Embodiments described herein relate generally to an information processing technique suitable for information processing apparatuses used as servers that provide various services through, for example, the Internet.
Various services have recently been offered via the Internet. For instance, a service called, for example, a storage service lends a space for storing data. If this service is used, it becomes unnecessary to, for example, further buy a storage device in accordance with an increase in data to hold. Further, if a user is in an Internet-connectable environment, data reading and storing is possible even when, for example, they are out or moving. In addition, data can be transferred to someone if a data access right is imparted to them.
Recently, not only business enterprises but also individuals have come to draw increasing attention to data security, and therefore it is considered that there is an increasing need for data storage services, like rental safes for important papers, that enable general users to store data without anxiety.
However, in such storage services as merely lending spaces for storing data, user themselves cannot designate, before their death, how to handle data in detail after they die, as in a written will which settles, for example, that data X is returned to a recipient A and data Y is returned to a recipient B.
A general architecture that implements the various features of the embodiments will now be described with reference to the drawings. The drawings and the associated descriptions are provided to illustrate the embodiments and not to limit the scope of the invention.
Various embodiments will be described hereinafter with reference to the accompanying drawings.
In general, according to one embodiment, an information processing apparatus provides a data storage service via a network for storing data of a user. The apparatus includes a recipient setting module and an account issuing module. The recipient setting module is configured to accept and set a recipient of data and recipient-receivable data, designated by the user. The account issuing module is configured to issue an account to the recipient set by the recipient setting module. The account has an access right for enabling the recipient to access the recipient-receivable data.
As shown in
The information processing apparatus 1 further includes a recipient setting module 110 configured to set a target to which data held by a user is returned when the user has died, a recipient identification module 120 configured to identify whether the target accessed the service is the person who was set as the recipient, an account issuing module 130 configured to set an account for accessing the service, and a data list generating module 140 configured to generate a list of data held by a user based on user's setting, and return the list to the recipient designated by the user.
The recipient setting module 110 includes a recipient designating module 111 configured to designate a recipient of the held data, a return data designating module 112 configured to designate data returned to a target designated as the recipient, a message transmitting module 113 configured to transmit, to the target, a confirmation message for confirming whether the target designated as the recipient is a genuine recipient, an agreement message receiving module 114 configured to receive an agreement message from the recipient target, and a recipient information registering module 115 configured to register information associated with the recipient in the recipient information storing module 101.
The identification module 120 includes a recipient identification information receiving module 121 configured to receive identification information from the recipient, and an identification information analysis module 122 configured to analyze the identification information received from the recipient and correlate it with the registered information.
The account issuing module 130 includes an account registering module 131 configured to register an account appropriately set, in the account information storing module 103, for the recipient for enabling the recipient to access the service, and an account issue informing module 132 configured to inform the recipient that an account has been issued.
The data return flow of the service when a data holder (user) has died basically includes data transfer setting processing performed as pre-processing at the time of death, and data transfer processing performed to return data when the user has died. Referring first to
As shown in
In the recipient registration, firstly, a user designates a recipient upon user's death (a1 of
Upon accepting this designation, the information processing apparatus 1 generates information used to register the designated person as the recipient, and presents it to the user.
The user transmits the value “1414-1356” to the person designated as the recipient by some means. Upon receiving, from the user, a message that the value “1414-1356” has been informed of, the information processing apparatus 1 informs the person that they /have been designated as the recipient by the user (a2 of
The email transmitted to the person designated as the recipient contains a uniform resource locator (URL). If the person consents to be the recipient, they express their will by using this URL (a3 of
In the screen shown in
Further, in the return data registration, the user designates data to be transferred to the recipient upon user's death (b1 of
For instance, if “Patrik” is selected and then the “OK” button is operated, such a screen as shown in, for example,
The above is the outline of data transfer setting processing at the time of death.
In the data transfer processing at the time of death, as shown in
In the screen shown in
The information processing apparatus 1 executes confirmation operation of the recipient information received from the recipient (c2 of
After confirming that the recipient satisfies the conditions for receiving returned data due to the death of the user, and that the recipient is a genuine one designated by the user, the information processing apparatus 1 issues an account for data access to the recipient (c3 and c4 of
As mentioned above, regarding the returned data, the recipient is basically allowed to read (d1), and may be allowed to delete (d2) if the user allowed deletion. However, updating and addition are totally unallowable (d3).
Referring then to
In the flow of data transfer setting processing at the time of death shown in
From this message, the target designated as the recipient knows that they are designated as the same. If the target agrees to becoming a recipient (Yes in block A4), they register, to the agreement message receiving module 114, information indicative of agreement and recipient information by a preset method described in the transmitted message (block A5). As the method for realizing the agreement message receiving module 114, return of a message, for example, is possible, as well as the above-mentioned method of guiding an agreement message to, for example, a browser, using a predetermined URL embedded in the message, and then permitting the message to be registered. If a recipient rejects or neglects a message (No in block A4), recipient designation processing is re-executed, beginning with the first block of the flow.
When the recipient registers the information to the agreement message receiving module 114, the recipient information registering module 115 records, in the recipient information storing module 101, the information on the recipient designated at the recipient designating module 111, and the information recorded by the recipient, and also records, in the user data storing module 102, the information on the return data designated at the return data designating module 112.
In contrast, in the data transfer processing at the time of death shown in
The recipient transmits the identification information to the recipient identification information receiving module 121 (block B1). The recipient identification module 120 transmits the received identification information of the recipient to the identification information analysis module 122. The identification information analysis module 122 compares the information stored in the recipient information storing module 101 with the identification information transmitted by the recipient (block B2). If these information items match each other (Yes in block B3), The identification information analysis module 122 sends information indicating that identification is finished to the account issuing module 130. In contrast, if they do not match each other (No in block 33), it is determined that identification processing has failed to thereby terminate the flow.
As described above, the identification information preferably contains information used to prove the death of the user, as well as the information indicating that the recipient is a genuine one. The identification information analysis module 122 accesses, for example, the Resident Register network shown in
Upon receiving the information indicating the completion of the identification processing, the account issuing module 130 stores, in the account information storing module 103, account information that enables the recipient to access the data registered as return data by the user who designated the recipient (block B4). This account is issued as a limited account that basically allows reading of designated data, but does not allow changes, such as addition, updating and deletion, in the data held by the user. Only when deletion of data is exceptionally designated by the user, an account allowing deletion of data is issued.
The account issue informing module 132 transmits a message indicating issuing of an account to a contact address registered in association with the recipient (block B5). The recipient accesses services using the issued account (block B6). To the recipient having accessed the services, the data list generating module 140 presents a list of return data items for the recipients stored in the user data storing module 102. The recipient can read data items presented by the data list generating module 140 (block B7).
The process of returning data to the recipient when the user using the data storage services has died is finished by the above procedure.
By the above-described process of designating a recipient, the data held on a cloud (Internet 2) can be returned to the recipient (third person) designated by a user, regardless of the content of the data, and can be prevented from being accessed by those other than the designated recipient.
Further, the data to be returned can also be designated by the user, which enables return of each of a large number of data items to be designated.
In addition, the above-described account issuing and identification mechanisms enable system managers to detach from data transmission and reception, with the result that leakage of data on the management side can be avoided.
Furthermore, most data used in the services, other than that returned to recipients, can be prevented from being accessed.
The recipient designation and return data designation at the recipient setting module 110 are not limited to the above-described order of processing. The procedure may be modified such that after a recipient is designated, return data is designated at appropriate timing in a step different from the recipient designation step.
Alternatively, no return data may be designated, and all data held by a user be returned.
Yet alternatively, the recipient identification module 120 may employ an identification method using a telephone or mail by a system provider, instead of transfer of identification information by the information processing apparatus 1.
Further, since the account is limited only to data reading by the above-described recipient designation and account issuing mechanisms, the data held by a user can be prevented from alteration, whereby a plurality of recipients can be designated during recipient designation, and different groups of data can be returned to different recipients.
Moreover, the operation control processing of the embodiment is free from, for example, report means at the time of death, and therefore a recipient can perform a data return procedure at an arbitrary timing after the death of a data holder within an allowable range of services.
As described above, the information processing apparatus 1 of the embodiment can appropriately perform data return that is included in data storage services and is to be performed when a data holder has died.
The various modules of the systems described herein can be implemented as software applications, hardware and/or software modules, or components on one or more computers, such as servers. While the various modules are illustrated separately, they may share some or all of the same underlying logic or code.
While certain embodiments have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the inventions. Indeed, the novel embodiments described herein may be embodied in a variety of other forms; furthermore, various omissions, substitutions and changes in the form of the embodiments described herein may be made without departing from the spirit of the inventions. The accompanying claims and their equivalents are intended to cover such forms or modifications as would fall within the scope and spirit of the inventions.
Number | Date | Country | Kind |
---|---|---|---|
2012-216295 | Sep 2012 | JP | national |
This application is a Continuation Application of PCT Application No. PCT/JP2013/052387, filed Feb. 1, 2013 and based upon and claiming the benefit of priority from Japanese Patent Application No. 2012-216295, filed Sep. 28, 2012, the entire contents of all of which are incorporated herein by reference.
Number | Date | Country | |
---|---|---|---|
Parent | PCT/JP2013/052387 | Feb 2013 | US |
Child | 14012708 | US |