JP2015225447A - Information providing device, information providing method, and information providing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information providing device, an information providing method, and an information providing program capable of suppressing the leakage of personal information.SOLUTION: The information providing device includes: a service providing part 22 for providing a service to a user in accordance with the input of individual information by the user; an association part 30 for converting the individual information input to the service providing part into post-conversion information incapable of specifying an individual, and for allowing a storage part to store the history information and/or attribute information of the service performed by the service providing part in association with the post-conversion information; and an information matching part 34 for searching the storage part on the basis of collation information designating the provision history and/or attribute information of the service being a search target input from the other device, and for extracting the post-conversion information and/or attribute information corresponding to the collation information among the information stored by the storage part, and for outputting it to the other device.

Description

  The present invention relates to an information providing apparatus, an information providing method, and an information providing program.

  Big data is a collection of large and complex data sets that are difficult to process with database management tools and conventional data processing applications. For many companies so far, the purpose of data utilization is, for example, trends in big data such as finding business trends, research quality determination, disease prevention, linking legal citations, crime prevention, and real-time road traffic situation determination. The analysis was centered on. Here, among companies that handle big data, there are companies that analyze personal information of users included in big data and use it for providing various services. Companies that collect big data that contains personal information often outsource analysis processing of the collected data to a third party. There is a growing concern that it will be grasped.

  Here, Patent Document 1 stores both personal information such as the user's name, gender, date of birth, address, and the user's action history, and by using these information, It describes a technique for estimating a product that shows a user's interest. And in this patent document 1, it is possible to provide various services by collecting various data including personal information and performing various analyses.

JP 2006-185293 A

  However, the technique described in Patent Document 1 does not specifically disclose how to suppress leakage of personal information when providing data by collecting data including personal information. That is, it is desirable to prevent personal information from leaking when providing services using information related to individuals.

  The present invention has been made in view of such circumstances, and an object thereof is to provide an information providing apparatus, an information providing method, and an information providing program capable of suppressing leakage of personal information. To do.

  According to one aspect of the present invention, in response to input of personal information by a user, the service providing unit that provides a service to the user and the personal information input to the service providing unit cannot identify an individual. Corresponding information collecting unit that converts the history information and / or attribute information of the service performed by the service providing unit into the storage unit in association with the post-conversion information, and is input from another device. Further, the storage unit is searched on the basis of collation information designating service providing history and / or attribute information to be searched, and post-conversion information corresponding to the collation information among the information stored in the storage unit, and And / or an information matching unit that extracts attribute information and outputs the attribute information to the other device.

  In one aspect of the present invention, the correspondence information collection unit may store identification information corresponding to a combination of types of personal information subjected to the conversion process in the storage unit in association with the converted information. Good.

  1 aspect of this invention WHEREIN: The said information matching part is good also as what extracts the post-conversion information and the said identification information corresponding to the said collation information, and outputs them to the said other apparatus.

  In one aspect of the present invention, the service providing unit provides a service to a user based on information requested from the plurality of other devices, and the correspondence information collecting unit is configured to provide a service performed by the service providing unit. History information and / or attribute information is stored in the storage unit in association with the requesting other device, and the information matching unit corresponds to the other device using the collation information input from the other device. Regardless of the attachment, the storage unit is searched, the converted information and / or attribute information corresponding to the collation information is extracted from the information stored in the storage unit, and the other source of the collation information is input It is good also as what outputs to an apparatus.

  In one aspect of the present invention, the service providing unit provides a service to a user based on information requested from the plurality of other devices, and the correspondence information collecting unit is configured to provide a service performed by the service providing unit. History information and / or attribute information is stored in the storage unit in association with the requesting other device, and the information matching unit corresponds to the other device based on the collation information input from the other device. Regardless of attachment, the storage unit is searched, and the post-conversion information and / or attribute information corresponding to the collation information is extracted from the information stored in the storage unit, and is output to a plurality of other devices. It may be a thing.

  Another aspect of the present invention provides post-conversion information that provides a service to a user in response to an input of personal information by the user, and the personal information input for providing the service cannot identify an individual. And the history information and / or attribute information of the performed service is stored in the storage unit in association with the post-conversion information, and the service provision history of the search target input from another device and The other unit searches for the storage unit based on collation information designating attribute information and extracts post-conversion information and / or attribute information corresponding to the collation information from the information stored in the storage unit This is an information provision method that is output to

  According to another aspect of the present invention, a process for providing a service to a user in response to the input of personal information by the user to the computer, and the personal information input for the provision of the service are specified for the individual. A process for converting the information to the converted information that cannot be obtained, storing the history information and / or attribute information of the performed service in the storage unit in association with the converted information, and a search target input from another device The storage unit is searched based on collation information designating service provision history and / or attribute information, and converted information and / or attribute information corresponding to the collation information among the information stored in the storage unit The information providing program for executing the process of extracting and outputting to the other device.

  According to the present invention, in response to the input of personal information by the user, the service is provided to the user, and the personal information input for providing the service is converted into post-conversion information that cannot identify the individual. In addition, the history information of the service performed by the service providing unit is stored in the storage unit in association with the post-conversion information, and the storage unit is searched using the collation information specifying the history information input from another device, Since post-conversion information corresponding to the collation information is extracted and output to another device, leakage of personal information can be suppressed.

It is a figure which shows typically an example of a structure of the consignment service provision apparatus 1 which concerns on 1st Embodiment. It is a figure which shows the function structural example of the commission service provision apparatus. It is a figure which shows a mode that the information conversion part 14 converts the personal information of the personal information acquired by the personal information management part 12 into an irreversible code | symbol. 4 is a diagram illustrating an example of information stored in a personal information storage unit 10. FIG. It is a figure which shows together an example of the history information of the user in which the image of the shopping site which the service provision part 22 provides, and the user showed the utilization condition of the shopping site. It is a figure which shows an example of the information memorize | stored by the log | history information storage part. It is a figure which shows an example of the data request which designates history information and requests | requires that applicable applicable information should be transmitted. It is a flowchart which shows an example of the process performed by the personal information processing apparatus 5 of this embodiment. It is a flowchart which shows an example of the conversion process performed by the information conversion part 14 of this embodiment. It is a flowchart which shows an example of the process performed by the information provision apparatus 7 of this embodiment. It is a flowchart which shows an example of the process performed by the information matching part of the information provision apparatus 7 of this embodiment. It is a flowchart which shows an example of the process performed by the information provision apparatus 7 of this embodiment. It is a figure which shows typically an example of a structure of the consignment service provision apparatus 1 which concerns on 2nd Embodiment.

  Hereinafter, embodiments of an information providing apparatus, an information providing method, and an information providing program according to the present invention will be described with reference to the drawings.

<First Embodiment>
Hereinafter, an embodiment of the commission service providing apparatus 1 according to the first embodiment will be described. FIG. 1 is a diagram schematically illustrating an example of a configuration of a consignment service providing apparatus 1 according to the first embodiment. The commissioned service providing apparatus 1 is an apparatus operated by, for example, a service provisioning contractor X that commissions service provision from service provisioning contractors A and B such as companies and organizations. The commissioned service providing apparatus 1 receives business information from the upper server Sa operated by the service provider A and the upper server Sb operated by the service provider B. The business information includes personal information and attribute information of the users Ua to Uc who are customers of the service provision entrustor A, service providing information provided to the users Ua to Uc, and other information.

  The commission service providing device 1 provides various services to the users Ua to Uc based on the personal information of the users Ua to Uc received from the higher order servers Sa and Sb. The commissioned service providing apparatus 1 is connected to the upper servers Sa and Sb and user terminals Ta to Tc used by the users Ua to Uc via a network NW including the Internet, a LAN (Local Area Network), a mobile phone network, and the like. Can communicate with each other. Hereinafter, when it is not distinguished which of the higher servers, it is simply referred to as “higher server S”. In addition, when it is not distinguished which user, it is simply referred to as “user U”. In addition, when the user terminal is not distinguished, it is simply referred to as “user terminal T”. In the present embodiment, there are no particular restrictions on the number of upper servers and the number of users.

  The commissioned service providing apparatus 1 includes, for example, a processor such as a central processing unit (CPU), a read only memory (ROM), a random access memory (RAM), a hard disk drive (HDD), and an EEPROM (electrically readable memory). A computer device including a storage device such as a flash memory and a communication interface for communicating with other devices.

  FIG. 2 is a diagram illustrating a functional configuration example of the commissioned service providing apparatus 1. The contract service providing apparatus 1 includes a personal information storage unit 10, a personal information management unit 12, an information conversion unit 14, a service providing information output unit 20, a service providing unit 22, an association unit 30, and history information. A storage unit 32 and an information matching unit 34 are provided. Among these, the one including the personal information storage unit 10, the personal information management unit 12, and the information conversion unit 14 corresponds to the personal information processing device 5, and includes a service providing unit 22, an association unit 30, a history A device including the information storage unit 32 and the information matching unit 34 corresponds to the information providing device 7.

  The personal information management unit 12, the information conversion unit 14, the service providing information output unit 20, the service providing unit 22, the association unit 30, and the information matching unit 34, for example, execute a program stored in a storage device by a processor. It is a software function part that functions by Some or all of these functional units may be hardware functional units such as LSI (Large Scale Integration) and ASIC (Application Specific Integrated Circuit). The personal information storage unit 10 and the history information storage unit 32 are realized by the above-described ROM, RAM, HDD, or the like. The program executed by the processor may be stored in the storage device in advance when the device is introduced, or the program stored in the portable storage medium may be installed in the storage device of the commissioned service providing device 1. In addition, the program may be downloaded from another computer device by Internet equipment and installed in the storage device of the commissioned service providing device 1.

  The personal information management unit 12 stores the business information received from the host server S in the personal information storage unit 10. The personal information management unit 12 reads business information stored in the personal information storage unit 10 and provides it to other functional units. The personal information management unit 12 erases at least the personal information of the user U from the business information stored in the personal information storage unit 10 when a predetermined condition is satisfied. The predetermined condition is, for example, that both the process in which the information conversion unit 14 converts personal information into an irreversible code and the process in which the service providing information output unit 20 outputs service providing information to the user U are completed. It is that.

  The information conversion unit 14 converts personal information in the business information acquired by the personal information management unit 12 into post-conversion information that cannot identify an individual, and stores the information in the personal information storage unit 10 via the personal information management unit 12. Remember. The personal information includes, for example, a name, an address, an e-mail address, a telephone number, and the like. In addition, the personal information may include information uniquely set by the service provider. The attribute information included in the business information is, for example, age, gender, occupation, etc., and “other information” is information that is not converted by the information conversion unit 14 and may include user-specific information. .

  The information conversion unit 14 converts personal information into an irreversible code using, for example, a one-way function. For example, the information conversion unit 14 performs a conversion process using an irreversible code by inputting an arbitrary length data block stored in the personal information by a hash function and converting the data block into a hash value that is a fixed-length bit string. When the personal information includes a plurality of components such as names and addresses, the information conversion unit 14 concatenates the results of hashing each component without adding a blank space to one hashed data. Get. In addition, the information conversion unit 14 may generate an encryption key, a public key, or the like using a hash function from a shared secret generated by Diffie-Hellman key sharing, and may encrypt personal information. The public key generated by the information conversion unit 14 may be managed by a third party organization.

  FIG. 3 is a diagram showing how the information conversion unit 14 converts the personal information acquired by the personal information management unit 12 into an irreversible code. When the personal information is converted into a hash value that is an irreversible code by a hash function that is a one-way function (hereinafter referred to as “hashing”), the combination is changed according to the combination of the components that constitute the personal information Identification information (hereinafter referred to as “hashed field”) is formed. For example, when hashing only the name of personal information, the hashed field is 1, and when hashing is performed on the combination of name and address, the hashed field is 2. Such a field allocation rule is defined in, for example, the hashed field table 14A, and the information conversion unit 14 performs field allocation based on the information stored in the hashed field table 14A.

  The information conversion unit 14 concatenates the irreversible codes hashed according to the hashed field without a blank space. For example, the information conversion unit 14 connects the hash value of the hashed name and the hash value of the address without a blank space and treats them as one irreversible code. As shown in FIG. 3, when the personal information includes a name, an address, and a mail address, the information conversion unit 14 may form up to seven types of hashed fields for one user. Since the hashed field and the irreversible code have a one-to-one relationship, seven irreversible codes are attached to each user.

  FIG. 4 is a diagram illustrating an example of information stored in the personal information storage unit 10. The information conversion unit 14 connects the post-conversion information converted by the information conversion unit 14 and the hashed field allocated based on the information stored in the hashed field table 14A. Then, the information conversion unit 14 stores the personal information and attribute information acquired by the personal information management unit 12 via the personal information management unit 12, the converted information, and the hashed field in association with each other. Store in the unit 10. Note that the post-conversion information and the hashed field are stored in the personal information storage unit 10 only as an example, and these pieces of information may be stored in a storage device separate from the personal information.

  The service providing information output unit 20 outputs service providing information to the user U based on the business information stored in the personal information storage unit 10. The information for service provision is, for example, information for sales promotion created by a service provider, information on new products, information on special sales, and the like. The information for providing the service is sent to the user U via, for example, a direct mail, a business mail, or an electronic recording medium as a paper medium that guides service enjoyment. That is, the service providing information output unit 20 performs processing such as outputting information including a user's name and address to a printing machine or transmitting the information to a reception terminal of a printing company or a shipping company of an electronic recording medium. Note that the paper medium and the electronic recording medium may include an identification code, a password, and the like necessary for receiving the service. For example, post-conversion information converted by the information conversion unit 14 is used as the identification code.

  The service providing unit 22 provides a predetermined service via the network NW to the user terminal T that has accessed the commissioned service providing apparatus 1 according to the service providing information output by the service providing information output unit 20. To do. The service providing unit 22 generates a website for providing electronic commerce services such as Internet shopping, net banking, and net auction, and provides the website to the user terminal T.

  FIG. 5 shows, as an example, an image of a shopping site provided by the service providing unit 22 and information on a user's usage history indicating the usage status of the shopping site (hereinafter referred to as “history information”). FIG. The user U inputs the identification code sent to the user U by the service providing information output unit 20 in the input field of the website provided by the service providing unit 22. Alternatively, the user U inputs the personal information and attribute information of the user U into the input field of the website. In the example of FIG. 5, the user U inputs his / her name and e-mail address as personal information in the input field of the website, and inputs age and sex as attribute information. The user U accesses the website provided by the service providing unit 22 after completing the input of personal information and attribute information.

  The service providing unit 22 collects history information of services provided by itself while providing services. The service history information includes, for example, history information of a website provided by itself. When the service providing unit 22 provides a service via the Internet, the history information includes the remote host name and remote address assigned to the terminal of the user U, the OS (Operating System), the browser name, and the website name. Information such as browsing order and electronic commerce on the website may be included. When the user U accesses the service providing unit 22 via the telephone line network, the history information may include information such as a telephone number, a telephone body number, and a call voice. As shown in FIG. 5, when the user U browses the A product displayed on the shopping site, the service providing unit 22 has a value of 1 indicating that the web history 1 indicating the browsing history of the A product has been browsed. To. Similarly, when the user U browses the product B, the service providing unit 22 sets the web history 2 to a value of 1. When the user U is not browsing the product C, the service providing unit 22 maintains the web history 3 at a value of 0. Note that the service providing unit 22 may arbitrarily delete the personal information input by the user U. Furthermore, the service providing unit 22 may notify the user U that history information is being collected, and may have a function of stopping the collection of history information according to the user U's wishes.

  When the service providing unit 22 provides the service, the associating unit 30 requests the information converting unit 14 to convert the personal information input as an opportunity to receive the service. Then, the association unit 30 associates the post-conversion information converted by the information conversion unit 14 with the history information collected by the service providing unit 22 and stored in the history information storage unit 32, and the history information storage unit 32 Remember me. The association unit 30 may store the converted information and the attribute information in association with each other in addition to storing the converted information and the history information in association with each other in the history information storage unit 32. The post information, history information, and attribute information may be stored in association with each other. FIG. 6 is a diagram illustrating an example of information stored by the history information storage unit 32. As shown in FIG. 6, when obtaining post-conversion information, the history information storage unit 32 is provided with a hashed field corresponding to the type of personal information that has been converted. For example, a record whose hashed field is “3” indicates that a name and an e-mail address have been input as personal information (see FIG. 3). The history information may be collected by the association unit 30. Further, the associating unit 30 may cause the history information storing unit 32 to store only the post-conversion information and the hashed field stored in the personal information storing unit 10.

  The information matching unit 34 responds to a data request from the history information stored in the history information storage unit 32 based on the collation information received from the host server S (hereinafter referred to as “data request”) (conformity). Extracted conformance information. The data request designates service provision history (for example, either history information or attribute information, or both history information and attribute information), and corresponding applicable information (for example, post-conversion information, hashing) Field and attribute information). In the example of FIG. 7, the data request is, for example, a request to extract post-conversion information and a hashed field in which the value of the web history 1 is 1 from the history information stored in the history information storage unit 32. The information matching unit 34 extracts two pieces of matching information (for web history 1 = 1) that match the data request from the history information stored in the history information storage unit 32 and returns the extracted information to the upper server S. Here, it is sufficient that the data request can be specified with respect to the service provision history. For example, the specific history contents of the history information may be specified, or there is a provision history without specifying the specific history contents. You may specify the whole thing (the whole history information memorize | stored in the history information storage part 32). In addition, for example, by storing only specific history information in the history information storage unit 32, it is possible to make a data request without specifying specific history contents.

  The upper server S restores the personal information of the user U from the matching information returned from the contract service providing apparatus 1 based on, for example, the hashed field included in the matching information and the encryption key held in advance. To do. Note that the restoration of the personal information described above may be performed not by the host server S but by the commissioned service providing apparatus 1. Further, the upper server S hashes the user's personal information included in the business information transmitted to the personal information management unit 12 and is included in the irreversible code of the hashed personal information and the matching information extracted by the information matching unit 34. The user U may be specified by collating with the irreversible code. Note that hashing of personal information performed by the upper server S is performed by the same method as the conversion process performed by the information conversion unit 14.

[Operation Flow of Personal Information Processing Device 5]
FIG. 8 is a flowchart showing an example of processing executed by the personal information processing apparatus 5 of the present embodiment. This flowchart is repeatedly executed at a predetermined cycle, for example. First, the personal information management unit 12 acquires business information from the host server S and stores it in the personal information storage unit 10 (step S100). Next, the information conversion unit 14 converts the personal information in the business information acquired by the personal information management unit 12 into post-conversion information that cannot identify an individual (step S102). Next, the information conversion unit 14 stores the converted information in the personal information storage unit 10 via the personal information management unit 12 (step S104). Next, the personal information management unit 12 determines whether or not a predetermined condition is satisfied (step S106). Next, when the predetermined condition is satisfied, the personal information management unit 12 deletes at least the personal information of the user U from the business information stored in the personal information storage unit 10 (step S108). Thereby, the process of this flowchart is complete | finished.

[Conversion Operation Flow of Information Conversion Unit 14]
FIG. 9 is a flowchart illustrating an example of the conversion process executed by the information conversion unit 14 of the present embodiment. The process of this flowchart corresponds to the process of step S102 in the flowchart of FIG. First, the information conversion unit 14 converts personal information into a hash value that is an irreversible code using a hash function that is a one-way function (step S200). When converting to an irreversible code, the information conversion unit 14 may generate an encryption key or a public key and encrypt the converted irreversible code. Next, the information conversion unit 14 forms a hashed field according to the combination of the constituent items constituting the personal information (step S202). Next, the information conversion unit 14 concatenates the irreversible codes hashed according to the hashed field without a blank space (step S204).

[Operation Flow of Information Providing Device 7]
FIG. 10 is a flowchart illustrating an example of processing executed by the information providing apparatus 7 of this embodiment. First, the service providing unit 22 confirms personal information input by the user as an opportunity to receive service provision (step S300). Next, according to the service providing information output by the service providing information output unit 20, the service providing unit 22 sends a predetermined amount to the user terminal T that has accessed the commissioned service providing apparatus 1 via the network NW. A service is provided (step S302). Next, while providing the service, the service providing unit 22 collects history information of the service provided by the service providing unit 22 (step S304).

  On the other hand, the association unit 30 requests the information conversion unit 14 to convert the input personal information (step S306). Next, in response to a request for conversion of personal information by the associating unit 30, the information converting unit 14 converts the personal information into post-conversion information that cannot identify an individual (step S308). The process in step S308 is the same as the process described in FIG. 9, for example. Next, the associating unit 30 collects the converted information and attribute information converted by the information converting unit 14 and stored in the personal information storing unit 10, and is collected by the service providing unit 22 and stored in the history information storing unit 32. The history information is associated (step S310). Next, the association unit 30 stores the associated history information in the history information storage unit 32 (step S312). Thereby, the process of this flowchart is complete | finished.

[Operation Flow of Information Matching Unit of Information Providing Device 7]
FIG. 11 is a flowchart illustrating an example of processing executed by the information matching unit of the information providing apparatus 7 according to the present embodiment. First, the information matching unit 34 determines whether or not a data request has been received from the upper server S (step S400). When the data request is received from the upper server S, the information matching unit 34 extracts the matching information suitable for the data request from the history information stored in the history information storage unit 32, and sends the matching information to the upper server S. Is transmitted (step S402). Thereby, the process of this flowchart is complete | finished.

[Other operation flow]
FIG. 12 is a flowchart showing an example of processing executed by the information providing apparatus 7 of this embodiment. First, the personal information management unit 12 first acquires the personal information of all users from the host server S (step S500). Next, the information conversion unit 14 converts the personal information of all users acquired by the personal information management unit 12 into post-conversion information that cannot identify individuals (step S502). The process in step S502 is the same as the process described in FIG. 9, for example. Next, the information providing device 7 (which may be any functional unit) is stored in the history information storage unit 32 using the post-conversion information converted by the information conversion unit 14 and stored in the personal information storage unit 10. The history information is searched (step S504). Next, the information providing apparatus 7 transmits the search result to the upper server S (step S506). Next, the personal information management unit 12 acquires business information (personal information and information for service provision) from the upper server S (step S508). Next, the service providing unit 22 provides a predetermined service via the network NW to the user terminal T that has accessed the commissioned service providing apparatus 1 according to the business information output by the service providing information output unit 20. (Step S510). Then, the information providing apparatus 7 collects history information as described above, and deletes the information for providing the service when the service provision ends. By such processing, the host server S operated by the service providing consignor does not need to know to which consignor the service provision has been consigned, and a better service can be provided to the upper server.

According to the personal information processing apparatus 5 of the present embodiment described above, leakage of personal information by converting personal information of a user who is a customer of a service provider to converted information that cannot identify an individual. Can be suppressed.
Moreover, according to the personal information processing apparatus 5 of the present embodiment, leakage of personal information can be suppressed more strongly by erasing personal information after temporarily storing it.
In addition, according to the information providing apparatus 7 of the present embodiment, by collecting user history information without holding personal information, it is possible to suppress leakage of personal information when collecting history information. be able to.
Further, according to the information providing apparatus 7 of the present embodiment, the restoration in the upper server can be facilitated by returning the hashed field together with the post-conversion information to the upper server S.

  Moreover, according to the consignment service providing apparatus 1 of the present embodiment, it is possible to provide a service entrusted by a service provision entrustor while suppressing leakage of personal information.

Second Embodiment
Hereinafter, an embodiment of the contract service providing apparatus 1 (particularly the information providing apparatus 7) according to the second embodiment will be described.
FIG. 13 is a diagram schematically illustrating an example of the configuration of the commission service providing apparatus 1 according to the second embodiment. In the case of processing similar to that of the commissioned service providing apparatus 1 according to the first embodiment described above, description thereof is omitted.

  For example, in response to a data request of the service provider A, the information matching unit 34 crosses the history information collected by the information provider 7 based on the business information commissioned by the service providers B and C. Relevant information is searched and extracted. For example, if service provider A is a restaurant industry and service provider B is an amusement industry, service provider A is a user of an amusement facility and is installed in the amusement facility. It is possible to obtain history information of users of the eating and drinking facilities. At this time, the user history information is information including at least one of attribute information and post-conversion information in addition to information on the constituent elements constituting the history information. Here, for example, when the matching information is retrieved from the history information resulting from the service entrusted by the service provider A for the data request of the service provider A, the information matching unit 34 The history information including the post-conversion information is transmitted to the upper server Sa. If the service provider is a service provider who uses the present invention, the matching information extracted by the information matching unit 34 is the service provider A who has requested the data request with the consent of the user U or the service provider A. It may be sent to the service provider contractors B and C as well. At this time, for example, when the information matching unit 34 retrieves the matching information from the history information resulting from the services entrusted by the service providing entrusters B and C with respect to the data request of the service providing entrustor A, the conforming information is The history information excluding post-conversion information is transmitted to the upper server Sa. For example, a non-life insurance company may obtain history information collected from service provision entrusted by an agricultural, forestry and fishery organization. In this case, the property / casualty insurance company can search for agricultural / forestry / fishery workers from historical information collected from the provision of services entrusted by the agriculture / forestry / fishery organization and send information on property / casualty insurance to the agriculture / forestry / fishery workers. .

According to the information providing device 7 of the second embodiment, when service provision is entrusted from service providers of different industries, the history information of different industries is collected, and the collected history information is collected into different industries. Can be sent to the service provider. As a result, convenience can be improved.
In general, there are multiple service providers who provide services, and when each service provider stores user history information without specifying an individual and tries to use these history information, the same usage is used. Even the history information of a user can be grasped only as history information of another user. In other words, even if the same person receives services from a plurality of service providers, the individual is not specified, so that each piece of history information cannot be stored in association with the history information of the same person. In this case, a plurality of pieces of history information can be obtained, but the relevance of the history information cannot be grasped. However, according to the above-described embodiment, even history information associated with service provision of different service provisioning consignors can be stored in association with post-conversion information based on personal information. It becomes possible to grasp whether it is information.

  As mentioned above, although the form for implementing this invention was demonstrated using embodiment, this invention is not limited to such embodiment at all, In the range which does not deviate from the summary of this invention, various deformation | transformation and substitution Can be added.

  S, Sa, Sb, Sc ... host server, T, Ta, Tb, Tc ... user terminal, U, Ua, Ub, Uc ... user, NW ... network, 1 ... trust service providing device, 5 ... personal information processing Device: 7 ... Information providing device, 10 ... Personal information storage unit, 12 ... Personal information management unit, 14 ... Information converting unit, 14A ... Hashed field table, 20 ... Information providing unit for providing service, 22 ... Service providing unit, 30 ... Association unit, 32 ... History information storage unit, 34 ... Information matching unit

Claims (7)

A service providing unit that provides services to the user in response to the input of personal information by the user;
The personal information input to the service providing unit is converted into post-conversion information that cannot identify an individual, and history information and / or attribute information of a service performed by the service providing unit is converted into the post-conversion information. A correspondence information collecting unit to be stored in the storage unit in association with,
The storage unit is searched based on collation information that specifies the service providing history and / or attribute information input from another device, and corresponds to the collation information among the information stored in the storage unit An information matching unit that extracts post-conversion information and / or attribute information to output to the other device;
An information providing apparatus comprising: The correspondence information collection unit stores identification information corresponding to a combination of types of personal information subjected to the conversion process in the storage unit in association with the converted information.
The information providing apparatus according to claim 1. The information matching unit extracts post-conversion information and the identification information corresponding to the collation information and outputs them to the other device.
The information providing apparatus according to claim 2. The service providing unit provides a service to a user based on information requested from the plurality of other devices,
The correspondence information collection unit stores the history information and / or attribute information of the service performed by the service providing unit in the storage unit in association with the other device of the request source,
The information matching unit searches the storage unit regardless of association with another device using the verification information input from the other device, and the verification information among the information stored in the storage unit The post-conversion information and / or attribute information corresponding to the above is extracted and output to the other device that is the input source of the collation information.
The information providing device according to any one of claims 1 to 3. The service providing unit provides a service to a user based on information requested from the plurality of other devices,
The correspondence information collection unit stores the history information and / or attribute information of the service performed by the service providing unit in the storage unit in association with the other device of the request source,
The information matching unit searches the storage unit regardless of association with another device based on the collation information input from the other device, and the collation information among the information stored in the storage unit Extracting the post-conversion information and / or attribute information corresponding to and outputting to a plurality of the other devices,
The information providing apparatus according to any one of claims 1 to 4. Provide services to users in response to the input of personal information by users,
The personal information input for providing the service is converted into post-conversion information that cannot identify an individual, and the history information and / or attribute information of the service performed is associated with the post-conversion information. And store it in the memory
The storage unit is searched based on collation information that specifies the service provision history and / or attribute information that is input from another device, and corresponds to the collation information among the information stored in the storage unit To extract post-conversion information and / or attribute information to output to the other device,
Information provision method. On the computer,
A process of providing a service to the user in response to the input of personal information by the user;
The personal information input for providing the service is converted into post-conversion information that cannot identify an individual, and the history information and / or attribute information of the service performed is associated with the post-conversion information. Processing to be stored in the storage unit,
The storage unit is searched based on collation information that specifies the service provision history and / or attribute information that is input from another device, and corresponds to the collation information among the information stored in the storage unit Processing to extract post-conversion information and / or attribute information to be output to the other device;
Information providing program that executes

Images