Information processing apparatus, information processing method, and transmitting medium

• US 6,308,203 B1
• Filed: 10/09/1998
• Issued: 10/23/2001
• Est. Priority Date: 10/14/1997
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Itabashi, Tatsuo, Yoshida, Kimiyoshi
• Primary Examiner(s): Coulter, Kenneth R.
• Application Number:
  US09/169,505
• Time in Patent Office: 1,110 Days
• Field of Search: 709/203, 709/217, 709/218, 709/219, 709/202, 707/10
• US Class Current: 709/217
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: Y10S 707/99931 : Database or file accessing
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

Personal information of a user is provided to an information provider from any location, through a simple apparatus, and with reliability. Personal information is pre-stored in a user profile database of a server. When the user accesses a service provider device from a terminal device through the server and the Internet, the service provider device transmits a request to the terminal device to enter the personal information of that user. The server reads the requested personal information from the user profile database and transfers the personal information from a proxy device to the service provider device. This arrangement makes it unnecessary for the terminal device to input the personal information. This holds true for a personal computer.

Claims

1. An information processing apparatus connected to an information processing device of a user and an information processing device of a service provider through a network, comprising:

storage means for storing personal information of a plurality of users including said user;

providing means for providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

detection means for detecting a plurality of accesses made simultaneously from said user whose personal information is stored in said storage means.

2. The apparatus of claim 1, wherein said detection means informs said user of said plurality of accesses made simultaneously from said user.

3. The apparatus of claim 1, wherein said detection means records said plurality of accesses made simultaneously from said user into a log file.

4. The apparatus of claim 1, wherein said detection means rejects any access made later than said plurality of accesses made simultaneously from said user.

5. The apparatus of claim 1, further comprising:

second detection means for detecting an unauthorized access to said personal information stored in said storage means.

6. The apparatus of claim 1, further comprising:

authentication means for authenticating said user.

7. The apparatus of claim 1, wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

8. The apparatus of claim 7 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

9. The apparatus of claim 8 wherein said first predetermined security level is stronger than said second predetermined security level.

10. The apparatus of claim 1 wherein said information processing device of said user is a wireless device.

11. The apparatus of claim 10 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

12. The apparatus of claim 1 wherein said network connecting said information processing device of said service provider to said information processing device of said user is a wireless network.

13. The apparatus of claim 1 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.

14. An information processing method for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, comprising the steps of:

storing personal information of a plurality of users including said user;

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction; and

detecting a plurality of accesses made simultaneously from said user whose personal information is stored in said storage means.

15. The method of claim 14 wherein said step of detecting further includes the step of informing said user of said plurality of accesses made simultaneously from said user.

16. The method of claim 14 wherein said step of detecting further includes the step of recording said plurality of accesses made simultaneously from said user into a log file.

17. The method of claim 14 wherein said step of detecting further includes the step of rejecting any access made later than said plurality of accesses made simultaneously from said user.

18. The method of claim 14 further including the step of authenticating said user.

19. The method of claim 14 further including a second detection step for detecting an unauthorized access to said personal information stored in said storage means.

20. The method of claim 14 wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

21. The method of claim 20 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

22. The method of claim 21 wherein said first predetermined security level is stronger than said second predetermined security level.

23. The method of claim 14 wherein said information processing device of said user is a wireless device.

24. The method of claim 23 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

25. The method of claim 14 wherein said information processing device of said service provider is connected to said information processing device of said user over a wireless network.

26. The method of claim 14 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.

27. An information processing method for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, comprising the steps of:

storing personal information of a plurality of users including said user; and

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

wherein said computer program further includes the step of detecting a plurality of accesses made simultaneously from said user whose personal information is stored in said storage means.

28. The method of claim 27 wherein said step of detecting further includes the step of informing said user of said plurality of accesses made simultaneously from said user.

29. The method of claim 27 wherein said step of detecting further includes the step of recording said plurality of accesses made simultaneously from said user into a log file.

30. The method of claim 27 wherein said step of detecting further includes the step of rejecting any access made later than said plurality of accesses made simultaneously from said user.

31. The method of claim 27 further including the step of authenticating said user.

32. The method of claim 27 further including a second detection step for detecting an anauthorized access to said personal information stored in said storage means.

33. The method of claim 27 wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

34. The method of claim 33 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

35. The method of claim 34 wherein said first predetermined security level is stronger than said second predetermined security level.

36. The method of claim 27 wherein said information processing device of said user is a wireless device.

37. The method of claim 36 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

38. The method of claim 27 wherein said information processing device of said service provider is connected to said information processing device of said user over a wireless network.

39. The method of claim 27 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.

40. An information processing apparatus connected to an information processing device of a user and an information processing device of a service provider through a network, comprising:

storage means for storing personal information of a plurality of users including said user;

providing means for providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

decision means for determining the necessity for permission of said user for the provision of said personal information stored in said storage means; and

inquiry means for inquiring, in response to a decision made by said decision means, said information processing device of said user whether said personal information can be provided and for getting a reply to the inquiry;

wherein said providing means provides said personal information stored in said storage means to said information processing device of said service provider according to said reply obtained by said inquiry means.

41. The apparatus of claim 40, wherein said inquiry means generates image data of a user interface through which said user enters permission of the provision of said personal information and transmits the generated image data to said information processing device of said user.

42. The apparatus of claim 40, further comprising:

authentication means for authenticating said user.

43. The apparatus of claim 40, wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

44. The apparatus of claim 43 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

45. The apparatus of claim 44 wherein said first predetermined security level is stronger than said second predetermined security level.

46. The apparatus of claim 40 wherein said information processing device of said user is a wireless device.

47. The apparatus of claim 46 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

48. The apparatus of claim 40 wherein said network connecting said information processing device of said service provider to said information processing device of said user is a wireless network.

49. The apparatus of claim 40 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.

50. The apparatus of claim 40, further comprising:

detection means for detecting an unauthorized access to said personal information stored in said storage means.

51. A transmitting medium for transmitting a computer program for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, said computer program comprising the steps of:

storing personal information of a plurality of users including said user;

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

determining the necessity for permission of said user for the provision of said personal information stored in said storage means; and

inquiring, responsive to said determining step, said information processing device of said user whether said personal information can be provided and for getting a reply to the inquiry;

wherein said step of providing provides said personal information stored in said storage means to said information processing device of said service provider according to said reply obtained at said inquiring step.

52. The medium of claim 51 wherein said step of inquiring generates image data of a user interface through which said user enters permission of the provision of said personal information and transmits the generated image data to said information processing device of said user.

53. The medium of claim 51, wherein said computer program further includes the step of authenticating said user.

54. The medium of claim 51, wherein said computer program further includes a second detection step for detecting an unauthorized access to said personal information stored in said storage means.

55. The medium of claim 51 wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

56. The medium of claim 55 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

57. The medium of claim 56 wherein said first predetermined security level is stronger than said second predetermined security level.

58. The medium of claim 51 wherein said information processing device of said user is a wireless device.

59. The medium of claim 51 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

60. The medium of claim 51 wherein said information processing device of said service provider is connected to said information processing device of said user over a wireless network.

61. The medium of claim 51 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.

62. An information processing method for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, comprising the steps of:

storing personal information of a plurality of users including said user;

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

determining the necessity for permission of said user for the provision of said personal information stored in said storage means; and

inquiring, responsive to said determining step, said information processing device of said user whether said personal information can be provided and for getting a reply to the inquiry;

wherein said step of providing provides said personal information stored in said storage means to said information processing device of said service provider according to said reply obtained at said inquiring step.

63. The method of claim 62 wherein said step of inquiring generates image data of a user interface through which said user enters permission of the provision of said personal information and transmits the generated image data to said information processing device of said user.

64. The method of claim 62 further including the step of authenticating said user.

65. The method of claim 62 further including a second detection step for detecting an unauthorized access to said personal information stored in said storage means.

66. The method of claim 62 wherein access to said personal information stored in said storage means is in conformity with a secure personal data transfer protocol of a first predetermined security level.

67. The method of claim 66 wherein said access to said personal information further conforms with a secure personal data transfer protocol of a second predetermined security level.

68. The method of claim 67 wherein said first predetermined security level is stronger than said second predetermined security level.

69. The method of claim 62 wherein said information processing device of said user is a wireless device.

70. The method of claim 69 wherein said wireless device includes one of a personal digital assistant, a mobile telephone, a personal handyphone, a pager, a laptop computer and a handheld information processing device.

71. The method of claim 62 wherein said information processing device of said service provider is connected to said information processing device of said user over a wireless network.

72. The method of claim 62 wherein said personal information category includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, and a user ID.