated with the attribute information indicating the attribute that satisfies the conditions indicated by the acquired condition information, as the target of the predetermined promotion.

[0098] (Note 3) The promotion system according to Note 2, characterized in that the storage control means stores in the attribute information storage means the matching information indicating whether or not any user has consented to updating the attribute information with the changed confirmed attribute information when there has been a change to the confirmed attribute information after the attribute information has matched the confirmed attribute information, and the promotion means includes users associated with the matching information indicating that consent was not given in the target of the predetermined promotion if the length of time elapsed from the matching date is less than or equal to the predetermined length, and includes users associated with the matching information indicating that consent was given in the target of the predetermined promotion regardless of the length of time elapsed from the matching date.

[0099] (Note 4) The promotion system according to any one of Notes 1 to 3, wherein the attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address, the condition indicated by the acquired condition information includes an address condition, and the promotion means further comprises a delivery status information acquisition means for acquiring delivery status information indicating the delivery status of an item sent to the address indicated by any of the attribute information stored in the attribute information storage means, and the promotion means includes, among users associated with the attribute information indicating the attribute that satisfies the condition indicated by the acquired condition information, users associated with the attribute information indicating the address of the delivery destination for which delivery has been completed as indicated by the acquired delivery status information, regardless of whether they are associated with the matching information or not, as targets of the predetermined promotion.

[0100] (Note 5) The promotion system according to any one of Notes 1 to 4, characterized in that the means for obtaining verified attribute information obtains the electronic certificate from the terminal device of any of the users and obtains the verified attribute information contained in the obtained electronic certificate.

[0101] (Note 6) A promotion method performed by a computer, comprising: an attribute information storage means associated with an attribute information for each of a plurality of users, in which attribute information indicating the attributes of the user is stored in association with the user; an acquired verified attribute information step, in which an attribute of any of the plurality of users is acquired, in which an attribute has been confirmed to be fact using an electronic certificate for any of the users; a matching step, in which the attribute information stored in the attribute information storage means associated with any of the users is matched with the acquired verified attribute information; a storage control step, in which the matching information storage means is stored in association with any of the users, in which matching information indicating that the attribute information matches the verified attribute information; an acquired condition information acquisition step, in which condition information indicating the attribute conditions of a user who is the target of a predetermined promotion is acquired; and a promotion step, in which processing for the predetermined promotion is performed for users associated with the matching information among users associated with the attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information. [Explanation of Symbols]

[0102] 1. Member Information Management Server 2. Promotion Server 3. Signature Verification Server 4. Certificate Authority Server 5. User terminals 6. Service Server 7. Delivery company server 11 System Control Unit 12 System Bus 13 Input / Output Interfaces 14 Storage section 14a Member Database 14b Attribute Linkage Information Database 15 Communications Department 21 System Control Unit 22 System Bus 23 Input / Output Interfaces 24 Memory section 24a Promotion DB 25 Communications Department 61 Shipping Information Database 71 Delivery Status Information Database 1101 Attribute information acquisition section 1102 Attribute information matching part 1103 Matching Information Storage Control Unit 2101 Condition information acquisition section 2102 Promotion Department 2103 Delivery Status Information Acquisition Unit NW Network S Communication System

Claims

1. For each of multiple users, an attribute information storage means stores attribute information indicating the user's attributes in association with the user; A means for acquiring verified attribute information that acquires verified attribute information indicating an attribute of any of the aforementioned users that has been confirmed to be true using an electronic certificate for any of the aforementioned users, A matching means for matching the attribute information stored in the attribute information storage means in association with any of the aforementioned users with the acquired verified attribute information, A storage control means that stores matching information in the matching information storage means, indicating that the attribute information matches the verified attribute information, in association with any of the aforementioned users, Condition information acquisition means for acquiring condition information that indicates the attribute conditions of users who are eligible for a specified promotion, A promotion means that performs processing for the predetermined promotion targeting users associated with the attribute information that shows the attribute that satisfies the conditions indicated by the acquired condition information, and which are associated with the matching information; Equipped with, The memory control means causes the matching means to store the matching information, which indicates the date on which the attribute information matched the confirmed attribute information, in the matching information storage means. The promotion means is a promotion system characterized in that it targets users associated with attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information, and users associated with matching information indicating the matching date for which the length of the period elapsed from the matching date is less than or equal to a predetermined length, as targets for the predetermined promotion.

2. The storage control means causes the attribute information storage means to store the matching information indicating whether any of the users have consented to updating the attribute information with the modified verified attribute information if there is a change in the verified attribute information after the attribute information has matched the verified attribute information, The promotion system according to claim 1, characterized in that the promotion means includes users associated with the matching information indicating that consent was not given in the target of the predetermined promotion if the length of time elapsed from the matching date is less than or equal to the predetermined length, and includes users associated with the matching information indicating that consent was given in the target of the predetermined promotion regardless of the length of time elapsed from the matching date.

3. Attribute information storage means for storing attribute information indicating the attributes of each of a plurality of users in association with the user, A means for acquiring verified attribute information that acquires verified attribute information indicating an attribute of any of the aforementioned users that has been confirmed to be true using an electronic certificate for any of the aforementioned users, A matching means for matching the attribute information stored in the attribute information storage means in association with any of the aforementioned users with the acquired verified attribute information, A storage control means that stores matching information in the matching information storage means, indicating that the attribute information matches the verified attribute information, in association with any of the aforementioned users, Condition information acquisition means for acquiring condition information that indicates the attribute conditions of users who are eligible for a specified promotion, A promotion means that performs processing for the predetermined promotion targeting users associated with the attribute information that shows the attribute that satisfies the conditions indicated by the acquired condition information, and which are associated with the matching information; Equipped with, The attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address. The conditions indicated by the acquired condition information include address conditions. The system further includes a delivery status information acquisition means for acquiring delivery status information indicating the delivery status of an item that has been shipped to an address indicated by any of the attribute information stored in the attribute information storage means, The promotion means is a promotion system characterized in that, among users associated with attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information, users associated with attribute information indicating the delivery address of the delivery destination for which delivery has been completed as shown by the acquired delivery status information are included as targets of the predetermined promotion, regardless of whether or not they are associated with the matching information.

4. The promotion system according to any one of claims 1 to 3, characterized in that the verified attribute information acquisition means acquires the electronic certificate from the terminal device of any of the users and acquires the verified attribute information contained in the acquired electronic certificate.

5. A promotion method performed by computer, For each of the multiple users, attribute information indicating the user's attributes is stored in the attribute information storage means in association with the user. A verified attribute information acquisition step, which acquires verified attribute information indicating an attribute of any of the aforementioned users that has been confirmed to be true using an electronic certificate for any of the aforementioned users, A matching step of matching the attribute information stored in the attribute information storage means in association with any of the aforementioned users with the acquired verified attribute information, A storage control step of associating the attribute information with any of the aforementioned users and causing the matching information storage means to store matching information indicating that the attribute information matches the verified attribute information, A condition information acquisition step to acquire condition information indicating the attribute conditions of users who are eligible for a specified promotion, A promotion step in which processing for the predetermined promotion is performed for users associated with attribute information that shows the attribute that satisfies the conditions indicated by the acquired condition information, and which is associated with the matching information, Includes, The memory control step causes the matching information, which indicates the date on which the attribute information matched the confirmed attribute information as a result of the matching step, to be stored in the matching information storage means. The promotion step is a promotion method characterized in that, among users associated with attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information, users associated with matching information indicating the matching date for which the length of the period elapsed from the matching date is less than or equal to a predetermined length are targeted for the predetermined promotion.

6. A promotion method performed by computer, For each of the multiple users, attribute information indicating the user's attributes is stored in the attribute information storage means in association with the user. A verified attribute information acquisition step, which acquires verified attribute information indicating an attribute of any of the aforementioned users that has been confirmed to be true using an electronic certificate for any of the aforementioned users, A matching step of matching the attribute information stored in the attribute information storage means in association with any of the aforementioned users with the acquired verified attribute information, A storage control step of associating the attribute information with any of the aforementioned users and causing the matching information storage means to store matching information indicating that the attribute information matches the verified attribute information, A condition information acquisition step to acquire condition information indicating the attribute conditions of users who are eligible for a specified promotion, A promotion step in which processing for the predetermined promotion is performed for users associated with attribute information that shows the attribute that satisfies the conditions indicated by the acquired condition information, and which is associated with the matching information, Includes, The attribute indicated by at least one of the attribute information stored in the attribute information storage means includes an address. The conditions indicated by the acquired condition information include address conditions. The process further includes a delivery status information acquisition step, which involves acquiring delivery status information indicating the delivery status of an item that has been shipped to an address indicated by any of the attribute information stored in the attribute information storage means, The promotion step is a promotion method characterized in that, among users associated with attribute information indicating the attribute that satisfies the conditions shown by the acquired condition information, users associated with attribute information indicating the delivery address for which delivery has been completed as shown by the acquired delivery status information are included as targets of the predetermined promotion, regardless of whether or not they are associated with the matching information.

Images