Information processing apparatus, information processing method, and transmitting medium

• US 6,601,092 B2
• Filed: 08/24/2001
• Issued: 07/29/2003
• Est. Priority Date: 10/14/1997
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Itabashi, Tatsuo, Yoshida, Kimiyoshi
• Primary Examiner(s): Coulter, Kenneth R.
• Application Number:
  US09/939,366
• Publication Number:
  US 20020026519A1
• Time in Patent Office: 704 Days
• Field of Search: 709/217, 709/203, 709/229, 709/202, 707/10, 713/200, 713/201, 705/14
• US Class Current: 709/217
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: Y10S 707/99931 : Database or file accessing
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

Personal information of a user is provided to an information provider from any location, through a simple apparatus, and with reliability. Personal information is pre-stored in a user profile database of a server. When the user accesses a service provider device from a terminal device through the server and the Internet, the service provider device requests the personal information of that user. The server reads the requested personal information from the user profile database and transfers the personal information to the service provider device. This novel arrangement makes it unnecessary for the user to input the personal information.

Claims

1. A method of protecting personal information of a user during an online transaction, comprising the steps of:

storing personal information of a user;

receiving a request to perform a transaction with a service provider from said user and transmitting said request to said service provider;

receiving a personal information category corresponding to said transaction from said service provider and transmitting said personal information category to said user; and

retrieving from said stored personal information one or more item of personal information based on said personal information category received from said service provider for transmission to said service provider.

2. The method of claim 1 further including the step of receiving a confirmation from said user authorizing transmission of said personal information category to said service provider.

3. The method of claim 1 further including the step of determining whether a user authorization is necessary to transmit said personal information corresponding to the personal information category received from said service provider.

4. The method of claim 1 wherein said step of receiving said request to perform said transaction includes the step of authenticating said user.

5. The method of claim 1 wherein access to said stored personal information is in conformity with a secure personal data transfer protocol.

6. The method of claim 1 wherein said steps of receiving said request to perform said transaction and receiving said personal information category are performed over a wireless network.

7. The method of claim 1 wherein said personal information of said user includes one or more of a user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, a user ID, a user postal code, a user age, a user gender, a user screen name, a user name, and a user occupation.

8. A method of protecting personal information of a user during an online transaction, comprising the steps of:

transmitting a request to perform a transaction with a service provider;

receiving a personal information category based on said transaction;

determining access authorization of personal information corresponding to said personal information category; and

commencing said transaction based on said determining step.

9. The method of claim 8 wherein said determining step includes the step of transmitting an access confirmation for permission of access of said personal information corresponding to said personal information category by said service provider.

10. The method of claim 8 wherein said step of transmitting said request further includes the step of transmitting user authentication information.

11. The method of claim 8 wherein said steps of transmitting and receiving are performed over a wireless network.

12. The method of claim 8 wherein said personal information of said user includes one or more of the user payment information, a user delivery address, a user billing address, a user home address, a user email address, a user telephone number, a user date of birth, a user password, a user ID, a user postal code, a user age, a user gender, a user screen name, a user name, and a user occupation.

13. An information processing apparatus connected to an information processing device of a user and an information processing device of a service provider through a network, comprising:

storage means for storing personal information of a plurality of users including said user; and

providing means for providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction.

14. An information processing method for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, comprising the steps of:

storing personal information of a plurality of users including said user; and

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received from said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction.

15. An information processing apparatus connected to an information processing device of a service provider through a service having storage means for storing personal information of a plurality of users and a network, comprising:

access means for accessing said information processing device of said service provider through said server; and

control means for controlling the provision of said personal information stored in said storage means to said information processing device of said service provider by said server on behalf of any of said plurality of users when a request for said personal information comes from said information providing device of said service providerin response to a request for transaction with said service provider received from any of said plurality of users;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction.

16. The apparatus of claim 15, wherein said control means further includes:

receiving means for receiving an inquiry by said server about the permission of providing said personal information stored in said storage means to said information processing device of said service provider; and

reply means for making a reply to said inquiry from said servier received by said receiving means.

17. An information processing method for use in an information processing apparatus connected to an information processing device of a service provider through a server having storage means for storing personal information of a plurality of users and a network, comprising the steps of:

accessing said information processing device of said service provider through said server; and

controlling the provision of said personal information stored in said storage means to said information processing device of said service provider by said server on behalf of any of said plurality of users when a request for said personal information comes from said information providing device of said service provider in response to a request for transaction with said service provider received from any of said plurality of users;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction.

18. A transmitting medium for transmitting a computer program for use in an information processing apparatus connected to an information processing device of a service provider through a server having a storage means for storing personal information of a plurality of users and a network, said computer program comprising the steps of:

accessing said information processing device of said service provider through said server; and

controlling the provision of said personal information stored in said storage means to said information processing device of said service provider by said server on behalf of any of said plurality of users when a request for said personal information comes from said information providing device of said service provider in response to a request for transaction with said service provider received from any of said plurality of users;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction.

19. A transmitting medium for transmitting a computer program for use in an information processing apparatus connected to an information processing device of a user and an information processing device of a service provider, said computer program comprising the steps of:

storing personal information of a plurality of users including said user;

providing said personal information stored in said storage means to said information processing device of said service provider on behalf of said information processing device of said user when a request for transaction with said service provider is received from said information processing device of said user and a request for said personal information is received said information processing device of said service provider;

wherein said personal information provided to said information processing device of said service provider corresponds to a personal information category received from said information processing device of said service provider for performing said transaction;

determining the necessity for permission of said user for the provision of said personal information stored in said storage means; and

inquiring, responsive to said determining step, said information processing device of said user whether said personal information can be provided and for getting a reply to the inquiry;

wherein said step of providing provides said personal information stored in said storage means to said information processing device of said service provider according to said reply obtained at said inquiring step.