WO2016194069A1

WO2016194069A1 - Evidence providing system and evidence providing method

Info

Publication number: WO2016194069A1
Application number: PCT/JP2015/065646
Authority: WO
Inventors: 紀宏津嶋
Original assignee: 株式会社日立システムズ
Priority date: 2015-05-29
Filing date: 2015-05-29
Publication date: 2016-12-08

Abstract

This system enables easy obtaining of data evidence without invading privacy. In the present invention, a client terminal is provided with: a data acquisition unit that transmits an acquisition request for request data to a server, receives the request data from the server, and receives, from the server, and stores, in a storage unit, anonymized data obtained by anonymizing a snapshot which is original data of the request data; and a display unit that displays the anonymized data or the request data received from the server. The server is provided with: a certification unit that generates a snapshot from data stored in an auxiliary storage unit, stores the snapshot in an in-memory unit, and generates, from the snapshot, and transmits, to the client terminal, request data that matches the acquisition request; a transmission unit that transmits, to the client terminal, evidence identification information for identifying the snapshot; and an anonymization unit that generates, on the basis of the snapshot and the evidence identification information, anonymized data obtained by anonymizing a predetermined item among items forming the snapshot, and transmits the anonymized data to the client terminal.

Description

Evidence providing system and evidence providing method

The present invention relates to an evidence providing system and an evidence providing method.

Conventionally, data sets for analysis and forms called data warehouses have been created from transaction data, and various analyzes and forms have been created. The data warehouse is created, for example, by executing batch processing, and the created data warehouse is evidence as a form or original data for analysis. On the other hand, an in-memory database has emerged, and it is now possible to directly access transaction data and create various analyzes and forms. In this case, transaction data is updated in real time, so in order to use the original data that created the analysis or form as evidence, it is necessary to roll back the transaction data and reproduce the database at the time of analysis or form creation. . For example, Patent Document 1 discloses a technique related to rollback.

JP 2004-078464 A

In the above-mentioned Patent Document 1, in view of the fact that when the data is simply rolled back, the work contents up to that point are discarded, it is possible to select whether the data is restored or the edit contents are discarded, and then the data is saved. Rolled back to the state before the change. When data is rolled back, it returns to the state of the original data before reflecting the work contents, so if you want to simply restore the data to the previous state, or simply use the original data that created the analysis or form as described above This is effective when tracing back to evidence.

When creating analysis and forms by directly accessing transaction data using in-memory database technology, it is necessary to reproduce the state of the database (DB) at the time of analysis and form creation. For that purpose, the DB in which the transaction data is recorded must be rolled back. However, since transaction data is an update table in which the data is updated with great frequency, it is not realistic to roll back itself. Therefore, it is unrealistic and practically impossible to obtain the analysis and form data from the transaction as evidence by such a method, and the analysis performed by the data stored in the in-memory database And the created form will have no evidence.

Furthermore, the original data acquired as evidence may include confidential information such as personal information, and simply providing evidence may infringe privacy.

The present invention has been made in view of the above, and provides an evidence providing system and an evidence providing method capable of easily obtaining evidence of data using an in-memory database without infringing on privacy. With the goal.

In order to solve the above-described problem, the evidence providing system according to the present invention is an evidence providing system that anonymizes the evidence of request data and provides the user with the evidence. The client terminal operated by the user acquires the request data. A request is transmitted to the server, the request data generated according to the acquisition request is received from the server, and anonymized data obtained by anonymizing the snapshot that is the original data of the request data is received from the server and stored. A data acquisition unit stored in a storage unit, and a display unit that displays the request data or the anonymization data received from the server, wherein the server captures the snapshot from data stored in an auxiliary storage unit. Generated and stored in the in-memory unit and mapped from the snapshot to the acquisition request. Generating a request data to be transmitted to the client terminal, a transmitting unit for transmitting evidence identification information for identifying the snapshot to the client terminal, and the snapshot and the evidence identification information. An anonymization unit that generates anonymized data obtained by anonymizing a predetermined item among items constituting the snapshot and transmits the anonymized data to the client terminal, as an evidence providing system comprising: Composed.

The present invention can also be understood as an evidence providing method executed by the evidence providing system.

According to the present invention, it is possible to easily obtain data evidence using an in-memory database without infringing on privacy.

It is a figure which shows the structural example of the evidence provision system to which the evidence provision system concerning this invention and the evidence provision method are applied. It is a figure which shows the example by which the cube produced | generated according to the acquisition request | requirement of transaction data was displayed on the input display part of the client terminal. It is a figure which shows the example of the snapshot and evidence table which are memorize | stored in an in-memory. It is a figure which shows the example of the anonymization data which anonymized the evidence table. It is a flowchart which shows the process sequence of the evidence provision process performed with this system.

Embodiments of an evidence providing system and an evidence providing method according to the present invention will be described below in detail with reference to the accompanying drawings.

FIG. 1 is a diagram showing a configuration example of an evidence providing system 1000 to which an evidence providing system and an evidence providing method according to the present invention are applied. As shown in FIG. 1, the evidence providing system 1000 includes a client terminal 100 that makes a request for acquiring data from the database server 200 by a user of this system, and the data requested from the client terminal 100 to the client terminal 100. A database server 200 for transmission is connected via a network N. Note that the network N is a general public network such as the Internet, and may be wired or wireless. First, the client terminal 100 will be described.

The client terminal 100 is, for example, a terminal operated by a customer of an electronic store for a customer who has visited the store. The client terminal 100 is a wide general information processing apparatus such as a portable terminal such as a general smartphone or a tablet terminal or a stationary PC (Personal Computer). As shown in FIG. 1, the client terminal 100 functionally includes a data acquisition unit 101, an input display unit 102, and a storage unit 103. Although not particularly shown below, the communication unit actually includes a NIC (Network Interface Card) and transmits / receives various data to / from the database server 200.

The data acquisition unit 101 is composed of, for example, an arithmetic device such as a CPU (Central Processing Unit), and the input display unit 102 inputs an acquisition request for transaction data, which is data requested by the operator to the database server 200. When accepted, a command including the acquisition request is generated and transmitted to the database server 200 via the communication unit, and as a result, the transaction data is received. In addition, the data acquisition unit 101 transmits a request for acquiring a snapshot, which is the original data serving as evidence of the transaction data, to the database server 200, and the evidence number, which is identification information of the snapshot, is sent to the database via the communication unit. Receive from server 200. Further, the data acquisition unit 101 receives anonymized data 1031 that is data obtained by anonymizing the snapshot corresponding to the evidence number from the database server 200 via the communication unit. The data acquisition unit 101 outputs the acquired various data to the input display unit 102 and stores the anonymized data 1031 in the storage unit 103.

The input display unit 102 includes a general input display device such as a touch panel, for example. The input display unit 102 receives input of the acquisition request from an operator, or transaction data or anonymized data 1031 acquired according to the acquisition request, evidence. Displays various information including numbers.

The storage unit 103 is composed of a general storage medium or storage device such as a memory chip or a disk, and stores the anonymized data 1031. Specific processing executed by each unit constituting the client terminal 100 will be described later using a flowchart. Next, the database server 200 will be described.

The database server 200 is a server that transmits the transaction data, the anonymized data, and the evidence number to the client terminal 100 that made the request in response to the acquisition request from the client terminal 100.

As shown in FIG. 1, the database server 200 includes an evidence proving unit 201 and an auxiliary storage unit 202. The database server 200 is a wide and general information processing apparatus having a general in-memory database, for example. Although not particularly illustrated below, the communication unit has the same communication unit as that of the client terminal 100 and transmits / receives various data to / from the client terminal 100.

The evidence proving unit 201 includes, for example, an arithmetic device such as a CPU and a controller having an in-memory such as a DRAM (Dynamic Random Access Memory). The evidence proving unit 201 stores data in the auxiliary storage unit 202 according to the acquisition request received from the client terminal 100. The stored transaction data 2021 and master data 2022 are read, a snapshot 20111 composed of the data at that time is generated, and stored in the in-memory 2011 together with the acquisition request. In addition, the evidence proof unit 201 reads the snapshot 20111 and the acquisition request stored in the in-memory 2011, and uses the command or item indicated in the acquisition request from the snapshot 20111 as a key. Data matching the above is retrieved, and a cube 20112 composed of the resulting view is generated and stored in the in-memory 2011. The client terminal 100 receives the cube 20112 from the database server 200 as the transaction data.

The evidence certifying unit 201 further includes functionally an evidence number assigning unit 2012, a snapshot management unit 2013, an evidence number transmitting unit 2014, and an anonymizing unit 2015.

When the evidence certifying unit 201 generates the snapshot 201111, the evidence number giving unit 2012 gives the evidence number for each generated snapshot, and notifies the snapshot management unit 2013 of the assigned evidence number.

When the snapshot management unit 2013 receives the evidence number from the evidence number assigning unit 2012, the snapshot management unit 2013 stores the snapshot 20111 and the evidence number in association with each other and outputs the evidence number to the evidence number transmission unit 2014. Further, the snapshot management unit 2013 generates an evidence table 2011 that is an evidence table composed of data similar to the snapshot 20111 corresponding to the stored evidence number, and associates with the evidence number in-memory 2011. To remember.

The evidence number transmission unit 2014 transmits the evidence number corresponding to the snapshot 20111 generated according to the acquisition request received from the snapshot management unit 2013 to the client terminal 100.

The anonymization unit 2015 generates anonymized data 1031 in which items included in the evidence table 201113 stored in the in-memory 2011 are anonymized by a technique such as k-anonymization, and transmits the anonymized data 1031 to the client terminal 100.

The database server 200 does not generate the snapshot 20111 according to the acquisition request, but the acquisition request is standardized in advance, and the conditions indicated in the acquisition request are stored in the database server 200. If there is, the snapshot 20111 may be generated according to a predetermined schedule. In this case, since the time for generating the snapshot in response to the acquisition request is reduced, transaction data can be provided more quickly.

The auxiliary storage unit 202 is a storage device composed of, for example, a large-capacity DRAM (Dynamic Random Access Memory), HDD (Hard Disk Drive), and the like. Master data 2022, which is the master of data 2021, is stored. It is assumed that these data are updated to the latest state from other systems.

FIG. 2 is a diagram illustrating an example in which a cube generated in accordance with a transaction data acquisition request is displayed on the input display unit 102 of the client terminal 100. As shown in FIG. 2, the display unit 102 displays a form of today's sales ranking for a certain store as an example. In FIG. 2, it can be seen that, for example, 15 models ACD1 of the compact digital camera book of Company A are sold, and the ranking is first. The data acquisition unit 101 displays the cube received from the database server 200 in the upper column A1 of the display unit 102 in this way.

In addition, as shown in FIG. 2, the data acquisition unit 101 displays the cube on the display unit 102, and combines the evidence number for identifying the evidence of the cube as a data source number in the lower column of the display unit 102. Display on A2. Further, the data acquisition unit 101 displays a button B for requesting acquisition of evidence data identified by the evidence number in the lower column A2. When the input display unit 102 accepts the click operation of the button, the data acquisition unit 101 transmits an acquisition request for evidence data identified by the evidence number to the database server 200.

FIG. 3 is a diagram illustrating an example of the snapshot 20111 and the evidence table 20113 stored in the evidence proving unit 201. As shown in FIG. 3, these data are stored in association with a serial number (#) for identifying a record, the name and address of the product purchaser, the date and time of product purchase date and time, and the purchased product. Has been. Fig. 3 shows that Mr. Ichiro Suzuki, who lives in 1-1-1 Osaki, Shinagawa Ward, purchased A's compact digital camera black (model number ACD1) at 9:45:15 on December 22, 2014. ing. In this example, the example of the data from which the cube having each item shown in FIG. 2 is obtained has been described as an example, but the acquisition request is not limited to sales ranking, for example, to grasp the stock status of products, Various requests for acquisition requests for grasping monthly sales rankings by store can be considered.

FIG. 4 is a diagram illustrating an example of anonymized data 1031 obtained by k-anonymizing the evidence table 20113. As shown in FIG. 4, the anonymization data 1031 anonymizes items to be anonymized among items of the evidence table 2011. In FIG. 4, while the anonymization part 2015 deletes a name item, it turns out that it is anonymizing by the high-order concept by making an address into an address area. Note that k-anonymization is to create a state in which there are k or more combinations of the same value in a plurality of items so that it is difficult to identify an individual.

FIG. 5 is a flowchart showing a processing procedure of processing (evidence providing processing) performed in this system. As shown in FIG. 5, in the evidence providing process, first, the data acquisition unit 101 of the client terminal 100 transmits a request for transaction data to the database server 200 (S501), and the evidence certification unit 201 of the database server 200 The transaction data 2021 and master data 2022 stored in the storage unit 202 are read, a snapshot 20111 is generated, and stored in the in-memory 2011 (S502).

The evidence proof unit 201 searches the generated snapshot 20111 for data that matches the request, generates a cube 20112 composed of views as a result, and stores the cube 20112 and the request in the in-memory 2011. (S503). The client terminal 100 receives the cube 20112 from the database server 200 as the transaction data, and the data acquisition unit 101 displays the cube 20112, which is the received transaction data, on the input display unit 102 (S504).

The evidence number assigning unit 2012 of the database server 200 assigns an evidence number to the generated snapshot (S505), and the snapshot management unit 2013 uses the snapshot to which the evidence number is assigned as an evidence table 20113 in-memory 2011. (S506). The evidence number transmission unit 2014 transmits the assigned evidence number to the client terminal 100 (S507).

At this time, the data acquisition unit 101 displays the evidence number received together with the cube on the input display unit 102 as shown in FIG. 2, but the user wants to acquire the evidence of the cube, and the input display unit 102 When the pressing of the request button is accepted, the data acquisition unit 101 receives in S508 and transmits the acquisition request to the database server 200 together with the evidence number displayed on the screen (S508).

The snapshot management unit 2013 accesses the evidence table 2011 using the evidence number received together with the evidence acquisition request received from the client terminal 100 as a key, and acquires the corresponding evidence data (S509).

The anonymization unit 2015 generates anonymization data 1031 from the acquired evidence data and transmits it to the client terminal 100 (S510). When the processing of S510 is completed, in the client terminal 100, the data acquisition unit 101 stores the anonymized data 1031 received from the database server 200 in the storage unit 103, and the items shown in FIG. indicate.

Thus, in the present system, since the above-described processing is executed, the evidence of data can be easily obtained using the in-memory database without infringing on privacy. Specifically, on the client terminal side, if you want to obtain a cube that is a view generated from a snapshot stored in memory, output the requested form or screen, and obtain the evidence, On the server side, an evidence table that matches the request generated from the above snapshot is generated, and the items that should protect privacy in the evidence table are anonymized and provided to the client terminal side. Can be easily proved, and by anonymizing items with high confidentiality, evidence can be provided to the client terminal without infringing on privacy.

In addition, each process mentioned above is actually implement | achieved by running the program installed in the client terminal 100 and the database server 200. FIG.

The above-mentioned program is provided by being preinstalled in a ROM or the like, or a computer-readable recording medium such as a CD-ROM, CD-R, or DVD (Digital Versatile Disk) in a file that can be installed or executed. It may be recorded and provided or distributed. Furthermore, the program may be provided or distributed by storing it on a computer connected to a network such as the Internet and downloading it via the network.

1000 Evidence providing system 100 Client terminal 1011 Data acquisition unit 1012 Input display unit 103 Storage unit 1031 Anonymized data 200 Database server 201 Evidence certification unit 2011 In-memory 2012 Evidence number assigning unit 2013 Snapshot management unit 2014 Evidence number transmission unit 2015 Anonymization Unit 202 Auxiliary storage unit 2021 Transaction data 2022 Master data N Network.

Claims

An evidence providing system that anonymizes the evidence of request data and provides it to the user,
The client terminal operated by the user is
The request data acquisition request is transmitted to the server, the request data generated according to the acquisition request is received from the server, and the anonymized data obtained by anonymizing the snapshot that is the original data of the request data is transmitted to the server A data acquisition unit that receives from and stores in the storage unit;
A display unit for displaying the request data or the anonymized data received from the server,
The server
A certifying unit that generates the snapshot from data stored in an auxiliary storage unit and stores the snapshot in an in-memory unit, generates the request data that matches the acquisition request from the snapshot, and transmits the request data to the client terminal; ,
A transmission unit that transmits evidence identification information for identifying the snapshot to the client terminal;
Based on the snapshot and the evidence identification information, anonymization data is generated by anonymizing a predetermined item among items constituting the snapshot, and transmitted to the client terminal, and
Evidence providing system characterized by comprising
The proof unit generates the request data that matches the acquisition request as cube data composed of views, and transmits the cube data to the client terminal.
The evidence providing system according to claim 1.
The anonymization unit generates the anonymization data using a k-anonymization method and transmits the anonymization data to the client terminal.
The evidence providing system according to claim 1 or 2, wherein the system is provided.
The data acquisition unit displays a screen including the request data acquired from the server and the evidence identification information on the display unit.
The evidence providing system according to any one of claims 1 to 3, wherein:
An evidence providing method for anonymizing the evidence of request data and providing it to a user,
A first step of transmitting the request data acquisition request to a server;
A second step of receiving the request data generated according to the acquisition request from the server, and receiving anonymized data obtained by anonymizing the snapshot that is the original data of the request data from the server and storing it in the storage unit When,
A third step of displaying the request data or the anonymized data received from the server;
Fourth step of generating the snapshot from the data stored in the auxiliary storage unit and storing it in the in-memory unit, generating the request data matching the acquisition request from the snapshot and transmitting it to the client terminal When,
A fifth step of transmitting evidence identification information for identifying the snapshot to the client terminal;
Based on the snapshot and the evidence identification information, a sixth step of generating anonymized data obtained by anonymizing a predetermined item among items constituting the snapshot and transmitting the anonymized data to the client terminal;
The evidence providing method characterized by including.
In the fourth step, the request data matching the acquisition request is generated as cube data composed of views, and transmitted to the client terminal.
The evidence providing method according to claim 5.
In the sixth step, the anonymized data is generated using a k-anonymization method and transmitted to the client terminal.
The evidence providing method according to claim 5 or 6.
In the second step, a screen including the request data acquired from the server and the evidence identification information is displayed on the display unit.
The evidence providing method according to any one of claims 5 to 7, wherein: