Personal information management system, personal information management method, and information processing server

• US 20030028493A1
• Filed: 07/24/2002
• Published: 02/06/2003
• Est. Priority Date: 08/03/2001
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Tajima, Yuichi, Chiba, Taneaki, Kawabe, Shigeru, Mitsuyu, Norihisa
• Application Number:
  US10/202,320
• Publication Number:
  US 20030028493A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Personal information that is registered with areas that can be connected to the Internet is divided into a plurality of data portions, which are then each registered with areas that are under different control. When a request to acquire this personal information is subsequently issued, the data portions that are registered with areas under different control are combined to restore the personal information.

Claims

1. A personal information management system, comprising:

at least one terminal that is connectible to the Internet; and

an authentication means for both using a public key cryptosystem to certify personal information that is registered with areas that are connectible to said Internet and registering said personal information with said areas, and, in response to a request, which is certified by said public key cryptosystem, sending said personal information to the terminal that sent said request;

wherein said authentication means;

divides said personal information into a plurality of data portions;

registers at least one of said plurality of data portions with a database that is provided in said authentication means;

registers the other data portions with other areas that are connectible to said Internet and that are under control that is different from that authentication means; and

, when a request, which is certified by said public key cryptosystem, to acquire said personal information is sent in from said terminal, combines said divided plurality of data portions to restore said personal information and sends the personal information to the terminal that sent said request.

2. A personal information management system according to claim 1, wherein said authentication means holds link information that indicates the registration destinations of said other data portions, and, when said request has been sent in, recognizes the registration destinations of said other data portions based on said link information.

3. A personal information management system according to claim 1, wherein said authentication means attaches link information that indicates the registration destinations of said other data portions to the data portion that is registered with a database that is provided in the authentication means.

4. A personal information management system according to claim 1, wherein said authentication means:

divides said personal information into a plurality of data portions each of a predetermined fixed length, arranges the plurality of divided data portions in at least two data fragments according to a set method of arranging, and registers each data fragment with a database provided in said authentication means or in said other areas.

5. A personal information management system according to claim 1, wherein said authentication means divides said personal information into a plurality of data portions each of equal arbitrary length, arranges the divided plurality of data portions in at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said authentication means or in said other areas.

6. A personal information management system according to claim 1, wherein said authentication means divides said personal information into a plurality of data portions each of differing arbitrary length, arranges the plurality of divided data portions in least two data fragments according to a set method of arranging, and registers the data fragments with a database that is provided in said authentication means or in said other areas.

7. A personal information management system according to claim 4, wherein said authentication means attaches information relating to the method of dividing and the method of arranging said personal information to each of said data fragments.

8. A personal information management system according to claim 4, wherein said authentication means encrypts said personal information and divides the encrypted personal information and the encryption key used in the encryption into a plurality of data portions.

9. A personal information management system according to claim 4, wherein said authentication means encrypts each of said data fragments.

11. A personal information management system according to claim 1, wherein at least one of said other areas is another authentication means that uses a public key cryptosystem to certify personal information that is registered with areas that are connectible to said Internet.

10. A personal information management system, comprising:

at least one terminal that is connectible to the Internet;

an authentication means for both using a public key cryptosystem to certify personal information that is registered with areas that are connectible to said Internet and registering said personal information with said areas, and, in response to a request that is certified by said public key cryptosystem, sending said personal information to the terminal that sent said request;

wherein said authentication means;

divides said personal information into a plurality of data portions;

registers the plurality of data portions with areas that are connectible to said Internet and that are under separate control, and holds link information that indicates the registration destinations of said plurality of data portions; and

, when a request, which is certified by said public key cryptosystem, to acquire said personal information is sent in from said terminal, acquires said plurality of data portions that have been divided based on said link information, combines said plurality of data portions that have been acquired to restore said personal information, and sends the personal information to the terminal that sent said request.

12. A personal information management system, comprising:

at least one terminal that is connectible to the Internet;

a service provider for handling connections of said terminal to said Internet; and

an authentication means for using a public key cryptosystem to certify personal information that is registered with areas that are connectible to said Internet;

wherein said service provider;

divides said personal information into a plurality of data portions;

registers at least one data portion of the plurality of data portions with a database that is provided in the service provider;

registers the other data portions with other areas that include a database that is provided in said authentication means, that are connectible to said Internet, and that are under different control than the service provider; and

when a request that is certified by means of said public key cryptosystem to acquire said personal information is sent in from said terminal, combines said plurality of divided data portions to restore said personal information and sends the personal information to the terminal that sent said request.

13. A personal information management system according to claim 12, wherein said service provider holds link information that indicates the registration destinations of said other data portions, and, when said request is sent in, identifies the registration destinations of said other data portions based on said link information.

14. A personal information management system according to claim 12, wherein said service provider attaches link information that indicates the registration destinations of said other data portions to the data portion that is registered with a database that is provided in said service provider.

15. A personal information management system according to claim 12, wherein said service provider divides said personal information into a plurality of data portions each of a predetermined fixed length, arranges the divided plurality of data portions in at least two data fragments according to a set method of arranging, and registers each data fragment with a database provided in said service provider or in said other areas.

16. A personal information management system according to claim 12, wherein said service provider divides said personal information into a plurality of data portions each of equal arbitrary length, arranges the plurality of divided data portions in at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said service provider or in said other areas.

17. A personal information management system according to claim 12, wherein said service provider divides said personal information into a plurality of data portions each of differing arbitrary length, arranges the plurality of divided data portions at least two data fragments according to a set method of arrangement, and registers the data fragments in a database that is provided with said service provider or in said other areas.

18. A personal information management system according to claim 15, wherein said service provider attaches information relating to the method of dividing and the method of arranging said personal information to each of said data fragments.

19. A personal information management system according to claim 15, wherein said service provider encrypts said personal information, and divides the encrypted personal information and the encryption key used in the encryption into a plurality of data portions.

20. A personal information management system according to claim 15, wherein said service provider encrypts each of said data fragments.

21. A personal information management system, comprising:

at least one terminal that is connectible to the Internet;

a service provider for handling connections of said terminal to said Internet; and

an authentication means for using a public key cryptosystem to certify personal information that is registered with areas that are connectible to said Internet;

wherein said service provider;

divides said personal information into a plurality of data portions;

registers the plurality of data portions with areas that are connectible to said Internet and that are under different control each other;

holds link information that indicates the registration destinations of said plurality of data portions; and

when a request that is certified by means of said public key cryptosystem to acquire said personal information is sent in from said terminal, acquires said plurality of divided data portions based on said link information, combines the acquired plurality of data portions to restore said personal information, and sends the personal information to the terminal that sent said request.

22. A personal information management method, comprising steps of:

dividing personal information into a plurality of data portions;

arranging the plurality of data portions in at least two data fragments and registering each data fragment with areas that are connectible to the Internet and that are under different control;

combining said plurality of divided data portions to restore said personal information when a request to acquire said personal information is outputted, said request being certified by means of a public key cryptosystem, and

sending said restored personal information to the originator of said request.

23. A personal information management method according to claim 22, further comprising steps of:

holding link information that indicates the registration destinations of other data fragments in at least one area of the areas in which said data fragments are registered; and

identifying the registration destinations of said other data fragments based on said link information when said request is issued.

24. A personal information management method according to claim 22, further comprising steps of:

attaching to said data fragments link information that indicates the registration destinations of other data fragments; and

identifying the registration destinations of said other data fragments based on said link information when said request is issued.

25. A personal information management method according to claim 22, wherein said personal information is divided into a plurality of data portions by dividing said personal information into a plurality of data portions each of predetermined fixed lengths.

26. A personal information management method according to claim 22, wherein said personal information is divided into a plurality of data portions by dividing said personal information into a plurality of data portions each of equal arbitrary lengths.

27. A personal information management method according to claim 22, wherein said personal information is dividend into a plurality of data portions by dividing said personal information into a plurality of data portions each of different arbitrary lengths.

28. A personal information management method according to claim 25, further comprising a step of attaching, to each of said data fragments, information relating to the method of dividing said personal information.

29. A personal information management method according to claim 25, further comprising a step of encrypting said personal information;

wherein the encrypted personal information and the encryption key that was used in encryption are divided into a plurality of data portions to divide among a plurality of data portions of said personal information.

30. A personal information management method according to claim 25, further comprising a step of encrypting each of said data fragments.

31. An information processing server that is provided in an authentication means for both using a public key cryptosystem to certify personal information that is registered with areas that are connectible to the Internet and registering said personal information with said areas, and, in response to a request that is certified by said public key cryptosystem, sending said personal information to the originator of said request;

said information processing server comprising;

a dividing means for dividing said personal information into a plurality of data portions, registering at least one data portion of the plurality of data portions with a database that is provided in said authentication means, and registering the other data portions with other areas that are connectible to said Internet that are under control that is different from said authentication means;

a restoring means for, when a request that is certified by said public key cryptosystem to acquire said personal information is sent in, combining said plurality of divided data portions to restore said personal information; and

transmission means for sending the personal information that has been restored by said restoring means to the originator of said request.

32. An information processing server according to claim 31, wherein said restoring means holds link information that indicates the registration destinations of said other data portions, and, when said request is sent in, identifies the registration destinations of said other data portions based on said link information.

33. An information processing server according to claim 31, wherein said dividing means attaches, to data that are registered with a database that is provided in said authentication means, link information that indicates the registration destinations of said other data portions.

34. An information processing server according to claim 31, wherein said dividing means divides said personal information into a plurality of data portions each of a predetermined fixed length, arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said authentication means or in said other areas.

35. An information processing server according to claim 31, wherein said dividing means divides said personal information into a plurality of data portions each of equal arbitrary length, arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said authentication means or in said other areas.

36. An information processing server according to claim 31, wherein said dividing means divides said personal information into a plurality of data portions each of different arbitrary length, arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said authentication means or in said other areas.

37. An information processing server according to claim 34, wherein said dividing means attaches to each of said data fragments information relating to the method of dividing and the method of arranging said personal information.

38. An information processing server according to claim 34, wherein said dividing means encrypts said personal information and divides the encrypted personal information and the encryption key used in the encryption into a plurality of data portions.

39. An information processing server according to claim 34, wherein said dividing means encrypts each of said data fragments.

40. An information processing server that is provided in an authentication means for both using a public key cryptosystem to certify personal information that is registered with areas that are connectible to the Internet and registering said personal information with said areas, and, in response to a request that is certified by said public key cryptosystem, sending said personal information to the originator of said request;

said information processing server comprising;

a dividing means for dividing said personal information into a plurality of data portions and registering the plurality of data portions with areas that are connectible to said Internet and that are under separate control;

a restoring means for holding link information that indicates the registration destinations of said plurality of data portions, and, when a request to acquire said personal information is sent in from said terminal, said request being certified by said public key cryptosystem, acquiring said plurality of divided data portions based on said link information, combining said acquired plurality of data portions to restore said personal information; and

transmission means for sending the personal information that has been restored by said restoring means to the terminal that sent said request.

41. An information processing server that is provided in service provider that handles connections of a terminal that is connectible to the Internet to said Internet, said information processing server comprising:

a dividing means for dividing said personal information into a plurality of data portions and registering at least one data portion of the plurality of data portions with a database that is provided in said service provider, and registering the other data portions with areas that are connectible to said Internet, that are under control that is different from said service provider, and that include the database that is provided in an authentication means that uses a public key cryptosystem to certify personal information that is registered on said Internet;

a restoring means for, when a request to acquire said personal information is sent in from said terminal, said request being certified by said public key cryptosystem, combining said divided plurality of data portions to restore said personal information; and

transmission means for sending the personal information that has been restored by said restoring means to the terminal that sent said request.

42. An information processing server according to claim 41, wherein said restoring means holds link information that indicates the registration destinations of said other data portions, and, when said request has been sent in, identifying the registration destinations of said other data portions based on said link information.

43. An information processing server according to claim 41, wherein said dividing means attaches, to data portions that are registered with the database that is provided in said service provider, information that indicates the registration destinations of said other data portions.

44. An information processing server according to claim 41, wherein said dividing means divides said personal information into a plurality of data portions each of a predetermined fixed length;

arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each of the data fragments with a database that is provided in said service provider or in said other areas.

45. An information processing server according to claim 41, wherein said dividing means divides said personal information into a plurality of data portions each of equal arbitrary length, arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each of the data fragments with a database that is provided in said service provider or in said other areas.

46. An information processing server according to claim 41, wherein said dividing means divides said personal information into a plurality of data portions each of a different arbitrary length, arranges the plurality of divided data portions among at least two data fragments according to a set method of arranging, and registers each data fragment with a database that is provided in said service provider or in said other areas.

47. An information processing server according to claim 44, wherein said dividing means attaches to each of said data fragments information relating to the method of dividing and the method of arranging said personal information.

48. An information processing server according to claim 44, wherein said dividing means encrypts said personal information and divides the encrypted personal information and the encryption key used in encryption into a plurality of data portions.

49. An information processing server according to claim 44, wherein said dividing means encrypts each of said data fragments.

50. An information processing server that is provided in a service provider for handling connections of a terminal that is connectible to the Internet to said Internet, said information processing server comprising:

dividing means for dividing said personal information into a plurality of data portions and registering the plurality of data portions with areas that are connectible to said Internet and that are under separate control;

a restoring means for holding link information that indicates the registration destinations of said plurality of data portions; and

, when a request to acquire said personal information is sent in from said terminal, said request being certified by said public key cryptosystem, acquiring said plurality of divided data portions based on said link information, and combining the plurality of data portions that have been acquired to restore said personal information; and

a transmission means for sending the personal information that has been restored by said restoring means to the terminal that sent said request.