Information management system, information management method, and information management program

Abstract

To enhance the reliability of information about an individual's background or circumstances, such as a resume. [Solution] The information management system 1 includes a profile acquisition unit 101 that acquires profile information relating to at least one of the attributes, history, or circumstances of provider U; a profile certification unit 102 that receives certification that at least a part of the profile information is correct; and a certification provision unit 111 that, when providing profile information to provider B or system 31 that requests the provision of profile information, provides in an identifiable manner how the certification of the profile information was performed.

Description

Technical Field

[0001] Embodiments of the present invention relate to an information management system, an information management method, and an information management program.

Background Art

[0002] Amid growing emphasis on ensuring the security of personal information, various mechanisms have been established to enable residents to smoothly receive administrative services. For example, platforms have been constructed for residents to centrally manage their own administrative information and use various services. In addition, administrative agencies utilize My Number cards to provide various services to residents.

Prior Art Documents

Non-Patent Documents

[0003]

Non-Patent Document 1

Non-Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0004] Ordinary companies are required to appropriately manage and utilize information related to individuals such as job seekers or employees. However, information such as resumes is based on self-declaration, and there is a demand from companies to obtain highly reliable information such as resumes. In addition, individuals also have a desire to demonstrate that their own resume and other information is correct.

[0005] One example of a problem that this invention aims to solve is improving the reliability of information regarding an individual's career or circumstances, such as a resume. [Means for solving the problem]

[0006] The invention according to this embodiment is, Regarding at least one of the provider's attributes, background, or circumstances Includes multiple items The profile acquisition unit retrieves profile information, The aforementioned profile information At least some of the items to be certified among the aforementioned multiple items but By methods appropriate to each case To obtain proof that it is correct Perform proof processing for this purpose. Profile Verification Department, When providing the aforementioned profile information to a recipient or system that requests the provision of such profile information, The certification process received, Profile Information Each of the items to be certified, including those mentioned above, must be correct. How was the proof made? For each item to be certified In an identifiable manner , the recipient or the recipient system The certification provision department, It is an information management system equipped with [features / equipment].

[0007] The invention according to this embodiment is, One or more computers that implement an information management system, Regarding at least one of the provider's attributes, background, or circumstances Includes multiple items The process of obtaining profile information, The aforementioned profile information At least some of the items to be certified among the aforementioned multiple items but By methods appropriate to each case To obtain proof that it is correct proof for Processing and, When providing the aforementioned profile information to a recipient or system that requests the provision of such profile information, The certification process received, Profile Information Each of the items to be certified, including those mentioned above, must be correct. How was the proof made? For each item to be certified In an identifiable manner , the recipient or the recipient system The processing provided, This is an information management method that implements [the following].

[0008] The invention according to this embodiment is, One or more computers that implement an information management system to , a process of acquiring profile information related to at least one of the provider's attributes, career, or status Includes multiple items , a process of receiving a certification indicating that the profile information At least some of the items to be certified among the multiple items that are included is By methods appropriate to each case correct proof for , a process of providing the profile information to a recipient or a recipient system that requests the provision of the profile information, in a manner that allows identification of how the certification of the profile information was performed The certification process received, Each of the items to be certified, including those mentioned above, must be correct. For each item to be certified , the recipient or the recipient system , the information management program causes execution of the foregoing processes. [Advantageous Effects of the Invention]

[0009] According to the present embodiment, it is possible to enhance the reliability of information related to an individual's career or status, such as a resume. [Brief Description of the Drawings]

[0010] [Figure 1] This is a system configuration diagram showing the overall overview of the information management system. [Figure 2] This is a block diagram showing the information management system. [Figure 3] This is a block diagram showing the hardware configuration of a computer. [Figure 4] This is an explanatory diagram showing an item management table. [Figure 5] This is an explanatory diagram showing a disclosure range management table. [Figure 6] This is an explanatory diagram showing an operator management table. [Figure 7] This is a screen diagram showing an item selection screen. [Figure 8] This is a screen diagram showing a person selection screen. [Figure 9] This is a screen diagram showing a profile display screen. ​​​​ [Figure 10] This is a flowchart showing the information management process. [Figure 11] This is a flowchart showing the profile creation process. [Figure 12] This is a flowchart showing the profile submission process. [Modes for carrying out the invention]

[0011] The present invention will be described below through embodiments of the invention, but the invention claimed is not limited to the following embodiments. Furthermore, not all of the configurations described in the embodiments are necessarily essential as means of solving the problem. For clarity of explanation, the following descriptions and drawings have been omitted and simplified as appropriate. In each drawing, the same elements are denoted by the same reference numerals, and redundant explanations have been omitted where necessary.

[0012] (Information Management System 1) The configuration overview of the information management system 1 will be explained with reference to Figure 1. The information management method is implemented using the information management system 1. Furthermore, the information management method in this embodiment is realized by having a computer execute an information management program.

[0013] The information management system 1 is a system for providing the profile of user U to at least one of either business operator B or service provider server 31.

[0014] In this embodiment, User U is the person who provides their profile (provider). Business Operator B is the person who conducts a predetermined business and receives User U's profile (recipient). Service provision server 31 is a system that provides predetermined services to User U or a third party on the cloud and is the recipient system that receives User U's profile.

[0015] For example, user U provides profile information, including their work history, to company B in order to get a job at company B. Also, user U provides profile information, including their personal circumstances, to the service provider server 31 in order to engage in personal activities such as hobbies. The profile information includes at least one of the following: work history, job title, health insurance history, or educational background. In this way, important information representing user U's background can be included in the profile information.

[0016] User U pre-registers their profile information with the information management server 10. Service provider B or the service provision server 31 can access the information management server 10 as needed and receive the profile information only with User U's permission.

[0017] The information management system 1 primarily comprises an information management server 10. This information management server 10 is a designated computer provided for managing profile information. Furthermore, the information management system 1 includes a certificate verification server 20, a resident information management platform 50, a license database 51, a permit database 52, a qualification database 53, a biometric information database 54, a business terminal 30, a service provision server 31, a user terminal 40, and an identity verification card 41.

[0018] The information management system 1, certificate verification server 20, resident information management platform 50, license database 51, permit database 52, qualification database 53, and biometric information database 54 are, for example, located on the cloud. These cloud computing resources are connected to a predetermined network N, such as the internet, in a communicable manner. Note that network N is not limited to the internet; it may also be a LAN (Local Area Network), WAN (Wide Area Network), or mobile communication network.

[0019] The information management server 10 is located at the profile management organization 60. The profile management organization 60 may be, for example, a private company such as a designated corporation that acquires and manages the profile information of user U.

[0020] The certificate verification server 20 and the resident information management platform 50 are located within the administrative agency 70, which acts as the resident information management body. The administrative agency 70 refers to, for example, an agency operated by the national or local government.

[0021] The certificate verification server 20 and resident information management platform 50, which function as computers, along with the business terminal 30 and user terminal 40, are connected to the information management server 10 via network N.

[0022] The certificate verification server 20 is a computer located in the cloud. The certificate verification server 20 verifies the validity of the electronic certificate stored in the identity verification card 41, which is a card-type identity verification medium. The certificate verification server 20 is set up by the information management server 10 to allow the resident information management platform 50 to perform identity verification authentication (resident verification authentication) of user U using the Japanese Public Key Infrastructure (JPKI). When the electronic certificate stored in the identity verification card 41 is valid, the information management server 10 can access various servers and databases, such as the resident information management platform 50.

[0023] The information management server 10 intervenes between the identity verification card 41 owned by user U and the public personal authentication service, and enables the public personal authentication service to verify the identity of user U. Alternatively, the information management server 10 may verify the identity of user U using a card substitute electronic record.

[0024] Card-alternative electronic records, which serve as a medium for identity verification, are stored on designated devices such as smartphones. Card-alternative electronic records are essentially mobile documents (mdocs) that store information from My Number Cards (identity verification cards) on smartphones, enabling identity verification without the need for a physical card.

[0025] The certificate verification server 20 is responsible for at least part of the function of verifying the electronic certificate obtained from the identity verification card 41 in the public personal authentication service. Specifically, the certificate verification server 20 provides information on the revocation of the electronic certificate.

[0026] The certificate verification server 20 may, for example, be one that performs authentication for the public personal authentication service operated by the Japan Local Government Information Systems Organization (J-LIS). The public personal authentication service is a means of identity verification used when performing administrative procedures such as online applications and notifications via the internet.

[0027] The resident information management platform 50 performs identity verification authentication (resident verification authentication) of user U when the information management server 10 accesses it.

[0028] The Resident Information Management Platform 50 is a platform for national or local governments to manage resident information. The Resident Information Management Platform 50 networks the four basic pieces of information from the Basic Resident Register (name, address, gender, and date of birth), which form the basis of various administrative services, as well as individual numbers, resident registration codes, and information on changes to these. This Resident Information Management Platform 50 is a platform that enables nationwide electronic identity verification. Furthermore, the Resident Information Management Platform 50 may include, for example, the functions of the Digital Agency's My Number Portal API.

[0029] The Resident Information Management Platform 50 manages various types of information, including residents' taxes, income, vaccinations, and pensions. The Resident Information Management Platform 50 accepts access from residents who have successfully authenticated using the public personal authentication service. Typically, the Resident Information Management Platform 50 plays a role in providing administrative information to residents through the My Number Portal, an administrative service operated by the government. In other words, the Resident Information Management Platform 50 may be envisioned as a national or local government resident information management infrastructure, including the My Number Portal API.

[0030] The license database 51 is established within the license management body 71. In the case of the license database 51 concerning driver's licenses, the license management body 71 is, for example, the public safety commission of each prefecture. In the case of the license database 51 concerning other types of licenses, the organization that has jurisdiction over those licenses is the license management body 71.

[0031] The licensing database 52 is located within the licensing management body 72. The licensing management body 72 is, for example, an agency that manages licenses based on the type of business or the relevant laws and regulations, and is an administrative agency such as a national ministry, prefecture, or municipality.

[0032] The qualification database 53 is maintained by the qualification management body 73. The qualification management body 73 may be, for example, a designated private company that conducts qualification examinations. In the case of qualification databases 53 concerning national qualifications, the qualification management body 73 may be an administrative agency 70 such as the national government or a local government.

[0033] The biometric information database 54 is located at the biometric information management organization 74. The biometric information management organization 74 may be, for example, a designated private company that acquires and manages the biometric information of user U.

[0034] The business terminal 30 is, for example, a computer such as a personal computer owned by a designated business operator B. Business operator B uses the business terminal 30 to access the information management server 10 and receive user U's profile information.

[0035] The service provision server 31 is, for example, a computer such as a server owned by a designated business operator B. The service provision server 31 automatically accesses the information management server 10 and receives user U's profile information in order to provide various services to user U or a third party.

[0036] The user terminal 40 is, for example, a computer such as a smartphone. The user terminal 40 may also be a tablet computer or a personal computer. User U has the user terminal 40 read their personal identification card 41. The information management server 10 uses the resident information management platform 50 to perform identity verification authentication (resident verification authentication) for user U.

[0037] The user terminal 40 includes a media reader (not shown) for reading the identity verification card 41. This media reader reads the electronic certificate embedded in the integrated circuit built into the identity verification card 41. The media reader also has, for example, a short-range wireless communication function compliant with a predetermined standard. The media reader may be located outside the user terminal 40, or it may be connected to the user terminal 40 when in use.

[0038] Furthermore, the user terminal 40 may have a function for card-alternative electronic recording that replaces the identity verification medium. If the user terminal 40 has a card-alternative electronic recording function, the configuration of the media reader unit may be omitted. Also, user U does not need to have an identity verification card 41.

[0039] The identity verification card 41 is, for example, a My Number Card. The identity verification card 41 can be any medium that can verify the identity of user U, such as a driver's license, passport, or residence card. These mediums are equipped with an IC chip that stores electronic certificates, etc.

[0040] The My Number Card is an IC card that can be used as an identification document for identity verification, as well as for various services such as local government services and electronic applications using electronic certificates, such as e-Tax. The My Number Card has the My Number (individual number), which is limited by law to the types of administrative tasks for which it can be used, printed on the card face, and is equipped with an IC chip that stores electronic certificates and applications (APs) that can be widely used, including by private businesses. This IC chip stores digital signature certificates and user authentication certificates, among others. Digital signature certificates are used when creating and sending electronically signed electronic documents over the internet. User authentication certificates are used when logging into websites for various services provided by the government and private sector. Users of the My Number Card can use these electronic certificates after being authenticated by the certification authority by entering the PIN set for each electronic certificate. A medium that can verify identity may include at least one of the following: the My Number Card, a smartphone equipped with a prescribed electronic certificate (so-called smartphone JPKI), and a smartphone on which a card substitute electromagnetic record is recorded.

[0041] Next, with reference to Figure 2, a block diagram showing the information management system 1 will be explained. Note that each component of the information management system 1 represents a functional block, not a hardware-level configuration. Each component is realized through any combination of hardware and software, centered around the CPU, memory, programs loaded into memory, storage media such as a hard disk for storing those programs, and a network connection interface. Furthermore, there are various modifications to the implementation method and apparatus.

[0042] In this embodiment, we illustrate a configuration in which each component of the information management system 1 is provided on the information management server 10.

[0043] The information management server 10 includes a profile acquisition unit 101, a profile certification unit 102, a profile creation unit 103, a profile storage unit 104, a profile provision unit 105, a My Page generation unit 106, a period setting unit 107, a registration unit 108, a registration determination unit 109, a certification reception unit 110, a certification provision unit 111, a permission reception unit 112, a viewing reception unit 113, a provision determination unit 114, an item selection unit 115, a display reception unit 116, an information acquisition unit 117, and an information verification unit 118. These are realized by programs stored in memory or an HDD (Hard Disk Drive) being executed by a CPU (Central Processing Unit).

[0044] Furthermore, the information management server 10 includes an information management database 119. This information management database 119 is a collection of information that is stored in memory, HDD, or cloud computing resources and organized so that it can be searched or stored. The information management database 119 includes, for example, an item management table (see Figure 4), a publication scope management table (see Figure 5), and a business operator management table (see Figure 6).

[0045] Furthermore, the configuration of the information management system 1 does not necessarily have to be implemented on a single information management server 10. For example, one information management system 1 may be implemented on multiple computers connected to each other via a network N.

[0046] For example, at least some of the components of the information management system 1 may be provided on the business operator terminal 30, the service provision server 31, or the user terminal 40.

[0047] The profile acquisition unit 101 acquires profile information from the user terminal 40 regarding at least one of the attributes, history, or circumstances of user U as a provider. The profile acquisition unit 101 may also acquire information from at least one of the following: the certificate verification server 20, the resident information management platform 50, the license database 51, the permit database 52, the qualification database 53, and the biometric information database 54.

[0048] The profile verification unit 102 receives verification that at least part of the profile information is correct. In this way, it is possible to request verification that the profile information entered by user U is authentic.

[0049] In this embodiment, the verification of profile information includes at least one of the following: verification based on an identity verification medium, verification based on the resident information management platform 50, verification based on the license database 51, verification based on the licensing database 52, verification based on the qualification database 53, and verification based on the biometric information database 54.

[0050] In other words, the verification may be based on a public personal authentication service using an identity verification card 41 (identity verification medium) owned by user U, or on a card alternative electronic record (identity verification medium) owned by user U. Furthermore, the verification may be based on the resident information management platform 50 of a resident information management organization that manages information on residents including user U, or on the license database 51 of a license management organization 71 that manages information on user U's licenses. In addition, the verification may be based on the license database 52 of a license management organization 72 that manages information on user U's licenses and permits, or on the qualification database 53 of a qualification management organization 73 that manages information on user U's qualifications. Furthermore, the verification may be based on the biometric information database 54 of a biometric information management organization 74 that manages user U's biometric information. In this way, since the information has been verified by a designated certifier, the reliability of the profile information can be increased.

[0051] The profile creation unit 103 creates the profile information to be provided based on the selections received from user U, who is the provider. In this way, profile information can be created using only the items that user U wishes to provide. For example, if the profile information is such as a resume, user U can select the items to be included in the resume and freely write in these items.

[0052] Furthermore, the profile creation unit 103 creates the profile information to be displayed based on the display method received from user U as the provider. For example, user U can choose whether to prioritize displaying career information such as educational and work history, or personal information such as hobbies, on the profile display screen (see Figure 9).

[0053] The profile storage unit 104 stores profile information entered by user U as a provider through their self-declaration via their My Page. In this way, it can also store profile information entered through self-declaration that has not yet been verified.

[0054] The profile provision unit 105 provides profile information to business operator B (as the recipient) or service provision server 31 (as the recipient system) if the latter is authorized to provide profile information. In this way, profile information can be provided only to business operator B or service provision server 31 authorized by user U.

[0055] Furthermore, the profile provision unit 105 provides profile information to business operator B as a recipient or service provision server 31 as a system to be provided to, if such a business operator B is registered. In this way, profile information can be provided only to the pre-registered and limited number of business operators B or service provision servers 31. This prevents unnecessary leakage of profile information. In addition, by making payment a condition of registration, the profile management organization 60 can earn revenue from providing profile information.

[0056] The My Page generation unit 106 generates a My Page in the digital space for user U as a provider. The information management server 10 stores the profile information entered by user U through this My Page. In this way, user U can enter free-form, self-reported profile information through the My Page. The My Page is the page that serves as the basis for user U to create their profile. Furthermore, the My Page may be viewable only by user U, or it may be viewable not only by user U but also by third parties such as business operator B.

[0057] The period setting unit 107 receives a setting from user U, who is the provider, for the period during which at least a portion of the profile information will be provided. In this way, user U can set the period during which the profile information will be provided. This prevents the unnecessary leakage of profile information.

[0058] The registration unit 108 registers user U as a provider in the information management system 1. The registration unit 108 also registers business operator B as a recipient of the service or service provision server 31 as a system to be provided to in the information management system 1.

[0059] The registration determination unit 109 determines whether user U, as a provider, is registered when they access the information management system 1. The registration determination unit 109 also determines whether business operator B, as a recipient of services, or service provision server 31, as a recipient system, is registered when they access the information management system 1.

[0060] The certification reception unit 110 receives requests for certification of at least some of the profile information from business operator B as the provider or service provider server 31 as the provided system. In this way, business operator B or service provider server 31 can request certification that the profile information provided by user U is correct. For example, business operator B can request user U to certify only that they are of legal age (18 years or older). Alternatively, business operator B can request user U to certify only their asset status.

[0061] When the certification provision unit 111 provides profile information to business operator B or service provision server 31 that requests the provision of profile information, it provides the information in a manner that allows identification of how the profile information has been certified. For example, on the profile display screen (see Figure 9), certified information 83 (see Figure 9) indicating that the item content 80 has been certified is displayed adjacent to each item content 80.

[0062] The authorization acceptance unit 112 receives permission from user U to provide profile information to at least one of the multiple service providers B or service providers 31 among the service providers B or service providers 31 as the provided systems.

[0063] The access reception unit 113 receives requests from business operator B, who is the recipient of the service, or from the service provision server 31, who is the recipient system, to obtain profile information of user U, who is the provider.

[0064] The provision determination unit 114 determines whether the business operator B as the recipient of the service or the service provision server 31 as the system to be provided is authorized to provide profile information.

[0065] In this embodiment, profile information consists of multiple items. The item selection unit 115 receives the selection of items to be provided from the user U, who is the provider. In this way, profile information can be created using only the items that user U wishes to provide.

[0066] Furthermore, the item selection unit 115 accepts the selection of items to be provided from among multiple items from the business operator B as the provider or the service provision server 31 as the system to be provided. In this way, profile information can be created using only the required items requested by business operator B or the service provision server 31. For example, in bank application procedures, business operator B can specify basic information (name, address, gender, date of birth) that it wants to be included in the profile information as required items of the profile information.

[0067] The display reception unit 116 receives information from user U, who is the provider, regarding how to display multiple items. In this way, user U can create profile information using the combination of items they desire. For example, user U may create profile information using only career information such as educational and work history, or it may use only personal information such as hobbies.

[0068] Based on the selection of items received from business operator B or the service provision server 31, the information acquisition unit 117 acquires profile information, including the items to be provided, from the information management database 119 if user U, as the provider, has authorized the provision of such information.

[0069] The information verification unit 118 compares at least a portion of the profile information entered by user U as the provider with official data issued by a designated certification body. In this way, the reliability of the profile information entered by self-declaration can be ensured. The designated certification bodies include, for example, administrative agencies 70, licensing management bodies 71, permit management bodies 72, qualification management bodies 73, and biometric information management bodies 74.

[0070] (Example hardware configuration) The information management server 10, which is a computer, may have the configuration shown in Figure 3. The information management server 10 has a bus 1010, a processor 1020, memory 1030, a storage device 1040, an input / output interface 1050, and a network interface 1060.

[0071] Bus 1010 is a data transmission path for the processor 1020, memory 1030, storage device 1040, input / output interface 1050, and network interface 1060 to send and receive data to and from each other. However, the method of connecting the processor 1020 and the other components to each other is not limited to bus connection.

[0072] Processor 1020 is a circuit that includes arithmetic units such as a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit).

[0073] Memory 1030 is a main memory device implemented using RAM (Random Access Memory), etc.

[0074] The storage device 1040 is a removable media such as an HDD (Hard Disk Drive), SSD (Solid State Drive), flash memory, or memory card, or an auxiliary storage device such as ROM (Read Only Memory), and has a recording medium. The recording medium of the storage device 1040 stores programs that realize each function of the information management server 10.

[0075] The processor 1020 reads this program into memory 1030 and executes it. This causes the processor 1020 to perform the function corresponding to this program. In other words, the program stored in memory 1030 causes the information management server 10 to perform a predetermined function.

[0076] The input / output interface 1050 connects the information management server 10 to a predetermined input / output device. The input / output device is, for example, an input device such as a keyboard, an output device such as a display, or an input / output device in which a touch panel is superimposed on a display.

[0077] The network interface 1060 is an interface for connecting the information management server 10 to a predetermined communication network. This communication network may be, for example, the Internet, a LAN (Local Area Network), or a WAN (Wide Area Network). The method by which the network interface 1060 connects to the communication network may be wireless or wired.

[0078] The information management server 10 has been described above. In addition to the above configuration, the information management server 10 may have an information input device for user U to input various information into the information management server 10 through operation. The information input device may be, for example, a keyboard, mouse, or touch panel. The information management server 10 may also have a display, speaker, vibration motor, or LED (light-emitting diode) for showing various information to user U.

[0079] The information management server 10 stores user U's profile information and verifies both user U's identity and permission to provide information. Furthermore, the information management server 10 extracts and transmits the stored profile information based on information requests from the business terminal 30 or the service provision server 31. This allows for dual control of identity verification and permission to provide information. Additionally, user U can be granted the right to decide whether or not to disclose their profile information.

[0080] Furthermore, based on instructions from user U, the information management server 10 selects only some of the profile information items and transmits only the selected items to the service provider terminal 30 or the service provider server 31. This enhances the privacy of the publisher.

[0081] (Example of a management table) Next, we will explain the item management table (see Figure 4), the scope of publication management table (see Figure 5), and the business operator management table (see Figure 6) included in the information management database 119.

[0082] Figure 4 shows an example of an item management table. This item management table registers item IDs, which are item identifiers that can individually identify each item in a single profile information for a single user U. This item ID serves as the primary key of the item management table. An item ID is assigned to each item in the profile information. Various information is registered using this item ID as the primary key. One item management table is generated for each user U.

[0083] The item management table registers the item ID, its content, whether or not it is certified, and the method of certification.

[0084] The information includes, for example, phonetic spelling of name, full name, address, gender, date of birth, educational background, work history, hobbies, nickname, financial status, marital status, qualifications, licenses and permits, and biometric information.

[0085] Whether or not certification exists indicates that the corresponding item is certified or uncertified by the prescribed method.

[0086] The method of verification indicates how the verification was performed if the corresponding item has already been verified. For example, the method of verification indicates whether it was verified by the Public Personal Authentication Service or by the Resident Information Management Platform 50.

[0087] Furthermore, the method of verification indicates whether it was verified through the license database 51, qualification database 53, licensing database 52, or biometric information database 54. Alternatively, the verification method may also be that User U submits academic or work history certificates in paper form to the profile management organization 60.

[0088] Figure 5 shows an example of a privacy management table. This privacy management table registers an item ID. This item ID serves as the primary key for the privacy management table. Various information is registered using this item ID as the primary key. One privacy management table is generated for each user U.

[0089] The access scope management table registers the access scope, individual access specifications, and access period, associated with the item ID.

[0090] The scope of disclosure defines the recipients to whom the information is disclosed, that is, the scope of business operator B or service provider server 31 as recipients of the profile information. User U can set, for example, four disclosure scopes: first disclosure scope, second disclosure scope, third disclosure scope, and fourth disclosure scope. In this way, User U can set the disclosure scope for each item of the profile information.

[0091] The first scope of disclosure allows the corresponding items to be made public to all operators B or the service provision server 31.

[0092] The second scope of disclosure allows certain items to be made public to certain service providers B or the service provision server 31. For example, user U can only make public items related to their career information.

[0093] The third scope of disclosure allows certain items to be made public to certain service providers B or the service provision server 31. For example, user U can only make public items related to private matters such as hobbies.

[0094] The fourth disclosure scope allows for the exclusion of the corresponding items from all service providers B or the service provision server 31.

[0095] Individual disclosure designation allows for the individual designation of business operator B or service provider server 31 as the recipient of profile information. Individual disclosure designation includes a business operator ID, which is business operator identification information that allows for the individual identification of business operator B or service provider server 31. For example, even if a fourth disclosure scope is set for an item, if a business operator ID is registered in the individual disclosure designation, business operator B or service provider server 31 can receive that item.

[0096] The publication period specifies the period during which the corresponding item is made public, that is, the period during which it can be made available to service provider B or the service provider server 31. In this way, user U can set the publication period for each item of their profile information.

[0097] Figure 6 shows an example of a business management table. This business management table registers a business ID, which is business identification information that can individually identify business operator B or service provision server 31. This business ID serves as the primary key of the business management table. A business ID is assigned to each business operator B or service provision server 31. Various information is registered using this business ID as the primary key. One business management table is generated for each user U.

[0098] The business management table registers the business name and scope of disclosure, associated with the business ID.

[0099] The business name is the name corresponding to business B or service provider server 31. The scope of disclosure can be set to one of four types: first disclosure scope, second disclosure scope, third disclosure scope, or fourth disclosure scope. For example, user U can set one of the disclosure scopes for each business B or service provider server 31. User U can independently select the business B or service provider server 31 to which each item will be disclosed.

[0100] Here, user U can manage the disclosure status of multiple items by dividing them into two disclosure scopes: a first disclosure scope where a specific number of items (the total number of items) are permitted to be disclosed, and a second disclosure scope where a smaller number of items than that is permitted to be disclosed. In this way, user U can manage multiple items separately. Furthermore, user U can manage whether or not an item is permitted to be disclosed for each disclosure scope.

[0101] (Example of a display screen) Next, we will explain the item selection screen (see Figure 7), the person selection screen (see Figure 8), and the profile display screen (see Figure 9) that are displayed on the operator terminal 30's screen.

[0102] Figure 7 shows an example of an item selection screen. When the business terminal 30 accesses the information management server 10, this item selection screen is first displayed on its display. Business operator B can then select the items 80 that they wish to display on the profile display screen (see Figure 9) which shows the profile of user U.

[0103] For example, the item selection screen displays the content of each item 80 in the profile. Additionally, checkboxes 81 are displayed corresponding to each item 80. Business operator B checks the checkboxes 81 corresponding to the item 80 they wish to display.

[0104] Figure 8 shows an example of a person selection screen. After selecting the item content 80 on the aforementioned item selection screen, this person selection screen is then displayed on the display of the business terminal 30. Business operator B can select the user U whose profile they wish to display on the profile display screen (see Figure 9).

[0105] For example, on the person selection screen, a checkbox 81 is displayed corresponding to the username 82. In addition, verification information 83 indicating that the username 82 is verified is displayed next to each username 82. Business operator B checks the checkbox 81 corresponding to the username 82 whose profile they wish to display.

[0106] Note that Username 82 can be either a name or a nickname. Username 82 is displayed based on the item management table (see Figure 4) and the access range management table (see Figure 5). If User U has set both their name and nickname to be publicly accessible, the name will take precedence and be displayed on the person selection screen. If User U has set their name to private and their nickname to be publicly accessible, the nickname will be displayed on the person selection screen. Furthermore, if User U has set both their name and nickname to private, the User ID will be displayed on the person selection screen as a substitute for Username 82. Note that the User ID is user identification information that can individually identify User U. This User ID is managed by the user management table (not shown).

[0107] Figure 9 shows an example of the profile display screen. After selecting the username 82 on the aforementioned person selection screen, this profile display screen is then displayed on the display of the business terminal 30.

[0108] For example, the profile display screen shows the content of each item 80 of the profile of user U selected by business operator B. The profile display screen also displays user U's photo 84 as an item 80. The profile display screen resembles a standard resume. Furthermore, verification information 83 indicating that the username 82 is verified is displayed next to each username 82. The verification information 83 is displayed based on the item management table (see Figure 4).

[0109] The certified information 83 includes wording and a certification badge indicating that it is certified. The certification badge is a predetermined symbol. By the differences in the form of these certification badges, business operator B can identify how the profile information was certified. Note that the identifiable form may be other than a certification badge, for example, it may be wording, an identifier, a number, etc.

[0110] For example, if the method of verification is the public personal authentication service, a black circle mark "●" will be displayed as the verification badge. If the method of verification is by submitting paper documents to the profile management organization 60, a black triangle mark "▲" will be displayed as the verification badge. If the method of verification is various databases such as the licensing database 52, a black square mark "◆" will be displayed as the verification badge.

[0111] Although the certified information 83 is exemplified as information displayed on a screen, the certified information 83 does not have to be information that can be recognized visually, and may take other forms. For example, if the recipient of the profile information is the service provision server 31, the certified information 83 may be predetermined electronic data indicating the method of certification.

[0112] (Example of a flowchart) Next, the information management process performed by the information management server 10 will be explained using the flowchart in Figure 10. Note that the previously mentioned diagram may be referenced. The following steps represent at least some of the processes included in the information management process; other steps may also be included.

[0113] First, in step S1, the registration determination unit 109 of the information management server 10 executes the business registration process. In this business registration process, the registration determination unit 109 determines whether the business ID is already registered when there is access from the business terminal 30 or the service provision server 31. If the business B or service provision server 31 is not registered, the registration unit 108 of the information management server 10 assigns a new business ID and prompts the user to enter predetermined registration information. The entered registration information is registered in the business management table (see Figure 6) or the like, associated with the business ID.

[0114] In the next step S2, the registration determination unit 109 of the information management server 10 executes the user registration process. In this user registration process, the registration determination unit 109 determines whether the user ID is already registered when there is access from the user terminal 40. If the user U is not yet registered, the registration unit 108 of the information management server 10 assigns a new user ID and prompts the user to enter predetermined registration information. The entered registration information is registered in the user management table (not shown) or the like, associated with the user ID.

[0115] In the next step S3, the information management server 10 executes the profile creation process described later.

[0116] In the next step S4, the information management server 10 executes the profile provision process described later. Then, the information management process is completed.

[0117] Next, the profile creation process performed by the information management server 10 will be explained using the flowchart in Figure 11. Note that the previously mentioned diagram may be referenced. The following steps represent at least some of the processes included in the profile creation process; other steps may also be included.

[0118] First, in step S11, the profile acquisition unit 101 of the information management server 10 executes a profile acquisition process if there is an access from a user terminal 40 handled by a registered user U. In this profile acquisition process, the profile acquisition unit 101 acquires the profile information of user U as a provider from the user terminal 40. User U operates the user terminal 40 and inputs the profile information. The profile information to be input consists of multiple items.

[0119] Furthermore, the information management server 10 may accept profile information input from user U through the My Page generated by the My Page generation unit 106 based on user U's self-declaration. The profile storage unit 104 then stores the input profile information. For example, the profile information is registered in the information management database 119.

[0120] In the next step S12, the profile certification unit 102 of the information management server 10 performs a first-stage profile certification process. In this first-stage profile certification process, the profile certification unit 102 accesses the resident information management platform 50, etc., and obtains certification that each item of the profile information entered by user U is correct.

[0121] Furthermore, the information verification unit 118 may perform a comparison of at least a portion of the profile information entered by user U through self-declaration with official data issued by a designated certification body.

[0122] In the next step S13, the period setting unit 107 of the information management server 10 executes the period setting process. In this period setting process, the period setting unit 107 receives the setting of the period for which each item of the profile information will be provided, that is, the publication period, from the user U. The set publication period is registered in the publication scope management table (see Figure 5).

[0123] In the next step S14, the item selection unit 115 of the information management server 10 performs a primary item selection process. In this primary item selection process, the item selection unit 115 receives the selection of items to be provided from among multiple items of profile information from user U. User U can create profile information using only the items they wish to provide. The profile creation unit 103 then creates the profile information to be provided based on the selection received from user U.

[0124] In the next step S15, the authorization acceptance unit 112 of the information management server 10 receives permission from user U to provide profile information. The authorization acceptance unit 112 receives a selection from user U for either business operator B or service provider server 31 to provide the profile information.

[0125] This selection can be made for each item of the profile information. Furthermore, this selection can be made for each service provider B or each service provider server 31. The selected information is then registered in the item management table (see Figure 4), the public access management table (see Figure 5), and the service provider management table (see Figure 6).

[0126] In the next step S16, the display reception unit 116 of the information management server 10 executes the display reception process. In this display reception process, the display reception unit 116 receives from user U the display method for multiple items in the profile information. By setting the display method, user U creates profile information with the desired combination of items. The combination of items set here is registered in the profile management table (not shown). Note that the display method may be set for each business operator B or for each scope of disclosure. The profile creation unit 103 then creates the profile information to be displayed based on the display method received from user U. Then the profile creation process is completed.

[0127] Next, the profile provision process performed by the information management server 10 will be explained using the flowchart in Figure 12. Note that the previously mentioned diagram may be referenced. The following steps represent at least some of the processes included in the profile provision process; other steps may also be included.

[0128] First, in step S21, the registration determination unit 109 of the information management server 10 determines whether the business terminal 30 or service provision server 31 is a registered business terminal 30 or service provision server 31 when it accesses the server. In other words, the registration determination unit 109 determines whether the corresponding business ID is registered (assigned). If it is registered (YES in step S21), the process proceeds to step S22. On the other hand, if it is not registered (NO in step S21), the process proceeds to step S32.

[0129] In step S32, the registration unit 108 of the information management server 10 displays a message prompting registration on the display of the business terminal 30. The registration unit 108 also sends a registration request to the service provision server 31. The profile provision process is then completed.

[0130] In step S22, the item selection unit 115 of the information management server 10 executes a second-stage item selection process. In this second-stage item selection process, the item selection unit 115 receives the selection of items that the business operator B or the service provision server 31 wishes to provide from among multiple items of profile information.

[0131] For example, the item selection unit 115 displays the aforementioned item selection screen (see Figure 7) on the display of the business terminal 30. Business operator B can display only the desired items in the profile display image (see Figure 9).

[0132] Furthermore, the item selection unit 115 sends an item selection request to the service provision server 31. The service provision server 31 can then receive profile information consisting only of the desired items.

[0133] In the next step S23, the access request unit 113 of the information management server 10 executes access request processing. In this access request processing, the access request unit 113 receives a request from business operator B or the service provision server 31 to obtain user U's profile information.

[0134] For example, the viewing reception unit 113 displays the aforementioned person selection screen (see Figure 8) on the display of the business terminal 30. Business operator B can then display the profile image (see Figure 9) of the desired user U (person).

[0135] Furthermore, the viewing reception unit 113 sends a person selection request to the service provision server 31. The service provision server 31 can then receive the profile information of the desired user U (person).

[0136] In the next step S24, the provision determination unit 114 of the information management server 10 executes a provision determination process. In this provision determination process, the provision determination unit 114 determines whether or not the business operator B or the service provision server 31 is permitted to provide profile information. Here, the provision determination unit 114 determines the provision of profile information item by item. For example, the provision determination unit 114 refers to the item management table (see Figure 4), the disclosure scope management table (see Figure 5), and the business operator management table (see Figure 6) to determine whether or not provision is permitted.

[0137] In the next step S25, the provision determination unit 114 of the information management server 10 determines whether permission is granted for all items that business operator B or the service provision server 31 wishes to provide. If permission is granted for all items (YES in step S25), the process proceeds to step S26. On the other hand, if permission is not granted for all items (NO in step S25), the process proceeds to step S33.

[0138] In step S33, the provision determination unit 114 of the information management server 10 notifies business operator B or the service provision server 31 of the items for which provision has not been permitted, i.e., the items that are not permitted, and returns to step S22. In this way, business operator B or the service provision server 31 can re-select the items they wish to provide.

[0139] In step S26, the information acquisition unit 117 of the information management server 10 executes an information acquisition process. In this information acquisition process, the information acquisition unit 117 acquires profile information, including the items to be provided, from the information management database 119 based on the selection of items received from the business operator B or the service provision server 31.

[0140] In the next step S27, the profile provision unit 105 of the information management server 10 executes the profile provision process. In this profile provision, the profile provision unit 105 provides profile information to business operator B (business operator terminal 30) or the service provision server 31. For example, the profile provision unit 105 displays a profile display screen (see Figure 9) on the display of the business operator terminal 30. The profile provision unit 105 also transmits the profile information to the service provision server 31.

[0141] In the next step S28, the certificate provision unit 111 of the information management server 10 executes the certificate provision process. In this certificate provision process, the certificate provision unit 111 provides information in a manner that allows identification of how the certification of the profile information to be provided was performed. For example, the certificate provision unit 111 displays the certified information 83 (see Figure 9) on the profile display screen (see Figure 9).

[0142] In the next step S29, the certification acceptance unit 110 of the information management server 10 executes the certification acceptance process. In this certification acceptance process, the certification acceptance unit 110 receives requests for certification for uncertified items among the profile information from business operator B or the service provision server 31.

[0143] In the next step S30, the certificate acceptance unit 110 of the information management server 10 determines whether or not a certificate request has been received. If a certificate request has been received (YES in step S30), the process proceeds to step S31. On the other hand, if no certificate request has been received (NO in step S30), the profile provision process is completed.

[0144] In step S31, the profile certification unit 102 of the information management server 10 performs a second profile certification process. In this second profile certification process, the profile certification unit 102 accesses the resident information management platform 50, etc., and receives certification that each item of the profile information entered by user U is correct, and then returns to step S28 described above.

[0145] Although the flowchart of the above embodiment illustrates a configuration in which each step is executed in series, the order of each step is not necessarily fixed, and the order of some steps may be reversed. Also, some steps may be executed in parallel with other steps.

[0146] As described above, this embodiment makes it possible to enhance the reliability of information regarding an individual's career or circumstances, such as a resume.

[0147] The method of verifying profile information may be through a trust anchor. For example, the information distribution route may be a verification element based on the Digital Agency's My Number Portal app or J-LIS. Alternatively, the information may be registered with verification, or verification may be performed on information that has already been entered. Furthermore, the verification method may be via the My Number Portal app or using JPKI. Alternatively, the verification method may involve user U taking a photo of their withholding tax statement and attaching that image.

[0148] The manner in which the provider or the system receiving the profile information receives it includes both receiving data containing the profile information and viewing a screen displaying the profile information.

[0149] Furthermore, in a system configuration similar to the information management system 1 according to this embodiment, the information management server 10 can be used in various ways. For example, the information management server 10 can function as a server that provides a service related to job changes or recruiting, used by multiple users U (job seekers) or multiple businesses B. When a user U uses this service, the user U uses their personal identification card 41 and the public personal authentication service through the user terminal 40. In addition, the user U may access the resident information management platform 50 and register their profile information with the information management server 10. In this case, the profile information can be generated by the information management server 10. The method of generating the profile information is as described in this embodiment. The profile information generated by the information management server 10 and registered by the user U may be output to, for example, the business terminal 30. In this way, when business B is trying to recruit, it becomes clear that the history of the job seeker user U has been verified, so business B can carry out its recruiting activities with peace of mind.

[0150] Each of the aforementioned components of the system may be implemented with dedicated hardware. Furthermore, some or all of each component may be implemented by general-purpose or dedicated circuits, processors, or combinations thereof. These may be comprised of a single chip or multiple chips connected via a bus. Some or all of each component may be implemented by a combination of the aforementioned circuits and programs. Additionally, a CPU (Central Processing Unit), GPU (Graphics Processing Unit), etc., can be used as the processor. Moreover, at least some of the functions of this embodiment may be provided in the form of IaaS (Infrastructure as a Service), PaaS (Platform as a Service), or SaaS (Software as a Service).

[0151] The aforementioned program, when loaded into a computer, includes a set of instructions (or software code) for causing the computer to perform one or more of the functions described in the embodiments. The program may be stored on a non-temporary computer-readable medium or a physical storage medium. Examples, but not limited to, include computer-readable mediums or physical storage mediums such as RAM (random-access memory), ROM (read-only memory), flash memory, SSD (solid-state drive), or other memory technologies. Examples, but not limited to, include CD-ROMs, DVDs (digital versatile discs), Blu-ray discs, or other optical disc storage. Examples, but not limited to, include magnetic tape, magnetic disk storage, or other magnetic storage devices. The program may be transmitted over a temporary computer-readable medium or a communication medium. Examples, but not limited to, include temporary computer-readable mediums or communication mediums such as electrical, optical, acoustic, or other forms of propagating signals.

[0152] The embodiments have been described above, but the configurations of the embodiments described above may be combined with each other, or some of the configurations may be replaced with other configurations. Furthermore, the configurations of the embodiments described above may be modified in various ways without departing from the spirit of the invention.

[0153] Each drawing is merely illustrative to illustrate one or more embodiments. Each drawing may be associated with one or more other embodiments rather than with only one specific embodiment. As those skilled in the art will understand, various features or steps described with reference to any one drawing can be combined with features or steps shown in one or more other drawings to create embodiments not explicitly illustrated or described. Not all features or steps shown in any one drawing to illustrate an exemplary embodiment are necessarily required, and some features or steps may be omitted. The order of steps shown in any of the drawings may be changed as appropriate. [Explanation of symbols]

[0154] 1. Information Management System 10. Information Management Server 20 Certificate Verification Servers 30. Carrier terminals 31 Service Servers 40 User terminals 41. Identity Verification Card 50 Resident Information Management Platform 51 License Database 52. Licensing Database 53 Qualification Database 54 Biological Information Database 60 Profile Management Organizations 70 government agencies 71 Licensing Authority 72 Licensing and Management Bodies 73. Qualification Management Organizations 74. Biometric Information Management Organizations 80 item contents 81 checkboxes 82 Username 83 Verified Information 84. Face photo 101 Profile Acquisition Section 102 Profile Verification Department 103 Profile Creation Department 104 Profile Memory Unit 105 Profile Provision Department 106 My Page Generation Section 107 Period setting section 108 Registration Department 109 Registration Determination Unit 110 Certificate Reception Department 111 Certification Provision Department 112 Permit Reception Department 113 Reception Desk 114 Provision Judgment Department 115 Item Selection Section 116 Display Reception Section 117 Information Acquisition Department 118 Information Verification Department 119 Information Management Database 1010 Bus 1020 Processor 1030 memory 1040 Storage Devices 1050 Input / Output Interface 1060 Network Interfaces B Business N Network U User

Claims

1. A profile acquisition unit that acquires profile information including multiple items relating to at least one of the provider's attributes, background, or circumstances, A profile certification unit performs certification processing to obtain certification that at least some of the items to be certified among the multiple items included in the profile information are correct in a method corresponding to each item, When providing the aforementioned profile information to a recipient or system that requests the provision of such profile information, the certification providing unit provides the recipient or system that provides, in a manner that allows for the identification of each of the items to be certified included in the profile information, in the certification process, how the proof that each item to be certified is correct was performed. An information management system equipped with the following features.

2. In the information management system described in claim 1, The proof of the aforementioned profile information is, Proof based on a public personal authentication service using an identity verification medium owned by the aforementioned provider, Proof based on a card substitute electronic record owned by the aforementioned provider, Certification based on the resident information management platform of a resident information management agency that manages resident information including the aforementioned provider, The aforementioned provider's license is certified based on the license database of the licensing authority that manages the information, The aforementioned provider's license is certified based on the license database of the licensing management body that manages the information, Certification based on the qualification database of a qualification management body that manages information regarding the qualifications of the aforementioned provider, A certificate based on the biometric information database of a biometric information management organization that manages the biometric information of the aforementioned provider, An information management system that includes at least one of the following.

3. In the information management system according to claim 1 or claim 2, A permission receiving unit that receives permission from the provider to provide the profile information to at least one of the multiple recipients or recipient systems, A viewing reception unit that receives requests from the provider or the system providing the information to obtain the provider's profile information, A provision determination unit that determines whether the recipient or the system being provided to is permitted to provide the profile information, A profile provision unit provides the profile information to the recipient or the recipient system if the recipient or the recipient system is permitted to provide the profile information, An information management system equipped with the following features.

4. In the information management system according to claim 1 or claim 2, An item selection unit that receives the selection of items to be provided from the provider among the aforementioned multiple items, A profile creation unit creates the profile information to be provided based on the selection received from the aforementioned provider, An information management system equipped with the following features.

5. In the information management system according to claim 1 or claim 2, An item selection unit that receives the selection of items to be provided from the recipient or the provided system, An information acquisition unit that acquires the profile information to be provided, based on the selection received from the recipient or the provided system, if the provider has given permission, An information management system equipped with the following features.

6. In the information management system according to claim 1 or claim 2, A display receiving unit that receives the method of displaying the aforementioned multiple items from the provider, A profile creation unit that creates the profile information to be displayed based on the display method received from the provider, An information management system equipped with the following features.

7. In the information management system according to claim 1 or claim 2, An information management system comprising a certification receiving unit that receives requests from the provider or the provided system for certification that each of the items to be certified included in the profile information is correct.

8. In the information management system according to claim 1 or claim 2, An information management system comprising a period setting unit that receives from the provider the setting of a period for which at least a portion of the aforementioned profile information will be provided.

9. In the information management system according to claim 1 or claim 2, A registration unit for registering the provider or the provided system, A registration determination unit that determines whether the accessing provider or the provided system is registered, A profile provision unit that provides the profile information to the recipient or the recipient system when the recipient or the recipient system is registered, An information management system equipped with the following features.

10. An information management system according to claim 1 or claim 2, An information management system comprising a My Page generation unit that generates a My Page in the digital space of the aforementioned provider.

11. An information management system according to claim 10, A profile storage unit that stores the profile information entered by the provider through the My Page, An information verification unit performs a comparison of at least a portion of the profile information entered by the provider through self-declaration with official data issued by a certification body. An information management system equipped with the following features.

12. One or more computers that implement an information management system, A process for obtaining profile information that includes multiple items relating to at least one of the provider's attributes, background, or circumstances, A certification process for obtaining proof that at least some of the items to be certified among the multiple items included in the profile information are correct in a method appropriate to each item, When providing the profile information to a recipient or system that requests the provision of the profile information, the process of providing the recipient or system that receives the profile information, in a manner that allows for identification of each of the items to be certified included in the profile information, how the proof that each item to be certified is correct was obtained in the certification process, An information management method that implements this.

13. One or more computers that implement the information management system, A process for obtaining profile information that includes multiple items relating to at least one of the provider's attributes, background, or circumstances, A certification process for obtaining proof that at least some of the items to be certified among the multiple items included in the profile information are correct in a method appropriate to each item, When providing the profile information to a recipient or system that requests the provision of the profile information, the process of providing the recipient or system that receives the profile information, in a manner that allows for identification of each of the items to be certified included in the profile information, how the proof that each item to be certified is correct was obtained in the certification process, An information management program that executes [this action].

Images