Information management system and information management method

Patent metadata

Field	Value
Publication number	US-11630914-B2
Application number	US-202117142527-A
Country	US
Kind code	B2
Filing date	Jan 6, 2021
Priority date	Jan 17, 2020
Publication date	Apr 18, 2023
Grant date	Apr 18, 2023

Abstract

In an information management system that manages encrypted personal information on a user stored in a storage device, a personal information appropriateness/inappropriateness determination section determines whether or not the personal information stored in the storage device is appropriate when access permission information is received from a user terminal used by the user, the access permission information instructing that a requesting entity requesting the personal information be permitted to access the personal information. A personal information access management section enables the requesting entity to access the personal information stored in the storage device when it is determined by the personal information appropriateness/inappropriateness determination section that the personal information stored in the storage device is appropriate.

First claim

What is claimed is:

1. An information management system that manages encrypted personal information on a user stored in a memory, comprising a CPU wherein the CPU:
when access permission information is received from a user terminal used by the user, the access permission information instructing that a requesting entity requesting the personal information be permitted to access the personal information, determines that the personal information stored in the memory is appropriate if an elapsed time from a time when the personal information is stored in the memory is within a predetermined time, and transmits, to the user terminal, appropriateness/inappropriateness confirmation information inquiring about appropriateness or inappropriateness of the personal information stored in the memory if the elapsed time from the time when the personal information is stored in the memory is longer than the predetermined time to determine whether or not the personal information stored in the memory is appropriate; and
enables the requesting entity to access the personal information stored in the memory when it is determined that the personal information stored in the memory is appropriate.

2. The information management system according to claim 1 , wherein the CPU enables the requesting entity to access the personal information stored in the memory, by transmitting a decryption key for decrypting the encrypted personal information to a requesting entity terminal used by the requesting entity.

3. The information management system according to claim 2 , wherein the CPU issues a token for using the decryption key and manages, by using a blockchain, the number of usages of the decryption key through the token.

4. The information management system according to claim 1 , wherein the CPU determines that the personal information stored in the memory is appropriate when response information notifying that the personal information stored in the memory is appropriate is received, the response information being transmitted from the user terminal in response to receipt of the appropriateness/inappropriateness confirmation information.

5. The information management system according to claim 1 , wherein the CPU manages, by using a blockchain, a history of access enabled, the access being of the requesting entity to the personal information stored in the memory.

6. An information management method performed by a CPU included in an information management system that manages encrypted personal information on a user stored in a memory, comprising:
a personal information appropriateness/inappropriateness determination step of, when access permission information is received from a user terminal used by the user, the access permission information instructing that a requesting entity requesting the personal information be permitted to access the personal information, determining that the personal information stored in the memory is appropriate if an elapsed time from a time when the personal information is stored in the memory is within a predetermined time, and transmitting, to the user terminal, appropriateness/inappropriateness confirmation information inquiring about appropriateness or inappropriateness of the personal information stored in the memory if the elapsed time from the time when the personal information is stored in the memory is longer than the predetermined time to determine whether or not the personal information stored in the memory is appropriate; and
a personal information access management step of enabling the requesting entity to access the personal information stored in the memory when it is determined in the personal information appropriateness/inappropriateness determination step that the personal information stored in the memory is appropriate.

Assignees

• Honda Motor Co Ltd

Inventors

• Nakajima Kei

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• G06F2221/2137

  Time limited access, e.g. to a computer or data · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title