JP2006185096A - Data protection program and data protection method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data protection program and a data protection method for data protection, in more details, for protecting tabular form data so that real data can be hidden from third persons. <P>SOLUTION: Key data where data whose value found out by a prescribed calculation expression becomes a specific value and data whose value is not the specific value are allowed to correspond to rows of tabular form data are prepared, and dummy data rows are inserted into the tabular form data where real data are arranged in accordance with the specific values of the key data. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to data protection, and more particularly to a data protection program and a data protection method for protecting tabular data so that actual data is hidden from a third party.

  In recent years, leaks of personal data from companies, misuse of leaked personal data, and damages associated therewith have become problems, and the Personal Information Protection Law is scheduled to come into effect from April 2005 as a law relating to these.

  On the other hand, there is a question of how to protect important and confidential data such as personal data. Conventionally, as a data protection method to conceal data stored in a computer from a third party, the access right is set to the computer where the data is stored to restrict the use of the computer itself or to a data file. When access is made, the access right is set and the use is restricted. There are also many methods for encrypting the data itself.

  Recently, with the widespread use of wireless LAN (Local Area Network), the use of the Internet has become popular, and data flowing on the network increases regardless of whether it is wireless or wired, and there are many opportunities for data to leak from the network. Furthermore, there is a concern that data may be watched during data processing in various scenes, and data stored in a storage medium may be lost.

  For this reason, data protection techniques are becoming increasingly important. In particular, there is a need for a method that can conceal actual data from a third party without being caught by conventional techniques, and proposals for these techniques have been made. .

For example, when transmitting encrypted data via a network, a method has been proposed in which dummy data is mixedly transmitted based on the appearance frequency of the data to be transmitted. This prevents a tendency from being inferred even if the encryption is not decrypted when there is a bias in the appearance frequency of characters and numbers included in the data, such as data transmission of electronic voting ( Patent Document 1).
JP 2004-260508 A

  As mentioned above, the leakage of personal data has become a social problem, and technology for data protection has become important. In particular, in recent years, it is assumed that data is handled in various situations, and a simple and low-cost data protection technique is required in addition to the conventional data protection countermeasure technique.

  Although data protection should be protected from various viewpoints, the present invention relates to tabular data protection, and even if data is accidentally passed to a third party, the use of the data is concealed by concealing the actual data. It proposes a data protection program and a data protection method for the purpose of not being able to do so. In particular, if the present invention is applied when storing data in a storage medium such as a floppy (registered trademark) or a disk, data protection is effective even if the data is taken out in some way, Is intended to be meaningless data.

The data protection program and the data protection method of the present invention are configured as follows.
(1) 1st invention 1st invention inserts a dummy data row in an actual data row based on key data created corresponding to each row of tabular data.

  FIG. 1 shows the principle of the first invention and comprises a key data creation procedure 10 and a dummy data row insertion procedure 20.

  The key data creation procedure 10 creates key data in which data having a specific value obtained by a predetermined calculation formula and data other than that are mixed and arranged corresponding to rows of tabular data. The predetermined calculation formula is a calculation formula based on a certain logic, for example, a hash function. In the key data, for example, data having a certain hash value obtained by a hash function and data other than the hash value are mixed and arranged. The key data is data that cannot be determined whether the data is a specific value or not. Further, the specific value is not limited to one value, and may be a plurality of values, or a certain range of values.

  In the dummy data row insertion procedure 20, the key data is a dummy value in the row of the tabular data corresponding to the key data depending on whether the value calculated by a predetermined formula is a specific value or not. Insert a data row. For example, if a dummy data row is inserted into a key data row having a specific value, the other rows become actual data rows. On the other hand, if a dummy data row is inserted into a row of key data that does not have a specific value, the row corresponding to the key data that has a specific value is an actual data row.

  According to the key data creation procedure 10 and the dummy data row insertion procedure 20 described above, tabular data in which dummy data rows are inserted into actual data can be created. By making the dummy data similar to the actual data, even if the third party looks at the tabular data, it is not easily determined that the dummy data is mixed, and the data is protected.

Identification of the dummy data row at the time of restoration of the tabular data is performed by calculating the key data with a predetermined calculation formula and determining whether or not the value has a specific value.
(2) Second invention In the second invention, a dummy data row in which a value calculated by a predetermined calculation formula becomes a specific value specific to each column is inserted into tabular data in which actual data is arranged. Is.

  FIG. 2 shows the principle of the second aspect of the invention and comprises a dummy data row insertion procedure 21. The dummy data row insertion procedure 21 is a procedure having the same name as the first invention, but the symbols are changed because the contents are different.

  In the dummy data row insertion procedure 21, dummy data in which values obtained by a predetermined calculation formula become specific specific values in each column are added to any one or more rows of tabular data in which actual data is arranged. Insert a row.

Discrimination of dummy data rows at the time of restoration of tabular data is calculated for each row of individual data with a predetermined formula, and each calculated value is identical to a specific value in each column of the dummy data. If so, it is identified as a dummy data row.
(3) Third invention In the third invention, one or more columns are provided corresponding to each column of tabular data, and a specific value obtained by calculating key data with a predetermined formula The position of the actual data is distributed based on the above.

  FIG. 3 shows the principle of the third aspect of the invention, and comprises a key data creation procedure 11, an actual data distribution procedure 50, and a dummy data insertion procedure 60.

  The key data creation procedure 11 creates key data by arranging data corresponding to a specific value when calculated by a predetermined calculation formula in correspondence with rows of tabular data.

  The actual data distribution procedure 50 creates one or more distributed columns for distributing the actual data corresponding to each column of the actual data of the tabular data. Then, the actual data of each row of the tabular data is arranged in a distributed column corresponding to the column of the actual data by a specific value obtained from the key data of the row equal to that row. For example, in the case of tabular data composed of two columns of actual data, two columns of distributed columns are used for the first column of actual data, and three columns of distributed columns are used for the second column of actual data. The actual data in the first row and the first column is arranged in one of the two corresponding distributed columns based on the specific value of the key data in the first row, and the actual data in the first row and the second column is the same one row. Based on a specific value of the key data of the eye, the arrangement is made in any of the corresponding three distributed columns. This is similarly performed on the actual data in each row.

  In the dummy data insertion procedure 60, dummy data is inserted into a distribution column where the actual data is arranged in the actual data distribution procedure 50 at a place other than where the actual data is arranged.

To identify the column position of the actual data at the time of restoration, the key data is calculated by a predetermined calculation formula, and the column position of each actual data in the row is identified from the value.
(4) Fourth invention The fourth invention replaces the column position of the actual data with respect to the actual data of the tabular data based on the value calculated by the predetermined calculation formula of the key data. This is because the method does not use dummy data as in the third invention.

  FIG. 4 shows the principle of the fourth aspect of the invention, and comprises a key data creation procedure 11 and an actual data replacement procedure 70.

  The key data creation procedure 11 has the same contents as in the third invention.

  The actual data replacement procedure 70 determines the column position where the individual actual data of each row is to be replaced based on the specific value obtained by calculating the key data for each row by a predetermined calculation formula, and the actual data at that column position. To move.

For identifying the column position of the actual data when restoring the tabular data, the key data is calculated by a predetermined calculation formula, and the original column position of the row is identified from the value.
(5) Fifth Invention The fifth invention is a data protection method based on the first invention.

  In the first invention, it is not possible to discriminate between the dummy data row inserted into the third party and the actual data row, and it is possible to provide a program for protecting data by a simple method.

  According to the second aspect of the invention, it is possible to provide a data protection program in which it is difficult to discriminate between a dummy data row and an actual data row by inserting dummy data having a specific value obtained by a predetermined calculation formula.

  In the third invention, actual data can be distributed in the column direction based on a specific value obtained by a predetermined calculation formula for key data, and a third party cannot discriminate dummy data, thus providing a more robust data protection program. Can provide.

  In the fourth invention, since no dummy data is inserted, a robust data protection program can be provided without increasing the number of rows and columns of the original tabular data.

  In the fifth invention, it is possible to provide a data protection method in which it is difficult to discriminate between a dummy data row and an actual data row by a simple method.

An embodiment of the present invention will be described with reference to FIGS.
FIG. 5 shows a configuration example of the data protection device 200. The data protection device 200 includes a CPU (Central Processing Unit) 210 that controls data and programs, a display (DISP) 220 that displays tabular data, and the like. For example, a keyboard (KB) 230 for instructing to start a program, a floppy disk device (FPD) 240 for storing tabular data with data protection in a recording medium for carrying, etc., a display 220, a keyboard 230 and the floppy disk device 240, the input / output control unit 250 that controls input / output, the work area 260 that is a work area used by the program when protecting and restoring tabular data, and the tabular data are stored in the data protection device 200. From the data storage unit 270 and the data protection program 280 Constitute. Here, the floppy disk device 240 is provided as a device for storing data in a recording medium for carrying data, but a CD-ROM or DVD may be used.

  The data protection program 280 further includes a data protection processing unit 281 that protects by inserting dummy data or the like into tabular data in which actual data is arranged, and a data restoration processing unit 282 that restores tabular data that has been protected. To do.

Next, specific examples of data protection according to the present invention will be described from Example 1 to Example 5.
(Example 1)
Example 1 is an example of the first invention. FIG. 6 shows an example of the data, and FIG. 6A shows tabular data to which data protection is applied. This tabular data is composed of 4 rows and 3 columns, the first column (hereinafter referred to as column 1) is “last name”, column 2 is “first name”, and column 3 is “telephone number”. The state where the data is arranged is shown. FIG. 6B is an example of key data having a specific value to be arranged in the key data string inserted into the tabular data of FIG. This key data is an example of data generated by a character configuration and method described later. FIG. 6C is an example of key data that does not have a specific value, and is an example of data that is confirmed to have no specific value by randomly generating characters with a character configuration to be described later. FIG. 6D is a data example in which a key data string is inserted into the column 4 in the table format data of FIG. In columns 1 to 3 of rows 2 and 4, dummy data is inserted, and in column 4, key data having a specific value is inserted. The actual data is inserted into columns 1 to 3 of the other rows, and key data having no specific value is inserted into column 4. The dummy data is created to resemble the actual data.

  Next, a method for generating key data and inserting dummy data rows will be described as processing by a program. It is assumed that a specific value for generating dummy data, discriminating dummy data rows, a calculation formula thereof, a formula for obtaining the number of inserted dummy data rows, and the like are incorporated in the program.

  FIG. 7 shows a processing flow for protecting data based on tabular data in which actual data is arranged. First, tabular data (M rows and N columns) to be data protected is acquired. In the case of FIG. 6A, the data is 4 rows and 3 columns. Next, the number of inserted rows (m) of dummy data is calculated based on the number of rows of the acquired tabular data. For example, if the calculation formula for the number of inserted rows of dummy data is m = M / 2, in this case, 2 rows are calculated as the number of inserted rows (since M = 4). Subsequently, m random numbers equal to or less than M + m are generated in order to determine the row position where the dummy data row is actually inserted. That is, two random numbers of 6 or less are generated. Here, 2 and 4 are obtained, and the second and fourth rows are dummy data rows. Then, an empty table of M + m rows and N + 1 columns is created (S100 to S130).

  Next, a data insertion loop is entered to determine whether the first line is an actual data line. In step 120 (S120), since the second and fourth rows are determined as dummy data insertion rows, the first row becomes actual data, key data having no specific value is generated, and N + 1 column is used as the key data column. Place on line.

  Here, the key data will be described. First, it is assumed that the key data is composed of a 9-digit alphanumeric character string as a whole, of which 1, 2, 4 and 7 digits are alphabetic characters and the others are numerals. This key data is calculated by a calculation formula to be described later. At that time, the letters A to Z are replaced with 1 to 26, the numbers 1 to 9 are replaced with 27 to 35, and the number 0 is 36. Replace with and calculate.

  The calculation formula set in the program reads the first, third, and seventh characters of the key data, and calculates the sum of the three numerical values obtained by replacing the characters with the aforementioned numerical values. The specific value is “63” (that is, the sum of the first, third and seventh characters is 63). A character string having a specific value is generated as follows. First, since the first character is a letter, a numerical value from 1 to 26 is generated by a random number generator, and the letter corresponding to the value is determined. For example, if 8 is generated, “H” is determined. Since the next third character is a number, a random number between 27 and 36 converted to a number is generated. If 31 is generated, this is set to the number “5”. The next seventh character is an alphabetic character, and 24 is required to create the specific value 63 (63-8-31 = 24), so the alphabetic character “X” corresponding to 24 is determined. Since the first character, the third character, and the seventh character have been determined, random numbers are generated for the other characters 1 to 26 for alphabets and 27 to 36 for numbers, and are replaced with the corresponding characters. In this manner, for example, “HJ5C90X71” is generated as key data having the specific value “63”.

  If the key data does not have a specific value, a random number is generated for each letter or number, and if it does not become 63 when calculated by the above formula, the character string is placed. Will generate a random number again.

  Returning to the flow, since the first row is actual data, key data having no specific value is generated and arranged in the key data column (column 4), and the first row acquired in S100 is stored in columns 1 to 3. The data (actual data) is placed as it is.

  Next, moving to the second row, since the second row is dummy data, key data having a specific value is generated and arranged in the key data column. Then, dummy data is inserted into columns 1 to 3. For dummy data, data similar to actual data is generated and arranged. If the same processing is performed for the M + m rows, dummy data rows are inserted into the actual data rows (S140 to S180).

  The above-described data protection processing is performed in the work area 260 shown in FIG. 5, and the completed tabular data is stored in the data storage unit 270 or the floppy disk 240 shown in FIG. 5.

  Next, a data restoration flow will be described with reference to FIG.

  First, tabular data with data protection is taken in (S200).

  The data is calculated from the first row of the key data string of the acquired tabular data by the above formula, and when the calculated value is equal to the specific value “63”, it is determined as a dummy data row and the row position is stored. (E.g., stored in a predetermined storage location in the work area). When the calculated value is not equal to the specific value, the key data of the next line is calculated. This process is performed from the first line to the M + m line (here, from the first line to the sixth line), and the position of the dummy data insertion line is stored. Here, the row positions of the 2nd and 4th rows are stored (S210 to S230).

  Next, the row at the stored row position is deleted, and the key data column inserted in the (N + 1) th column is deleted. As a result, the tabular data is restored (S240, S250).

Through the above processing, the data in which the dummy data in FIG. 6 (d) is mixed is created from the actual data in FIG. 6 (a), and the data in which the dummy data in FIG. 6 (d) is mixed to protect the data. It is possible to restore the actual data in FIG. The data protection process in FIG. 7 and the data restoration process in FIG. 8 are respectively processed by the data protection processing unit 281 and the data restoration processing unit 282 in FIG.
(Example 2)
Example 2 is an example for the second invention. FIG. 9 shows an example of the data. FIG. 9A shows tabular data to be protected, which is the same data as the first example. FIG. 9B is an example of dummy data inserted in the tabular data of FIG. 9A, and includes five dummy data in each column. The dummy data in each column is data having a specific value set for each column. Each of the dummy data in each column is data having the same specific value. FIG. 9C shows a state in which dummy data rows are inserted into the tabular data of FIG. 9A. The data in this dummy data row is selected one by one from the data in each column of FIG.

  Next, a method for creating dummy data and inserting dummy data will be described as processing by a program. It is assumed that a calculation formula for obtaining a specific value, a specific value for each column, a calculation formula for the number of inserted rows of dummy data, the number of dummy data created, and the like are incorporated in the program.

  FIG. 10 shows a processing flow for protecting data based on tabular data in which actual data is arranged. First, tabular data (M rows and N columns) to be data protected is acquired, and the acquired table is acquired. The number of inserted dummy data (m) is calculated based on the number of lines of the format data. Assume that two rows are calculated in the same manner as in the first embodiment. (S300, S310).

  Next, dummy data is created based on the specific value for each column set in the program and the number of dummy data created. Here, the specific values of each column are set to “21”, “15” and “18” (that is, F (column 1) = 21, F (column 2) = 15, F (column 3) = 18). It is assumed that “5” is set as the number of created dummy data. Based on these set values, dummy data of 5 columns is created so as to match the specific value of each column.

  Since the actual data of Example 2 is Kanji as shown in FIG. 9A, column 1 and column 2 are kanji characters, and the calculation formula and how to obtain the specific value in this case will be described. When a Kanji code is represented as an S-JIS code in hexadecimal, one Kanji character can be represented by four numbers (each number is 0 to 15). If the last name is 2 kanji characters, it can be expressed as 8 numbers from 0 to 15 arranged, so here the calculation formula is the sum of the 4th, 6th and 7th numbers. For example, the character “Tanabe” is “Tana” is # 9363 (# indicates a hexadecimal number), “Side” is # 95D3, and 9 · 3 · 6 · 3 · 9 · 5 · 13 · 3 is 4 , 6 and 7 can be summed to obtain 21 ("Tanabe" in row 1, column 1 in Fig. 9B is the last name generated in this way. Column in Fig. 9B. All other surnames of 1 will be 21). Since the combination of the kanji codes generated by the computer may be unnatural as a first name and last name, the generated last name is displayed on the display 220 so that the operator can select it. Similarly, the specific value “15” in column 2 is the sum of the second and fourth numbers. Furthermore, the specific value “18” in column 3 is regarded as a numerical value except for hyphens, and subtracts 5 times the 5th digit and 3 times the 10th digit from twice the 9th digit and 7 times the 7th digit. Value. (S320).

  Subsequently, m random numbers having a value equal to or less than M + m are generated in order to determine the dummy data insertion row as in the first embodiment. Here again, it is assumed that numerical values of 2 and 4 (dummy data insertion lines are the second and fourth lines) are generated by the random number generator (S330).

  Next, a dummy data insertion loop is entered, and the dummy data insertion line having the smallest value is first selected (here, the second line), and the actual data after the dummy data insertion line is moved downward by one line, Select and insert dummy data corresponding to the column. In the method of selecting dummy data from each column, a random number having a numerical value of 5 or less is also generated (since the number of dummy data in each column is set to 5), and dummy data in the row of that numerical value is selected. Subsequently, the above processing is performed on the insertion row with the second smallest value, and this process is repeated to insert dummy data into all dummy data insertion rows. (S340, S350).

  Thus, the dummy data row has been inserted into the actual data row. Here, dummy data is generated in advance, but dummy data may be directly generated and inserted. Next, the flow of data restoration will be described with reference to FIG.

  First, tabular data with data protection is taken in (S400).

  Calculate the first row data of the obtained tabular data (in this case, there are three columns, so there are three data in one row) using the above formula, and the calculated value of this data identifies each column of dummy data. When it is equal to the value, the line is determined as a dummy data line, and the position of the line is stored. If even one calculated value of data for one row is not equal to the specific value of each column of dummy data, it is determined that the row is an actual data row and the next row is calculated. This process is performed from the 1st line to the M + m line (here, from the 1st line to the 6th line), and the numerical value of the dummy data insertion line is stored. Here, the row positions of the 2nd and 4th rows are stored (S410 to S430).

  Next, the line at the stored line position is deleted. As a result, the tabular data is restored (S440).

Through the above processing, the data including the dummy data rows in FIG. 9C is created from the actual data in FIG. 9A, and the data protection is performed by mixing the dummy data rows in FIG. 9C. The data can be restored to the actual data in FIG. The data protection process in FIG. 10 and the data restoration process in FIG. 11 are respectively processed by the data protection processing unit 281 and the data restoration processing unit 282 in FIG.
(Example 3)
Example 3 is an example for the third invention. FIG. 12 shows an example of the data. FIG. 12A shows tabular data to which data protection is applied, and is tabular data in which actual data is arranged in 9 rows and 2 columns. FIG. 12B shows key data generated in a flow to be described later, and has a table format of 9 rows and 1 column. FIG. 12C shows an example in which the actual data in each column of the tabular data in FIG. 12A is distributed and dummy data is inserted in places other than the actual data.

  Next, a method for creating key data and distributing actual data will be described as processing by a program.

  FIG. 14 shows a processing flow for protecting data based on tabular data in which actual data is arranged. First, tabular data (M rows and N columns) to be data protected is acquired. Here, as shown in FIG. 12A, tabular data of 9 rows and 2 columns is acquired (S500).

  Next, M random numbers between 0 and 99 are generated, and these values are sequentially arranged in a table format of M rows and 1 column as hash values (that is, specific values). FIG. 13 shows an example in which generated random numbers are arranged in a table format of 9 rows and 1 column corresponding to 9 rows of actual data (third table from the right in FIG. 13). Next, 200 is added to each hash value (second table from the right in FIG. 13). This value is converted into a 10-digit character string as key data. In the conversion, the sum of 10 characters is converted to be equal to the hash value +200. The conversion conditions are the conversion values of the letters and numbers described in Example 1 (replace the letters A to Z with 1 to 26, the numbers 1 to 9 with 27 to 35, and the number 0 with 36) In the key data, the character configuration of the total 10 digits is 1, 2, 4 and 7 digits are alphabetic, and the other digits are numbers. Since the range of values that the key data can take under this condition is 166 to 320 (4 to 104 for English letters, 162 to 216 for 6 numbers), the range (200 to 299) that the hash value +200 can take is set. It is possible to convert. A specific conversion method is as follows. Starting from the first digit, random numbers 1 to 26 are generated for alphabetic characters and random numbers 27 to 36 are generated for numbers, and the corresponding alphanumeric characters are determined. Is replaced with a number that becomes a value of hash value + 200 (the table on the right side of FIG. 13). The key data sequence created in this way is inserted into the last column (N + 1 column) of the acquired tabular data (S510 to S530).

  Next, a blank column having the number of columns set in the program is inserted on the right side of each column of actual data. Here, it is assumed that one blank column is inserted corresponding to column 1 in FIG. In the processing so far, the acquired table format data is the actual data in columns 1 and 3, column 2 and column 4, column 5 is a blank column, and column 6 is a key data column (S540).

  Next, the actual data is moved. The range of movement is that column 1 actual data is moved to column 1 and column 2, and column 3 actual data is moved to any column position of columns 3 to 5 (column 1 and column 2 are moved to column 1 actual data. (Columns 3 to 5 are distributed columns for the actual data in column 3). First, the key data of the first line is calculated by a calculation formula set in the program (that is, converted to a numerical value corresponding to a character of a 10-digit character string, a sum of them is obtained and 200 is subtracted), and a calculation result ( That is, a hash value is obtained. If the hash value is an odd number, the actual data in column 1 is moved to column 1, and if it is an even number, it is moved to column 2 (when column 1 is arranged in column 1, it is expressed as “move”). ) Further, for the actual data in column 3, those whose hash value is 30 or less are moved to column 3, those whose hash value is 70 or more are moved to column 4, and the others are moved to column 5 (movement rules for these hash values). Is set in the program). That is, with one hash value, two column positions are assigned to the actual data in the first column with odd and even hash values, and three columns in the numerical value range of the hash value are allocated to the third column of actual data. Allocating column positions. This is performed for all the rows (9 rows in the example of FIG. 12) (S550).

  Finally, dummy data is inserted in places other than actual data. For example, the dummy data for the actual data in the column 1 in FIG. 12A is created by obtaining a numerical value between a maximum value and a minimum value suitable as a predetermined value of the column from a random number generator. In addition, dummy data for the actual data in column 2 is generated as random data by generating two alphabetic characters other than the actual data in A to E as random numbers (two are different alphabetic characters) (S560).

  In the third embodiment described above, the distributed column is inserted into the tabular data in which the actual data is arranged, but the original tabular data is left as it is, and the number of columns for which the distribution is considered in advance. It is also possible to create an empty table (the number of rows is the number of rows in tabular data) and distribute the actual data in the corresponding columns. For example, for the tabular data in which the actual data in FIG. 12A is arranged, the blank table in FIG. 12C is prepared, and the actual data is distributedly arranged on the basis of the key data. . At this time, the columns 1 and 2 are the distributed columns of the actual data column 1 in FIG. 12A, and the columns 3 to 5 are the distributed columns of the actual data column 2 in FIG.

  Next, data restoration will be described with reference to FIG.

  First, tabular data with data protection is taken in (S600).

  The hash data is obtained by calculating the key data of the first row of the acquired tabular data by the above formula. The actual data position corresponding to the hash value is obtained from the movement rule set in the program, and the actual data position is obtained. Then, the data (actual data) at this position is moved to the leftmost end of the distributed column (column 1 for columns 1 and 2 which are distributed columns, column 3 for columns 3 to 5). This is performed for all rows (S610 to S630).

  Restoration is completed by deleting columns other than actual data (in the case of FIG. 12C, except columns 1 and 3) (S640).

Through the above processing, data in which the dummy data in FIG. 12C is mixed from the actual data in FIG. 12A is created, and the data in FIG. 12C in which the dummy data is mixed is created. It can be restored to real data.
Example 4
Example 4 is an example for the fourth invention. FIG. 16 shows an example of the data, and FIG. 16A shows tabular data to which data protection is applied, and is tabular data in which actual data is arranged in 6 rows and 3 columns. FIG. 16B shows key data generated by a method to be described later, and is in a 6-by-1 table format. FIG. 16C shows an example in which a key data column is added to the tabular data in FIG. 16A and the column position of the actual data of the tabular data is replaced.

  Next, a method for creating key data and distributing actual data will be described as processing by a program.

  First, the key data generation method will be described. Since there are 6 lines of actual data, 6 random numbers are generated in the range of 0 to 99 as in the third embodiment, and the value is used as a hash value. Then, it is converted into a 10-digit character string by the same method as the character string configuration shown in the third embodiment. This converted character string is key data. FIG. 16B shows the key data created in this way, and the numerical value in the parenthesis on the right side is a hash value obtained by random number generation that is the basis for creating the key data.

  Next, replacement of column positions of actual data will be described. First, the hash value is divided by 6, and the remainder is obtained. The reason for dividing by 6 is that when the column positions of three columns of actual data are interchanged, there are six combinations to be interchanged. Corresponding to the obtained remainder value, for example, the column positions are exchanged according to the rule shown in FIG. FIG. 17 shows the column position of the movement destination of the actual data having three columns with respect to the remainder value divided by 6. For example, since the remainder of dividing the hash value “82” in the first row by 6 is “4”, the actual data in column 1 is in column 2, the actual data in column 2 is in column 3, and the actual data in column 3 is Data will move to column 1. This is replaced for each row.

  To restore the data, a hash value is obtained from the key data, and the original column position of the actual data shown in FIG.

  With the above processing, data in which the column positions of the actual data in FIG. 16C are exchanged from the actual data in FIG. 16A is created, and the data in which the column positions in FIG. It can be restored to the actual data of a).

(Example 5)
FIG. 18 shows an example in which the first invention and the third invention are used simultaneously. That is, in this example, dummy data is inserted in the row direction and the column direction.

  FIG. 18 (a) is tabular data to which data protection is applied, and is tabular data in which actual data is arranged in 6 rows and 5 columns. FIG. 18B shows key data generated in a flow to be described later, and has a table format of 9 rows and 1 column. FIG. 18C shows an example in which dummy data is inserted after moving the dummy data row in the row direction and moving the column position of the actual data in the column direction to the actual data of the tabular data in FIG. Is shown. In FIG. 18C, the actual data in column 4 in FIG. 18A is moved to two distributed columns, and the actual data in column 5 is moved to three distributed columns.

  The key data is a 9-digit character string as a whole. The first, second, fourth, and seventh digits are alphabetic characters, and the others are numeric characters. The conversion from character to numerical value is the same as described above. The calculation formula is to convert 1 character, 3 characters, and 7 characters into a numerical value and sum the values.

  It is assumed that the hash value for inserting a dummy data row is “63” first, and the number of inserted rows is obtained by three formulas for calculating the number of inserted rows set in the program. Then, as shown in the first embodiment, random numbers are generated at the table insertion positions to obtain 2, 4, and 7, and the inserted rows are set to 2, 4, and 7. A character string is generated by the method shown in the first embodiment so that the hash value 63 is obtained in this line.

  Next, a random number between 55 and 98 is generated for lines other than 2, 4, and 7 and used as a hash value (the numerical range of 55 to 98 is 1 to 26 English characters and 2 numeric characters) Therefore, 54 to 72 can be taken, and these are added up to 55 to 98). If 63 is obtained by random number generation, start over.

  Next, the actual data in column 4 moves with odd and even hash values (in this example, odd numbers move to column 4 and even numbers move to column 5). The real data in column 5 in FIG. 18A is moved to column 6 in FIG. 18C when the hash value is 70 or less, to column 7 in the case of 71 to 84, and to column 8 in the case of 85 or more. .

  Thus, the data shown in FIGS. 18A to 18C are obtained. By inserting dummy data into the rows and columns of the present invention, data protection is robust.

  In the above embodiment, the key data is inserted into the original tabular data as a key data string. However, the key data may be held elsewhere without being inserted into the tabular data. Although the program has rules for moving specific values and actual data, etc., it may be set by the operator through an appropriate user interface.

  Needless to say, dummy data must be similar to actual data.

  Furthermore, if the conventional encryption is performed in addition to the data protection method of the present invention, further data protection is achieved, and the present invention has no problem in combination with the conventional method.

  The following additional notes are disclosed with respect to the above embodiments.

(Appendix 1)
A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data arranged corresponding to a row of the tabular data, in which data obtained by a predetermined formula is a specific value and data that is not a specific value are mixed,
A dummy data row insertion procedure for inserting dummy data into a row corresponding to the key data of the tabular data depending on whether the key data is the specific value or not. A data protection program characterized by being executed.

(Appendix 2)
A data protection program for tabular data in which real data is arranged in rows and columns,
Causing a computer to execute a dummy data row insertion procedure for inserting dummy data in which a value obtained by a predetermined calculation formula is a specific value specific to each column in any one or more rows of the tabular data. A data protection program featuring:

(Appendix 3)
A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data in which data obtained by a predetermined calculation formula is a specific value corresponding to a row of the tabular data;
One or more distributed columns are respectively created corresponding to the actual data columns of the tabular data, and the actual data in each row of the tabular data is changed to the specific value obtained from the key data corresponding to each row. An actual data distribution procedure for distributing and arranging in the distribution columns corresponding to the respective real data columns,
A data protection program for causing a computer to execute a dummy data insertion procedure for inserting dummy data into a place other than where the actual data is arranged with respect to the distributed column in which the actual data is arranged.

(Appendix 4)
A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data in which data obtained by a predetermined calculation formula is a specific value corresponding to a row of the tabular data;
A data protection program for causing a computer to execute a real data replacement procedure for replacing the column positions of individual real data in a row corresponding to the key data based on the specific value of the key data.

(Appendix 5)
A data protection method for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data arranged corresponding to a row of the tabular data, in which data obtained by a predetermined formula is a specific value and data that is not a specific value are mixed,
A dummy data row insertion procedure for inserting dummy data into a row corresponding to the key data of the tabular data depending on whether the key data is the specific value or not. A data protection method characterized by.

(Appendix 6)
A data protection method for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data in which data obtained by a predetermined calculation formula is a specific value corresponding to a row of the tabular data;
One or more distributed columns are respectively created corresponding to the actual data columns of the tabular data, and the actual data in each row of the tabular data is changed to the specific value obtained from the key data corresponding to each row. An actual data distribution procedure for distributing and arranging in the distribution columns corresponding to the respective real data columns,
A data protection method, comprising: causing a computer to execute a dummy data insertion procedure for inserting dummy data at a place other than where actual data is arranged with respect to the distributed column where actual data is arranged.

(Appendix 7)
A data protection device for tabular data in which real data is arranged in rows and columns,
A key data creation means for creating key data arranged corresponding to the row of the tabular data, in which data obtained by a predetermined formula is a specific value and data that is not a specific value are mixed,
Dummy data row insertion means for inserting dummy data into a row corresponding to the key data of the tabular data depending on whether the key data is the specific value or not. A data protection device.

It is a principle figure (the 1) of an invention. It is a principle figure (part 2) of the invention. FIG. 3 is a principle diagram (part 3) of the invention. FIG. 4 is a principle diagram (part 4) of the present invention. It is a structural example of a data protection apparatus. It is an example of data of Example 1. It is an example of the flow of the data protection process of Example 1. It is an example of the flow of the data restoration process of Example 1. It is an example of data of Example 2. It is an example of the flow of the data protection process of Example 2. It is an example of the flow of the data decompression | restoration process of Example 2. FIG. It is an example of data of Example 3. It is an example of key data generation of Example 3. It is an example of the flow of the data protection process of Example 3. It is an example of the flow of the data restoration process of Example 3. It is an example of data of Example 4. It is an example of the movement rule of the actual data of Example 4. It is an example of data of Example 5.

Explanation of symbols

10 Key Data Creation Procedure 11 Key Data Creation Procedure 20 Dummy Data Row Insertion Procedure 21 Dummy Data Row Insertion Procedure 50 Actual Data Distribution Procedure 60 Dummy Data Insertion Procedure 70 Actual Data Replacement Procedure 200 Data Protection Device 210 CPU
220 Display (DISP)
230 Keyboard (KB)
240 Floppy disk (FPD)
250 I / O Control Unit 260 Work Area 270 Data Storage Unit 280 Data Protection Program 281 Data Protection Processing Unit 282 Data Restoration Processing Unit

Claims (5)

A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data arranged corresponding to a row of the tabular data, in which data obtained by a predetermined formula is a specific value and data that is not a specific value are mixed,
A dummy data row insertion procedure for inserting dummy data into a row corresponding to the key data of the tabular data depending on whether the key data is the specific value or not. A data protection program characterized by being executed. A data protection program for tabular data in which real data is arranged in rows and columns,
Causing a computer to execute a dummy data row insertion procedure for inserting dummy data in which a value obtained by a predetermined calculation formula is a specific value specific to each column in any one or more rows of the tabular data. A data protection program featuring: A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data in which data obtained by a predetermined calculation formula is a specific value corresponding to a row of the tabular data;
One or more distributed columns are respectively created corresponding to the actual data columns of the tabular data, and the actual data in each row of the tabular data is changed to the specific value obtained from the key data corresponding to each row. An actual data distribution procedure for distributing and arranging in the distribution columns corresponding to the respective real data columns,
A data protection program that causes a computer to execute a dummy data insertion procedure for inserting dummy data into a location other than where the actual data is arranged with respect to the distributed column in which the actual data is arranged. A data protection program for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data in which data obtained by a predetermined calculation formula is a specific value corresponding to a row of the tabular data;
A data protection program for causing a computer to execute a real data replacement procedure for replacing the column positions of individual real data in a row corresponding to the key data based on the specific value of the key data. A data protection method for tabular data in which real data is arranged in rows and columns,
A key data creation procedure for creating key data arranged corresponding to a row of the tabular data, in which data obtained by a predetermined formula is a specific value and data that is not a specific value are mixed,
A dummy data row insertion procedure for inserting dummy data into a row corresponding to the key data of the tabular data depending on whether the key data is the specific value or not. A data protection method characterized by.

Images