Personal information management apparatus and personal information management method

A personal information management method comprising:

• a personal information storing step of allowing an information providing server to store personal information of users including shared secret information in a database;
• a personal information utilization permission request message transmitting step of allowing an information utilization server to transmit a personal information utilization permission request message to a user terminal;
• a personal information request message transmitting step of allowing the information utilization server to receive a personal information utilization permission message, which includes a hash value of shared secret information of a corresponding user and a time value and the time value used at the time of generating the hash value, from the user terminal, and to link with the information providing server to transmit a personal information request message for the corresponding user including the hash value and the time value to the information providing server;
• a request message determining step of allowing the information providing server to determine whether the received personal information request message is authorized or not;
• and
• a personal information transmitting step of allowing the information providing server to transmit personal information of the user corresponding to the personal information request message to the information utilization server, when it is determined that the personal information request message is authorized in the request message determining step.

A personal information management method comprising:

• a storing step of allowing a registration module unit to store personal information of users including shared secret information in a database;
• a determining step of allowing an access module unit to determine whether a personal information request message, which includes a hash value hashed by shared secret information and a time value and the time value used at the time of generating the hash value and is transmitted from an information utilization server, is authorized or not;
• and
• a transmitting step of allowing the access module unit to read out personal information corresponding to the personal information request message from the database and transmit the personal information to the information utilization sever, when it is determined that the personal information request message is authorized in the determining step.

A personal information management method comprising:

• a storing step of allowing a registration module unit to store link information used to link with an information providing server in a storage unit;
• a message transmitting step of allowing an access module unit to receive a personal information utilization permission message, which includes a hash value hashed by shared secret information of a corresponding user and a time value and the time value used at the time of generating the hash value, from a user terminal, and to link with the information providing server on the basis of the link information of the storage unit to transmit a personal information request message for the corresponding user including the hash value and the time value to the information providing server;
• and
• a receiving step of allowing the access module unit to receive personal information of the corresponding user transmitted from the information providing server on the basis of the personal information request message.