JP6690993B2 - Information management device and information management method - Google Patents

Description

  The present invention relates to information management technology.

  In information management technology, for example, database management technology that stores data, the date and time when the application reads data from the database it manages, the identifier of the application that read it, the identifier of the user of the application that read it, and the reading It is possible to output the usage information including the confused database name (for example, see Patent Document 1).

Patent International Publication 2013/024673

  However, the owner of the data in the database is generally implicitly assumed to be the same as the user of the application, so consider using an application's data from multiple owners. Not not.

  Therefore, the information management system is not intended to have information about the owner of the data or under what kind of license condition the data is collected from the owner of the data.

  On the other hand, regarding data management, generally, data collected from owners of a plurality of data are mixed and managed in one database. Therefore, assuming that the usage permission is read, if the application reads the data from the database, all the data of multiple owners will be read, and all owners who store the data in the database agree to use. There is a problem that data cannot be read by other than the specified application, and the restrictions on data usage become very strong.

  An object of the present invention is to provide a data management technique that imposes restrictions on the use of data by an application and leaves the freedom of use of data from a practical viewpoint.

  In addition, when the data owner provides the data to the data user based on the license agreement presented at the time of data collection, the data owner should be able to confirm whether the data is properly used according to the presented license agreement. , The purpose is to be able to confirm whether the proper use has been made when a third party audits the proper use of the data.

  According to one aspect of the present invention, each time there is a data acquisition request from an application, a log ID, a user ID of a user (client) who has executed the application, and a database ID of a database in which the read data is stored. A usage information creation unit that creates usage information having an application ID that identifies the application that has read the data; and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. And an owner information DB that stores a data owner ID, a database ID in which the data is stored, and a license agreement ID that uniquely identifies the data license agreement. , A license for storing the license condition ID and the application ID of the data license target The database ID and the license agreement ID, which are associated with the information DB and are obtained by searching the owner information DB based on the input owner ID, are acquired, and the acquired license agreement ID is searched. A list of application IDs obtained by searching the usage permission information DB as a key is acquired, the usage information log DB is searched using the acquired database ID as a search key, and the application ID is not obtained as a search result. If the application ID is obtained as the search result and the application ID is only in the list of the application IDs, it is determined to be the proper use, and the application ID is obtained as the search result. And the application ID is the application ID. If not only those in the list, by determining an unauthorized use, proper use of the data, the information management apparatus having a proper usage determining unit to provide support for improper determination is provided.

  If the application ID is not obtained, or if the application ID is obtained as the search result and the application ID is only in the list of the application IDs, the license condition is satisfied. Since it is used, it is determined to be appropriate. When the application ID is obtained as the search result and the application ID is not only one in the list of the application IDs, it is determined that the data is illegally used by the application that does not satisfy the license condition. You can

  Furthermore, the usage information creation unit creates the usage information by including the execution range, which is the range of the country or organization in which the application is executed, in the usage information, and is given the usage permission condition ID and permission for data usage. Is associated with a data usage permission range information DB that stores data usage permission range information having a permission range ID that is a range of a country or organization, and the data usage permission range information DB is used with the usage permission condition ID as a search key. A list of permission range IDs obtained by searching for the permission range ID, and the proper use determination unit further determines the execution range obtained by searching the utilization information log DB using the database ID as a search key. It is appropriate to support the determination of the appropriateness or inadequacy of the use of data by determining that the use is appropriate only when the range ID is only in the list. It is preferred to have the usage determining unit.

  It is preferable that the permission range specified by the permission range ID is a law or regulation defined by region or company.

  Even if the usage of the data meets the private license conditions, there is a possibility that it may not be legally recognized.Assuming that there is a possibility of unauthorized use, the possibility of unauthorized use is identified. can do.

  It is characterized in that, in response to the notification from the data owner that the application is not permitted to be used, the application ID that is not permitted is deleted from the data use permission condition in the use permission information DB.

  A collection data information DB that stores collection data information that has a database ID, a data ID that identifies the data, a data usage permission condition, and a data body for each owner ID that identifies the owner of the collected data. , Owner information having a data owner ID, a database ID for identifying a DB name storing the data owner's data, an ID for identifying a license condition at the time of data collection, and a license date And a data management unit that manages the owner information DB associated with the owner information DB by the database ID, and the log of the usage information includes usage date and time information when the application used the data. The proper use determination unit further determines whether the use of the data is appropriate based on the relationship between the use permission condition and the use date and time of the data in the log. And performing support to determine whether.

  According to another aspect of the present invention, every time there is a data acquisition request from an application, a log ID, a user ID of a user (client) who has executed the application, and a database ID of a database in which the read data is stored. And a usage information creating unit that creates usage information having an application ID that identifies an application that has read data, and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. An information management method using an information management device having: storing a data owner ID, a database ID in which the data is stored, and a license condition ID for uniquely identifying the data license condition. Owner information DB, the license agreement ID and the application ID of the data license target Which is associated with a license information DB that stores, and acquires a database ID and a license condition ID obtained by searching the owner information DB based on the input owner ID, and acquires the acquired license. A list of application IDs obtained by searching the usage permission information DB based on the condition ID is acquired, and the usage information log DB is searched using the acquired database ID as a search key. If it is not obtained, or if the application ID is obtained as the search result, and the application ID is only in the list of the application IDs, it is determined to be appropriate use and the search result is obtained. , The application ID is obtained, and the application ID is the application If not only those in the list of Deployment ID, by determining an unauthorized use, proper use of the data, the information management method having the proper usage determining step of supporting the improper determination is provided.

  Further, in the usage information creating step by the usage information creating unit, the usage information is created by including the execution range, which is the range in which the application is executed, in the usage information, and further, the usage permission condition ID and the permission regarding the data usage. A data usage permission range information DB storing data usage permission range information having a range ID, and a permission range ID obtained by searching the data usage permission range information DB using the usage permission condition ID as a search key. In the case where the execution range obtained by creating a list and further searching the usage information log ID using the database ID as a search key is only in the list of the permitted range ID in the appropriate usage determination step. Even if it is an information management method that supports the judgment of the appropriateness or inadequacy of the use of data by determining that the data is properly used There.

  Further, according to the present invention, the log ID, the user ID of the user (client) who executed the application, the database ID of the database in which the read data is stored, and the data each time the application requests data acquisition. A usage information creation unit that creates usage information having an application ID that identifies the read application, and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. An information management method by an information management device, which stores an owner ID of data, a database ID in which the data is stored, and a license condition ID for uniquely identifying a data license condition. And the application license condition ID and the application ID of the data usage permission target are stored. It is associated with the license information DB, and in response to an audit start request from the inspector server, obtains and displays a list of data owners from the owner information DB, and from the list of data owners A database obtained by searching the owner information DB using the ID of the unconfirmed person as a search key when the inspector server side has an unconfirmed person who uses the data properly by the selecting operation An ID and a license agreement ID are acquired, a list of application IDs obtained by searching the license agreement information DB using the acquired license agreement ID as a search key is acquired, and the acquired database ID is used as a search key. If the application ID is not obtained as a search result by searching the usage information log DB, or if the application ID is obtained as a search result. If the application ID is obtained, and the application ID is only one in the list of application IDs, it is determined to be properly used, and the application ID is obtained as a search result. , Information management having a proper use determination step for supporting determination of appropriateness / inappropriity of data use by determining unauthorized use when the application ID is not only one in the list of application IDs Is the way.

  According to the present invention, it is possible to impose restrictions on the use of data by applications while leaving the freedom of use of data by applications from a practical viewpoint.

FIG. 1A (a) is a functional block diagram showing a configuration example of an information (data) management system according to an embodiment of the present invention. FIG. 1A (b) is a functional block diagram showing a detailed configuration example of the control unit. FIG. 1B is a diagram showing an outline of data exchange between databases of the system. FIG. 1C is a diagram showing an example of a general license agreement. It is a figure showing an example of 1 composition of collection data information DB. It is a figure showing an example of 1 composition of owner information DB. It is a figure showing an example of 1 composition of use permission information DB at the time of data collection. It is a figure showing an example of 1 composition of data use permission range information DB. It is a figure which shows an example of 1 structure of utilization information log DB. It is a flowchart figure which shows the flow of a data collection process. It is the flowchart figure which showed the flow of the process when an application uses data as "the flow at the time of data reading." It is a flowchart figure which shows the flow of the proper use confirmation process of data by the data owner by the 2nd Embodiment of this invention. It is a figure following FIG. 9A. It is a flowchart figure which shows the flow of the proper use confirmation process of data by the inspector server by the 3rd Embodiment of this invention. It is a figure following FIG. 10A. It is a figure following FIG. 10B.

  Hereinafter, a data management technique according to an embodiment of the present invention will be described in detail with reference to the drawings.

(First embodiment)
FIG. 1A (a) is a functional block diagram showing a configuration example of an information (data) management system (hereinafter referred to as “information management system”) according to an embodiment of the present invention. FIG. 1A (b) is a functional block diagram showing a detailed configuration example of the control unit. FIG. 1B is a diagram showing an outline of data exchange between databases of the system. FIG. 1C is a diagram showing an example of a general license agreement. The license agreement may be a paper document or electronic data, and does not limit the medium.

  As shown in FIG. 1A, the information management system according to the present embodiment includes an information management device (hereinafter referred to as “server”) 1, and a database (group) DB3 connected to the server by a network (NT), for example. , A client 5 that is network-connected to the server 1 and has an application that uses data installed therein.

  The client 5 can have various arrangement relationships with the server 1. For example, the client (1) 5-1 is directly connected to the server 1.

  On the other hand, the clients 2, 3, ..., N are connected to the server 1 via the network NT. Further, the client 5-m including an external application is connected to the server 1 via the external server 7. These clients are located across areas such as companies, regions and countries.

  The server 1 has a control unit (CPU) 1-1 for controlling the whole, an input unit 1-5, an output unit (display unit) 1-7, a communication unit 1-9, and a memory 1-11. is doing. The communication unit 1-9 communicates with the DB 3 and the clients 2, 3, ..., N and 5-2 ,. The memory 1-11 has a program for causing the control unit 1-1 to execute each functional unit.

  As illustrated in FIG. 1A (b), the control unit 1-1 acquires data according to a request from the client 5 and creates and outputs use information described later, for example, a use information output unit 1-1-1. And a data search section 1-1-2 for searching the data in the DB3, and a data display control section 1-1-3 for controlling the display of the data on the display section 1-7.

  As shown in FIG. 1B, the database DB group 3 connected to the server 1 includes a collected data information DB 11 that stores collected data, an owner information DB (Owner.db) 15, and a usage permission information DB (Policy). .Db) 17, a data usage permission range (area) information DB (regulation.db) 21, and a usage information log DB (log.db) 23.

  In FIG. 1B, broken lines (with arrows) indicate relationships between databases. The owner information of the owners u1 and u2 of the data is stored in the owner information DB 15, and is associated with the collected data DB 11 storing the data of the owner of each data by the database ID. Further, the owner of the data in the owner information DB 15 is associated with the usage permission information DB 17 in which the usage details permitted when the owner of the data is provided with the data are stored by the usage permission condition ID.

  Restrictions (restrictions) on the contents of use that the owner of the data has permitted when providing the data (the usage permission range according to the legal system, which is the standard that prohibits the use even within the range of the first limit) It is shown that the data usage permission range information DB 21 in which the regulated contents (second restriction) are stored and the usage permission condition ID are associated and managed.

The flow of processing when the application uses the data is indicated by a solid line (arrow) and is denoted by the symbol L.
As will be described later, the chain double-dashed line indicates the data flow when the owner of the data or the inspector who checks the proper use of the data confirms the proper use of the data.

As shown in FIG. 1C, the license agreement includes at least the following information.
1) Contents of data subject to license 2) License date (permit period)
3) Application to be used 4) Licenser The application to be used is, for example, spreadsheet software used for research purposes. Further, the licensee is basically the owner of the data.

Next, the configuration of each DB will be described in detail.
FIG. 2 is a diagram showing an example of the configuration of the collected data information DB 11, and two databases are illustrated, but the number of DBs is arbitrary.

  In FIG. 2, for example, the data collected from the data owner u1 is the database db. The data registered in u1 and collected from the data owner u2 is stored in the database db. It is shown that they are respectively stored in u2.

  Each database has a database name (ID) that identifies the DB. Furthermore, each has at least one data ID for identifying each data, the data acquisition date and time when the data was acquired, the sensor ID of the sensor that measured the data, and the acquired data (value).

  The acquired value may be the number of items different for each database. The database db. In u1, data of the value of 63 measured by the sensor whose sensor ID is sensor.u1.001 on March 4, 2016 at 11: 22: 33: 01 and March 4, 2016 at 11:32:42. The data of 67 values measured by the sensor with the sensor identifier sensor.u1.001 is stored in the second 31.

  Database db. In u2, the sensor ID is sensor.sensor at 11: 01: 10: 01 on March 4, 2016. The data of two values of 72 and 140 measured by the sensor of u2.021 and the sensor ID at 11: 32: 22: 21 on March 4, 2016 are sensor. It shows that the data of two values of 70 and 112 measured by the u2.021 sensor are stored.

  That is, the collected data information DB 11 is a DB that stores information related to data IDs, data acquisition dates, etc., organized by data owner.

  FIG. 3 is a diagram showing a configuration example of a database of the owner information DB 15. The owner information DB 15 includes the owner ID of the data, the database ID of the database in which the data of the owner is stored, the license condition ID indicating the license condition at the time of data collection, and the date when the license is obtained (use License date), and includes. As shown in the first line of FIG. 3, the owner of the data username. The data 15-1 of No. 1 is the database ID = db. The usage permission information stored in u1 at the time of data collection is, as shown in FIG. db agreement. 1 is stored in each record, the date when the license is obtained is 2015/06/01, and the owner of the data username. The data 15-2 of No. 2 is the database ID = db. The usage permission information stored in u2 at the time of data collection is the policy. db agreement. It is stored in each of the two records and indicates that the date of obtaining the license is 2015/08/21.

  That is, the owner information DB 15 is a DB in which the owner of the data, the storage location of the data, and the information related to the license such as the license condition and license date of the data are associated with each other.

  FIG. 4 is a diagram showing a configuration example of a database of the usage permission information DB (policy.db) 17. The usage permission information DB 17 is a diagram showing the usage permission condition ID and the permission target in association with each other, and stores the usage content of the data presented to the owner of the data. In the example of FIG. 4, the license agreement condition ID obtained from the license agreement = agreement. 1, the collected data can be used by the applications ap1, ap3, and ap4, and the license condition ID = agreement. 2 indicates that the collected data can be used by the applications ap1, ap2, and ap3.

  As shown in FIG. 4, the description has been given using the ID of the application that can use the data as the usage permission information (permission target 1), but the person who can use the data as the usage permission information (permission target 2) has been described. (U1 etc.) or organization (o1 etc.) may be set, or a combination of a person and an organization or a combination of a person, an organization and an application may be set as the usage permission information (permission object 3). Is also good. In the following, the permission target 1 will be described as an example.

  FIG. 5 is a diagram showing an example of the configuration of a database of the data use permission range information DB (regulation.db) 21. The data usage permission range information DB 21 has a usage permission condition ID and a permission range related to data usage in association with the usage permission condition ID. This permission range (condition) is a condition that does not depend on the items described in the license agreement. For example, it is a condition that depends on national and regional regulations (legal system, etc.) and company rules.

  In that sense, a representative example is “legal system information” exemplified in the permission range 1 (country), which is an example of storing information indicating a country to which data can be transferred. An ID that uniquely identifies these permission ranges is referred to as a "permission range ID" in this specification.

  For example, even data collected by agreeing to the license agreement ID = agreement.1 is a country of collection, for example, Japan (JP), United States (US), Germany (DE If there is a provision that can not be transferred other than), you will also be subject to this restriction.

  In addition, agreement. The data collected in agreement with 2 indicates that the data does not fall under legal regulations and can be transferred to any country. It should be noted that the transfer of data includes both copying the data and reading the data by the application.

  The permission range 2 (city) is, for example, a case where a limitation is imposed by a city. The permission range 3 is a case where the organization or the like is restricted. For example, even companies within the same group may be individually restricted in transfer. In such a case, it is advisable to describe the conditions in this database.

  The data usage permission range information DB (regulation.db) 21 shown in FIG. 5 can be referred to as a database in which data usage restriction items other than those specified in the usage agreement are described.

  Furthermore, the information management system according to the present embodiment includes a usage information log DB that stores a log of usage information. FIG. 6 is a diagram showing a configuration example of the usage information log DB 23.

  The usage information log DB 23, which records the usage status of data by the application, causes the usage information output unit 1-1-1 in the control unit 1-1 to collect the usage information each time there is a data acquisition request from the application to the server 1. create. Then, the usage information is sequentially recorded in the usage information log DB 23.

  Each piece of usage information identified by the log ID has the date and time of the data request from the application, the ID of the requested application, and the ID of the database in which the read data was stored.

Further comprising an application executing country, ID of the execution range such user belongs to that executed tissue run the application, the user ID running the application, optionally the number or the like.

  In the specific example shown in FIG. 6, at 11: 12: 13: 51 on March 5, 2016, user user.com belonging to the Japanese organization Corp1. From the application ap1 executed by the database db. A data acquisition request is issued to u1, and as a result, 110 data are obtained and returned to the application. At 11:12:42 on March 5, 2016, user user.com belonging to the Japanese organization Corp1. From the application ap1 executed by the database db. This indicates that a data acquisition request was made to u2, and as a result, 56 data were obtained and returned to the application.

  The usage information log DB 23 is a log database that sequentially stores the usage status of data by applications. Based on this usage information log DB 23, it is possible to make a determination as to the appropriate usage of data as described below.

(Process flow)
Next, the flow of processing in the above data management system will be described in detail. Description will be made with reference to the above-mentioned drawings and the like as appropriate.

(Processing flow during data collection)
First, the flow of processing when collecting data will be described. FIG. 7 is a flowchart showing the flow of the data collection process.

  Prior to data collection (Start), the data collector (organization) presents (transmits) a license agreement describing the usage content of the data to the server 1 of the data owner, for example, by the client terminal 5 (step). S1). The owner of the data refers to the usage range of the data described in the license agreement presented by the client using his / her terminal (client terminal) 5 or the like, and if the agreement is possible (Yes in step S2) , And returns a reply to the agreement to the client terminal 5. If the user does not agree (No), the process ends (End).

  If the consent is given (Yes), the ID (permission target) of the application satisfying the usage range described in the license agreement is stored in the license information DB 17 together with the license condition ID for identifying each license information. Register (step S3). A license date, which is the date when the license agreement is accepted, may be added.

  Next, a list of countries where transfer of data collected by the legal system or the like is permitted is registered in the data use permission range information DB 21 indicating the use permission information (step S4).

  Next, the owner ID (name) of the owner of the data, the database ID (database name) that stores the data of the owner, and the license information that stores the contents of the license agreement presented to the owner of the data when collecting the data. The ID of the license information stored in the DB 17 and the date when the license is obtained are registered in the owner information DB 15 (step S5).

  In addition, when the use cannot be permitted for a part of the use contents described in the presented license agreement, the fact is notified to the data collection organization. Upon receiving the notification from the data owner, the data collection organization deletes the ID of the application that cannot be used from the permission target in the license information in the license information DB 17 of the data owner. For example, when the data owner u1 notifies the application ap2 that the use of the data is not permitted, as shown in the license information DB 17 of FIG. 4 showing the relationship between “owner information and license information”, Delete ap2 from the permission target.

  After that, the data collection organization acquires the data from the owners u1 and u2 of the data who agree with the license agreement, and continues to store the data in the database collection data information DB 11-1 and 11-2 for each owner of the data (step S6). ).

(Processing flow when reading data)
FIG. 8 is a flowchart showing the flow of processing when an application uses data as "flow at the time of reading data".

When the application wants to use the data, the client application has, for example, the ID of the application, the ID of the country (range, area) in which the application is executed, the ID of the database to be used, and the data search condition (sensor name). , Including the period) is sent as a query to the usage information output unit 1-1-1 of the server 1 (step S11). For example, if the application a1 running in Japan (JP) requires the value of the activity meter from November 1st to 15th, 2015 of the data owner u1, the following query (query) , Query) to the server 1 (FIG. 1B: L1).
(JP, a1, u1.db, sensor = ”Activity meter” & 2015/11/01 <= period <= 2015/11/15)

  In step S12, the usage information output unit 1-1-1 of the server 1 transfers the search condition described in the query to the database DB11-1 described in the query.

  In step S13, the database searches the database DB11-1 under the conditions described in the query. When the database DB 11-1 receives the search condition (sensor = “activity meter” & 2015/11/01 <= period <= 2015/11/15) (FIG. 1B: L2), the condition is determined in step S14. The data to be satisfied is extracted, and the list of the extracted data is returned to the server 1 (use information output unit 1-1-1) (FIG. 1B: L3).

  In step S15, the usage information output unit 1-1-1 of the server 1 returns the received data list to the client (application) (FIG. 1B: L4). In step S16, the date and time (2016/03/05/11: 12: 13: 51), application ID (ap1), application execution country ID (JP), and database ID (db.u1) that has read the data ), The number of data returned to the application (eg, 110) is stored in the usage information log DB 23 as usage information (FIG. 1B: L5).

  By continuously executing the above processing, a large number of logs of usage information are stored in the usage information log DB 23. This can be used as useful information.

  As described above, in the present embodiment, the usage information log is stored by the data acquisition processing and the data reading processing, and it is possible to obtain a trail indicating whether or not the data is properly used. be able to.

(Second embodiment)
An information management technique according to the second embodiment of the present invention will be described in detail below with reference to the drawings. Basically, it is premised that the configuration and processing of the first embodiment have been performed.

  9A and 9B are flowcharts showing the flow of the data proper use confirmation processing by the data owner according to the present embodiment. The drawings described in the first embodiment are also appropriately referred to.

  When the processing is started (Start), the data owner inputs an own name (owner ID) by operating the input unit, which is displayed on the display unit 1-7 of the server 1, for example. (S21).

  In step S22, the data search unit 1-1-2 searches the owner information DB 15 using the own name (owner ID) input in step S21 as a search key. In step S23, it is confirmed that there is a corresponding record (username) in the owner information DB 15, and if there is a corresponding record (Yes), the process proceeds to step S24. If there is no corresponding record (No), the process is ended (End).

  In step S24, the data search unit 1-1-2 acquires the database ID, the license condition ID, and the license date of the corresponding record (username) from the owner information DB 15.

  In step S25, the data search unit 1-1-2 searches the usage permission information DB 17 using the usage permission condition ID obtained in step S24 as a search key.

  In step S26, if the matching record (permitted application ID or the like) exists in the usage permission information DB 17 (Yes), the process proceeds to step S27. If the corresponding record does not exist, the process ends (End).

  In step S27, the data search unit 1-1-2 acquires a list of permission target application IDs that are permission targets from the corresponding record.

  Further, in step S28, the data search unit 1-1-2 searches the usage information log DB 23 using the database (DB) ID acquired in step S24 as a search key.

  In step S29, if there is a corresponding record in the usage information log DB 23 (Yes), the process proceeds to step S31. If there is no corresponding record in the usage information (No), in step S30, the data display control unit 1-1-3 , “No problem” is displayed (output) on the display unit 1-7.

  In the case of proceeding to step S31, it is determined whether or not there is a record of the requested date and time before the licensed date, and in the case of Yes, proceeding to step S32, the data display control section 1-1-3 The unauthorized use message and the unauthorized content may be displayed on the display unit 1-7. For example, it is possible to display what application executed in which country illegally used what data.

  In the case of No in step S31, the process proceeds to step S33, and it is determined whether or not the application ID of the record in step S29 exists in the list acquired from the license information DB 17 in step S26. In S32, the message of unauthorized use and the unauthorized content are output, and in the case of Yes, the process proceeds to Step S30 and "no problem" is output. That is, the information processing unit according to the present embodiment functions as a proper data usage determination unit.

  As described above, according to the present embodiment, firstly, the data owned by the application used by itself is properly used based on the determination process of whether or not the usage permission condition is met. You can check if In the case of illegal use, the contents of illegal use can be known.

  Even if it is determined that the data is illegally used, the fact is notified, but it is not necessary to limit the use of the data only by the determination. Therefore, in the present embodiment, even if it is determined that the application is illegally used, the use of the application is not immediately stopped or restricted, but the data owner need only be notified of the possibility. This is because it is not always clear whether it is appropriate to make the restrictions on data usage very strong.

  For example, the use may be restricted only when the illegal use is not stopped despite the repeated attention from the data owner.

(Third Embodiment)
An information management technique according to the third embodiment of the present invention will be described in detail below with reference to the drawings. Basically, it is premised that the configuration and processing of the first and second embodiments have been performed.

  The auditor strictly checks the permission range of the country or organization to confirm fraud. Since it is generally considered that the data owner of the second embodiment does not understand the regulations of the country, it is general that the data owner does not confirm the regulations of the country.

  In other words, the data owner checks whether his / her own data is used according to the license agreement, and the auditor checks whether the data of each data owner is used according to the license agreement. Check if the usage is in accordance with the regulations of the organization.

  This is because it is generally considered that the data owner does not understand the regulations of the country. However, even if the data owner, like the auditor, checks whether his / her own data is being used according to the license conditions or is being used according to the regulations of the country or organization. Good. In other words, whether the data owner uses his / her own data in accordance with the license conditions or in accordance with the regulations of the country or organization in the same procedure as the auditor. It does not preclude checking both.

  10A, 10B, and 10C are flowcharts showing the flow of the proper use confirmation processing of data by the inspector server (also shown by reference numeral 1) according to the present embodiment. The drawings described in the first embodiment are also appropriately referred to. However, instead of the owner server of the second embodiment, the inspector server performs the processing.

  When the process is started (Start), in step S41, the "audit" for displaying the usage information is started by the input operation of the inspector server 1 (operation of the audit start button or the like).

  In step S42, the data search unit 1-1-2 of the inspector server 1 acquires a list of data owner IDs from the owner information DB 15.

  In step S43, the data display control unit 1-1-3 displays the owner ID of the data acquired in step S42 on the display unit 1-7 of the inspector server 1.

  When the operation to the inspector server 1 by the inspector who selects the inspection target is detected in step S44, it is determined in step S45 whether or not there is an unconfirmed owner up to now on the side of the inspector server 1. If No, in step S46, the data display control unit 1-1-4 outputs no problem.

  If there is an unconfirmed person on the inspector server 1 side (Yes), the process proceeds to step S47, one arbitrary owner ID is selected from the list of the unconfirmed persons acquired in step S43, and in step S48, the data retrieval unit 1- 1-2 searches the owner information DB 15 using the owner ID selected in step S47 as a search key.

  If it is determined in step S49 that there is a corresponding record in the search process of step S48 (Yes), the process proceeds to step S50, and if No, the process ends (End).

  In step S50, the data search unit 1-1-2 acquires the database ID, license date, and license condition ID of the corresponding record in the owner information DB 15 with which the owner ID matches.

  In step S51, the data search unit 1-1-2 searches the usage permission information DB 17 using the usage permission condition ID as a search key.

  In step S52, when there is a corresponding record in which the usage permission condition ID matches in the usage permission information DB 17 (Yes), the process proceeds to step S53, and the data search unit 1-1-2 selects from the corresponding record, for example, Obtain a list of application IDs that are subject to permission. Next, in step S54, the data search unit 1-1-2 searches the data usage permission range information DB 21 with the application ID acquired in step S53. In step S55, if there is a corresponding record in which the application ID matches in the data usage permission range information DB 21 (Yes), the process proceeds to step S56, and there is no corresponding record in which the application ID matches in the data usage permission range information DB21. If (No), the process ends (End).

  Next, in step S56, the data search unit 1-1-2 acquires, for example, a list of IDs of transfer permitted countries (permitted range) from the corresponding records obtained in step S55.

  In step S57, the data search unit 1-1-2 searches the usage information log DB 23 using the database ID as a search key.

  If there is a corresponding record in the usage information log DB 23 in step S58 (if there is a corresponding record in which the database ID matches in the usage information log DB 23) (Yes), in step S59, the application ID of the record is the usage license. It is determined whether or not it exists in the list acquired from the information DB 17. If the determination result is No, in step S60, the data display control unit 1-1-3 causes an illegal use message and an illegal content (for example, which application is not permitted, which data is used, and the like). Etc.) is output. In step S58, if there is no corresponding record having the same database ID in the usage information log DB 23 (No), it is determined that there is no unauthorized use by then, and the process returns to step S45.

  In the case of Yes in step S59, the process proceeds to step S61, and it is determined whether or not the implementation country (permission range) ID of the record obtained in step S56 is only the list acquired from the data use permission range information DB. In the case of No in step S61, the process proceeds to step S62, and the data display control unit 1-1-3 outputs the message of unauthorized use and the unauthorized content. If Yes in step S61, the process returns to step S45. That is, the information processing unit according to the present embodiment functions as a proper data usage determination unit.

  As described above, according to the present embodiment, firstly, whether or not the usage permission condition is met, and secondly, whether or not the usage of the data is permitted by the legal system or whether the usage is in a country or the like. Whether or not the data used by the application is properly used can be confirmed by an inspector, who is a third party, based on the determination processing or the like. In the case of illegal use, the contents of illegal use can be notified.

  Even if it is determined that the data is illegally used, the fact is notified, but it is not necessary to limit the use of the data only by the determination. Therefore, in the present embodiment, even if it is determined that the application is illegally used, it is sufficient to notify the inspector of the possibility without immediately stopping or limiting the use of the application. This is because it is not always clear whether it is appropriate to make the usage restrictions very strong.

  For example, the use may be restricted only when the unauthorized use is not stopped despite repeated cautions from the inspector and the like.

  Processing and control can be realized by software processing by a CPU (Central Processing Unit) or GPU (Graphics Processing Unit), hardware processing by an ASIC (Application Integrated Circuit), or FPGA (Field Programmable) hardware.

  Further, in the above-described embodiments, the configurations and the like illustrated in the accompanying drawings are not limited to these, and can be appropriately changed within the range where the effects of the present invention are exhibited. Other than the above, the present invention can be appropriately modified and implemented without departing from the scope of the object of the present invention.

  Further, each constituent element of the present invention can be arbitrarily selected, and an invention having a selected configuration is also included in the present invention.

  In addition, a program for realizing the functions described in the present embodiment is recorded in a computer-readable recording medium, and the program recorded in the recording medium is read by a computer system and executed to execute processing of each unit. You may go. The “computer system” mentioned here includes an OS and hardware such as peripheral devices.

  The present invention can be used as an information management device.

DESCRIPTION OF SYMBOLS 1 ... Information management device (server), 1-1 ... Control part (CPU) which controls the whole, 1-1-1 ... Utilization information output part, 1-1-2 ... Data search part, 1-1-3 ... Data display control unit, 1-5 ... input unit, 1-7 ... output unit (display unit), 1-9 ... communication unit, 1-11 ... memory, 3 ... database group, 5 ... client.

Claims (7)

Each time there is a data acquisition request from the application, a log ID, a user ID for identifying the user (client) who has executed the application, a database ID of a database in which the read data is stored, and the data read Information management including a usage information creation unit that creates usage information having an application ID that identifies an application, and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. A device,
The information management device sets an owner ID of the data, a database ID in which the data is stored, and a data use permission condition which is a condition for permitting the use of the data in response to an acquisition request of the data by the application. It is associated with an owner information DB that stores a license agreement ID that uniquely identifies it, and a license information DB that stores the license agreement ID and the application ID of the data license object,
A database ID and a license agreement ID obtained by searching the owner information DB based on the entered owner ID are acquired, and the license agreement information DB is searched using the acquired license agreement ID as a search key. The list of application IDs obtained by the above is acquired, and the usage information log DB is searched using the acquired database ID as a search key,
Appropriate use when no application ID is obtained as a search result, or when an application ID is obtained as a search result and the application ID is only one in the list of application IDs And judge
When the application ID is obtained as the search result and the application ID is not only one in the list of the application IDs, it is determined that the application is illegally used,
An information management device having an appropriate use determination unit that supports determination of appropriateness or inadequacy of use of the data. Furthermore, the usage information creation unit creates the usage information by including in the usage information the execution area of the application that executed the application and the execution range of the execution organization to which the user who executed the application belongs.
Associated with a data usage permission range information DB that stores data usage permission range information having the usage permission condition ID, the execution area of the application related to data usage, and the permission range ID related to the execution organization to which the user who executed the application belongs. A list of permission range IDs obtained by searching the data use permission range information DB using the use permission condition ID as a search key,
The appropriate use determination unit,
further,
Only when the execution range obtained by searching the usage information log DB using the database ID as a search key is only in the list of the permitted range IDs, is it determined that the usage is appropriate, The information management device according to claim 1, further comprising a proper use determination unit that assists in determining whether the data is properly used or not.   The application ID that is not permitted is deleted from the data license condition in the license information DB in response to the notification from the data owner that the application cannot be used. The information management device described in 1 or 2. A collected data information DB that stores collected data information including a database ID, a data ID that identifies the data, the data usage permission condition, and a data body for each owner ID that identifies the owner of the collected data When,
Owner information including an owner ID of the data, a database ID for identifying a DB name that stores the data of the owner of the data, an ID for identifying a license condition at the time of data collection, and a license date. And a data management unit that manages the owner information DB to be stored by associating with the owner information DB by the database ID,
The usage information log includes usage date and time information when the application used the data,
The appropriate use determination unit,
Furthermore, based on the relationship between the utilization time of the data in the license conditions and the log, any of claims 1 to 3, characterized in that the support utilization of the data to determine whether proper or not The information management device according to item 1. Each time there is a data acquisition request from the application, a log ID, a user ID for identifying the user (client) who has executed the application, a database ID of a database in which the read data is stored, and the data read Information management including a usage information creation unit that creates usage information having an application ID that identifies an application, and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. An information management method using a device,
The information management device sets an owner ID of the data, a database ID in which the data is stored, and a data use permission condition which is a condition for permitting the use of the data in response to an acquisition request of the data by the application. It is associated with an owner information DB that stores a license agreement ID that uniquely identifies it, and a license information DB that stores the license agreement ID and an application ID of a data license subject,
The database ID and the license agreement ID obtained by searching the owner information DB based on the inputted owner ID are acquired, and the license information DB is searched based on the acquired license agreement ID. The list of application IDs obtained by the above is acquired, and the usage information log DB is searched using the acquired database ID as a search key.
Appropriate use when no application ID is obtained as a search result, or when an application ID is obtained as a search result and the application ID is only in the list of application IDs And judge
When the application ID is obtained as the search result and the application ID is not only one in the list of the application IDs, it is determined that the application is illegally used,
An information management method comprising a proper use determination step for supporting the determination of properness or inappropriateness of use of the data. Further, in the usage information creating step by the usage information creating unit, the usage information includes the execution country of the application, which is the range in which the application is executed, and the execution range of the execution organization to which the user who executed the application belongs. Create usage information,
Further, a data usage permission range information DB storing data usage permission range information having the usage permission condition ID, the execution area of the application, and the permission range ID related to the data usage related to the execution organization to which the user who executed the application belongs. Have
A list of permission range IDs obtained by searching the data use permission range information DB using the use permission condition ID as a search key is created,
The appropriate use determination step,
further,
Only when the execution range obtained by searching the usage information log DB using the database ID as a search key is only in the list of the permitted range IDs, is it determined that the usage is appropriate, The information management method according to claim 5 , which assists in determining whether data is properly used or not. Each time there is a data acquisition request from the application, a log ID, a user ID for identifying the user (client) who has executed the application, a database ID of a database in which the read data is stored, and the data read Information management including a usage information creation unit that creates usage information having an application ID that identifies an application, and a usage information registration unit that stores a log of the usage information in a usage information log DB for each log ID. An information management method using a device,
The information management device uniquely identifies a data owner ID, a database ID in which the data is stored, and a data use permission condition that is a condition for permitting the use of the data in response to an acquisition request of the data by the application. Is associated with the owner information DB that stores the license agreement ID that is identified by the above, and the license information DB that stores the license agreement ID and the application ID of the data license target,
In response to an audit start request from the inspector server, a list of owners of the data from the owner information DB is acquired and displayed, and the owner of the data is selected by a selection operation from the list of owners of the data. In the case where there is an unconfirmed person who uses data properly on the side of the inspector server, the database ID and the license agreement ID obtained by searching the owner information DB using the ID of the unconfirmed person as a search key are acquired. , A list of application IDs obtained by searching the license information DB using the acquired license condition ID as a search key, and searching the usage information log DB using the acquired database ID as a search key,
Appropriate use when no application ID is obtained as a search result, or when an application ID is obtained as a search result and the application ID is only in the list of application IDs And judge
When the application ID is obtained as the search result and the application ID is not only one in the list of the application IDs, it is determined that the application is illegally used,
An information management method comprising a proper use determination step for supporting the determination of properness or inappropriateness of use of the data.

Images