JP2006189926A - Device and program for separating personal information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To separate objective data into personal information and non-personal information and to combine them together. <P>SOLUTION: This personal information separation device is provided with a column name designation means 11 extracting a column name concerned to personal information from data in a transfer table data 21 and storing the extracted column name as personal information column name data 22, a data separation means 12 reading the personal column name data 22 while collecting a coupling code identifying a record in the transfer table data 12, giving a dummy code as entity data for the personal information column name, storing the coupling code as non personal information data 26, and storing the entity data for the personal information and the coupling code as personal information data 25, and a data coupling means 14 reading the personal information data 25 and the non-personal information 26, extracting recodes related to a predetermined coupling code respectively, and associating the entity data read from the personal information with the personal information column name associated with the dummy code to store them as new transfer table data 27. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal information separation apparatus and a personal information separation program capable of separating and further combining target data with personal information data and non-personal information data.

  Recently, there has been frequent development of improvements to upgrade the version from the old system (current system) to the new system. This version upgrade may involve changes in data that is referenced or updated in the system.

  Specifically, in order to introduce a new personnel / salary system, work for transferring data on personnel and salary from the old system to the new system occurs. As an example, there are cases where the definition of the parameter is changed and changes such as the parameter must be changed according to the attribute of the record. However, the personnel / salary system is very complicated to prepare for introduction due to the variety of data and complexity. For this reason, it is difficult for only the person in charge at the system introduction side to carry out the data migration work, and it is necessary to ask the system provider who developed the system for assistance to create and input data to be used in the new system. Become. In order to create data more efficiently, specifically, in order to shorten the introduction period and reduce the burden on the system introduction side, the system provider side receives data to be transferred from the system introduction side and performs work. There are things to do.

  On the other hand, due to the recent increase in awareness of personal information, it is necessary to strictly manage the outflow of personal information. On the other hand, for example, information including personal information, information such as biometric information and purchase information corresponding to the personal information associated with each individual, and information such as purchase information can be protected by others for various purposes. There is an information sharing support device that can be used effectively (see, for example, Patent Document 1). In the information sharing support apparatus described in Patent Literature 1, when first information such as biometric information is acquired, access for limiting at least information users who can access the first information to the first information. Additional information including level information that defines the level of rights is added and stored separately from the personal information related to the information provider who provided the first information, and predetermined access for the information user Provide information according to the level of rights.

In addition, there is a method in which an owner or provider of data including an individual identifier can distribute data without revealing the identity of the individual associated with the data (see, for example, Patent Document 2). In the method described in Patent Document 2, the data provider separates personal information from other data, generates two data sets, and then provides personal information identification information to the trust organization. The trust authority associates the unique identifier with the identification information and replaces the data in the database. The trust authority also collects and stores personal identification information so that the identification information can be processed. The trust provider will acquire identification information in the future and determine whether the unique identification generated by the data provider or trust authority represents the same individual, the data provider is provided by its own unique identifier or trust authority Associate identifiers with other data to generate depersonalization. Non-personalized data is sent to the data user for analysis.
JP 2004-145483 A JP 2000-324094 A

  When migrating data used in the system, when data is exchanged between the system introduction side and the system provider side, the migration data must be handled with caution because it contains personal information of employees and confidential information of companies. However, the method of recording data on media and handing it over or the method of sending and receiving data by attaching data to e-mail does not change that personal information is leaked to the outside of the system introduction side. The possibility of leaking to a third party is included. For example, when handing over data recorded on media, the risk of data being sent to a third party due to a mistake in the selection of the destination, etc. No matter how careful you are, you can't eliminate it.

  On the other hand, a method for protecting personal information is generally performed by protecting a file containing personal information with a password and encrypting the file.

  However, even in such a case, the probability that the migration data will be passed to a third party is not low, and if a file password or encryption is analyzed, personal information will be leaked to the third party.

  In addition, when frequent transfer of migration data occurs, there is a greater possibility of forgetting to protect the password or encrypting the file, and if the data is passed to a third party, personal information can be easily viewed. I can do it. Moreover, even if data transmission / reception is made manual, the risk of erroneous data transmission is inherent as long as the work is done through human hands.

  Furthermore, since the worker on the system providing side can view the personal information, there is a risk that the personal information is leaked verbally.

  Moreover, although the method described in Patent Document 2 described above can manage personal information separately, it cannot combine them. Specifically, if it is necessary to transfer data to a new system on the system introduction side after separating personal information, such as data migration, data that can be input to the new system by combining personal information and non-personal information Must be processed to create.

  Accordingly, an object of the present invention is to provide a personal information separation device and a personal information separation program that make it possible to separate personal information and non-personal information from target data and recombine them.

  In order to solve the above-described problem, a personal information separation device according to the first aspect of the present invention includes means for storing target data to be separated into personal information data and non-personal information data in a storage device; About extracting the column name related to personal information from the data, storing the extracted column name in the storage device as personal information column name data, reading the target data from the storage device, and about the record of the read target data In addition to numbering the combined code for identifying the read record, the personal information column name data is read from the storage device, a dummy code is assigned as entity data of the column name of the personal information, and the assigned dummy code and A record including a combination code is stored in the storage device as non-personal information data, and the read record is Means for storing a record including entity data of a column name of human information and a combination code in a storage device as personal information data; and reading the personal information data and non-personal information data from the storage device to Each record associated with a predetermined combination code is extracted from the information data, and the entity data of the column name of the personal information is reduced to the assigned dummy code, and stored as new target data in the storage device Means. Here, the dummy code is a predetermined arbitrary code such as a null code, “%”, and “$”.

  In the personal information separating apparatus according to the first feature of the present invention, the actual data of the personal information is replaced with a dummy code, and the combined code is included and output as non-personal information data, so that the personal information leaks outside. There is no. Further, since the dummy code is an arbitrarily determined code, the dummy code is not decoded and the original data does not leak out. Furthermore, the original target data can be configured by connecting the personal information data and the non-personal information data using the combination code as a key.

  The personal information separation program according to the second feature of the present invention reads target data to be separated into personal information data and non-personal information data from a storage device, extracts column names related to personal information from the target data, Means for storing the extracted column name in the storage device as personal information column name data, and a combination code for reading the target data from the storage device and identifying the read record for the record of the read target data The personal information column name data is read from the storage device, a dummy code is assigned as entity data of the column name of the personal information, and a record including the assigned dummy code and the combined code is assigned to the non-personal information data. As a column name of personal information for the read record Means for storing a record including a data and a combined code in a storage device as personal information data, and reading the personal information data and the non-personal information data from the storage device, And a means for extracting the records associated with the combined codes and reducing the entity data of the column names of the personal information to the assigned dummy codes to store them in the storage device as new target data. To run.

  According to the present invention, it is possible to provide a personal information separation device and a personal information separation program that make it possible to separate and combine personal information and non-personal information from target data.

  Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

(Best Embodiment)
(Information system)
An information system 3 according to the best embodiment of the present invention includes a personal information separation device 1 and an information terminal 2. The personal information separation device 1 and the information terminal 2 are realized by installing a program for performing a predetermined process in a general computer including a storage device and a central processing control device.

  Specifically, as shown in FIG. 2, the personal information separating apparatus 1 according to the preferred embodiment of the present invention includes a central processing control device 101, a ROM (Read Only Memory) 102, and a RAM (Random Access Memory) 103. The input / output interface 109 is connected via the bus 110. An input device 104, a display device 105, a communication control device 106, a storage device 107, and a removable disk 108 are connected to the input / output interface 109.

  The central processing control device 101 reads out and executes a boot program for starting up the personal information separating device 1 from the ROM 102 based on an input signal from the input device 104, and further reads out an operating system stored in the storage device 107. Further, the central processing control device 101 controls various devices based on input signals from the input device 104, the communication control device 106, etc., and reads programs and data stored in the RAM 103, the storage device 107, etc., into the RAM 103. A processing device that loads and implements a series of processing described later, such as data calculation or processing, based on a program command read from the RAM 103.

  The input device 104 includes input devices such as a keyboard and a mouse through which an operator inputs various operations. The input device 104 generates an input signal based on the operation of the operator, and inputs via the input / output interface 109 and the bus 110. It is transmitted to the central processing control apparatus 101. The display device 105 is a CRT (Cathode Ray Tube) display, a liquid crystal display, or the like, and receives an output signal to be displayed on the display device 105 from the central processing control device 101 via the bus 110 and the input / output interface 109. It is a device that displays the processing result of the control device 101 and the like. The communication control device 106 is a device such as a LAN card or a modem, and is a device that connects the personal information separating device 1 to a communication network such as the Internet or a LAN. Data transmitted / received to / from the communication network via the communication control device 106 is transmitted / received to / from the central processing control device 101 via the input / output interface 109 and the bus 110 as an input signal or an output signal.

  The storage device 107 is a semiconductor storage device or a magnetic disk device, and stores programs and data executed by the central processing control device 101. The removable disk 108 is an optical disk or a flexible disk, and signals read / written by the disk drive are transmitted / received to / from the central processing control apparatus 101 via the input / output interface 109 and the bus 110.

  The storage device 107 of the personal information separating apparatus 1 according to the preferred embodiment of the present invention stores a personal information separating program, migration table data 21 and 27, personal information column name data 22, a personal information checklist. Data 23, combination code column name data 24, personal information data 25, and non-personal information data 26 are stored. In addition, the personal information separation program is read and executed by the central processing control device 101 of the personal information separation apparatus 1 so that the column designation means 11, the data separation means 12, the personal information check means 13, and the data combining means 14 It is mounted on the separation device 1.

  The information terminal 2 also has a hardware configuration diagram as shown in FIG. A non-personal information update unit 201 is installed in the information terminal 2. The non-personal information update unit 201 updates the non-personal information data 26 output from the personal information separator 1 and inputs the updated non-personal information data 26 to the personal information separator 1. The non-personal information data 26 may be transmitted / received by being attached to an e-mail or the like via a communication control device, or may be transmitted / received via a communication network according to FTP, HTTP protocol, or the like. Alternatively, the information may be stored in a portable medium such as a flexible disk or a CD-R and read by the personal information separating apparatus 1 or the information terminal 2.

  Next, with reference to FIG. 3, an information processing method according to the best mode of the present invention will be described.

  First, in step S <b> 101, a column for personal information in the migration table data 21, which will be described later, is specified by the column specifying unit 11 of the personal information separating apparatus 1 and stored in the storage device 107 as personal information column name data 22. Next, in step S102, the data separation means 12 separates the data of the migration table data 21 into personal information data 25 and non-personal information data 26, which will be described later, and stores them in the storage device 107.

  Next, in step S103, the personal information check means 13 determines whether or not the non-personal information data 26 includes entity data corresponding to a column name stored in the personal information checklist data 23 described later. The

  If the non-personal information data 26 does not include entity data in the column name corresponding to the personal information, the non-personal information data 26 is output to the information terminal 2 in step S104. At this time, the non-personal information data 26 may be input to the information terminal 2 by being transmitted via the communication control device and the communication network and received by software operating on the information terminal 2. The non-personal information data 26 is stored in a portable recording medium such as a flexible disk, a CD-R, and a semiconductor memory, and the recording medium is read out by a drive provided in the information terminal 2, and is stored in the information terminal 2. It may be entered.

  Here, the non-personal information data 26 input to the information terminal 2 is data that does not include personal information.

  When the non-personal information data 26 is input to the information terminal 2 in step S151, the non-personal information data 26 is updated by the non-personal information update unit 201 in step S152. For example, in the case of migration data handled by the personnel / salary system, for example, the salary classification in the new system is updated, and the organization name is updated. After the update, the non-personal information data 26 updated in step S153 is output to the personal information separating apparatus 1. At this time, the non-personal information data 26 may be input to the personal information separating apparatus 1 by being transmitted via the communication control apparatus and the communication network and received by software operating on the personal information separating apparatus 1. Further, the non-personal information data is stored in a portable recording medium such as a flexible disk, a CD-R and a semiconductor memory, and the recording medium is read out by a drive provided in the personal information separating apparatus 1 to separate the personal information. It may be input to the device 1.

  When the updated non-personal information data is input in the information terminal 2 in step S105, the non-personal information data 26 and the personal information data 25 are combined by the data combining unit 14 of the personal information separating apparatus 1 in step S106. The new migration table data 27 (details will be described later) is generated and stored in the storage device 107 by combining the codes as keys.

(Personal information separator)
Next, the personal information separating apparatus 1 according to the preferred embodiment of the present invention will be described with reference to FIGS. 1 and 4 to 13.

(Column designation means)
The column specifying means 11 extracts a column name related to personal information from the migration table data 21 and stores the extracted column name in the storage device 107 as personal information column name data 22.

  The migration table data 21 is target data to be separated into personal information data 25 and non-personal information data 26. In the best mode of the present invention, the migration table data 21 is data that is migrated from the old system to the new system, for example, in a personnel / payment system.

  Specifically, it has a data structure and data as shown in FIG. In the best mode of the present invention, the migration table data 21 is data of the personnel / salary system, and the employee code, name, age, address, title, salary classification is defined as each column name of the migration table data 21. “A01” (employee code), “A” (name), “30” (age), “Shibuya-ku, Tokyo” (address), “person in charge” (position), “1” (salary) Category) is associated as actual data for each column.

  Based on this information, the column specifying means 11 extracts a column name related to personal information and outputs personal information column name data 22. The column specifying means 11 extracts only the column name from the migration table data 21 and displays it on the display device 105, and allows the operator to extract the column name as personal information based on an instruction from the input device 104. good.

  As shown in FIG. 5, the personal information column name data 22 stores column names corresponding to personal information such as employee codes, names, and addresses.

(Data separation means)
The data separation unit 12 reads the migration table data 21 from the storage device 107 and assigns a combination code for identifying the read record for the read record. Further, the data separation means 12 reads the personal information column name data 22 from the storage device 107, assigns a dummy code as the entity data of the column name of the personal information, and removes the record including the assigned dummy code and the combined code. The personal information data 26 is stored in the storage device 107. Further, the data separation means 12 stores, in the storage device 107, a record including the actual data of the column name of the personal information and the numbered combination code for the read record as the personal information data 25.

  In addition, the data separation unit 12 reads the migration table data 21 from the storage device 107, and assigns a combination code for identifying the read record for the read record, and the personal information column name from the storage device 107. The data 22 and the combined code column name data 24 to be described later are read out, a combined code is assigned as entity data of the combined code column name data, and a record to which a dummy code is added as entity data of the column name of personal information 26, and the record including the entity data of the column name of the personal information and the combination code for the read record is stored as the personal information data 25 in the storage device 107.

  Here, in the non-personal information data 26 shown in FIG. 9, at least one entity data of the personal information column name is a combination code, and among the entity data of the personal information column name, personal information to which no combination code is assigned. The column name entity data is a dummy code.

  The combined code column name data 24 is column name data that is not included in the personal information column name data 22 among the column name data of the migration table data 21, and is combined code column name data with respect to the non-personal information data 26. This represents column name data to which a join code that is 24 entity data is added. The combined code column name data 24 may be set by the column specifying means 11 or by the data separating means 12 based on a predetermined algorithm.

Next, with reference to FIG. 6, the data separation process by the data separation means 12 according to the preferred embodiment of the present invention will be described.
First, in step S201, the data separation unit 12 reads the migration table data 21 and the personal information column name data 22 from the storage device 107. The migration table data 21 is composed of data examples as shown in FIG. 4, and the personal information column name data 22 is described as “employee code”, “name”, and “address” as shown in FIG. And Further, in step S 202, the data separation unit 12 determines a combined code column name to which a combined code is assigned in the non-personal information data 26, and stores the determined combined code column name data 24 in the storage device 107. Here, when the data separation means 12 arbitrarily determines the combined code column name to which the combined code is assigned from the personal information column name data 22 and determines the combined code column name as “address”, it is shown in FIG. As described above, “address” is stored in the storage device 107 as the combined code column name data 24.

  Next, for all the records in the migration table data 21, a record to be inserted into the personal information data 25 and a record to be inserted into the non-personal information data 26 are created.

  Specifically, in step S203, the data separation unit 12 reads a record from the migration table data 21, concatenates entity data corresponding to the personal information column name in the read record, and generates a personal information record. As shown in FIG. 4, from the migration table data 21, entity data “A01” of the column name “employee code”, entity data “A” of the column name “name”, entity data “30” of the column name “age”, When a record in which the entity data “Shibuya-ku, Tokyo” of the column name “address”, the entity data “section chief” of the column name “position”, and the entity data “1” of the column name “salary classification” are associated is read To do. From here, the entity data is extracted from the column names “employee code”, “name”, “address” of the personal information, the entity data “A01” of the column name “employee code”, and the entity data of the column name “name” The entity data “Shibuya-ku, Tokyo” of the column name “address” is concatenated to generate a personal information record.

  Further, in step S204, a “joined code” column is newly added to the personal information record generated in step S203. In step S205, a combination code for identifying the record read from the migration table data 21 is numbered, and the numbered combination code is added to the personal information record as entity data of the column name “combination code” of the personal information record. Associated. Specifically, “0001” is numbered as the combined code, and “0001” is assigned as the entity data of the combined code column added in step S204. As described above, the entity data “A01” of the column name “employee code”, the entity data “A” of the column name “name”, the entity data “Shibuya-ku, Tokyo” of the column name “address”, and the column name “join” The personal information record associated with the entity data “0001” of the “code” is inserted into the personal information data 25 and stored in the storage device 107.

  Next, in step S207, for the record read from the migration table data 21, a non-personal information is assigned a null code as entity data of the personal information column name and a combination code as entity data of the combined code column name. A record is created. Specifically, entity data “” (null code) of column name “employee code”, entity data “” (null code) of column name “name”, entity data “30” of column name “age”, column name A non-personal information record 26 associated with the entity data “0001” of the “address”, the entity data “person in charge” of the column name “title”, and the entity data “1” of the column name “salary classification” is generated. In step S208, the non-personal information record generated in step S207 is inserted into the non-personal information data and stored in the storage device 107.

  Here, the null code is stored as the entity data of the personal information column name in the non-personal information data 26, but it may not be a null code. For example, codes that are not used for normal data, such as “#” and “&”, may be stored as dummy codes.

  By repeating the processing from step S203 to step S208, personal information data 25 as shown in FIG. 8 and non-personal information data 26 as shown in FIG. 9 are stored in the storage device 107.

(Personal information check method)
The personal information check list data 23 is data of column names that are targets of personal information of the migration table data 21. Specifically, the name, address, date of birth, salary transfer account, etc. As shown in FIG. 10, the personal information checklist data 23 stores column names such as column names “employee code”, “name”, “address”, “telephone”, “mail address”, etc., which are the targets of personal information. Has been.

  The personal information check means 13 reads the non-personal information data 26 and the personal information checklist data 23 from the storage device 107, and in the non-personal information data 26, entity data corresponding to the column names included in the personal information checklist data 23. Whether or not is included is determined. If it is included, a warning message is output on the assumption that personal information is included in the non-personal information data 26. Specifically, the personal information check means 13 uses data other than the combined code and dummy code (specifically, name, address, date of birth, etc.) as data corresponding to the column name included in the personal information checklist data 23. (Substance data) is included.

  In the preferred embodiment of the present invention, a case where column names corresponding to personal information are stored in the personal information checklist data 23 will be described. In the personal information checklist data 23, column names not corresponding to personal information are described. May be stored, and the personal information check unit 13 may determine whether or not the entity data is included in a column name that does not correspond to the personal information check list data 23 in the non-personal information data 26.

(Non-personal information update)
The non-personal information data 26 generated by the data separator 12 of the personal information separator 1 and confirmed to contain no personal data entity data by the personal information checker 13 is updated in the non-personal information of the information terminal 2. The non-personal information data 26 a as shown in FIG. 11 updated by the means 201 is input to the personal information separating apparatus 1 and stored in the storage device 107. In the non-personal information data 26a, the salary classification of the third record is changed from “1” to “2”.

(Data combination means)
The data combining unit 14 reads the personal information data 25 and the non-personal information data 26a from the storage device 107, and extracts records associated with a predetermined combination code from the personal information data 25 and the non-personal information data 26a, respectively. Then, the entity data read from the personal information data 25 is added to the column name of the personal information to which the dummy code is assigned, and the new migration table data 27 is stored in the storage device 107.

  The data combining unit 14 reads the personal information data 25 and the non-personal information data 26a from the storage device 107, and associates the read personal information data 25 and the non-personal information data 26 with a predetermined combination code. In the non-personal information data 26a record, personal data column name entity data to which a dummy code or a combined code is added is extracted as personal data column name entity data in the personal information data 25 record. Are stored in the storage device 107 as new migration table data 27.

  More specifically, the data combining unit 14 reads the non-personal information data 26a and the combined code column name data 24 from the storage device 107, and stores them in the combined code column name data 24 of the record read from the non-personal information data 26a. The given combined code is extracted, the personal information data 25 is read from the storage device 107, the record including the extracted combined code is extracted, and the personal information data 25 is added to the column name of the personal information to which the dummy code is assigned. The entity data read out from is reduced and stored in the storage device 107 as new migration table data 27.

Next, with reference to FIG. 12, the data combining process by the data combining means 14 according to the preferred embodiment of the present invention will be described.
First, in step S301, the data combining unit 14 reads the personal information data 25 and the non-personal information data 26a from the storage device 107. The personal information data 25 includes data examples as shown in FIG. 8, and the non-personal information data 26a includes data examples as shown in FIG. Further, in step S302, the data combination means 14 reads the combined code column name data 24 from the storage device 107. The combined code column name data 24 stores “address” as the combined code column name as shown in FIG.

  Next, with respect to all the records of the non-personal information data 26a, the records of the personal information data 25 to be given to the records are extracted and combined to generate new migration table data 27, which is stored in the storage device 107.

  Specifically, for the record read from the non-personal information data 26a, in step S303, a combined code that is entity data of the combined code column name is extracted. From the non-personal information data 26a, the entity data “” (null code) of the column name “employee code”, the entity data “” (null code) of the column name “name”, the entity data “30” of the column name “age”, The record in which the entity data “0001” of the column name “address” and the entity data “1” of the column name “salary classification” are associated is read. On the other hand, since the combined code column name data 24 describes “address”, as shown in FIG. 11, the entity data of the column name “address” of the first record of the non-personal information data 26a is set to “0001”, Extract as a combined code.

  Next, in step S304, a record is extracted from the personal information data 25 in which the entity data of the combined code column is the combined code extracted in step S303. Specifically, from the personal information data 25 shown in FIG. 8, a record in which the entity data of the column name “binding code” is “0001”, the entity data “A01” of the column name “employee code”, the column A record having entity data “A” of the name “name”, entity data “Shibuya-ku, Tokyo” of the column name “address”, and entity data “0001” of the column name “join code” is extracted.

  Next, the record read from the non-personal information data 26a and the record extracted in step S304 are combined to generate a new record. Specifically, the entity data “A01” of the column name “employee code”, the entity data “A” of the column name “name”, the entity data “30” of the column name “age”, and the entity data of the column name “address” A record in which the entity data “person in charge” of the column name “title” and the entity data “1” of the column name “salary classification” are associated is generated.

  In step S306, the generated new record is inserted into the migration table data 27 and stored in the storage device 107.

  By repeating the processing from step S303 to step S306, the migration table data 27 as shown in FIG. 13 is stored in the storage device 107.

  As described above, according to the personal information separating apparatus according to the best mode of the present invention, data relating to personnel / salary is separated into data including personal information and non-personal information data, and the system introduction side and the system provision The data exchanged on the side is only non-personal information, and a dummy code or the like is set in the entity data corresponding to the personal information. As a result, there is no need to exchange data between the system introduction side and the system providing side, so there is no risk of personal information leaking. Further, since the operator on the system providing side does not browse personal information, the possibility of verbal outflow is reduced.

(Other embodiments)
As described above, the present invention has been described according to the best mode for carrying out the invention. However, it should not be understood that the description and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  For example, the personal information separating apparatus described in the best mode of the present invention may be configured on a single piece of hardware as shown in FIG. 1, or a plurality of pieces of hardware depending on the functions and the number of processes. It may be configured above. Moreover, you may implement | achieve on the existing information system.

  Further, the personal information check list data 23 shown in FIG. 1 stores text data of the provisions of the Personal Information Protection Law, and the personal information check means 13 reads the personal information check list data 23 and transfers the migration table data 21. When extracting data corresponding to personal information from the system, a mechanism for determining whether or not the read personal information protection checklist data 23 matches the personal information indicated in the definition of the Personal Information Protection Law You may do it.

  It goes without saying that the present invention includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

The system block diagram of the information system which concerns on the best embodiment of this invention. The hardware block diagram of the personal information separation apparatus which concerns on the best embodiment of this invention. The flowchart of the information processing method in the information system which concerns on the best embodiment of this invention. The figure explaining the data structure and the example of data of the migration table data which are the object data of the process by the personal information separating apparatus according to the best embodiment of the present invention. The figure explaining an example of personal information column name data in the personal information separation apparatus concerning the best embodiment of the present invention. The flowchart explaining the data separation process by the data separation means of the personal information separation apparatus which concerns on the best embodiment of this invention. The figure explaining an example of the joint code column name data in the personal information separation apparatus which concerns on the best embodiment of this invention. The figure explaining the data structure and example of data of the personal information data in the personal information separation apparatus which concerns on the best embodiment of this invention. The figure explaining the data structure of non-personal information data and an example of data in the personal information separation apparatus concerning the best embodiment of the present invention. The figure explaining an example of the data of the personal information check list data in the personal information separation apparatus which concerns on the best embodiment of this invention. The figure explaining an example of the non-personal information data updated by the information terminal which concerns on the best embodiment of this invention. The flowchart explaining the data coupling | bonding process by the data coupling | bonding means of the personal information separation apparatus which concerns on best embodiment of this invention. The figure explaining the data structure and example of data of the transfer table data combined by the personal information separation device concerning the best mode of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Personal information separation apparatus 2 ... Information terminal 3 ... Information system 11 ... Column designation means 12 ... Data separation means 13 ... Personal information check means 14 ... Data combination means 21, 27 ... Migration table data 22 ... Personal information column name data 23 ... Personal information check list data 24 ... Binding code column name data 25 ... Personal information data 26, 26a ... Non-personal information data 27 ... Migration table data 101 ... Central processing control device 102 ... ROM
103 ... RAM
DESCRIPTION OF SYMBOLS 104 ... Input device 105 ... Display apparatus 106 ... Communication control device 107 ... Memory | storage device 108 ... Removable disk 109 ... Input / output interface 110 ... Bus 201 ... Non-personal information update means

Claims (6)

Means for storing target data to be separated into personal information data and non-personal information data in a storage device;
Means for extracting a column name related to personal information from the target data, and storing the extracted column name in the storage device as personal information column name data;
The target data is read from the storage device, and a combination code for identifying the read record is assigned to the read target data record, and the personal information column name data is read from the storage device. , Assigning a dummy code as entity data of the column name of the personal information, storing a record including the provided dummy code and the combined code in the storage device as non-personal information data and reading the data Means for storing in the storage device as personal information data a record including entity data of the column name of the personal information and the binding code for the record;
Reading the personal information data and the non-personal information data from the storage device, extracting records associated with a predetermined combination code from the personal information data and the non-personal information data, respectively, And a means for storing the actual data of the column name of the personal information with respect to the dummy code as new target data in the storage device. In the non-personal information data, the combination code is at least one entity data of the personal information column name, and the dummy code is entity data of the column name of the personal information to which the combination code is not assigned. And
The means for storing the new target data in the storage device reads the personal information data and the non-personal information data from the storage device, and performs a predetermined combination from the personal information data and the non-personal information data. Each record associated with a code is extracted, and the entity data of the column name of the personal information to which the dummy code or the combined code is assigned in the non-personal information data record is extracted in the personal information data record. The personal information separation device according to claim 1, wherein the personal information separation device is a unit that is added as entity data of a column name of personal information and is stored in the storage device as new target data. Means for storing in the storage device a column name that is not included in the personal information column name data and that is obtained by adding the combination code to the non-personal information as combined code column name data;
The means for storing in the storage device as personal information data reads the target data from the storage device, and assigns a combination code for identifying the read record for the read record, and the storage device The personal information column name data and the combined code column name data are read from, the combined code is assigned as entity data of the combined code column name data, and a dummy code is assigned as entity data of the column name of the personal information Means for storing a record in the storage device as non-personal information data, and storing in the storage device a record including entity data of the column name of the personal information and the combination code for the read record as personal information data Because
The means for storing the new target data in the storage device reads the non-personal information data and the combination code column name data from the storage device, and the combination code of the record read from the non-personal information data The combined code to which column name data is assigned is extracted, the personal information data is read from the storage device, a record including the extracted combined code is extracted, and the personal information to which the dummy code is assigned The personal information separation device according to claim 1, wherein the data is stored in the storage device as new target data by reducing the entity data read from the personal information data to the column name. Read target data to be separated into personal information data and non-personal information data from the storage device, extract a column name related to personal information from the target data, and use the extracted column name as personal information column name data Means for storing in a storage device;
The target data is read from the storage device, and a combination code for identifying the read record is assigned to the read target data record, and the personal information column name data is read from the storage device. , Assigning a dummy code as entity data of the column name of the personal information, storing a record including the provided dummy code and the combined code in the storage device as non-personal information data and reading the data Means for storing in the storage device as personal information data a record including entity data of the column name of the personal information and the binding code for the record;
Reading the personal information data and the non-personal information data from the storage device, extracting records associated with a predetermined combination code from the personal information data and the non-personal information data, respectively, A personal information separation program which causes a computer to execute means for storing the actual data of column names of the personal information as new target data in the dummy code. In the non-personal information data, the combination code is at least one entity data of the personal information column name, and the dummy code is entity data of the column name of the personal information to which the combination code is not assigned. And
The means for storing the new target data in the storage device reads the personal information data and the non-personal information data from the storage device, and performs a predetermined combination from the personal information data and the non-personal information data. Each of the records associated with the code is extracted, and as the entity data of the column name of the personal information to which the dummy code or the combined code is assigned in the non-personal information data record, the personal information data record 5. The personal information separation program according to claim 4, wherein the data is a means for assigning entity data of column names of personal information and storing the data as new target data in the storage device. The computer further executes means for storing the column name that is not included in the personal information column name data and that gives the non-personal information the column name to the non-personal information as the combined code column name data in the storage device,
The means for storing in the storage device as personal information data reads the target data from the storage device, and assigns a combination code for identifying the read record for the read record, and the storage device The personal information column name data and the combined code column name data are read from, the combined code is assigned as entity data of the combined code column name data, and a dummy code is assigned as entity data of the column name of the personal information Means for storing a record in the storage device as non-personal information data, and storing in the storage device a record including entity data of the column name of the personal information and the combination code for the read record as personal information data Because
The means for storing the new target data in the storage device reads the non-personal information data and the combination code column name data from the storage device, and the combination code of the record read from the non-personal information data The combined code assigned to column name data is extracted, the personal information data is read from the storage device, a record including the extracted combined code is extracted, and the personal information to which the dummy code is assigned 5. The personal information separation according to claim 4, wherein the data is stored in the storage device as new target data by reducing the entity data read from the personal information data to a column name of program.

Images