WO2014097502A1 - Personal information management system, personal information management method and program - Google Patents

Abstract

[Problem] To prevent incorrect personal information and malicious personal information from being registered. [Solution] A personal information management system (107) is equipped with: a bundled data generation means (100) that generates bundled data in which personal information on a first user and personal information on a second user are bundled; an encrypted data generation means (101) that generates encrypted data by encrypting the bundled data with a private key of the second user; a public key request means (103) that requests from a public key distribution means (102) a public key of the second user with the personal information on the second user as a clue; a decryption means (104) that decrypts the encrypted data by using the public key of the second user; a determination means (105) that performs a check to determine whether or not the decrypted data matches the personal information on the second user; and a construction means (106) that constructs a friend relationship between the first user and the second user if the determination result is affirmative.

Description

Personal information management system, personal information management method and program

The present invention relates to a personal information management system, a personal information management method, and a program applicable to social network services.

In recent years, new human relations have been provided through connections such as hobbies and preferences, residential areas, schools of origin, or "friends of friends" by providing means and places to facilitate communication between friends and acquaintances over networks such as the Internet. A so-called social network service (hereinafter referred to as SNS) that provides a place for building a network is widely used.

One of the SNSs is to collect and manage personal information (phone numbers, etc.) in the address book stored in network terminals (generally mobile phones) on a server, and automatically add the personal information together with that server. In some cases, a friendship is constructed (see Patent Documents 1 and 2 below). An example is LINE (registered trademark) provided by NHN Japan Corporation. Hereinafter, this SNS will be referred to as “personal information utilization type SNS” for convenience.

In the personal information use type SNS, the address book for each member is centrally managed on the server, and information (generally a telephone number) that can be uniquely identified among the personal information registered in the address book of each member is stored. We are building friendships as clues. For example, if a phone number “090-BBB-BBBB” is registered in Mr. A's address book, and the phone number belongs to the service user B, the servers are A and B To establish a friendship and notify A to that effect.

In this way, the personal information utilization type SNS can expand the circle of friends using personal information (phone number etc.) as a clue, and can enjoy communication such as conversation and chat between friends.

JP 2011-081670 A JP 2010-246054 A

However, in personal information utilization type SNS, when wrong personal information is registered in the address book or when malicious personal information is registered, a friendship with an unintended partner is established. There is a problem.

Specific explanation. Consider a case where an incorrect telephone number “090-XXX-XXXX” is registered in Mr. A's address book. In this case, the server checks whether there is a person who has the telephone number among other service users. If there is a user (Mr. X) with the same telephone number, Build Mr. X as a friendship.

Here, “090-XXX-XXXX” is the wrong phone number, so Mr. A and Mr. X should be irrelevant (unknown people). Nevertheless, the conventional personal information utilization type SNS has a disadvantage that a friendship is established between unrelated Mr. A and Mr. X. Of course, there is no one who wants a friendship with an unknown partner, but it is a disadvantage that must be avoided by all means, especially for minors, without denying the danger.

Such inconvenience is the same when appropriate personal information is registered by a malicious person (referred to as person Z), or when personal information that has been obtained illegally by some means is registered. For example, if the registered personal information is a telephone number “090-CCC-CCCC”, the server checks whether there is a person who has the telephone number among other service users. If there is a number user (Mr. C), Mr. C and the person Z are constructed as friendships. In this case, Mr. C may receive a harassment call or a junk mail from the malicious person Z, and may suffer damage.

Therefore, an object of the present invention is to provide a personal information management system, a personal information management method, and a program that prevent registration of wrong personal information or malicious personal information.

The personal information management system of the present invention includes bundled data generation means for generating bundled data in which personal information of one user and personal information of two users are bundled, and Encrypted data generating means for generating encrypted data encrypted with the user's private key, and using the personal information of the two users as a clue, the public key of the second user is sent to a predetermined public key distributing means. Public key requesting means for requesting, decrypting means for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distributing means, and decrypting by the decrypting means A determination means for checking whether or not the two data are matched by comparing the obtained data and the personal information of the two users, and when the determination result of the determination means is affirmative, A builder that builds friendships between secondary users Characterized by comprising and.
The personal information management method of the present invention includes a bundled data generation step of creating bundled data in which the personal information of one user and the personal information of the two users are bundled, and the bundled data is An encrypted data generation step for generating encrypted data encrypted with the user's private key; and the second user's public key is sent to a predetermined public key distribution means based on the personal information of the second user. A public key requesting step for requesting, a decrypting step for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distributing means, and a decryption by the decrypting step A determination step of comparing the data thus obtained and the personal information of the two users to determine whether or not they match, and when the determination result of the determination step is affirmative, A construction process to build friendships between the two users and Characterized in that it contains.
The program according to the present invention includes a bundled data generating means for generating bundled data in which personal information of one user and personal information of two users are bundled in a computer, and using the bundled data in the second Encrypted data generating means for generating encrypted data encrypted with the private key of the user, and requesting the public key of the second user from the predetermined public key distributing means with the personal information of the second user as a clue Public key requesting means, decryption means for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distribution means, data decrypted by the decryption means, and A determination means for comparing the personal information of the two users to determine whether or not they match, and when the determination result of the determination means is affirmative, the first user and the second user With building means to build friendships and Characterized in that it gives a function of Te.

According to the present invention, it is possible to provide a personal information management system, a personal information management method, and a program that prevent registration of wrong personal information or malicious personal information.

It is a system configuration figure of an embodiment. It is a block diagram of the terminal 3, 4, 5, ... and the SNS server 2. FIG. It is a figure which shows the member list 26 and the address book group 30 which were memorize | stored in the memory | storage part 25 of the SNS server 2. FIG. It is a figure which shows the information exchange between terminals. It is a figure which shows the registration process to the SNS server. FIG.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a system configuration diagram of the embodiment. In this figure, a network 1 such as the Internet includes an SNS server 2 that provides a social network service using personal information, and a large number of terminals 3, 4, 5,... Then, three are shown as an example) and a public key distribution server 6 that distributes a public key of PKI (Public Key Infrastructure) is connected.

In addition, in this figure, although the aspect which connects many terminals 3, 4, 5, ... and the network 1 by radio | wireless is shown, this is an example. It may be a terminal connected to the network 1 by wire, for example, a terminal such as a personal computer, or may be a mixed mode of a terminal connected wirelessly and a terminal connected by wire. In the following, all terminals 3, 4, 5,... Are wireless terminals such as smartphones, but it should be noted that this is an example.

For convenience of explanation, the telephone number of the terminal 3 is “090-AAA-AAA”, the telephone number of the terminal 4 is “090-BBB-CCCC”, the telephone number of the terminal 5 is “090-CCC-CCCC”, and the person 7 Is a user A of the terminal 3, a person 8 is a user B of the terminal 4, and a person 9 is a user C of the terminal 5.

FIG. 2 is a configuration diagram of the terminals 3, 4, 5... And the SNS server 2.
First, the configuration of the terminals 3, 4, 5,. As shown in (a), all the terminals 3, 4, 5,... Have the same configuration, and the configuration of the terminal 3 will be described as a representative. A communication unit 11 that communicates with a base station (not shown) connected to the network 1, an operation unit 12 such as a push button or a touch panel that provides an input interface for the user of the terminal 3, A control unit 13 mainly composed of a computer that realizes a use environment of at least a predetermined service (personal information use type social network service) provided by the SNS server 2 through overall control of the operation, and an output interface for the user A display unit 14 such as a liquid crystal display to be provided, a storage unit 15, and a power supply unit 16 that supplies power to each unit of the terminal 3 are provided. The own telephone number storage area 17 for storing the own telephone number, the address book storage area 18 for storing the address book, the private key storage area 19 for storing the PKI private key, and the public key for storing the PKI public key. A storage area 20 is provided.

The own phone number is the phone number of each of the terminals 3, 4, 5,... "090-AAA-AAAA" for the terminal 3, and "090-BBB" for the terminal 4. “BBBB” means “090-CCC-CCCC” for the terminal 5.

The secret key and the public key are public key cryptosystem key pairs that exist for each user (Mr. A, Mr. B, Mr. C,...) Of each terminal 3, 4, 5,. Hereinafter, the private key and public key stored in the terminal 3 will be referred to as Mr. A's private key and Mr. A's public key, and similarly, the private key and public key stored in the terminal 4 Mr. B's secret key and Mr. B's public key will be referred to, and the secret key and public key stored in the terminal 5 will be referred to as Mr. C's secret key and Mr. C's public key.

Next, the configuration of the SNS server 2 will be described. As shown in (b), the SNS server 2 inputs the communication unit 21 that communicates with the terminals 3, 4, 5,... Via the network 1 and the administrator of the SNS server 2. Controls the operation of the SNS server 2 and the operation unit 22 such as a keyboard and a touch panel that provide an interface, and provides a predetermined service to a user of the terminal 3, 4, 5,. A control unit 23 mainly composed of a computer that provides a service), a display unit 24 such as a liquid crystal display that provides an output interface to the administrator of the SNS server 2, and a storage unit 25. A storage area 25a of a member list 26 in which information of all users (also referred to as members) of the service provided by the SNS server 2 is recorded, and an address for each member It is provided a storage area 25b of the address book group 30 for storing 27, 28, 29 ....

As described above, the public key distribution server 6 distributes the public key of the PKI. The “public key” means a public key of a public key cryptosystem key pair. Since data encrypted with a public key can only be decrypted with a non-public key (secret key), the security level does not decrease even if the public key is known to others. Conversely, data encrypted with the private key can be decrypted with the public key.

The public key can be distributed on any server, such as a server operated by an individual, but it can be spoofed (a public key illegally generated or tampered with by a third party) Distribution by an arbitrary server is not preferable, and is generally distributed by a specific server that has received public authentication.

Public certification means that a trusted third party (TTP: Trusted Third Party) guarantees the owner of the public key. The TTP confirms the identity of the owner of the public key by some method, and issues a certificate (Certificate) that guarantees the public key and the owner. The certificate describes the public key and information that proves its owner, and is given a TTP signature to prevent tampering. The TTP that issues a certificate is called a certificate authority (CA), and the public key distribution server 6 of the embodiment distributes the public key that has been certified by the certificate authority.

FIG. 3 is a diagram showing the member list 26 and the address book group 30 stored in the storage unit 25 of the SNS server 2. In this figure, the member list 26 holds information of all users (members) of a predetermined service (personal information use type social network service) provided by the SNS server 2. The member information is at least member identification information (in the figure, “A”, “B”, “C”... For convenience, but this is for convenience of explanation. Unique information that does not overlap. And each member's personal information. The personal information is unique information that can distinguish each member individually (generally, it is a telephone number or an e-mail address, but here a telephone number is taken as an example). In addition, about personal information, you may add an address, age, sex, etc. other than said unique thing, for example.

The address book group 30 holds the personal information transmitted from each member's terminals 3, 4, 5,... Divided into address books 27, 28, 29,. Each address book 27, 28, 29... Contains personal information of one or more call partners. For example, in the example shown in FIG. The “telephone number” and “encrypted telephone number pair” of the other party to whom the identification information A1 associated with the identification information A is assigned are written, and the identification information A in the member list 26 is also associated with the identification information A1. The “telephone number” and “encrypted phone number pair” of the second call partner to which the attached identification information A2 is given are written.

Here, “telephone number” is “plaintext” information, that is, readable information composed of text characters, etc., whereas one “encrypted telephone number pair” is non-readable by being encrypted with a predetermined secret key. It is secret information that cannot be known unless it is decrypted using a public key corresponding to the secret key.

“Encrypted phone number pair” is a pair of phone numbers enclosed and encrypted with a predetermined secret key. One of the pair of telephone numbers is the telephone number of the owner of the address book, and the other is the telephone number of the other party. This will be specifically described. Assuming that Mr. B is the other party in the address book 27 of Mr. A, one of the phone numbers enclosed in the “encrypted phone number pair” is the phone number of Mr. A (090-AAA-AAAAA). The other telephone number is Mr. B's telephone number (090-BBB-BBBB). The two phone numbers (090-AAA-AAAA and 090-BBB-BBBB) are bundled and encrypted with Mr. B's private key is an “encrypted phone number pair”.

Next, the operation of the embodiment will be described. In the following, a case where Mr. A additionally registers a phone number of Mr. B as a new call partner in his / her terminal 3 will be described as an example.
[Information exchange between terminals]
FIG. 4 is a diagram showing information exchange between terminals. As shown in this figure, first, when Mr. A operates the operation unit 12 of his / her terminal 3 and inputs the telephone number (090-BBB-BBBB) of Mr. B, the control unit 13 of the terminal 3 The input information, that is, the telephone number (090-BBB-BBBB) of the call partner B is registered in the address book 18 in the own terminal (step S1), and the own telephone number (from the own telephone number storage area 17) (090-AAA-AAAAA) is read, and the telephone number 31 is transmitted to Mr. B's terminal 4 in plain text (step S2).

In response to receiving the telephone number 31 from Mr. A's terminal 3, the control unit 13 of Mr. B's terminal 4 reads out the own telephone number (090-BBB-BBBB) from the own telephone number storage area 17 of the own terminal. At the same time, the private key and the public key of the user (Mr. B) are read out from the private key storage area 19 and the public key storage area 20 of the terminal (step S3).

Next, the control unit 13 of Mr. B's terminal 4 transmits his own telephone number 32 (090-BBB-BBBB) and his own (Mr. B) public key 33 to Mr. A's terminal 3 (steps S4 and S5). In addition, A's phone number and my (B's) phone number are bundled, and the enclosed data is encrypted with my (B's) private key to generate an encrypted phone number pair 34 ( After step S6), the encrypted telephone number pair 34 is transmitted to Mr. A's terminal 3 (step S7).

Upon receiving the above three data (telephone number 32, public key 33 and encrypted telephone number pair 34) from Mr. B's terminal 4, the control unit 13 of Mr. A's terminal 3 uses the public key 33 next. The encrypted telephone number pair 34 is decrypted (step S8), and the decrypted B's telephone number and the telephone number 32 received from B's terminal 4 are collated (step S9). It is determined whether or not (step S10). If they match, the process ends after executing registration processing (step S11) to the SNS server to be described next. On the other hand, if they do not match, they are received from Mr. B's terminal 4. It is determined that the telephone number 32 is wrong (or wrong), and Mr. B's telephone number registered in the address book 18 of the terminal is deleted in the previous step S1, and the process is terminated.

[Registration process to SNS server 2]
FIG. 5 is a diagram showing a registration process to the SNS server 2. As shown in this figure, the control unit 13 of Mr. A's terminal 3 sends the telephone number 35 (090-BBB-BBBB) of Mr. B's terminal 4 and the encrypted telephone number pair 36 (the encrypted telephone number pair of FIG. 4). (Same as 34) is transmitted to the SNS server 2 (step S13, step S14).

The control unit 23 of the SNS server 2 stores the telephone number 35 (090-BBB-BBBB) of the terminal 4 of Mr. B and the encrypted telephone number pair 36 transmitted from the terminal 3 of Mr. A in the storage unit 25. Are additionally registered in the address book 27 (step S15). Next, the member list 26 in the storage unit 25 is searched, and whether or not the telephone number 35 (090-BBB-BBBB) of Mr. B's terminal 4 has been registered, that is, whether Mr. B is registered as a member. It is determined whether or not (step S16).

If it is not registered as a member, the information of Mr. B (phone number 35 and encrypted phone number pair 36) additionally registered in the address book 27 of Mr. A in the previous step S15 is deleted (step S17). To finish the process.

On the other hand, if it is registered, first, Mr. B's public key is requested to the public key server 6 (step S18), and when Mr. B's public key is received from the public key server 6 (step S19), the public key is received. Is used to decrypt the encrypted telephone number pair 36 (step S20). Next, the decrypted phone number of B and the phone number 35 received from Mr. A's terminal 3 are collated (step S21) to determine whether or not they match (step S22). If this is the case, a friendship between Mr. A and Mr. B is established, and a message to that effect is sent to Mr. A's terminal 3 (step S23), and the process is terminated.

[Building friendships]
The construction of the friend relationship in step S23 will be specifically described. In the SNS server 2, user matching processing is performed on the data of the address books 27, 28, 29,... Collected from the respective terminals 3, 4, 5,. Build a social network. For example, the procedure in the case where Mr. B's telephone number (090-BBB-BBBB) is registered in the address book 18 of the terminal 3 will be described below.
(1) First, the SNS server 2 sequentially scans the address book 27 collected from the terminal 3.
(2) Next, when processing the entry of Mr. B's telephone number (090-BBB-BBBB), the SNS server 2 first uses the plaintext telephone number (090-BBB-BBBB) as a key to retrieve the member list 26. A search is made to confirm that this telephone number (090-BBB-BBBB) is registered in the member list 26.
(3) Next, the SNS server 2 obtains Mr. B's public key from the public key distribution server 6 using the plaintext telephone number (090-BBB-BBBB) as a key.
(4) Next, the SNS server 2 encrypts data encrypted with Mr. B's secret key (data encrypted with Mr. B's secret key by enclosing the phone number of Mr. A and Mr. B). ) With Mr. B's public key, and the validity of Mr. A's phone number and Mr. B's phone number is confirmed.
(5) When the validity is confirmed, the SNS server 2 notifies the terminal 3 of Mr. A that the user (Mr. B) of the terminal 4 is an acquaintance candidate.

As described above, according to the embodiment, since the PKI (public key encryption infrastructure) is applied to the personal information (phone number in the embodiment) that is the basis for establishing the friendship, the validity of the personal information is guaranteed. It is possible to prevent registration of wrong personal information or malicious personal information. For this reason, the SNS server 2 can construct a correct friend relationship using the personal information whose validity is guaranteed, and can provide a healthy social network environment.

Specifically, in the “information exchange between terminals” in FIG. 4, when transmitting Mr. B's telephone number (090-BBB-BBBB) from the terminal 4 to the terminal 3 in plain text (phone number 32), , B's public key 33 and encrypted telephone number pair 34 are transmitted. Here, the encrypted telephone number pair 34 is obtained by bundling A's telephone number and B's telephone number and encrypting the bundled data with B's private key. In general, data transmission between terminals is performed via a wireless or wired communication medium. Even if the communication medium is digital, the possibility of eavesdropping by a third party cannot be ruled out. It cannot be said that there is absolutely no tampering. This is especially true for plaintext data (telephone number 32 described above).

The embodiment has an advantage that if the telephone number 32 is falsified, the falsification can be found. This is because the public key 33 and the encrypted telephone number pair 34 of Mr. B are transmitted from the terminal 4 to the terminal 3 together with the plaintext telephone number 32, and the encrypted telephone is transmitted using the public key 33. This is because it is only necessary to decrypt the number pair 34 and match the decrypted phone number of Mr. B with the plaintext phone number 32. If the collation matches, “no tampering” can be determined, and if they do not match, “tampering” can be determined.

This advantage (discovery of tampering) is not the main point of the embodiment. This is an attendant advantage obtained by adopting the configuration as in the embodiment. The main merit is that incorrect personal information or malicious personal information cannot be registered in the SNS server 2.

For example, consider the case where an incorrect telephone number “090-XXX-XXXX” is registered in Mr. A's address book. In this case, conventionally, the server checks whether there is a person having the telephone number among other service users, and if there is a user (Mr. X) having the same telephone number. Builds friendship between Mr. A and Mr. X, but “090-XXX-XXXX” is the wrong phone number, so Mr. A and Mr. X should be unrelated (unknown strangers) The friendship built is not correct.

In the embodiment, it is possible to avoid the construction of such an incorrect friendship. This is because the encrypted telephone number pair 34 is transmitted from the terminal 3 to the SNS server 2 together with Mr. B's personal information (telephone number 32). This is because Mr. B's public key is requested to the public key distribution server 6 using (phone number 32) as a clue. If an attempt is made to register wrong personal information in the SNS server 2, naturally, since the public key corresponding to such wrong personal information does not exist in the public key distribution server 6, the public key cannot be distributed. Therefore, there is an advantage that registration of wrong personal information in the SNS server 2 can be avoided.

This merit is the same when appropriate personal information is registered by a malicious person or when personal information that is illegally known by some means is registered. Similarly, since the public key corresponding to such personal information does not exist in the public key distribution server 6, the public key cannot be distributed. Therefore, the merit that registration of unauthorized personal information to the SNS server 2 can also be avoided.

In the embodiment, the personal information registered in the SNS server 2 is a telephone number. However, the present invention is not limited to this. Any unique information that can identify the user (member) of the SNS service may be used. For example, an e-mail address may be used. Further, the address book of the embodiment may be read as a telephone book, or may be read as a personal information list.

Or, “data exchange date” may be added to the data handled in the address book. Then, a data exchange date / time check is added to the phase (see step S21 in FIG. 5) in which the SNS server 2 checks the validity of personal information (telephone number etc.), and data older than a certain standard is excluded. Also good. In this way, the telephone number reuse problem, that is, the inconvenience caused by allocating the canceled telephone number to a new contractor (the case where there is no malicious but the result of impersonating another person) is addressed. be able to.

This application claims priority based on Japanese Patent Application No. 2012-274221 filed on December 17, 2012, the entire disclosure of which is incorporated herein.

The features of the present invention will be described below.
A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.
(Appendix 1)
FIG. 6 is a configuration diagram of Supplementary Note 1.
Appendix 1 includes bundled data generation means 100 (corresponding to the control unit 13 of the embodiment) that generates bundled data that bundles personal information of one user and personal information of a second user;
Encrypted data generation means 101 (corresponding to the control unit 13 of the embodiment) for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
Using the personal information of the second user as a clue, public key requesting means 103 (of the embodiment) for requesting the public key of the second user to the public key distribution means 102 (corresponding to the public key distribution server 6 of the embodiment). Equivalent to the control unit 23),
Decryption means 104 (corresponding to the control unit 23 of the embodiment) for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distribution means 102;
A determination unit 105 (corresponding to the control unit 23 in the embodiment) that compares the data decrypted by the decryption unit 104 with the personal information of the two users and determines whether or not they match;
And a construction means 106 (corresponding to the control unit 23 in the embodiment) for constructing a friendship relationship between the one user and the second user when the judgment result of the judgment means 105 is affirmative. Personal information management system 107.
(Appendix 2)
Appendix 2 includes bundled data generation means for generating bundled data including the personal information of one user and the personal information of the second user;
A personal information management system comprising: a terminal having encrypted data generation means for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user.
(Appendix 3)
Appendix 3 is a public key requesting means for requesting the public key of any user from a predetermined public key distribution means using the personal information of the arbitrary user as a clue;
When the public key of the arbitrary user is distributed from the public key distribution means, the public key is used, and the personal information of the arbitrary user and the personal information of another user are bundled with the arbitrary key Decryption means for decrypting the encrypted data encrypted with the user's private key;
A determination means for comparing the data decrypted by the decryption means and the personal information of the arbitrary user to determine whether or not they match,
A personal information management system comprising: a server having a construction means for constructing a friendship relationship between the arbitrary user and the other user when the judgment result of the judgment means is affirmative.
(Appendix 4)
Appendix 4 includes a bundled data generation process for generating bundled data including the personal information of one user and the personal information of the second user;
An encrypted data generation step for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
A public key requesting step of requesting the public key of the second user from a predetermined public key distribution means using the personal information of the second user as a clue;
A decrypting step of decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distributing means;
A determination step of comparing the data decoded by the decoding step with the personal information of the two users to determine whether or not both match;
A personal information management method comprising: a construction step of constructing a friendship between the first user and the second user when the determination result of the determination step is affirmative.
(Appendix 5)
Appendix 5
A bundled data generation means for generating bundled data including the personal information of one user and the personal information of a second user;
Encrypted data generation means for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
Public key requesting means for requesting the public key of the second user to a predetermined public key distribution means using the personal information of the second user as a clue;
Decryption means for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distribution means;
A determination means for comparing the data decrypted by the decryption means with the personal information of the two users to determine whether or not they match;
When the determination result of the determination means is affirmative, the program provides a function as a construction means for constructing a friendship between the first user and the second user.

100 enclosed data generation means 101 encrypted data generation means 102 public key distribution means 103 public key request means 104 decryption means 105 determination means 106 construction means 107 personal information management system

Claims (5)

A bundled data generating means for generating bundled data including the personal information of one user and the personal information of the second user;
Encrypted data generating means for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
Public key requesting means for requesting the public key of the second user to a predetermined public key distribution means using the personal information of the second user as a clue;
Decryption means for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distribution means;
A determination means for comparing the data decrypted by the decryption means and the personal information of the two users to determine whether or not they match;
A personal information management system comprising: a construction means for constructing a friendship between the first user and the second user when the judgment result of the judgment means is affirmative. A bundled data generating means for generating bundled data including the personal information of one user and the personal information of the second user;
A personal information management system comprising: a terminal having: encrypted data generation means for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user. Public key requesting means for requesting the public key of the arbitrary user from a predetermined public key distribution means using the personal information of the arbitrary user as a clue;
When the public key of the arbitrary user is distributed from the public key distribution means, the public key is used, and the personal information of the arbitrary user and the personal information of another user are bundled with the arbitrary key Decryption means for decrypting the encrypted data encrypted with the user's private key;
A determination means for comparing the data decrypted by the decryption means and the personal information of the arbitrary user to determine whether or not they match,
The personal information management system characterized by including the server which has the construction | assembly means which builds the friend relationship of the said arbitrary user and said other user when the determination result of the said determination means is affirmation. A bundled data generation process for generating bundled data including the personal information of one user and the personal information of a second user;
An encrypted data generation step for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
A public key requesting step of requesting the public key of the second user from a predetermined public key distribution means using the personal information of the second user as a clue;
A decrypting step of decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distributing means;
A determination step of comparing the data decoded by the decoding step with the personal information of the two users to determine whether or not both match;
A personal information management method comprising: a construction step of constructing a friendship between the first user and the second user when the determination result of the determination step is affirmative. On the computer,
A bundled data generation means for generating bundled data including the personal information of one user and the personal information of a second user;
Encrypted data generating means for generating encrypted data obtained by encrypting the bundled data with the secret key of the second user;
Public key requesting means for requesting the public key of the second user to a predetermined public key distribution means using the personal information of the second user as a clue;
Decryption means for decrypting the encrypted data using the public key when the public key of the second user is distributed from the public key distribution means;
A determination unit that compares the data decrypted by the decryption unit with the personal information of the second user to determine whether or not they match;
A program which provides a function as a construction means for constructing a friendship between the first user and the second user when the judgment result of the judgment means is affirmative.

Images