Personal-information managing apparatus and personal-information handling apparatus

• US 8,640,185 B2
• Filed: 09/10/2009
• Issued: 01/28/2014
• Est. Priority Date: 10/03/2008
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Hayashida, Naoko
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US12/557,006
• Publication Number:
  US 20100088743A1
• Time in Patent Office: 1,601 Days
• Field of Search: 726/1, 726/26, 380 1-287, 713 1- 36
• US Class Current: 726/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies

Abstract

A personal-information managing apparatus includes: a usage permission policy managing unit to manage usage permission policy in which a boundary between usage permission and usage prohibition of personal information is defined; a personal information request receiving unit to receive a request for the personal information from the personal-information handling apparatus; a usage-permission issuing unit to obtain the usage permission policy corresponding to the received request via the usage permission policy managing unit, and to issue a usage permit corresponding to the usage permission policy and the requested personal information to the personal-information handling apparatus; a usage permit issue history managing unit to manage the issued usage permit and usage permission issue history relating to the personal information; and a credibility establishing unit to establish credibility of information exchange with the personal-information handling apparatus in relation to the issuing of the usage permit and the personal information.

Claims

1. A personal-information managing apparatus that inputs or stores personal information to issue the input or stored personal information to a personal-information handling apparatus, the personal-information managing apparatus comprising:

a usage permission policy manager to manage usage permission policy in which a boundary between usage permission and usage prohibition of the personal information is defined;

a personal information request receiver to receive a request for the personal information from the personal-information handling apparatus;

a usage-permission issuing unit to obtain the usage permission policy corresponding to the received request via the usage permission policy manager, and to issue a usage permit corresponding to the usage permission policy and the requested personal information to the personal-information handling apparatus;

a usage permit issue history manager to manage issued history information including the usage permit and usage permission issue history relating to the personal information;

a credibility establishing unit to establish credibility of information exchange with the personal-information handling apparatus in relation to the issuing of the usage permit and the personal information, and

a confirming unit to confirm a transfer of the personal information with a user included in transfer information when the transfer information received from a transfer destination of the personal information is detected in the issued history information.

2. The personal-information managing apparatus according to claim 1, wherein

the usage permission policy manager predicts the usage permission policy at least using the usage permission issue history, and manages the predicted usage permission policy as a part of the usage permission policy.

6. The personal-information managing apparatus according to claim 1, wherein

the personal information request receiver receives a request for personal information from a first personal-information handling apparatus using the usage permit transferred from a second personal-information handling apparatus, and

the usage-permission issuing unit searches for whether the usage permission issue history corresponding to the received usage permit exists in the usage permit issue history manager, obtains the usage permission policy corresponding to the request for personal information from the usage permission policy manager when the corresponding history exists, and issues a new usage permit corresponding to the usage permission policy and the requested personal information to the first personal-information handling apparatus.

7. The personal-information managing apparatus according to claim 1, wherein

when a request for a personal information received by the personal information request receiver is similar to a request for which the usage-permission issuing unit has issued a usage permit, included in the issued history information, with some kind of rules, the usage-permission issuing unit issues a usage permit corresponding to a usage permission policy used when the usage-permission issuing unit has issued the usage permit with some kind of rules.

3. A personal-information handling apparatus that requests and obtains personal information from a personal-information managing apparatus to use the obtained personal information, the personal-information handling apparatus comprising:

a personal information requester to request necessary personal information from the personal-information managing apparatus including a confirming unit to confirm a transfer of the personal information with a user included in transfer information when the transfer information received from a transfer destination of the personal information is detected in the issued history information including a usage permit and usage permission issue history relating to the personal information;

a personal information obtaining unit to receive a usage permit designating a usage permission policy in which a boundary of usage permission or usage prohibition of the personal information is defined, and to receive the requested personal information;

a credibility establishing unit to establish credibility of information exchange with the personal-information managing apparatus in relation to the requesting or receiving of the personal information and the usage permit, the personal-information managing apparatus manages issued history information including the usage permit and usage permission issue history relating to the personal information; and

a personal information processor to interpret the usage permission policy designated by the received usage permit, and to use the personal information using the interpreted result.

4. The personal-information handling apparatus according to claim 3, further comprising

a personal information transfer issuing unit to transfer the usage permit received from the personal-information managing apparatus as well as information related to a reference destination of the personal information designated by the usage permit to another personal-information handling apparatus.

5. The personal-information handling apparatus according to claim 3, further comprising

a personal information transfer receiver to receive a transfer of the usage permit and information related to a reference destination of the personal information designated by the usage permit from another personal-information handling apparatus, wherein

the personal information requester requests necessary personal information from the personal-information managing apparatus specified by the information related to the reference destination of the personal information using the transferred usage permit, and

the personal information obtaining unit receives a new usage permit and personal information corresponding to the request, from the personal-information managing apparatus.

8. The personal-information handling apparatus according to claim 3, wherein

when the personal-information managing apparatus receives a request, similar to a request for which the personal-information managing apparatus has issued a usage permit with some kind of rules, for a personal information, the personal-information managing apparatus issues a usage permit corresponding to a usage permission policy used when the personal-information managing apparatus has issued the usage permit with some kind of rules.