JP2005051365A - Personal information disclosure method and system, communication terminal - Google Patents

Abstract

The present invention provides a personal information disclosure method and system capable of efficiently acquiring personal information of a communication partner in communication between a plurality of communication terminals.
A personal information management device stores personal information of a user, and a callee terminal that receives a communication request from a caller terminal uses a source address of the communication request for communication. The disclosure identifier T is acquired from the address management device 60, and the sender's personal information is acquired from the personal information management device 30 using the disclosure identifier T. One or more alias addresses A are generated for the real address (real address) S of the user, and the alias address A is used as the source address of the communication request.
[Selection] Figure 1

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a method and system for disclosing personal information in a network such as the Internet.
[0002]
[Prior art]
With the spread of the Internet in recent years, opportunities for communication between users such as IP phones and e-mails via a network are increasing. For example, when making a call in the IP phone technology, the calling terminal controls the call request in which the IP phone number assigned to each user is set as the source address and the destination address. Send to server. The call control server performs call control so that a connection is established between the calling and receiving terminals based on the telephone number included in the call request. The called terminal is notified of the telephone number of the caller, and the called party can recognize who the telephone call is from the telephone number.
[0003]
However, since the information for the caller to recognize the caller has been difficult to remember as a phone number, it is difficult to confirm who the call is from. There was a request to know various personal information. In particular, in the mail-order industry, it is necessary to know not only the name of the caller but also the address, etc., so the above-mentioned demand was great. In order to solve this problem, a method of constructing a database on the callee side is conceivable. However, in this method, it is necessary for the caller to notify each caller of personal information such as an address in advance. It was lacking in convenience. Therefore, as a method for managing personal information on the Internet, a technique described in Japanese Patent Laid-Open No. 2002-229953 has been proposed.
[0004]
Hereinafter, this conventional technique will be described with reference to FIG. Here, a person who uses personal information such as an EC (Electronic Commerce / Electronic Commerce) company is called an information user, and a person who registers personal information is called a registrant.
[0005]
In FIG. 16, 1001 is a personal information management server for storing and managing personal information, 1002 is an information user terminal, and 1003 is a registrant terminal. An operation when the information user desires to acquire personal information in such a configuration will be described.
[0006]
First, the registrant registers personal information in advance in the personal information management server 1001 using the terminal 1003 (step S101). The information user transmits a personal information access request to the registrant's terminal 1003 using the terminal 1002 (step S102). The registrant investigates the received personal information access request, and if it does not include a request for matters that are not desired to be disclosed to the information user, the registrant transmits an access code generation request to the personal information management server 1001 (step S103). . The personal information management server 1002 generates an access code for accessing the personal information (step S104), and sends it back to the registrant (step S105). The registrant returns this access code to the information user (step S106).
[0007]
The information user who has obtained the access code accesses the personal information management server 1001 using the access code (step S107). The personal information management server 1001 verifies the received access code, and if it is an appropriate code, extracts personal information corresponding to the code (step S108) and returns the extraction result to the information user (step S109). . Through such processing, the information law user can obtain personal information by obtaining an access code.
[0008]
[Patent Document 1]
JP 2002-229953 A
[0009]
[Problems to be solved by the invention]
However, with this conventional technique, an access code for accessing personal information has to be obtained separately from the caller, and it has been difficult to operate in conjunction with communications such as an IP phone.
[0010]
The present invention has been made in view of the above circumstances, and an object thereof is a personal information disclosure method capable of efficiently acquiring personal information of a communication partner in communication between a plurality of communication terminals, and To provide a system.
[0011]
[Means for Solving the Problems]
In order to achieve the above object, in the present invention, in a personal information disclosure method for disclosing personal information of a user managed by personal information management means to other users during communication between communication terminals via a network, A communication address registration stage in which a disclosure identifier used in a request for disclosure of personal information to a personal information management means and a user's communication address are associated with each other and registered in the communication address management means; A communication start stage for starting communication with the communication terminal, and a second communication terminal that has received communication from the first communication terminal uses the source communication address related to the communication to set the communication address. A disclosure identifier acquisition stage for acquiring a corresponding disclosure identifier from the communication address management means, and an individual whose second communication terminal that has acquired the disclosure identifier corresponds to the disclosure identifier Suggest that is characterized in that a personal information acquiring step of acquiring broadcast from the personal information management means.
[0012]
According to the present invention, when communication from the first communication terminal to the second communication terminal is started, the second communication terminal uses the communication address of the transmission source related to the communication to transmit the communication address. The disclosure identifier can be acquired from the management means, and the sender's personal information can be acquired from the personal information management means using the disclosure identifier. In other words, the receiver can easily acquire the personal information of the communication partner when communicating between users, which is highly convenient.
[0013]
DETAILED DESCRIPTION OF THE INVENTION
(First embodiment)
A personal information disclosure system according to a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a system configuration diagram of a personal information disclosure system. In the present embodiment, a so-called IP telephone that realizes telephone communication over an IP network such as the Internet will be described as communication between communication terminals of users. In addition, the communication address of each user is E.E. Assume that it conforms to the 164 numbering system.
[0014]
In FIG. 1, 11 and 12 are communication terminals used by users, 11 is a caller terminal used by a caller, 12 is a callee terminal used by a callee, and 20 is a caller terminal 11 to callee terminal 12. A call processing device for processing a call, 30 is a personal information management device for managing personal information of a user, and 40 is a disclosure identifier for generating a disclosure identifier T used for disclosing personal information in the personal information management device. The generation device 50 is a communication address registration device that generates and registers an alias communication address (hereinafter referred to as an alias address) A of the caller, and 60 is a real communication address of the user (hereinafter referred to as a real address). S is a communication address management device that manages the correspondence between S and the disclosure identifier T, and 70 is an alias communication address that manages the user's real address S and the alias address A generated for this real address S. It is less management device. In this embodiment, the communication address is E.E. Since the telephone number conforming to the 164 number system is used, the real address S and the alias communication address A have a number format such as “050-9999-9999”. Further, the code system of the disclosure identifier T is not required, and in this embodiment, a number system of “99999-99999” is exemplified.
[0015]
In the personal information disclosure system according to the present embodiment, when a call is made from the caller terminal 11 to the callee terminal 12, the callee terminal 12 displays the caller's personal information on the callee terminal 12, thereby allowing the callee to call the caller's personal information. It makes it possible to obtain information. At this time, instead of notifying the caller terminal 12 of the caller's real address S, the alias address A is notified, thereby protecting the caller's privacy. Also, the disclosure identifier T used for acquiring personal information is associated with the personal information disclosure conditions together with the personal information. By using this disclosure identifier T, the personal information is appropriately disclosed. The personal information disclosure system according to this embodiment will be described in detail below.
[0016]
The call processing device 20 is a device that performs call control between communication terminals. In the example of FIG. 1, the call processing device 20 accepts a communication start request (call) from the caller terminal 11 to the callee terminal 12 and issues a communication start request. A call is made to the callee terminal 12. In addition, the call processing device 20 includes an acceptance determination unit 21 that determines whether to accept a communication start request. Acceptability determination means 21 uses as a criterion whether or not the communication address of the transmission source related to the communication start request is registered as alias address A in alias communication address management device 70, and accepts it if registered. If it is not registered, it will be rejected. In the present embodiment, the call processing device 20 performs IP telephone call control and is not a device that relays telephone communication itself between communication terminals. Examples of the call control protocol in the call processing device 20 include SIP and H.264. 323 or the like.
[0017]
The personal information management device 30 receives a personal information database 31 that stores the user's personal information using the user's identifier (hereinafter referred to as a user ID) R as a key, and receives a personal information disclosure request from the receiver terminal 12, and The disclosure identifier restoring means 32 for restoring the user ID (R) and the disclosure condition information C associated with the disclosure identifier T included in the information disclosure request, and the personal information database 31 using the restored user ID (R) Personal information disclosing means 33 for acquiring personal information from the information and disclosing the personal information to the receiver terminal 12 in accordance with the disclosure condition information C. The personal information stored in the personal information database 31 is registered, for example, from a user communication terminal such as the caller terminal 11 or other terminals. This personal information includes character data such as the user's name and address, as well as binary data such as an image of the user when the user is an individual, and an image such as a company logo when the user is a corporation. May be. FIG. 2 shows an example of the data structure of the personal information database 31. In the present embodiment, HTTP is used for communication between the personal information management device 30 and the callee terminal 12. For this reason, the personal information management device 30 is implemented as a WWW server. Details of the method for restoring the disclosure identifier T will be described later.
[0018]
The disclosure identifier generating device 40 generates a disclosure identifier T based on the user ID (R) of the user and the disclosure condition information C input from the caller terminal 11 or the like. The disclosure identifier T is generated so that it can be restored only by the personal information management device 30. Here, the disclosure condition information C controls the operation of the personal information disclosure means 33 described above. For example, the information specifying the recipient who is the disclosure destination, the expiration date of the disclosure, and the items permitted to be disclosed. It consists of information (for example, permitting only disclosure of an address) and a form of disclosure (for example, specifying that information such as age 25 years is expressed such as the age of 20s) and the like. Details of the method for generating the disclosure identifier T will be described later.
[0019]
The communication address registration device 50 generates one or more alias addresses A from the set of the real address S and the disclosure identifier T received from the caller terminal 11 and returns the generated alias address A to the caller terminal 11. . In addition, the communication address registration device 50 registers the correspondence between each generated alias address A and the disclosure identifier T in the communication address management device 60, and also creates the correspondence between the generated alias address A and the real address S. Is registered in the alias communication address management device 70.
[0020]
In response to the registration request from the communication address registration device 50, the communication address management device 60 registers the correspondence between the user alias address A and the disclosure identifier T. Further, the communication address management device 60 returns a disclosure identifier T corresponding to the alias address A in response to a disclosure identifier acquisition request including the alias address A. FIG. 3 shows an example of the data structure of the communication address management device 60.
[0021]
The alias communication address management device 70 registers the correspondence between the user's real address S and each alias address A in response to a registration request from the communication address registration device 50. Also, the alias communication address management device 70 confirms whether or not a certain alias address A has been registered in response to an inquiry from the call processing device 20, and returns the response to the requesting call processing device 20. To do. FIG. 4 shows an example of the data structure of the alias communication address management device 70.
[0022]
As shown in FIG. 5, the callee terminal 12 includes a call control unit 12 a that controls transmission and reception of communication, a call function unit 12 b that performs communication between communication terminals after communication is established, and a call control unit 12 a. Disclosure identifier obtaining means 12c for obtaining the disclosure identifier T from the communication address management device 60 using the communication address of the transmission source related to the identified communication start request, and the disclosure obtained by the disclosure identifier obtaining means 12c A personal information acquisition means 12d for acquiring personal information from the personal information management device 30 using a personal identifier T, and a Web browser or the like that processes and displays the personal information acquired by the personal information acquisition means 12d in a predetermined format Information display means 12e. The personal information display means 12e performs display according to the data type of personal information. For example, if character data is included in personal information, the character data is displayed. If image information is included, the image is displayed, and information for acquiring image information such as a URL is included. For example, the image information indicated by the URL is acquired and displayed. If audio information is included, the audio data is reproduced.
[0023]
Next, a method for generating and restoring the disclosure identifier T in the disclosure identifier generating means 40 and the disclosure identifier restoring means 32 will be described in detail. In the present invention, two methods are proposed as a method for generating and restoring the disclosure identifier T. The first method is a method of embedding the user ID (R) and the disclosure condition information C in the disclosure identifier T, and the second method is to store the user ID (R) and the disclosure condition information C in other storage means separately. It is a method to keep.
[0024]
First, the first method will be described. In this method, the disclosure identifier generating unit 40 performs an encryption process on the information describing the user ID (R) and the disclosure condition information C so that the disclosure identifier restoring unit 32 can decrypt the information. An identifier T is generated. Various methods such as a common key method and a public key encryption method can be used for the encryption process. For example, when the public key encryption method is used, the disclosure identifier generating unit 40 uses the public key of the personal information management device 30 for the information describing the user ID (R) and the disclosure condition information C. An identifier T for disclosure is generated by encryption. On the other hand, the disclosure identifier restoring means 32 can restore the user ID (R) and the disclosure condition information C by decrypting the disclosure identifier T using its own private key.
[0025]
Next, the second method will be described with reference to FIGS. FIG. 6 is a system configuration diagram illustrating a method for generating and restoring a disclosure identifier, and FIG. 7 is a diagram illustrating an example of a data structure in a storage device. In this method, the disclosure condition information C is considered by dividing it into an identifier of a called party that is a condition for specifying a disclosure destination of personal information and other condition information such as an expiration date.
[0026]
In this method, as shown in FIG. 6, the storage for storing the association between the disclosure identifier T, the user ID (R), and the disclosure condition information C separately from the disclosure identifier generating unit 40 and the disclosure identifier restoring unit 32. A device 81, a key management device 82 for cryptographic processing, and an authentication device 83 are provided. The mounting positions of the storage device 81, the key management device 82, and the authentication device 83 are not questioned.
[0027]
The disclosure identifier generation means 40 includes a temporary disclosure identifier generation unit 40a, a temporary disclosure identifier selection unit 40b, and a block encryption unit 40c.
[0028]
When there is a generation request including the user ID (R) and the disclosure condition information C from the user, the temporary disclosure identifier generation unit 40a does not have a temporary disclosure identifier corresponding to the user ID (R) in the storage device 81. In this case, a temporary disclosure identifier corresponding to the user ID (R) is newly generated, and the temporary disclosure identifier is associated with the set of the user ID (R) and the disclosure condition information C in the storage device 81. Remember. Here, the temporary disclosure identifier generating unit 40a generates and stores a plurality of temporary disclosure identifiers as shown in FIG.
The provisional disclosure identifier selection unit 40b selects one of the plurality of provisional disclosure identifiers using the disclosure destination identifier included in the disclosure condition information C. As a method for selecting an identifier for disclosure, there are a method of selecting at random and a method of using an appropriate function (for example, a hash function) depending on an identifier of a disclosure destination. In this embodiment, a method using the latter is adopted. As a more specific procedure when using a hash function, for example, a temporary disclosure identifier is selected using a remainder obtained by dividing a hash value calculated from a disclosure destination identifier by the number of provisional disclosure identifiers. The method of doing is mentioned.
[0029]
The block encryption unit 40c acquires the encryption key corresponding to the disclosure destination identifier included in the disclosure condition information C from the key management device 82, and is selected by the temporary disclosure identifier selection unit 40b using the acquired encryption key. The temporary disclosure identifier is encrypted. Here, in the encryption process, one encryption key is selected from a plurality of encryption keys managed by the key management device 82 using an appropriate function (for example, a hash function) depending on the identifier of the disclosure destination. The encryption process is performed using the selected encryption key. The encrypted provisional disclosure identifier is set as a disclosure identifier T. As a more specific procedure when using the hash function, for example, the remainder obtained by dividing the hash value calculated from the identifier of the disclosure destination by the number of encryption keys managed by the key management device 82 is used. To select an encryption key.
[0030]
The disclosure identifier restoring unit 32 includes a decrypting unit 32a and a registration information restoring unit 32b.
[0031]
The decryption unit 32a restores the temporary disclosure identifier by decrypting the disclosure identifier T encrypted by the block encryption unit 40c. Here, as in the case of the encryption process, the decryption process uses an appropriate function (for example, a hash function) depending on the identifier of the disclosure destination from among a plurality of encryption keys managed by the key management device 82. One encryption key is selected and decryption processing is performed using the selected encryption key. As a result, if the temporary disclosure identifier cannot be decrypted in the decryption process, it can be determined that the request is from a third party different from the original disclosure destination. Good.
[0032]
When the provisional disclosure identifier selection unit 40b selects a provisional disclosure identifier using an appropriate function depending on the disclosure destination identifier, the registration information restoration unit 32b determines the disclosure destination as necessary. I do. Specifically, the temporary disclosure identifier is selected from the plurality of temporary disclosure identifiers stored in the storage device 81 using the same logic as the temporary disclosure identifier selection unit 40b, and the selected temporary disclosure identifier is selected. The identifier and the temporary disclosure identifier T decrypted by the decryption unit 32a are compared. However, in selecting the temporary disclosure identifier here, the identifier of the disclosure destination authenticated by the authentication device 83 at the time of the disclosure request is used. If the selected temporary disclosure identifier and the decrypted temporary disclosure identifier do not match, it can be determined that the request is from a third party different from the original disclosure destination. Good. In addition, about the determination here, since the same process is implemented also in the decoding part 32a, you may abbreviate | omit. Further, the description is omitted even when another selection method such as selecting a temporary disclosure identifier at random is used in the temporary disclosure identifier selection unit 40b.
[0033]
Next, the registration information restoration unit 32b refers to the storage device 81 using the provisional disclosure identifier decrypted by the decryption unit 32a, so that the user ID (R) and the disclosure condition corresponding to the provisional disclosure identifier are referred to. Information C is acquired. Here, there are cases where a plurality of disclosure condition information C is registered for one user ID (R) in the storage device 81, but as described above, the disclosure condition information C includes an identifier of the disclosure destination. included. Therefore, the user ID (R) and one disclosure condition information C corresponding to the disclosure identifier T are restored by referring to the storage device 81 using the identifier of the disclosure destination authenticated by the authentication device 83 at the time of the disclosure request. be able to.
[0034]
As described above, in the disclosure identifier generating / restoring method according to the second method, the disclosure destination identifier is included as the disclosure condition information C, and the request source identifier acquired by the authentication device 73 at the time of the disclosure request is used. Since the disclosure identifier T is restored, a request from a third party different from the original disclosure destination can be appropriately rejected. Further, since the number of disclosure identifiers T to be issued is in the order of the number of users, the amount of management data in the storage device 81 does not explosively increase even if the frequency of disclosure requests increases. Therefore, an increase in load can be prevented. Further, since the increase in the number of disclosure identifiers T can be suppressed, it is possible to prevent the number of digits from becoming long when encoding each disclosure identifier T, and thus a simple code system can be used. .
[0035]
Next, the operation of the personal information disclosure system according to the present embodiment will be described with reference to the drawings. This system requires (1) registration of personal information and generation of a disclosure identifier T and (2) registration of an alias address A prior to communication between users' communication terminals. First, the operation when registering personal information will be described with reference to FIG. FIG. 8 is a sequence chart for explaining the flow of registration of personal information.
[0036]
As shown in FIG. 8, first, a user who becomes a sender registers personal information in the personal information management apparatus 30 using the sender terminal 11 (step S1). Here, the personal information is registered so that it can be uniquely identified by the user ID (R). Here, the case where the user who becomes the sender registers using the terminal 11 that he / she owns has been described. However, as described above, the person who performs the registration work of personal information is not questioned. For example, the personal information management device 30 managers may be registered.
[0037]
Next, the sender uses the sender terminal 11 to make a disclosure identifier generation request to the disclosure identifier generation device 40 (step S2). The disclosure identifier generation request includes the user ID (R) and the disclosure condition information C. The disclosure identifier generating device 40 generates a disclosure identifier T in response to the generation request (step S3), and returns the generated disclosure identifier T to the requester sender terminal 11 (step S4).
[0038]
Next, the flow of alias address generation / registration will be described with reference to FIG. FIG. 9 is a sequence chart illustrating the flow of alias address generation / registration.
[0039]
As shown in FIG. 9, first, a user who is a caller requests the communication address registration device 50 to generate and register an alias address A using the caller terminal 11 (step S11). At this time, the generation registration request includes the real address S and the disclosure identifier T of the user. The communication address registration device 50 generates one or more alias addresses A for the real address S (step S12), and returns the alias address A to the requester sender terminal 11 (step S13). The communication address registration device 50 registers the correspondence between each alias address A and the disclosure identifier T in the communication address management device 60 (steps S14 and S15). Furthermore, the communication address registration device 50 registers the correspondence between the real address S and each alias address A in the alias communication address management device 70 (steps S16 and S17).
[0040]
Next, an operation when communication from the caller terminal 11 to the callee terminal 12 is started will be described with reference to FIG. FIG. 10 is a sequence chart for explaining the operation at the start of communication.
[0041]
As shown in FIG. 10, first, the caller terminal 11 sends a communication start request (call request) to the call processing device 20 (step S21). Here, in the communication start request, the communication address of the called party is specified as the destination communication address, and the alias address A is specified as the source communication address.
[0042]
Upon receiving the communication start request from the caller terminal 11, the call processing device 20 inquires the alias communication address management device 70 whether or not the admission / rejection determination means 21 has registered the source communication address related to the communication request. (Step S22), based on the answer, it is determined whether or not the communication request is accepted (Steps S23 and S24). That is, when the source communication address related to the communication request is registered in the alias communication address management device 70, the communication request is accepted, and when it is not registered, the acceptance is rejected. Then, when receiving the communication request, the call processing device 20 specifies the called party terminal 12 from the destination communication address and sends the communication request to the called party terminal 12 (step S25). At this time, the source communication address of the communication request is the alias address A of the caller. In order to identify the recipient terminal 12 from the destination communication address, a predetermined name resolution device may be used. For example, when the address is in the form of a telephone number as in this embodiment, E-NUMNS can be used.
[0043]
The callee terminal 12 that has received the communication start request from the caller terminal 11 via the call processing device 20 extracts the alias address A described as the source communication address from the start communication request, and the alias address A The identifier T for disclosure corresponding to is acquired from the communication address management device 60 (steps S26 and S27). Then, the callee terminal 12 acquires personal information corresponding to the disclosure identifier T from the personal information management device 30 using the acquired disclosure identifier T (steps S28 and S29). With the above processing, the callee terminal 12 can acquire the personal information of the caller, so that various processing can be performed on the personal information such as displaying on the personal information display means 12e.
[0044]
Next, a method for acquiring personal information in steps S28 and S29 will be described with reference to FIG. FIG. 11 is a sequence chart for explaining the flow of disclosure of personal information.
[0045]
As shown in FIG. 11, when the recipient terminal 12 that has acquired the disclosure identifier T makes a disclosure request for personal information including the disclosure identifier T to the personal information management device 30 (step S31), the disclosure of the device 30 is performed. The identifier restoring unit 32 restores the user ID (R) and the disclosure condition information C from the disclosure identifier T and passes them to the personal information disclosing unit 33 (steps S32 and S33). The personal information disclosure means 33 extracts personal information from the personal information database 31 using the user ID (R) as a key (steps S34, S35, S36), and discloses the personal information to the callee terminal 12 according to the disclosure condition information C. (Steps S37 and S38).
[0046]
As described above, according to the personal information disclosure system according to the present embodiment, when a user receives a communication from another user, the personal information of the caller is displayed on the callee terminal 12. It is possible to confirm whether the communication is from the mobile phone, which is highly convenient. Further, since the sender address notified to the callee terminal 12 is not the real address S of the caller but the alias address A, the privacy of the caller can be protected. Furthermore, since the personal information that can be acquired from the personal information management device 30 by the receiver terminal 12 using the disclosure identifier T is disclosed according to the disclosure conditions restored from the disclosure identifier T, the user can Appropriate settings can prevent personal information from leaking. That is, for example, even when the disclosure identifier T leaks to a third party by limiting the disclosure destination or setting an expiration date as the disclosure condition information C when the disclosure identifier T is generated, Disclosure of personal information can be prevented.
[0047]
(Second Embodiment)
Next, a personal information disclosure system according to a second embodiment of the present invention will be described with reference to the drawings. The personal information disclosure system according to the present embodiment is different from that of the first embodiment described above in that the call processor rewrites the communication address of the transmission source related to the communication start request. Since other configurations are the same as those of the first embodiment, only the differences will be described here.
[0048]
As shown in FIG. 12, the call processing device 20 according to the present embodiment includes a calling address rewriting means 22 that rewrites a source communication address of a communication start request from the caller terminal 11. As shown in FIG. 13, the calling address rewriting means 22 determines whether the destination communication address of the communication start request corresponds to a predetermined address (step S41). The source communication address is rewritten to a predetermined alias address A stored in the alias communication address management device 70 (step S42). Here, the information on which alias address A is rewritten to which destination communication address may be stored in the alias communication address management device 70. In the present embodiment, the communication start request from the caller terminal 11 may be the real address S as well as the alias address A as the source communication address.
[0049]
According to the personal information disclosure system according to the present embodiment, since a predetermined alias address A is automatically given to a predetermined communication destination, convenience for the user is improved. Other functions and effects are the same as those in the first embodiment.
[0050]
(Third embodiment)
Next, a personal information disclosure system according to a third embodiment of the present invention will be described with reference to the drawings. The personal information disclosure system according to the present embodiment is different from that of the first embodiment described above in that the communication history is managed in the call processing device, and the disclosure of personal information is limited based on the communication history. is there. Since other configurations are the same as those of the first embodiment, only the differences will be described here.
[0051]
As shown in FIG. 14, the call processing device 20 according to the present embodiment includes a communication history management unit 23 that records and manages a history of communication in which the call control is performed by itself.
[0052]
When the callee terminal 12 requests the communication address management device 60 to obtain the disclosure identifier T, the destination communication address (that is, its own communication address) and the communication address of the sender are related to the communication start request. The set is disclosed to the communication address management device 60. The communication address management device 60 inquires of the call processing device 20 whether the communication between the destination communication address and the source communication address is recorded in the communication history, and when the communication is recorded in the communication history. The disclosure identifier T is transmitted to the callee terminal 12. On the other hand, when it is not recorded in the communication history, the acquisition request for the disclosure identifier T is rejected.
[0053]
In addition, when the receiver terminal 12 requests the personal information management device 30 to disclose personal information, the receiver terminal 12 sets the pair of the destination communication address and the source communication address related to the communication start request to the personal information management device 30. Disclose. The personal information management device 30 inquires of the call processing device 20 whether the communication between the destination communication address and the source communication address is recorded in the communication history. Information is disclosed to the callee terminal 12. On the other hand, if it is not recorded in the communication history, the disclosure request for personal information is rejected.
[0054]
According to the personal information disclosure system according to the present embodiment, since the personal information of the sender is disclosed to the called party only between users who have communicated in the past, the leakage of personal information can be prevented. . Other functions and effects are the same as those in the first embodiment.
[0055]
In the present embodiment, the communication history is verified in both the communication address management device 60 and the personal information management device 30, but it may be performed in only one of them. Further, although the present embodiment has been described as a modification of the first embodiment, an access restriction function based on a communication history may be added to the second embodiment.
[0056]
【Example】
Next, an embodiment of the personal information disclosure system according to the present invention will be described with reference to FIG. FIG. 15 is a network configuration diagram illustrating an embodiment of the personal information disclosure system.
[0057]
In this embodiment, as shown in FIG. 15, it is assumed that an IP phone call is made from the caller terminal 11 to the callee terminal 12 via the IP network 90 such as the Internet. SIP is used as the call control protocol. In the IP network 90, SIP servers 91 and 92 are arranged, and a call processing device 93 is further installed. In FIG. 15, the disclosure identifier generating device is not shown.
[0058]
The call processing device 93 includes the communication address registration device 50, the communication address management device 60, the alias communication address management device 70, and the call processing device 20 having a SIP server function as a call control unit in each of the above embodiments. The callee terminal 12 acquires personal information from the personal information management device 30 via the IP network 90. As will be described later, the caller terminal 11 and the callee terminal 12 need to access the call processing device 93 as necessary, but the access is performed via a predetermined Web server (not shown). .
[0059]
In such a configuration, the caller registers personal information in advance in the personal information management apparatus 30 using the caller terminal 11 (step S51) and acquires the alias address A (step S52). When communication with the callee terminal 12 is started, the alias address A is designated as the source address and a communication start request is sent to the SIP server 92 (step S53). The communication start request is relayed by the SIP server 92 and arrives at the callee terminal 12 via the call processing device 93 and the SIP server 91 (steps S54, S55, S56). Receiving the communication start request, the callee terminal 12 acquires the disclosure identifier T from the call processing device 93 using the communication address of the caller (step S57), and further uses the disclosure identifier T to personal information. Personal information is acquired from the management apparatus 30 (step S58), and the personal information is displayed on the own terminal. On the other hand, the callee terminal 12 forms a connection with the caller terminal 11 in response to the communication start request and starts a call (step S59).
[0060]
As mentioned above, although embodiment of this invention was explained in full detail, this invention is not limited to this. For example, in each of the above-described embodiments, the disclosure identifier T used when acquiring personal information is set as a disclosure condition of personal information in the personal information management device 30. However, the disclosure condition is set. The personal information may be obtained unconditionally. For example, the personal information management apparatus 30 may manage personal information using the user identifier as a key, and use the user identifier as the disclosure identifier T. In this case, the disclosure identifier generating device 40 is not necessary.
[0061]
In each of the above embodiments, one or more alias addresses A are generated for the real address S of the user, and the alias address A is used as the source address of the communication start request. However, the alias address A is not used. However, the present invention can be implemented. In this case, in each of the above-described embodiments, the alias communication address management device 70 and the acceptability determination unit 21 of the call processing device 20 are not necessary. Further, the communication address registration device 50 stores the correspondence between the user's real address S and the disclosure identifier T in the communication address management device 60. Then, the caller terminal 11 may specify the real address S as the caller address when making a communication start request. The operation of the callee terminal 12 is the same as that in each of the above embodiments.
[0062]
Further, in each of the above embodiments, the morphological relationship between the real address S and the alias address A and the disclosure identifier T is not defined, but they may all be expressed in the same form, You may make it represent as a different form. For example, when the present invention is applied to IP telephone communication, the real address S, the alias address A, and the disclosure identifier T are all E.E. You may make it use the thing based on a 164 number system.
[0063]
Further, in each of the above embodiments, the receiver terminal 12 first acquires the disclosure identifier T from the communication address management device 60 and then acquires personal information from the personal information management device 30. If the personal information management device 30 can acquire personal information from the alias address A, the step of acquiring the disclosure identifier T from the communication address management device 60 may be omitted.
[0064]
Further, the functional units described as each device or each means in each of the above embodiments are not necessarily physically mounted. For example, in the above embodiment, the communication address management device 60, the communication address registration device 50, the alias communication address management device 70, and the call processing device 20 are mounted as one device 93, so that a plurality of devices or means are combined into one device. You may make it mount in an apparatus. Conversely, each unit in each device may be distributed and implemented in a plurality of devices.
[0065]
Furthermore, in each of the above-described embodiments, an IP telephone has been described as an example of communication between user communication terminals, but the present invention can also be applied to other communications. For example, the present invention can be applied to an electronic mail system.
[0066]
【The invention's effect】
As described above in detail, according to the present invention, when communication from the first communication terminal to the second communication terminal is started, the second communication terminal The disclosure identifier can be obtained from the communication address management means using the address, and the personal information of the caller can be obtained from the personal information management means using the disclosure identifier. In other words, the receiver can easily acquire the personal information of the communication partner when communicating between users, which is highly convenient.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram of a personal information disclosure system according to a first embodiment.
FIG. 2 is a diagram showing an example of the data structure of a personal information database
FIG. 3 is a diagram showing an example of a data structure of management data in a communication address management device
FIG. 4 is a diagram showing an example of a data structure of management data in an alias communication address management device
FIG. 5 is a block diagram illustrating the structure of a communication terminal
FIG. 6 is a diagram for explaining a method for generating and restoring a disclosure identifier
FIG. 7 is a diagram showing an example of the data structure of management data in the storage device
FIG. 8 is a sequence chart for explaining the flow of generating and registering a disclosure identifier
FIG. 9 is a sequence chart for explaining the flow of generating and registering alias communication addresses
FIG. 10 is a sequence chart for explaining a flow from communication start to disclosure of personal information.
FIG. 11 is a sequence chart for explaining the flow of personal information disclosure.
FIG. 12 is a block diagram for explaining the structure of a call processing device according to the second embodiment;
FIG. 13 is a flowchart for explaining the operation of the call processing device.
FIG. 14 is a block diagram illustrating the structure of a call processing device according to the third embodiment.
FIG. 15 is a network configuration diagram for explaining an embodiment;
FIG. 16 is a diagram for explaining a conventional personal information disclosure method;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 11 ... Caller terminal, 12 ... Callee terminal, 20 ... Call processing device, 21 ... Acceptability determination means, 22 ... Originating address rewriting means, 23 ... Communication history management means, 30 ... Personal information management measure, 31 ... Personal information Database, 32 ... Disclosure identifier restoration means, 33 ... Personal information disclosure means, 40 ... Disclosure identifier generation device, 50 ... Communication address registration device, 60 ... Communication address management device, 70 ... Alias communication address management device, 90 ... Network, 91, 92 ... SIP server, 93 ... Call processing device

Claims (16)

In a personal information disclosure method for disclosing personal information of a user managed by personal information management means to other users during communication between communication terminals via a network,
A communication address registration stage for registering the disclosure identifier used in the request for disclosure of personal information with respect to the personal information management means and the communication address of the user in the communication address management means;
A communication start stage for starting communication from the first communication terminal to the second communication terminal;
The second communication terminal that has received the communication from the first communication terminal acquires the disclosure identifier corresponding to the communication address from the communication address management means using the source communication address for the communication. A disclosure identifier acquisition stage;
A personal information disclosure method comprising: a personal information acquisition step in which a second communication terminal that has acquired a disclosure identifier acquires personal information corresponding to the disclosure identifier from the personal information management means. A communication history recording stage in which a communication control device for controlling communication from the first communication terminal to the second communication terminal records a communication history;
2. The disclosure identifier obtaining step of determining whether or not the disclosure identifier can be disclosed to the second communication terminal based on a destination and source communication address recorded as a communication history. Personal information disclosure method. A communication history recording stage in which a communication control device for controlling communication from the first communication terminal to the second communication terminal records a communication history;
2. The individual according to claim 1, wherein in the personal information acquisition stage, it is determined whether or not the personal information can be disclosed to the second communication terminal based on the destination and the communication address of the sender recorded as the communication history. Information disclosure method. The personal information disclosure method according to claim 1, wherein the disclosure identifier is capable of designating a disclosure condition in disclosure of personal information by personal information management means. The user shall have one or more alias communication addresses for one communication address,
2. The personal information disclosure method according to claim 1, wherein, in the communication start stage, the alias communication address is used as a communication address of a transmission source related to communication. The communication control device that controls communication from the first communication terminal to the second communication terminal is concerned with the communication when the destination communication address related to communication from the first communication terminal is a predetermined communication address. 6. The personal information disclosure method according to claim 5, further comprising a source communication address rewriting step of rewriting the source communication address with an alias communication address. The personal information includes image information or information for acquiring the image information, and the second communication terminal that has acquired the acquisition of personal information displays the image information included in the acquired personal information. 2. The personal information disclosure method according to claim 1, further comprising the step of acquiring and displaying the image information based on information for acquiring information. In a personal information disclosure system for disclosing personal information of a user managed by personal information management means to other users during communication between communication terminals via a network,
Having a communication address registration means for registering in the communication address management means the identifier for disclosure used in the request for disclosure of personal information to the personal information management means and the communication address of the user,
When a communication terminal receives a communication from another communication terminal, the communication terminal acquires a disclosure identifier corresponding to the communication address from the communication address management means using the source communication address for the communication. A personal information disclosure system comprising: means; and personal information acquisition means for acquiring personal information corresponding to the acquired disclosure identifier from the personal information management means. A communication control device for controlling communication from one communication terminal to another communication terminal and recording a history of the communication;
9. The personal information disclosure system according to claim 8, wherein the communication address management means determines whether or not the disclosure identifier can be disclosed based on a communication address of a destination and a transmission source recorded as a communication history. A communication control device for controlling communication from one communication terminal to another communication terminal and recording a history of the communication;
9. The personal information disclosure system according to claim 8, wherein the personal information management means determines whether or not personal information can be disclosed based on a communication address of a destination and a sender recorded as a communication history. 9. The personal information disclosure system according to claim 8, wherein the disclosure identifier is capable of designating a disclosure condition for disclosure of personal information by a personal information management means. The user shall have one or more alias communication addresses for one communication address,
9. The personal information disclosure system according to claim 8, wherein the communication terminal uses the alias communication address as a communication address of a transmission source related to communication. Controls communication from one communication terminal to another communication terminal, and if the destination communication address related to communication from one communication terminal is a predetermined communication address, the source communication address related to the communication is 9. The personal information disclosure system according to claim 8, further comprising a communication control device provided with a source communication address rewriting means for rewriting to an alias communication address. The personal information includes image information or information for acquiring image information,
The communication terminal includes display means for displaying image information included in the acquired personal information or acquiring / displaying the image information based on information for acquiring the image information. The personal information disclosure system described. In a communication terminal used for communication via a network,
When communication from another communication terminal is received, communication source management means that manages the identifier for disclosure used in the request for disclosure of personal information and the user's communication address in association with each other from the source communication related to the communication A disclosure identifier acquiring means for acquiring a disclosure identifier corresponding to the communication address using the communication address;
Personal information acquisition means for acquiring personal information corresponding to the disclosure identifier from the personal information management means for managing personal information identifiable by the disclosure identifier using the disclosure identifier acquired by the disclosure identifier acquisition means And a communication terminal. When the personal information acquired by the personal information acquisition means includes image information or information for acquiring the image information, the image information is displayed based on the information for displaying the image or acquiring the image information. 16. The communication terminal according to claim 15, further comprising display means for acquiring / displaying.

Images