PERSONAL-INFORMATION TRANSMISSION/RECEPTION SYSTEM, PERSONAL-INFORMATION TRANSMISSION/RECEPTION METHOD, PERSONAL-INFORMATION PROVISION APPARATUS, PREFERENCE MANAGEMENT APPARATUS AND COMPUTER PROGRAM

• US 20130185806A1
• Filed: 09/26/2011
• Published: 07/18/2013
• Est. Priority Date: 10/05/2010
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Hatakeyama, Makoto
• Application Number:
  US13/876,130
• Publication Number:
  US 20130185806A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Disclosed is a personal-information (PI) transmission/reception system and the like which makes it possible to, even when the number of apparatuses possessing PI has increased, reduce a burden of a user who sets preferences (PRFs) with respect to disclosures of the PI on the individual apparatuses.

In the PI transmission/reception system, a PI acquisition apparatus transmits PI to a PI provision apparatus. The PI provision apparatus requests a PRF with respect to disclosures of the PI to a preference management apparatus (PMA). The PMA presents a confirmation PRF which the PMA has generated based on a PRF having been requested and past PRFs having been stored in advance in a PRF storage unit. A user terminal confirms the presented PRF, and transmits a PRF resulting from the confirmation to the PI provision apparatus. When having determined, based on the received PRF, that it is possible to disclose the PI to the PI acquisition apparatus, the PI provision apparatus transmits the PI to the PI acquisition apparatus.

Claims

1. A personal-information transmission/reception system comprising:

a personal-information acquisition apparatus;

a personal-information provision apparatus;

a preference management apparatus; and

a user terminal,

wherein the personal-information acquisition apparatus includes;

a personal-information request unit to transmit a personal information request message, which represents a request for personal information necessary for a service provision to the user terminal, to the personal-information provision apparatus, and

a personal-information reception unit to receive the personal information from the personal-information provision apparatus,

wherein the personal-information provision apparatus includes;

a personal-information storage unit to store the personal information,

a personal-information request reception unit to receive the personal information request message from the personal-information acquisition apparatus,

a preference request unit to, in response to reception of the personal information request message, transmit a preference request message, which represents a request for a preference representing prescription with respect to a disclosure of the personal information, to the preference management apparatus,

a preference reception unit to receive the preference from the preference management apparatus,

a disclosure permission/non-permission determination unit to determine whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus, based on the preference received by the preference reception unit, and

a personal-information transmission unit to, if it is determined by the disclosure permission/non-permission determination unit that it is possible to disclose the personal information, read out the personal information from the personal information storage unit, and transmit the read-out personal information to the personal-information acquisition apparatus,

wherein the preference management apparatus includes;

a preference storage unit to store a preference which has been set in the past by the user terminal,

a preference request reception unit to receive the preference request message from the personal-information provision apparatus,

a confirmation preference generation unit to generate a confirmation preference which is to be presented to the user terminal based on the past preference stored in the preference storage unit as well as the preference request message,

a preference confirmation unit to present the confirmation preference to the user terminal, and receive a preference, which is set based on the presented confirmation preference, form the user terminal, and

a preference transmission unit to transmit the preference received by the preference confirmation unit to the personal-information provision apparatus, and

wherein the user terminal includes;

a preference setting unit to set a preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus, based on the confirmation preference presented by the preference management apparatus, and transmit the preference having been set thereby to the preference management apparatus.

2. The personal-information transmission/reception system according to claim 1, wherein the confirmation preference generation unit of the preference management apparatus generates the confirmation preference based on a preference including the same information as at least part of information included in the preference request message among preferences stored in the preference storage unit.

3. The personal-information transmission/reception system according to claim 1, wherein the preference management apparatus further includes:

a handling information storage unit to store handling information with respect to handling of personal information in the personal-information provision apparatus and the personal-information acquisition apparatus, and

a confirmation preference estimation unit to generate the confirmation preference by extracting a similar preference with respect to a provision-source personal-information provision apparatus and a disclosure-destination personal-information acquisition apparatus which are similar to a provision-source personal-information provision apparatus and a disclosure-destination personal-information acquisition apparatus included in the preference request message, respectively, from among preferences stored in the preference storage unit, based on handling information which is related to individual apparatuses, and is stored in the handling information storage unit, and estimate the confirmation preference based on the extracted similar preference.

4. The personal-information transmission/reception system according to claim 3, wherein the confirmation preference estimation unit of the preference management apparatus classifies the personal-information provision apparatuses and the personal-information acquisition apparatuses based on the handling information storage unit, and extracts a preference, as the similar preference, which has been set in the past with respect to a disclosure of the personal information from a personal-information provision apparatus belonging to the same class as that of the provision-source personal-information provision apparatus included in the preference request message to a personal-information acquisition apparatus belonging to the same class as that of the disclosure-destination personal-information acquisition apparatus included in the preference request message.

5. The personal-information transmission/reception system according to claim 3, wherein the confirmation preference estimation unit of the preference management apparatus calculates, based on preferences stored in the preference storage unit, evaluation values corresponding to kinds of personal information included in the individual preferences, as well as an evaluation value corresponding to a kind of personal information included in the preference request message, and thereby extracts a preference, as the similar preference, which is related to a disclosure of personal information of a kind corresponding to an evaluation value falling within a predetermined range determined from the evaluation value of the kind of the personal information included in the preference request message.

6. The personal-information transmission/reception system according to claim 1, wherein

the personal-information provision apparatus further includes:

a preference-management-apparatus information storage unit to storage information representing the preference management apparatus, and

a preference request destination determination unit to, in response to reception of the personal information request message, determine a preference management apparatus which becomes a request destination of a preference with respect to a disclosure of the personal information based on the preference-management-apparatus information storage unit, and

wherein the preference request unit transmits the preference request message to the preference management apparatus determined by the preference request destination determination unit.

7. The personal-information transmission/reception system according to claim 1, wherein

the personal-information provision apparatus further includes:

a preference storage unit to store a preference acquired from the preference management apparatus, and

a preference acquisition unit to acquire a preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus by retrieving the preference from the preference storage unit, and

wherein, in the case where the preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus is stored in the preference storage unit, the disclosure permission/non-permission determination unit determines whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus, based on the preference acquired by the preference acquisition unit.

8. The personal-information transmission/reception system according to claim 1, wherein

the user terminal further includes:

a preference change content setting unit to transmit a change content of a preference, which has been set in the past with respect to a disclosure of the personal information, to the preference management apparatus, and

the preference management apparatus further includes;

a change content acquisition unit to acquire the change content from the user terminal,

a preference updating unit to update a preference, which is stored in the preference storage unit, based on the change content acquired by the change content acquisition unit,

a preference change notice generation unit to identify a personal-information provision apparatus and a personal-information acquisition apparatus in relation to a preference which is updated by the preference updating unit, and generate a preference change notice to the identified personal-information provision apparatus and personal-information acquisition apparatus, and

a preference change notice transmission unit to transmit the preference change notice to each of the personal-information provision apparatus and the personal-information acquisition apparatus identified by the preference change notice generation unit.

9. A personal-information transmission/reception method for use in a personal-information acquisition apparatus, a personal-information provision apparatus, a preference management apparatus and a user terminal, the personal-information transmission/reception method comprising:

transmitting, by the personal-information acquisition apparatus, a personal information request message representing a request for personal information necessary for a service provision to the user terminal to the personal-information provision apparatus;

storing, by the personal-information provision apparatus, the personal information in advance;

receiving, by the personal-information provision apparatus, the personal information request message from the personal-information acquisition apparatus;

transmitting, by the personal-information provision apparatus, a preference request message, which represents a request for a preference representing prescription with respect to a disclosure of the personal information, to the preference management apparatus in response to reception of the personal information request message;

storing, by the preference management apparatus, a preference in advance, which has been set in the past by the user terminal, into a preference storage unit;

receiving, by the preference management apparatus, the preference request message from the personal-information provision apparatus;

generating, by the preference management apparatus, a confirmation preference which is to be presented to the user terminal based on the past preference stored in the preference storage unit as well as the preference request message;

presenting, by the preference management apparatus, the confirmation preference to the user terminal;

setting, by the user terminal, a preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus, based on the confirmation preference presented by the preference management apparatus;

transmitting, by the user terminal, the preference having been set thereby to the preference management apparatus;

receiving, by the preference management apparatus, the preference having been set thereby from the user terminal;

transmitting, by the preference management apparatus, the received preference to the personal-information provision apparatus;

receiving, by the personal-information provision apparatus, the preference from the preference management apparatus;

determining, by the personal-information provision apparatus, whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus;

reading out, by the personal-information provision apparatus, the personal information from the personal-information storage unit to transmit the read-out personal information to the personal-information acquisition apparatus if it is determined that it is possible to disclose the personal information; and

receiving, by the personal-information acquisition apparatus, the personal information from the personal-information provision apparatus.

10. The personal-information transmission/reception method according to claim 9, wherein, when generating a confirmation preference which is to be presented to the user terminal, the confirmation preference generation unit generates the confirmation preference based on a preference including the same information as at least part of information included in the preference request message among preferences stored in the preference storage unit.

11. A personal-information provision apparatus comprising:

a personal-information storage unit to storage the personal information;

a personal-information request reception unit to receive a personal information request message, which represents a request for the personal information, from the personal-information acquisition apparatus;

a preference request unit to transmit a preference request message, which represents a request for a preference representing prescription with respect to a disclosure of the personal information, to the preference management apparatus in response to reception of the personal information request message;

a preference reception unit to receive the preference from the preference management apparatus;

a disclosure permission/non-permission determination means that determines unit to determine whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus, based on the preference received by the preference reception unit, and

a personal-information transmission unit to, if it is determined by the disclosure permission/non-permission determination unit that it is possible to disclose the personal information, read out the personal information from the personal-information storage unit, and transmit the read-out personal information to the personal-information acquisition apparatus.

12. The personal-information provision apparatus according to claim 11, further comprising:

a preference storage unit to store a preference acquired from the preference management apparatus, and

a preference acquisition unit to acquire a preference with respect to a disclosure of the personal information to the personal-information acquisition apparatus by retrieving the preference from the storage unit,

wherein, in the case where the preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus is stored in the preference storage unit, the disclosure permission/non-permission determination unit determines whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus, based on the preference acquired by the preference acquisition unit.

13. A preference management apparatus comprising:

a preference storage unit to store a preference which has been set in the past by the user terminal, and which represents prescription with respect to a disclosure from a personal-information provision apparatus to a personal-information acquisition apparatus;

a preference request reception unit to receive the preference request message from the personal-information provision apparatus;

a confirmation preference generation unit to generate a confirmation preference which is to be presented to the user terminal based on the past preference stored in the preference storage unit as well as the preference request message;

a preference confirmation unit to present the confirmation preference to the user terminal, and receive a preference, which is set based on the presented confirmation preference, form the user terminal; and

a preference transmission unit to transmit the preference received by the preference confirmation unit to the personal-information provision apparatus.

14. The preference management apparatus according to claim 13, the confirmation preference generation unit generates the confirmation preference based on a preference including the same information as at least part of information included in the preference request message among preferences stored in the preference storage unit.

15. A non-transitory storage media storing a computer program causing a computer to execute:

a personal information storing function to store personal information in a personal-information storage apparatus;

a personal information request function to receive a personal information request message representing a request for the personal information from a personal-information acquisition apparatus;

a preference requesting function to transmit a preference request message, to a preference management apparatus, representing a request for a preference representing prescription with respect to a disclosure of the personal information in response to reception of the personal information request message;

a preference receiving function to receive the preference from the preference management apparatus;

a disclosure permission/non-permission determining function to determine whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus; and

a personal information transmitting function to read out the personal information from a personal-information storage unit, and transmit the read-out personal information to the personal-information acquisition apparatus if it is determined that it is possible to disclose the personal information.

16. The non-transitory storage media according to claim 15, causing the computer to execute:

a preference storing function to store a preference, in a preference storage apparatus, acquired from the preference management apparatus; and

a preference acquiring function to acquire a preference with respect to a disclosure of the personal information to the personal-information acquisition apparatus by retrieving the preference from the preference storage apparatus,

wherein, by the disclosure permission/non-permission determining function, if the preference with respect to a disclosure of the personal information from the personal-information provision apparatus to the personal-information acquisition apparatus is stored in the preference storage unit, it is determined whether or not it is possible to disclose the personal information to the personal-information acquisition apparatus, based on the preference acquired by the preference acquiring function.

17. A non-transitory storage media storing a computer program causing a computer to execute:

a preference storing function to store a preference, which has been set in the past by a user terminal, and which represents prescription with respect to a disclosure of personal information from a personal-information provision apparatus to a personal-information acquisition apparatus, into a preference storage apparatus;

a preference request receiving function to receive the preference request message from the personal-information provision apparatus;

a confirmation preference generating function to generate a confirmation preference which is to be presented to the user terminal based on the past preference stored in the preference storage apparatus as well as the preference request message;

a preference confirming function to present the confirmation preference to the user terminal, and receive a preference which is set based on the presented confirmation preference from the user terminal; and

a preference transmitting function to transmit the preference received by the preference confirming function to the personal-information provision apparatus.

18. The non-transitory storage media according to claim 17, characterized in that, by the confirmation preference generating function, the confirmation preference is generated based on a preference including the same information as at least part of information included in the preference request message among preferences stored in the preference storage apparatus.