INFORMATION PROCESSING APPARATUS, DATA RETURNING METHOD AND STORAGE MEDIUM

According to one embodiment, an information processing apparatus provides a data storage service via a network for storing data of a user. The apparatus includes a recipient setting module and an account issuing module. The recipient setting module is configured to accept and set a recipient of data and recipient-receivable data, designated by the user. The account issuing module is configured to issue an account to the recipient set by the recipient setting module. The account has an access right for enabling the recipient to access the recipient-receivable data.

DETAILED DESCRIPTION

In general, according to one embodiment, an information processing apparatus provides a data storage service via a network for storing data of a user. The apparatus includes a recipient setting module and an account issuing module. The recipient setting module is configured to accept and set a recipient of data and recipient-receivable data, designated by the user. The account issuing module is configured to issue an account to the recipient set by the recipient setting module. The account has an access right for enabling the recipient to access the recipient-receivable data.

FIG. 1is an exemplary block diagram illustrating a function of an information processing apparatus1according to an embodiment. The information processing apparatus1is a computer used as a server configured to provide, through the Internet2, data storage services for storing user data.FIG. 1shows a function included in those of the server configured to provide data storage services, and associated with data returned when a date holder has died.

As shown inFIG. 1, the information processing apparatus1includes a recipient information storing module101configured to store information associated with a target (a person or an artificial person) designated as a recipient by a user, a user data storing module102configured to store information associated with data stored in this service, an account information storing module103configured to manage information on the accounts who can access the service, and a network communication module104that communicates with, for example, a user or a recipient (or an electronic device used by the user or recipient) through the Internet2.

The information processing apparatus1further includes a recipient setting module110configured to set a target to which data held by a user is returned when the user has died, a recipient identification module120configured to identify whether the target accessed the service is the person who was set as the recipient, an account issuing module130configured to set an account for accessing the service, and a data list generating module140configured to generate a list of data held by a user based on user's setting, and return the list to the recipient designated by the user.

The recipient setting module110includes a recipient designating module111configured to designate a recipient of the held data, a return data designating module112configured to designate data returned to a target designated as the recipient, a message transmitting module113configured to transmit, to the target, a confirmation message for confirming whether the target designated as the recipient is a genuine recipient, an agreement message receiving module114configured to receive an agreement message from the recipient target, and a recipient information registering module115configured to register information associated with the recipient in the recipient information storing module101.

The identification module120includes a recipient identification information receiving module121configured to receive identification information from the recipient, and an identification information analysis module122configured to analyze the identification information received from the recipient and correlate it with the registered information.

The account issuing module130includes an account registering module131configured to register an account appropriately set, in the account information storing module103, for the recipient for enabling the recipient to access the service, and an account issue informing module132configured to inform the recipient that an account has been issued.

The data return flow of the service when a data holder (user) has died basically includes data transfer setting processing performed as pre-processing at the time of death, and data transfer processing performed to return data when the user has died. Referring first toFIG. 2,FIG. 3,FIG. 4,FIG. 5,FIG. 6andFIG. 7, a description will be given of the outline of the data transfer setting processing at the time of death, and referring then toFIG. 8,FIG. 9andFIG. 10, a description will be given of the outline of the data transfer processing at the time of death.(a) Data transfer setting processing at the time of death

As shown inFIG. 2, the data transfer setting processing at the time of death includes two pre-registrations of recipient registration ((A) ofFIG. 2) and return data designation ((B) ofFIG. 2).

In the recipient registration, firstly, a user designates a recipient upon user's death (a1ofFIG. 2).FIG. 3shows an example of a screen supplied from the information processing apparatus1as a server for providing this service to a user to enable the user to accept recipient designation at the time of user's death. This screen is provided as, for example, a web page, and displayed by a browser that operates in an electronic device used by the user. The same can be said of other screens provided to the user or recipient in the service. On the screen, the user inputs a mail address assigned to a person designated as the recipient, and transmits the resultant data to the information processing apparatus1.

Upon accepting this designation, the information processing apparatus1generates information used to register the designated person as the recipient, and presents it to the user.FIG. 4shows an example of the screen provided to the user to present the information used to register the recipient. The value “1414-1356” shown in column “INVITATION CODE” on the screen ofFIG. 4is the information generated as the information used to register the recipient and presented to the user. By operating the “OK” button on the screen, the user informs the information processing apparatus1that the value “1414-1356” is received.

The user transmits the value “1414-1356” to the person designated as the recipient by some means. Upon receiving, from the user, a message that the value “1414-1356” has been informed of, the information processing apparatus1informs the person that they /have been designated as the recipient by the user (a2ofFIG. 2) by transmitting email to the mail address accepted through the screen shown in, for example,FIG. 3.

The email transmitted to the person designated as the recipient contains a uniform resource locator (URL). If the person consents to be the recipient, they express their will by using this URL (a3ofFIG. 2).FIG. 5shows an example of a screen to be provided to the person designated as the recipient, in order to enable them to express their will.

In the screen shown inFIG. 5, the recipient inputs the information transferred from the user, i.e., the value “1414-1356”, through a column “INVITATION CODE”, inputs the user's name through a column “NAME”, inputs their password through columns “PASSWORD” and “VERIFY PASSWORD”, and then operates an “OK” button, thereby transmitting these input information items to the information processing apparatus1. Upon receiving the information items, the information processing apparatus1specifies, from the value “1414-1356”, which user designated the recipient, and registers the received data as recipient information (a4ofFIG. 2).

Further, in the return data registration, the user designates data to be transferred to the recipient upon user's death (b1ofFIG. 2). The user can designate a plurality of recipients, and can designate return data for each recipient. Firstly, the user operates a command button “Recipient Setting” provided on the upper end of the screen to select a recipient as a destination of return data, as is shown inFIG. 6. In the example ofFIG. 6, “Patrik”, “William”, “Diana”, “Worf” and “Geordi” are designated as recipients, and “Patrik” is selected. Further, if an item [NEW] is selected and then the “OK” button is operated, the screen shown inFIG. 3is displayed to enable designation of a new recipient.

For instance, if “Patrik” is selected and then the “OK” button is operated, such a screen as shown in, for example,FIG. 7is displayed to enable data returned to Patrik to be designated. As shown inFIG. 7, firstly, the user can designate the data to be returned to the recipient selected inFIG. 6. Secondly, the user can designate whether only reading is allowed for each designated data item, or deletion is also allowed for it. A default indicates the allowance of only reading. If a “Delete” column is checked, deletion is also allowed. The information processing apparatus1stores the content designated throughFIG. 6andFIG. 7(b2ofFIG. 2).

The above is the outline of data transfer setting processing at the time of death.(b) Data transfer processing at the time of death

In the data transfer processing at the time of death, as shown inFIG. 8, firstly, the recipient transmits recipient information for this service (c1ofFIG. 8).FIG. 9is an exemplary view illustrating an example of a screen provided by the information processing apparatus1for enabling uploading of an identification paper as recipient information.

In the screen shown inFIG. 9, the recipient inputs, in a column “Certification file”, an image file obtained by scanning a user death certificate, and an image file obtained by scanning a recipient's identification document. Further, the recipient inputs their name, phone number, birthday, etc. (as additional information for identifying the recipient themselves). After inputting these data items, the recipient operates an “upload” button to transmit them to the information processing apparatus1.

The information processing apparatus1executes confirmation operation of the recipient information received from the recipient (c2ofFIG. 8). For instance, the apparatus performs image recognition processing on the image file corresponding to the user death certificate to thereby identify the user, and accesses the Resident Register network shown inFIG. 1through the Internet2, thereby verifying the user death certificate. Verification of a death certificate utilizing the Resident Register network is merely an example and is not indispensable. The information processing apparatus1performs image recognition processing on, for example, the image file corresponding to the recipient identification document to confirm that the recipient is a genuine one designated by the user, also utilizing the additional information.

After confirming that the recipient satisfies the conditions for receiving returned data due to the death of the user, and that the recipient is a genuine one designated by the user, the information processing apparatus1issues an account for data access to the recipient (c3and c4ofFIG. 8). Using the issued account, the recipient accesses the system (c5ofFIG. 8). The information processing apparatus1acquires the data designated to return (c6ofFIG. 8) and returns it to the recipient (c7ofFIG. 8).

As mentioned above, regarding the returned data, the recipient is basically allowed to read (d1), and may be allowed to delete (d2) if the user allowed deletion. However, updating and addition are totally unallowable (d3).

Referring then toFIG. 11andFIG. 12, a detailed description will be given of the flow of data return performed in the service when a data holder has died.FIG. 11is an exemplary flowchart illustrating a flow of data transfer setting processing at the time of death, included in the data storage services.FIG. 12is an exemplary flowchart illustrating a flow of data transfer processing at the time of death.

In the flow of data transfer setting processing at the time of death shown inFIG. 11, processing is basically performed to the recipient setting module110. The user designates, to the recipient designating module111, the person(s) to whom the data stored in the storage services should be returned (block A1). In this designation, a mail address, for example, is designated as information that can be sent from the information processing apparatus1to a recipient. After designating the recipient, the user designates, to the return data designating module112, which data in their stored data items should be returned to the designated recipient (block A2). After the return data is designated, the message transmitting module113transmits, through the network communication module104and the Internet2, a message that you are designated as a recipient to the person designated by the recipient designating module111(block A3).

From this message, the target designated as the recipient knows that they are designated as the same. If the target agrees to becoming a recipient (Yes in block A4), they register, to the agreement message receiving module114, information indicative of agreement and recipient information by a preset method described in the transmitted message (block A5). As the method for realizing the agreement message receiving module114, return of a message, for example, is possible, as well as the above-mentioned method of guiding an agreement message to, for example, a browser, using a predetermined URL embedded in the message, and then permitting the message to be registered. If a recipient rejects or neglects a message (No in block A4), recipient designation processing is re-executed, beginning with the first block of the flow.

When the recipient registers the information to the agreement message receiving module114, the recipient information registering module115records, in the recipient information storing module101, the information on the recipient designated at the recipient designating module111, and the information recorded by the recipient, and also records, in the user data storing module102, the information on the return data designated at the return data designating module112.

In contrast, in the data transfer processing at the time of death shown inFIG. 12, after confirming the information indicating the death of the user who has data, the recipient accesses the recipient identification module120for proving that the recipient is a genuine one designated by the user.

The recipient transmits the identification information to the recipient identification information receiving module121(block B1). The recipient identification module120transmits the received identification information of the recipient to the identification information analysis module122. The identification information analysis module122compares the information stored in the recipient information storing module101with the identification information transmitted by the recipient (block B2). If these information items match each other (Yes in block B3), The identification information analysis module122sends information indicating that identification is finished to the account issuing module130. In contrast, if they do not match each other (No in block33), it is determined that identification processing has failed to thereby terminate the flow.

As described above, the identification information preferably contains information used to prove the death of the user, as well as the information indicating that the recipient is a genuine one. The identification information analysis module122accesses, for example, the Resident Register network shown inFIG. 1through the network communication module104and the Internet2, to verify the information transmitted from the recipient for proving the death of the user.

Upon receiving the information indicating the completion of the identification processing, the account issuing module130stores, in the account information storing module103, account information that enables the recipient to access the data registered as return data by the user who designated the recipient (block B4). This account is issued as a limited account that basically allows reading of designated data, but does not allow changes, such as addition, updating and deletion, in the data held by the user. Only when deletion of data is exceptionally designated by the user, an account allowing deletion of data is issued.

The account issue informing module132transmits a message indicating issuing of an account to a contact address registered in association with the recipient (block B5). The recipient accesses services using the issued account (block B6). To the recipient having accessed the services, the data list generating module140presents a list of return data items for the recipients stored in the user data storing module102. The recipient can read data items presented by the data list generating module140(block B7).

The process of returning data to the recipient when the user using the data storage services has died is finished by the above procedure.

By the above-described process of designating a recipient, the data held on a cloud (Internet2) can be returned to the recipient (third person) designated by a user, regardless of the content of the data, and can be prevented from being accessed by those other than the designated recipient.

Further, the data to be returned can also be designated by the user, which enables return of each of a large number of data items to be designated.

In addition, the above-described account issuing and identification mechanisms enable system managers to detach from data transmission and reception, with the result that leakage of data on the management side can be avoided.

Furthermore, most data used in the services, other than that returned to recipients, can be prevented from being accessed.

The recipient designation and return data designation at the recipient setting module110are not limited to the above-described order of processing. The procedure may be modified such that after a recipient is designated, return data is designated at appropriate timing in a step different from the recipient designation step.

Alternatively, no return data may be designated, and all data held by a user be returned.

Yet alternatively, the recipient identification module120may employ an identification method using a telephone or mail by a system provider, instead of transfer of identification information by the information processing apparatus1.

Further, since the account is limited only to data reading by the above-described recipient designation and account issuing mechanisms, the data held by a user can be prevented from alteration, whereby a plurality of recipients can be designated during recipient designation, and different groups of data can be returned to different recipients.

Moreover, the operation control processing of the embodiment is free from, for example, report means at the time of death, and therefore a recipient can perform a data return procedure at an arbitrary timing after the death of a data holder within an allowable range of services.

As described above, the information processing apparatus1of the embodiment can appropriately perform data return that is included in data storage services and is to be performed when a data holder has died.