Granted Patent B2

US 12,524,568 · App. 18/267,672 · Granted Jan 13, 2026

Inventors: Yoshihiko Omori (Musashino, JP); Takao Yamashita (Musashino, JP); Yurika Suga (Musashino, JP); Yasuhiko Yoshimura (Musashino, JP)

Assignee: NTT, Inc.

G06F21/6245G06F21/602

Abstract

Claims (64)

1 . A user information management system comprising:

a user terminal used by a user;

a user agent; and

a service provider server, wherein:

the user agent includes:

a storage configured to store:

a registered user database in which user identification information of the user and user information of the user are stored in association with each other; and

a provided user information database in which the service provider server and provided user information that was provided to the service provider server are stored in association with each other;

a user information providing destination search unit, implemented using one or more computing devices, configured to:

receive a request from the user terminal with a service provider service document including identification information of the service provider server and a user information type requested by the service provider server; and

transmit (i) a first set of user information of the user of the user terminal already provided to the service provider server and (ii) a second set of user information of the user corresponding to the user information type to the user terminal; and

a user information access right approval unit, implemented using one or more computing devices, configured to:

receive service provider server permission indicating a portion of the user information to be provided to the service provider server from the user terminal;

generate (i) pseudo user identification information that identifies the user in the service provider server and (ii) a pair of a private key and a public key associated with the pseudo user identification information;

generate a signed service provider service document obtained by adding a signature to the service provider service document using the private key; and

transmit the pseudo user identification information and the signed service provider service document to the user terminal;

the user terminal includes:

a user information provision request unit, implemented using one or more computing devices, configured to transmit the service provider server permission to the user agent; and

a service document transfer unit, implemented using one or more computing devices, configured to transmit the pseudo user identification information and the signed service provider service document to the service provider server;

the service provider server includes:

a user information request unit, implemented using one or more computing devices, configured to transmit the pseudo user identification information and the signed service provider service document to the user agent; and

the user agent further includes:

a providing unit, implemented using one or more computing devices, configured to verify the signature of the signed service provider service document using the public key associated with the pseudo user identification information, and return the service provider server permission to the service provider server in a case where the verification is successful.

2 . The user information management system according to claim 1 , further comprising:

a related service provider server configured to provide a service in cooperation with the service provider server, in which the related service provider server includes a related user information request unit, wherein:

the service provider server further includes a related service document transfer unit;

in the service provider service document, the identification information of the related service provider server is further included;

in the provided user information database, the related service provider server and the user information provided to the related service provider server are stored in association with each other;

the user information providing destination search unit of the user agent is configured to receive a request from the user terminal with a related service provider service document including related identification information of the related service provider server and a type of information requested by the related service provider server and transmits a third set of user information of the user of the user terminal already provided to the related service provider server to the user terminal;

the user information provision request unit of the user terminal is configured to transmit related service provider server permission indicating additional user information to be provided to the related service provider server to the user agent;

the user information access right approval unit of the user agent is configured to generate a signed related service provider service document obtained by adding a corresponding signature to the related service provider service document using the private key, and transmit the pseudo user identification information and the signed service provider service document to the user terminal;

the service document transfer unit included in the user terminal is configured to transmit the signed related service provider service document to the service provider server;

the related service document transfer unit of the service provider server is configured to transmit the pseudo user identification information, the signed service provider service document, and the signed related service provider service document to the related service provider server;

the related user information request unit of the related service provider server is configured to transmit the pseudo user identification information, the signed service provider service document, and the signed related service provider service document to the user agent; and

the providing unit of the user agent is configured to:

verify the signature of the signed service provider service document using the public key associated with the pseudo user identification information;

in a case where the verification is successful, verify that identification information of the related service provider server is included in the signed service provider service document;

in a case where the verification is successful, verify the signature of the signed related service provider service document using the public key associated with the pseudo user identification information; and

in a case where the verification is successful, return the related service provider server permission to the related service provider server.

3 . The user information management system according to claim 1 , wherein the providing unit of the user agent is configured to acquire the service provider server permission from the registered user database, extract the service provider server permission into extracted user information corresponding to a user information type included in the signed service provider service document, and return the extracted user information to the service provider server.

4 . The user information management system according to claim 1 , wherein the user information provision request unit of the user terminal is configured to display a provision user information confirmation screen including at least one of previously provided user information already provided to the service provider server, new user information to be provided to the service provider server, related user information already provided to the related service provider server, and related user information to be provided to the related service provider server, and acquire the service provider server permission.

5 . A user agent of an information management system including a user terminal used by a user, the user agent, and a service provider server, the user agent comprising:

a storage configured to store a registered user database in which user identification information of the user and user information of the user are stored in association with each other, and a provided user information database in which the service provider server and provided user information that was provided to the service provider server are stored in association with each other;

a user information providing destination search unit, implemented using one or more computing devices, configured to:

receive a request from the user terminal with a service provider service document including identification information of the service provider server and a user information type requested by the service provider server; and

transmit a first set of user information of the user of the user terminal already provided to the service provider server and a second set of user information of the user corresponding to the user information type to the user terminal;

a user information access right approval unit, implemented using one or more computing devices, configured to:

receive service provider server permission indicating a portion of the user information to be provided to the service provider server;

generate pseudo user identification information that identifies the user in the service provider server and a pair of a private key and a public key associated with the pseudo user identification information;

generate a signed service provider service document obtained by adding a signature to the service provider service document using the private key; and

transmit the pseudo user identification information and the signed service provider service document to the user terminal; and

a user information providing unit, implemented using one or more computing devices, configured to:

verify a signature of the signed service provider service document obtained from the user terminal and transmitted by the service provider server using a public key associated with the pseudo user identification information; and

return the service provider server provision permission user information to the service provider server in a case where the verification is successful.

6 . A non-transitory computer recording medium storing a program, wherein execution of the program causes one or more computers to perform operations comprising:

storing, in a storage, a registered user database in which user identification information of a user and user information of the user are stored in association with each other, and a provided user information database in which a service provider server and provided user information that was provided to the service provider server are stored in association with each other, and

receiving a request from a user terminal with a service provider service document including identification information of the service provider server and a user information type requested by the service provider server;

transmitting a first set of user information of the user of the user terminal already provided to the service provider server and a second set of user information of the user corresponding to the user information type to the user terminal;

receiving service provider server permission indicating a portion of the user information to be provided to the service provider server;

generating pseudo user identification information that identifies the user in the service provider server and a pair of a private key and a public key associated with the pseudo user identification information;

generating a signed service provider service document obtained by adding a signature to the service provider service document using the private key;

transmitting the pseudo user identification information and the signed service provider service document to the user terminal;

verifying the signature of the signed service provider service document obtained from the user terminal and transmitted by the service provider server using the public key associated with the pseudo user identification information; and

returning the service provider server permission to the service provider server in a case where the verification is successful.

Assignments (2)

Continuity (1)

References Cited (20)