JP6366037B2 - Account aggregation system, program and account aggregation server - Google Patents

Description

  The present invention relates to a user terminal device that accesses a service providing server using an electronic certificate.

  Conventionally, a service called account aggregation has been provided. FIG. 3 is a diagram showing a schematic configuration of a conventional account aggregation system. This account aggregation system includes, for example, an account aggregation server 1, a first user terminal device 3, and a bank server 5. Alternatively, the second user terminal device 7 may be used.

  The account aggregation server 1 logs in to the bank server 5 instead of the first user terminal device 3. Then, the user's financial data is acquired from the bank server 5, converted into an appropriate data format by the data processing unit 1b, and stored in the database 1a.

  Thereafter, the first user terminal device 3 can receive user input from the input unit 3 a and access the account aggregation server 1. Further, the second user terminal device 7 can also access the account aggregation server 1. The first user terminal device 3 and the second user terminal device 7 can acquire and browse user data stored in the database 1a by appropriately logging in.

  Patent Document 1 discloses a technique for centrally managing passwords for starting a plurality of types of business systems. In this technique, when the user identification is completed, the password data stored in the password management database is substituted for the password field of the business system selected by the user, and the business system is activated. After that, even if the user shifts to another business system, the password is automatically entered instead, and the business system corresponding to the user's selection is activated.

  According to such a technology, for example, a user who logs in to a plurality of service providing servers such as a bank server or an electronic commerce server registers each user ID and password in a server that provides an account aggregation service. Thus, it becomes possible to log in to the target server with only the ID and password for logging in to the server that provides the account aggregation service. This frees the user from the hassle of managing multiple user IDs and passwords.

Japanese Patent Laid-Open No. 2000-259566

  However, in the conventional account aggregation system, it is not possible to deal with a service in which an electronic certificate is acquired in advance and login is possible only by a user terminal device having the electronic certificate. For example, when receiving a bank service for a corporation, an electronic certificate is essential when logging into the server. The user cannot log in without accessing the bank server from the user terminal device having the electronic certificate. In the conventional account aggregation system shown in FIG. 3, since the first user terminal device 3 has an electronic certificate and the account aggregation server 1 does not have an electronic certificate, the account aggregation server 1 to the bank server 5 cannot be accessed. As a result, the account aggregation server 1 cannot acquire the user's financial data, and the second user terminal device 7 cannot acquire or view the user's financial data.

  The present invention has been made in view of such circumstances, and provides an account aggregation system, a program, and an account aggregation server that can execute account aggregation even in a service that requires an electronic certificate. Objective.

  (1) In order to achieve the above object, the present invention takes the following measures. That is, the account aggregation system of the present invention is an account aggregation system including a first user terminal device and an account aggregation server that access a service providing server using an electronic certificate, and the first user terminal device. A process of receiving a command to access the service providing server from the account aggregation server, a process of accessing the service providing server using an electronic certificate acquired in advance from the service providing server, A program unit that executes a series of processes of acquiring service data from a service providing server, and transmitting the acquired service data to the account aggregation server, the account aggregation The server gives a command to the first user terminal device to access the service providing server, while all or part of the service data acquired from the first user terminal device is transferred to the first user terminal device. To the user terminal device or the second user terminal device.

  As described above, the first user terminal device receives a command indicating that the service providing server should be accessed from the account aggregation server, and accesses the service providing server using the electronic certificate obtained in advance from the service providing server. Since the service data is acquired from the service providing server and the acquired service data is transmitted to the account aggregation server, the service data can be transferred to the account aggregation server even in a service that requires an electronic certificate. Further, the account aggregation server provides all or part of the service data acquired from the first user terminal device to the first user terminal device or the second user terminal device. It is possible to browse all or part of the service data also in the user terminal device 2. This makes it possible to perform account aggregation even in a service that requires an electronic certificate.

  (2) In the account aggregation system of the present invention, the account aggregation server and the first user terminal device perform encrypted communication.

  Thus, since the account aggregation server and the first user terminal device perform encrypted communication, it is possible to maintain high security.

  (3) The program of the present invention is a program of a first user terminal device that accesses a service providing server using an electronic certificate, and that the service providing server should be accessed from the account aggregation server. A process for receiving the command, a process for accessing the service providing server using an electronic certificate obtained in advance from the service providing server, a process for obtaining service data from the service providing server, and the acquired service data Is transmitted to the account aggregation server, and a series of processes are executed.

  In this way, a command to access the service providing server is received from the account aggregation server, the service providing server is accessed using the electronic certificate acquired in advance from the service providing server, and the service data is received from the service providing server. Since the acquired service data is transmitted to the account aggregation server, the service data can be transferred to the account aggregation server even in a service that requires an electronic certificate. This makes it possible to perform account aggregation even in a service that requires an electronic certificate.

  (4) Further, the account aggregation server of the present invention is an account aggregation server that executes account aggregation, and the service providing server with respect to the first user terminal device that accesses the service providing server using an electronic certificate. Is provided with a command indicating that access is to be made, while providing all or part of the service data received from the first user terminal device to the first user terminal device or the second user terminal device. And

  Thus, while giving a command to the first user terminal device to access the service providing server, all or part of the service data received from the first user terminal device is transferred to the first user terminal device. Since it is provided to the device or the second user terminal device, it is possible to view all or part of the service data even in the second user terminal device that does not have an electronic certificate. This makes it possible to perform account aggregation even in a service that requires an electronic certificate.

  According to the present invention, it is possible to transfer service data to an account aggregation server even in a service that requires an electronic certificate. In addition, the second user terminal device that does not have an electronic certificate can browse all or part of the service data. This makes it possible to perform account aggregation even in a service that requires an electronic certificate.

It is a figure which shows schematic structure of the account aggregation system which concerns on this embodiment. It is a sequence chart which shows operation | movement of the account aggregation system which concerns on this embodiment. It is a figure which shows schematic structure of the conventional account aggregation system.

  The present inventors have focused on the fact that in a conventional account aggregation system, an electronic certificate is acquired in advance, and a service that can only be logged in by a user terminal device having the electronic certificate can be handled. After performing login using a certificate, the obtained service data is transferred to an account aggregation server, thereby ensuring strict identity authentication with an electronic certificate and performing account aggregation. It came to do.

  That is, the account aggregation system of the present invention is an account aggregation system including a first user terminal device and an account aggregation server that access a service providing server using an electronic certificate, and the first user terminal device. A process of receiving a command to access the service providing server from the account aggregation server, a process of accessing the service providing server using an electronic certificate acquired in advance from the service providing server, A program unit that executes a series of processes of acquiring service data from a service providing server, and transmitting the acquired service data to the account aggregation server, the account aggregation The server gives a command to the first user terminal device to access the service providing server, while all or part of the service data acquired from the first user terminal device is transferred to the first user terminal device. Provided to the user terminal device or the second user terminal device.

  As a result, the present inventors have made it possible to execute account aggregation even in a service that requires an electronic certificate. Embodiments of the present invention will be specifically described below with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of an account aggregation system according to the present embodiment. This account aggregation system includes an account aggregation server 1, a first user terminal device 3, and a bank server 5. Alternatively, the second user terminal device 7 may be used. The account aggregation server 1 includes a database 1a that stores the service data of the user acquired from the bank server 5 after processing in the data processing unit 1b. The data processing unit 1b has a function of analyzing service data acquired from the bank server 5, extracting financial data, and storing the data in the database 1a.

  When the proxy application 3b in the first user terminal device 3 receives the command from the account aggregation server 1, the proxy application 3b accesses the bank server 5 using the electronic certificate 3c. When the service data is acquired from the bank server 5, the acquired service data is transferred to the account aggregation server 1.

  The bank server 5 provides data related to so-called bank services. In order to log in to the bank server 5, an electronic certificate must be acquired in advance. In this embodiment, the bank server 5 is described as an example of the service providing server. However, the present invention is not limited to this, and there may be a plurality of service providing servers.

  The second user terminal device 7 is, for example, a smartphone or a mobile phone. The second user terminal device 7 can access the account aggregation server 1 and can acquire and view data such as financial data, for example.

  In the account aggregation system configured as described above, the proxy application 3b does not have a function to determine itself, but has only a function that operates according to the received command. For this reason, the proxy application 3b does not intentionally request financial data from the bank server by its own judgment. When the account aggregation server 1 issues a command to the proxy application 3b, the proxy application 3b acquires service data from the bank server, and transfers (transverses) it to the account aggregation server 1. The account aggregation server 1 analyzes the service data transferred from the proxy application 3b in the data processing unit 1b, and confirms the location of the financial data. Then, the next command is issued to the proxy application 3b in order to obtain the next necessary information. By repeating this operation, the data constituting the financial data is accumulated in the database 1a of the account aggregation server 1. Next, the operation of the account aggregation system according to the present embodiment will be described with reference to FIG.

  FIG. 2 is a sequence chart showing the operation of the account aggregation system according to the present embodiment. The account aggregation server 1 issues a command to the proxy application 3b of the first user terminal device 3 (step S1).

  Next, the proxy application 3b of the first user terminal device 3 accesses the site of the bank server 5 using the electronic certificate 3c (step S2) and acquires service data (step S3). Next, the proxy application 3b of the first user terminal device 3 transfers the service data acquired from the bank server 5 to the account aggregation server 1 (step S4). Next, the data processing unit 1b of the account aggregation server 1 performs data processing on the service data received from the proxy application 3b (step S5). That is, the data processing unit 1b analyzes service data and confirms, for example, financial data. The first user terminal device 3 and the account aggregation server 1 repeat the operations from step S1 to step S5 until the condition of the account aggregation server 1 is satisfied (step S6 to step S10).

  The data processing unit 1b of the account aggregation server 1 performs data processing on the service data received from the proxy application 3b (step S11). That is, the data processing unit 1b analyzes service data, extracts, for example, financial data, and stores it in the database 1a.

  Next, for example, the second user terminal device 7 such as a smartphone accesses the account aggregation server 1 and tries to request financial data of the user (step S12). In response to the access from the second user terminal device, the account aggregation server 1 makes a response to the request to the second user terminal device (step S13). Thereby, the second user terminal device 7 can browse the financial data of the user. Further, the first user terminal device 3 can receive a user input from the input unit 3a, access the account aggregation server 1, and browse the user's financial data and the like.

  As described above, according to the present embodiment, it is possible to transfer service data to the account aggregation server even in a service that requires an electronic certificate. Also, the second user terminal device that does not have an electronic certificate can browse all or part of financial data and the like included in the service data. This makes it possible to perform account aggregation even in a service that requires an electronic certificate.

1 Account Aggregation Server 1a Database 1b Data Processing Unit 3 First User Terminal Device 3a Input Unit 3b Proxy Application 3c Electronic Certificate 5 Bank Server 7 Second User Terminal Device

Claims (4)

An account aggregation system comprising a first user terminal device and an account aggregation server that logs in to a service providing server that cannot log in without an electronic certificate using a previously acquired electronic certificate,
The first user terminal device is:
A process of receiving a command indicating that service data should be obtained by logging in to the service providing server from the account aggregation server;
In response to the reception of the command, a process of logging in to the service providing server using an electronic certificate acquired in advance from the service providing server;
Processing for obtaining service data from the service providing server;
A program unit for executing a series of processes of transferring the acquired service data to the account aggregation server while holding the electronic certificate ;
The account aggregation server
The first user terminal device is given a command to log in to the service providing server to obtain service data, the service data transferred from the first user terminal device is analyzed, and then necessary while it accumulates the service data into the database by repeating to issue the following commands to determine the such information, all or part of the service data obtained from the first user terminal, the first user An account aggregation system, which is provided to a terminal device or a second user terminal device that has not acquired an electronic certificate.   The account aggregation system according to claim 1, wherein the account aggregation server and the first user terminal device perform encrypted communication. A program of a first user terminal device that logs in to a service providing server that cannot log in without an electronic certificate, using a previously acquired electronic certificate,
Manages the authentication information of the first user terminal, the log in to the service providing server provides a command to the effect that acquires service data, analyzes the service data transferred from the first user terminal , from the account aggregation server that accumulates service data into the database by repeating to issue the following commands to determine the next required information, to the effect that acquires service data by logging into the service providing server command Processing to receive
In response to the reception of the command, a process of logging in to the service providing server using an electronic certificate acquired in advance from the service providing server;
Processing for obtaining service data from the service providing server;
A program that executes a series of processes of transferring the acquired service data to the account aggregation server while holding the electronic certificate . An account aggregation server that performs account aggregation,
A command to log in to the service providing server and acquire service data for the first user terminal device logging in to the service providing server that cannot be logged in without an electronic certificate using a previously acquired electronic certificate the given, the first analyzes the service data transferred from the user terminal, then one you accumulate the service data into the database by repeating to issue the next command in order to obtain the necessary information, the An account aggregation characterized in that all or part of service data received from a first user terminal device is provided to the first user terminal device or a second user terminal device that has not acquired an electronic certificate. server.

Images