JP2005242471A - Information collection/transfer/acquisition system, information collection controller, information collection control method, program therefor and recording medium recording them - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To rapidly complete a reading process and to perform video display according to an instruction of a user, and to do away with risk of privacy leakage of the user not to require a high security level to a proxy, in information collection for storing a behavior history of an individual. <P>SOLUTION: This information collection/transfer/acquisition system has: a base station group 11 specifying an information source producing storage target information; an information collection controller 30 sending a storage instruction to information source controllers 61, 62, and receiving a storage response including a cryptographic key and an identifier showing a storage place; and an information acquisition device 80 recording the cryptographic key and the identifier showing the storage place into a storage list. The information sources 51, 52 producing the storage target information are specified, the cryptographic key is generated, the storage places 53, 54 are secured, the identifier showing an intermediate accumulation device 70 is acquired, information generated from the information sources 51, 52 is encrypted, the encrypted information is recorded in the intermediate accumulation device 70, and the cryptographic key and the identifier showing the intermediate accumulation device 70 are recorded in the storage list 34 inside a storage device 54. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an information collection transfer acquisition system that performs information collection, transfer, and acquisition, an information collection control device that controls information collection, an information collection control method using the information collection control device, a processing program thereof, and a processing program thereof The present invention relates to a recording medium that records

2. Description of the Related Art Conventionally, techniques for accumulating personal action histories while considering privacy include those described in, for example, Japanese Patent Application No. 2003-296244 and drawings (see Patent Document 1: not known at the time of filing).
In the above technology, as an example of information storage, the position of the user is specified by a position recognition technology using a wireless tag or the like, and an image from the video camera corresponding to the position of the user is selected and assigned to each user. A system for copying to a storage area has been proposed.
In the above prior art, the operating entity that provides the position recognition function may be different from the operating entity that provides the video camera as the information source. For example, an operating entity that provides a position recognition function maintains a security level similar to that of a mobile phone service currently provided by a mobile phone company or the like, and provides a position recognition function that ensures safety over a wide area.

On the other hand, in order to deal with the situation where the information source management entities are diverse and there are cases where multiple management entities may coexist, the relatively high security level is not required for the information source management entities. One of the characteristics. This is accomplished as follows.
In other words, information related to personal privacy is accumulated in the information source operating entity by copying the personal information in the information source operating entity to the storage area for each individual within a certain period and deleting the original information. Therefore, it is possible to reduce the risk of leakage of privacy-related information even when the information source operator is unfairly attacked, thereby enabling the construction of an information storage system that is acceptable to society. It is one of the characteristics of the prior art.

However, in the above prior art, there is a risk of leakage of privacy information regarding the traceability of the user to the operating body of the unfair information source. This danger will be described below.
In general, when a virtually fixed identifier for a person is sent to multiple merchants over time, the merchant can track the behavior history of a particular person, either alone or in collusion. The problem of this user's traceability is, for example, a report on the Nikkei Shimbun WWW site "Net Time Review <Special Feature / Electronic Tag> (5) Fixed ID is" digitalized face "-the point of privacy" (http: // It.nikkei.co.jp/it/njharchive/njharchive.cfm?i=200330421S264L00021&f=ic tag. April 2003 (see Non-Patent Document 1) and is widely recognized. It is a problem.

  In the above prior art, there is a problem in that the position recognition function that identifies the position of the user sends an accumulation instruction including the identifier of the storage area allocated for each user to the copy control apparatus managed by the operating entity of the information source. It is. As a result, the management entity of the information source can track the user's behavior history by tracking the user who uses the same storage area identifier alone or in collusion. That is, a problem that the privacy of the user is violated occurs.

Conventionally, as a technique for writing large-capacity data in an appropriate time by accumulating action history, there is the above-mentioned Japanese Patent Application No. 2003-296246 and drawings (see Patent Document 2: not known at the time of filing).
In this document, when a sensor of an information source and a user who uses information are geographically separated from each other and connected by a network, a considerable amount of time is required to transfer a large amount of information through such a network. In order to solve this problem, a large amount of information such as a moving image generated from an information source is first quickly written into a storage device attached to the information source, and at the same time, a small amount of index information is written to the user via another route. Quickly write to a storage device installed near the storage device, and then use the system idle time to store a large amount of information from the storage device attached to the information source to the storage device installed near the user On the other hand, a technique for replicating and transferring data in a delayed manner has been proposed.

In the above prior art, on the assumption that the user will use the accumulated information at a later date, the writing process from the sensor may be unstable, such as when the network connection is congested or via a wireless section However, when the user uses the information at a later date, the information has already been transferred to the storage device near the user, and can be immediately retrieved. It is one.
However, in the above prior art, there is a risk of leakage of privacy information related to the traceability of the user with respect to the above information transfer procedure for the unfair information source operating entity. Hereinafter, this danger will be described.

The first point is that in the above prior art, when a small amount of index information is quickly written to a storage device installed near the user, an identifier of the storage device of the write destination is given, or The problem is that communication is performed with the storage device indicated by the identifier. This identifier fixedly identifies the user. Examples of dangerous identifiers widely include identifier information generally used in communication technology and network storage technology, such as an IP address and a network folder path name.
The second point is that in the above prior art, when a large amount of information is delayed and copied from a storage device provided near the information source to a storage device installed near the user, The problem is that an identifier of the storage device is given or communication is performed with the storage device indicated by the identifier. This identifier fixedly identifies the user.

In any of the two risks pointed out above, an identifier that identifies the user in a fixed manner is known to the device managed by the operating entity of the information source. Thereby, the management subject of an information source can track a user's action history by tracking a user who uses the same identifier alone or in collusion. That is, a problem that the privacy of the user is violated occurs.
The relationship between the danger pointed out with respect to the publication (see Patent Document 1) and the two dangers pointed out with respect to the publication (see Patent Document 2) will be described. The two risks pointed out above with respect to the latter publication are related to the embodiment of the danger of the former publication. In other words, the latter publication is one of the implementation methods that effectively implements the technology of the former publication while taking into account the characteristics of network transfer delay, and consideration is given to the solution of the above-mentioned danger related to the former publication. Therefore, it can be said that the risk pointed out with respect to the former gazette is embodied as the two risks pointed out with respect to the latter gazette in the specific mounting method shown in the latter gazette.

  2. Description of the Related Art Conventionally, as a technique for preventing leakage of privacy information related to user traceability, a method is known in which information is not transmitted / received directly to / from a partner during communication, but via a proxy (agent). For example, when browsing a WWW on the Internet, if the terminal establishes a session with the WWW server using the HTTP protocol, the WWW server has a problem that the IP address of the terminal, which is an identifier that uniquely identifies the user, is known. . In order to prevent this, if the terminal establishes a session to the WWW server via the HTTP proxy open to a large number of users, only the IP address of the HTTP proxy is known to the WWW server. Since many users use one HTTP proxy in a shared manner, it is impossible for the operator of the WWW server to effectively determine which user has made access, thus preventing the leakage of privacy information of the user. can do. As an HTTP proxy for this purpose, for example, the document “The Anonymizer: Protecting User Privacy on the Web” (Boyan JA, Computer-Mediated Communication Magazine, September / 1997. September: 1997 / w. cmc / mag / 1997 / sep / boyan.html) (see Non-Patent Document 2) has already been provided as a commercial service. The concept of the privacy information leakage technique by the proxy is not limited to HTTP but can be widely applied to general communication.

However, the prior art has the following two problems.
The first problem is that in the prior art, a very high security level is required for the proxy itself. That is, in the above-mentioned conventional technology, not only the content accessed by the user but also information regarding which user accessed which server is all collected in the proxy, so the proxy operator is illegal or the proxy is illegal Damage to the user's privacy information will be enormous. For this reason, in the prior art, there is a problem in that it is necessary to strictly guarantee that the proxy operator is not fraudulent and that the proxy is not subject to fraudulent attacks.
That is, according to the conventional technology, information leakage can be prevented for each server, that is, instead of reducing the required security level of each server, a higher security level is required for the proxy itself. This is significantly more difficult than ensuring the necessary security level for each individual server, which is a problem in the prior art.

The second problem is that the conventional technique does not immediately complete the writing and reading processes. In other words, when two points that communicate with the server, such as the user terminal, are geographically separated from each other and are connected by a network, when transferring large-capacity information through such a network, The writing process is completed immediately even when the network connection is congested or unstable, such as via a wireless section, and when the user uses the information at a later date, the information extraction is completed immediately. However, the above-mentioned prior art has a problem in that this cannot be achieved.
In the prior art, when an information acquisition instruction is received from a user like an HTTP proxy and an information acquisition instruction is transmitted to the server based on the instruction, that is, when a pull type system is configured, The writing process is completed quickly to the storage device attached to the server, but when the user uses the information at a later date, the proxy that receives the information acquisition instruction from the user acquires the large-capacity information from the server. However, since the operation of transferring it to the user is performed, the information retrieval is not completed immediately.

  On the other hand, in the prior art, when a proxy receives an information write instruction from the server and transmits an information write instruction to the user based on the instruction, that is, when a push type system is configured, the user uses the information later. At this time, the information extraction process is completed immediately. However, in the process of writing information that occurs on the server, the proxy that receives the information write instruction from the server performs the operation of transferring a large amount of information to the user. Not complete. As described above, in the conventional technique using the proxy, the above-described requirements regarding the information writing process and the information extracting process cannot be achieved at the same time regardless of whether the system configuration of the pull type or the push type is adopted.

Japanese Patent Application No. 2003-296244 Specification and Drawing Japanese Patent Application No. 2003-296246 Specification and Drawing News on the Nikkei Shimbun WWW site "Net Time Review <Special Feature / Electronic Tag> (5) Fixed ID is" Digitalized Face "-The Point of Privacy" (http://it.nikkei.co.jp/it/njh archive / njh archive.cfm? i = 200303021S264L000 21 & f = ic tag. April 2003) “The Anonymizer: Protecting User Privacy on the Web” (Boyan JA, Computer-Mediated Communication Magazine, September 1997, http://bw.cw//.

  As described above, in the conventional technology for accumulating personal behavior history in consideration of privacy, there is a problem of privacy information leakage regarding the traceability of the user to the unfair information source operating entity. When the technology is implemented using a technology for writing large-capacity data in a reasonable time by accumulating action history, when quickly writing small-capacity index information to a storage device installed near the user In addition, the identifier of the storage device to be written to is given, or there is a problem of communicating with the storage device indicated by the identifier, and a large amount of information is installed near the user from the storage device attached to the information source When a duplicate copy transfer is performed to a specified storage device, an identifier of the transfer destination storage device is given, or communication with the storage device indicated by the identifier is performed. There has been a Utoyuu problem.

  Furthermore, in the technology that prevents the leakage of privacy information related to user traceability using a proxy, the problem that the proxy itself requires a significantly higher security level and the two points that communicate are geographically separated. When a large amount of information is transferred via a network in such a location, the information writing process that occurs on the other hand is unstable, such as when the network connection is congested or via a wireless section. However, in the above-mentioned prior art, it is impossible to achieve them simultaneously with respect to the requirement that the information is completed immediately and the retrieval of information is completed immediately when the information is used at a later date. There was a problem.

(the purpose)
The purpose of the present invention is to solve these conventional problems, and in information collection for accumulating personal action history, it is possible to quickly complete the readout process in response to a user instruction and perform video display, The information collection control device, the information collection method, the information acquisition device, the information transfer method, the program thereof, and the program, in which the risk of privacy leakage of the user is eliminated and the high security level is not required for the proxy, are recorded. It is to provide a recording medium.

An information collection transfer acquisition system according to the present invention includes an information collection control device that controls storage of information, a plurality of information source control devices that hold and store information, and an intermediate that stores information transferred from the information source control device An information collection transfer acquisition system in which an accumulation device and a plurality of information acquisition devices for obtaining information accumulated in the intermediate accumulation device are connected by a communication network, and an information storage location identifier and the information for each user And a storage list that is inaccessible to other users, and the information collection control device transmits information stored in the information source control device to the information source control device. The information specifies a storage instruction transmission / reception means for transmitting a storage instruction for requesting encryption and storage, and receiving a storage response as a response, and a storage location identifier of the information and an encryption key. A storage list recording means for recording in the storage list corresponding to the user, and the information source control device encrypts the stored information upon receiving the storage instruction, stores the information in the storage, and stores it as a response. Means for transmitting a storage response, and means for transmitting a storage instruction including the stored encrypted information and storage location identifier to the intermediate storage device, wherein the intermediate storage device includes storage, encryption Receiving a storage instruction including the stored information and the storage location identifier, receiving means for storing the encrypted information in the storage location indicated by the storage location identifier in the storage, and an acquisition request including the storage location identifier. Means for reading out encrypted information from a storage location indicated by the storage location identifier in the storage and transmitting it as a response, Means for acquiring a storage location identifier and an encryption key for information from the storage list corresponding to the user of the device itself, and an acquisition request including the storage location identifier is transmitted to the intermediate storage device and encrypted as a response It is characterized by having means for receiving information and means for decrypting the encrypted information using the encryption key.
Alternatively, as another aspect, the information collection transfer acquisition system of the present invention uses a password for information acquisition instead of information encryption. Specifically, an information collection control device that controls storage of information, a plurality of information source control devices that hold and store information, an intermediate integration device that stores information transferred from the information source control device, An information collection and transfer acquisition system in which a plurality of information acquisition devices for acquiring information stored in an intermediate storage device are connected by a communication network, and for acquiring an information storage location identifier and the information for each user A set including passwords is configured and has a storage list that cannot be accessed by other users, and the information collection control device stores information held by the information source control device in the information source control device. As a response, the storage instruction transmission / reception means for receiving the storage response, the storage location identifier of the information, and the password are transmitted to the user identified by the information. Storage list recording means for recording in the storage list, and when the information source control device receives the storage instruction, the information source control device stores the stored information in the storage together with the password and sends a storage response as a response. Means for transmitting and means for transmitting a storage instruction including stored information, a storage location identifier and a password to the intermediate storage device, wherein the intermediate storage device includes storage, information, storage location identifier and password When the storage instruction including the storage location identifier in the storage is received, the password verification succeeds when the acquisition request including the storage location identifier and the password is received in the storage location indicated by the storage location identifier. If the information is read from the storage location indicated by the storage location identifier in the storage The information acquisition device includes: a means for acquiring a storage location identifier and a password from the storage list corresponding to a user of the device; and the storage location identifier and password for the intermediate storage device. And a means for receiving information as a response.
In addition, in the information collection transfer acquisition system of the present invention, in addition, the information collection control device receives an ID that can identify the information source control device and an ID that can identify a user, and can identify the user for each user. Means for identifying the user and the information source control device holding information identifying the user with reference to a database in which a set of IDs and identifiers of the accumulation list corresponding to the user is recorded. It may be.
Further, the accumulation list may be provided in the information acquisition device of the user for each corresponding user, or the information collection control device may be provided in a lump.

The information collection control device of the present invention is connected to a plurality of information source control devices that hold and store information through a communication network, and requests the information source control device to store information held by the information source control device. The information specifies the storage instruction transmission / reception means for receiving the storage response, the storage location identifier of the information, and the encryption key of the information or the password for accessing the information. And a storage list recording means for recording in a storage list provided in the device corresponding to the user or the device corresponding to the user.
Furthermore, the information collection control method of the present invention is an information collection control method in an information collection control device connected by a communication network to a plurality of information source control devices that hold and store information, and for the information source control device. To transmit a storage instruction for requesting storage of information held by the information source control device, receive a storage response as a response, and access the storage location identifier of the information and the encryption key of the information or the information These passwords can be accessed only by the user specified by the information, and are recorded in a storage list provided in the own device or a device corresponding to the user.

  According to the present invention, even when the network to which the information source control device is connected is temporarily congested or the connection is unstable, such as via a wireless section, the user can instruct the reproduction from the generation of information. By using the fact that there is a certain time interval before performing the transfer, it is transferred to the storage provider without any problem, and when the user gives a playback instruction, it can be quickly read out and displayed as a video . Regarding privacy protection related to user traceability, the information given to the information source control device is only the time zone to be stored and the IP address of the storage provider. In addition, since the storage provider functions like a proxy for communication with the playback device, and the storage provider itself is not given any information about which user accessed which source control device, The privacy information of users can be concealed and the risk of privacy leakage can be prevented.

(Overview)
In the information collection / transfer acquisition system of the present invention, cameras (A) 41 and (B) 42 for acquiring audio and video information are introduced, a position sensor (wireless tag, etc.) is arranged, and the position sensor detects the information source. The information is specified and stored in the personal storage of the user under the control of the information source control devices (A) 61 and (B) 62. First, the position sensor detects that the user is in front of the cameras 41 and 42, and issues a storage instruction to the cameras 41 and 42. Upon receiving the instruction, the cameras 41 and 42 protect the information with encryption and password, and transfer the information to the user's ubiquitous storage. As a result, information from a large number of external sensors available to the public can be referred to only by the individual specified by the information from the position sensor, and can be stored in the unified storage of the individual that the user can refer to freely.

The document “Personal Storage System of External Sensor Information Linked to User Position” (2003 Information Science and Technology Forum (FIT) M-45, September 2003) published by the present inventor and the document “Person of External Sensor Information” Similar to “Configuration Method of Distributed Storage in Storage System” (2003 Information Science and Technology Forum (FIT) M-46, September 2003) (both applied for Patent Law Article 30 application) A plurality of base stations for video cameras and wireless ID tags are installed inside, and the movement of the user wearing the wireless ID tag is detected, and the state of the user is photographed and stored.
The wireless ID tag is, for example, small and can be carried by the user, and always transmits a unique tag ID. When receiving the radio wave, the base station of the wireless ID tag sends information including the received tag ID to other devices on the network. As a set of devices for such a wireless ID tag, for example, a product called SPIDER of RF CODE is commercially available, and the set of these devices is easily available and can be used as this embodiment. .

(Device configuration)
FIG. 1 is a configuration diagram of an information collection transfer acquisition system according to an embodiment of the present invention.
In FIG. 1, the following apparatuses are connected on a network 9 using TCP / IP composed of a wired Ethernet (registered trademark) and a wireless LAN.
A camera (A) 41 is installed, connected to the information source control device (A) 61, and connected to the network 9. The information source control device (A) 61 has a storage device (A) 51. In exactly the same manner, the camera (B) 42 is installed and connected to the information source control device (B) 62. The information source control device (B) 62 has a storage device (B) 52.
Since the information source control device (A) 61 and the information source control device (B) 62 are distributed in various places in the building, the network connection is congested or temporarily connected through a wireless section. May become unstable.

A base station group 11 of wireless ID tags is installed and connected to the network 9. At this time, each base station 11 is installed so as to correspond to the photographing range of the camera (A) 41 and the camera (B) 42. Thereby, when the radio wave from the wireless ID tag is received by any one of the base stations, it can be easily determined which of the camera (A) 41 and the camera (B) 42 should be driven.
The intermediate integration device 70 is a device having a storage device (C) 53 and is connected to the network 9.
The information collection control device 30, the user database 31, and the information acquisition device 80 are connected to the network 9. The information acquisition device 80 includes a storage device (D) 54. The storage device (D) 54 includes an accumulation list 64. Details of these configurations will be described below.

FIG. 2 is a data configuration diagram held by the user database shown in FIG.
As shown in FIG. 2, the wireless tag ID, the user name, and the identifier of the user accumulation list for the number of users are stored.
FIG. 3 is a data configuration diagram held in the accumulation list 34 shown in FIG.
The accumulation list 34 is initially empty, and as the process proceeds, the contents are added line by line according to the procedure described below. For example, a time zone, an identifier indicating a storage location, an encryption key, and a password are stored.

(Recording process)
FIG. 4 is a process flowchart for recording video information in the storage device of the information acquisition apparatus shown in FIG. 1 in the present invention.
A user has a wireless ID tag and moves to a place where a camera group is installed.
Also in this embodiment, as in the prior art, the base station group 11 of the wireless ID tag receives a signal from the wireless tag, and the information collection control device 30 includes the tag ID and the identifier of the base station that has received the tag ID. (Step 201). The information collection controller 30 receives the information and determines which of the camera (A) 41 and the camera (B) 42 should be driven based on the change in the current position of the user. That is, an information source for generating the accumulation target information is specified (step 202). Further, the information collection control device 30 searches the user database 31 and acquires user information including the identifier of the accumulation list 34 of users having the wireless ID tag based on the tag ID (step 203). As a result, the information collection control device 30 obtains, for example, the information “save the video of the camera (A) 41 from the P time Q to the X time Y to the user M”.

Next, the information collection control device 30 sends an accumulation instruction regarding a specific time zone via the network 9 to the information source control device corresponding to the camera. For example, the communication of the accumulation instruction including the time zone from P time Q minutes to X hours Y minutes is sent to the information source control device (A) 61 corresponding to the camera (A) 41 (step 204).
The information source control device (A) 61 normally acquires images taken by the camera (A) 41 as needed, and stores them in the storage device (A) 51 when there is no special instruction (step 200). On the storage device (A) 51, a sufficient storage area may be secured in advance for storing a video for a certain period of time, such as 24 hours.
In addition, the information source control device (B) 62 normally acquires the video captured by the camera (B) 42 and saves it in the storage device (B) 52 when there is no special instruction. Hereinafter, similarly, the camera (B) 42, the storage device (B) 52, and the information source control device (B) 62 are replaced with the camera (A) 41, the storage device (A) 51, and the information source control device (A) 61. Each corresponds to the same operation.

The information source control device (A) 61 receives the accumulation instruction from the information collection control device 30 (step 204) and performs the following operations. First, the information source control device (A) 61 generates an encryption key and a password using random numbers (step 205). As a random number generation method, a known arithmetic operation generally used in a program that handles encryption can be used, and an encryption key and a password need only have a certain length, for example, 128 bits. It can be easily realized.
Next, the information source control device (A) 61 secures a storage area on the storage device (A) 51 as a storage location of the video information, and further generates an identifier for uniquely identifying the reserved storage location (step). 206). As this identifier, for example, an identifier of the information source control device (A) 61 and a serial number, or a character string combining a random value can be used.

Next, the information source control device (A) 61 reads the video information of the time zone included in the communication of the accumulation instruction received from the accumulation instruction unit 30 among the video information stored in the storage device (A) 51, Encryption is performed using the encryption key generated in the above procedure, and information including the encrypted data and the password generated in the above procedure is recorded in the reserved storage location (step 207).
For example, in the implementation using the Windows (registered trademark) operating system, the identifier indicating the storage location generated above is used as a file name, a new file is created, and information is written into the file, so that the storage location is stored. Recording can be realized.
In the present embodiment, as an encryption method used in the above procedure, a known algorithm called a symmetric key cryptosystem such as the AES standard can be widely used. In this case, the same information as the generated encryption key can be used as the decryption key, and the encrypted data can be decrypted using the decryption key.

  In the present invention, the present invention is not limited to the above-described embodiment. As another embodiment, for example, a known algorithm called an asymmetric key cryptosystem or a public key cryptosystem such as an RSA cipher can be used. In this case, when generating the encryption key, a pair of decryption keys is generated at the same time. Decryption key generation methods are determined for each asymmetric key encryption algorithm, and efficient generation methods have been studied for each encryption algorithm, and these techniques can be used. However, the use of an asymmetric key cryptosystem is inferior to the case of the present embodiment using a symmetric key cryptosystem in terms of cryptographic operation speed.

Returning to FIG. 4, the information source control device (A) 61 then generates the above generation in the present embodiment using a decryption key, that is, a symmetric key cryptosystem, for the information collection control device 30 that has received the accumulation instruction. A storage response including the generated encryption key, the generated password, and the identifier indicating the generated storage location is transmitted via the network 9 (step 208).
In the above-described series of procedures executed by the information source control device (A) 61, video information that is large-capacity information is controlled without information via the network 9 that may take time to transfer large-capacity information. The storage instruction and the storage response that are directly recorded in the storage device (A) 51 of the device (A) 61 and communicated via the network 9 are small-capacity information such as time zone information and identifiers. Therefore, by using the above-described series of procedures, even when the information writing process generated by the information source control device (A) 61 is unstable, such as when the network connection is congested or via a wireless section. Can be completed instantly.

Receiving the storage response, the information collection control device 30 records the storage instructed time zone, the identifier indicating the storage location included in the storage response information, the encryption key, and the password in the storage list 34 according to the following procedure. To do. That is, for the storage area on the network 9 indicated by the identifier of the accumulation list 34 obtained by the procedure in which the information collection control device 30 searches the user database 31, the identifier indicating the time zone and accumulation location instructed to accumulate. And an instruction to additionally write a set of information including the encryption key and password (step 209). In this case, since the storage list 34 is managed by the information acquisition device 80, this instruction is sent to the information acquisition device 80.
That is, the information acquisition device 80 having the storage device (D) 54 including the accumulation list 34 receives this additional write instruction, and additionally writes the received information set to the accumulation list 34 (step 210).
In this embodiment, the accumulation list 34 is included in the information acquisition apparatus 80 having the storage device (D) 54. However, the present invention is not necessarily limited to such a configuration. May be arranged in another location on the network 9 and accessible only by the user himself / herself. For example, the storage list 34 is arranged on a storage device included in the information collection control device 30, and the information collection control device 30 authenticates the information acquisition device 80 with a pre-registered password, thereby allowing access from other users. It is good also as refusing.

In the present embodiment, the information source control device (A) 61 generates an encryption key and a password by random numbers, generates an identifier for uniquely identifying the storage location of video information, and stores information including them as a storage response. The data is transmitted to the collection control device 30. However, the present invention is not necessarily limited to this, and the information collection control device 30 generates any or all of the encryption key, the password, or the identifier indicating the storage location, and includes the information. May be transmitted to the information source control device (A) 61 as an accumulation instruction. That is, the encryption key, the password, and the identifier indicating the storage location may be generated by either the information collection control device 30 or the information source control device (A) 61, and both are included by including the information in the storage instruction or the storage response. We just need to be able to share information between them.
Video information is recorded in the storage device (A) 51 of the information source control device (A) 61 when the base station group 11 of the wireless ID tag receives a signal from the wireless ID tag through the above-described series of procedures. To complete the process. The information source control device (A) 61 transfers the video information to the intermediate stacking device 70 after a certain period of time.

(Transfer to intermediate stacker)
FIG. 5 is a flowchart of the transfer process to the intermediate stacker 70 in the present invention.
The information source control device (A) 61 reads the information including the encrypted data and the password recorded in the above procedure in the reserved storage location (step 301), and uniquely identifies the information and the storage location. A video information transfer instruction including a pair of identifiers to be identified is transmitted to the intermediate integration device 70 via the network 9 (step 302). The intermediate integration device 70 receives the above instruction and stores the received information in the storage device (C) 53 of the intermediate integration device 70 (step 303). Note that the above-mentioned certain period means, for example, that the CPU load of the information source control device (A) 61 is periodically acquired by an API call of the operating system, and the transfer procedure is performed if the idle state of the CPU continues for several minutes. It may be started.

(Video playback)
FIG. 6 is a flowchart of the video reproduction process in the present invention.
The information acquisition device 80 reads the accumulation list 34 included in the storage device (D) 54 (step 401), acquires the arrangement of time zones instructed to be accumulated, and displays them on the screen as a list of available video information. (Step 402), waiting for user operation. The user operates the information acquisition device 80 to instruct reproduction of video information in a specific time zone (step 403). The information acquisition device 80 reads the storage list 34 included in the storage device (D) 54, and acquires an identifier, an encryption key, and a password indicating the storage location of the video information corresponding to the time zone instructed to reproduce (step). 404).
Next, the information acquisition device 80 transmits an information acquisition instruction including an identifier indicating a storage location of video information and a password to the intermediate accumulation device 70 via the network 9 (step 405).
The intermediate accumulation device 70 receives the information acquisition instruction and searches whether the storage location indicated by the identifier indicating the storage location of the video information included in the information acquisition instruction is stored in the storage device (C) 53. (Step 406).

If the storage location is not stored in the storage device (C) 53, the information acquisition response is transmitted to the information acquisition device 80 via the network 9 as an information acquisition response (step 420). The information acquisition device 80 receives an information acquisition response indicating that the information is unavailable, displays the screen indicating that the video in the designated time zone is currently unavailable, and presents it to the user.
If the storage location is stored in the storage device (C) 53, the intermediate integration device 70 reads the stored information, that is, the information including the encrypted data and the password (step 407). Next, the password included in the information acquisition instruction is compared with the stored password (step 408). If the passwords do not match, information that the information is unavailable is transmitted as an information acquisition response to the information acquisition device 80 via the network 9 (step 421). If the passwords match, the stored encrypted data is transmitted as an information acquisition response to the information acquisition device 80 via the network 9 (step 409).
The information acquisition device 80 receives an information acquisition response composed of encrypted data, decrypts the encrypted data using the encryption key acquired in the above procedure to obtain video information (step 410), and stores it in the storage device (D) Accumulate in 54 (step 411). Next, the accumulated video information is displayed on the screen and presented to the user (step 412). For example, in the implementation using the Windows (registered trademark) operating system, the video information stored in the storage device (D) 54 of the information acquisition device 80 is obtained by calling a moving image audio reproduction function provided by the operating system. Can be easily displayed on the screen.
In this embodiment, the password is used as it is without being encrypted, and the intermediate integration device 70 simply compares them. The scope of rights of the present invention is not limited to this, and any known technique for making password comparison more secure can be arbitrarily applied.
For example, a login authentication technique widely used for authenticating a user's login password in the UNIX (registered trademark) operating system may be used. In this technique, authentication information obtained as a result of performing a specific arithmetic operation on a password is stored in advance in the storage device (C) 53 instead of the password, and the information acquisition device 80 acquires information to the intermediate stacking device 70. When sending the instruction, the password includes the result information obtained by performing the arithmetic operation in place of the password, and the intermediate accumulator 70 stores the authentication information stored in advance and the information included in the received information acquisition instruction. You can confirm the legitimacy of access.
Alternatively, for example, a challenge response authentication technique widely used as CHAP authentication (RFC 1994, http://www.ietf.org/rfc/rfc1994.txt?number=1994) in Internet connection may be used. In this technique, the intermediate accumulating device 70 that has received the information acquisition instruction sends a random value called a challenge code to the information acquiring device 80, and the information acquiring device encrypts the password using the received challenge code and again performs intermediate accumulation. The intermediate accumulation device 70 encrypts the password stored in the storage device (C) 53 using the challenge code and compares it with the encrypted password received from the information acquisition device 80. You may check the legitimacy of access.
In any of the two known techniques for improving the security of the password comparison, an unencrypted password is not included in the communication to the information acquisition device 80 and the intermediate integration device 70, thereby improving the security of the password comparison. Can be increased.

(Configuration of information collection control device)
FIG. 7 is a configuration diagram of an information collection control apparatus according to an embodiment of the present invention.
As shown in FIG. 7, the information collection control device 30 includes an information source identification function unit 131, a storage instruction transmission / reception function unit 132, and a storage list recording function unit 133, and is connected to the user database 31 via the network 9. The
The information source specifying function unit 131 executes the reception of the communication 201 and the process 202 and the process 203 among the functions of the information collection control device 30 shown in FIG.
The accumulation instruction transmission / reception function unit 132 executes transmission of the communication 204 and reception of the communication 208 among the functions shown in FIG.
The accumulation list recording function unit 133 executes transmission of the communication 209 among the functions shown in FIG.

(Configuration of information source control device)
FIG. 8 is a block diagram of an information source control device according to an embodiment of the present invention.
As shown in FIG. 8, the information source control device (A) 61 includes an accumulation instruction response function unit 161, an encryption function unit 162, an accumulation location securing function unit 163, an information recording function unit 164, and an information transfer function unit 165. Composed.
The accumulation instruction response function unit 161 performs reception of the communication 204 and transmission of the communication 208 among the functions of the information source control device (A) 61 illustrated in FIG. 4.
The encryption function unit 162 executes the process 205 among the functions shown in FIG.
The storage location securing function unit 163 executes the process 206 among the functions shown in FIG.
The information recording function unit 164 executes the process 200 and the process 207 among the functions shown in FIG.
The information transfer function unit 165 executes transmission of processing 301 and communication 302 among the functions of the information source control device (A) 61 shown in FIG.

(Configuration of intermediate stacking device)
FIG. 9 is a configuration diagram of an intermediate integration device according to an embodiment of the present invention.
As shown in FIG. 9, the intermediate accumulation device 70 includes an information transfer response function unit 171, an information acquisition response function unit 172, an information presence confirmation function unit 173, and a password verification function unit 174.
The information transfer response function unit 171 executes the reception of the communication 302 and the process 303 among the functions of the intermediate integration device 70 shown in FIG.
The information acquisition response function unit 172 executes the reception of the communication 405 and the transmission of the processing 407 and the communication 409, the transmission of the communication 420, and the transmission of the communication 421 among the functions of the intermediate integration device 70 shown in FIG.
The information presence confirmation function unit 173 executes the process 406 among the functions shown in FIG.
The password verification function unit 174 executes processing 408 among the functions shown in FIG.

(Configuration of information acquisition device)
FIG. 10 is a configuration diagram of an information acquisition apparatus according to an embodiment of the present invention.
As shown in FIG. 10, the information acquisition device 80 includes a terminal input / output function unit 181, an accumulation list management function unit 182, an information acquisition instruction transmission / reception function unit 183, and a decryption / accumulation function unit 184.
The terminal input / output function unit 181 executes the processing 402 and the reception of the operation 403 and the processing 412 among the functions of the information acquisition device 80 shown in FIG.
The accumulation list management function unit 182 receives the process 209 of the communication 209 among the functions of the information acquisition apparatus 80 illustrated in FIG. 4 and processes 401 and 404 among the functions of the information acquisition apparatus 80 illustrated in FIG. 6. Execute.
Among the functions shown in FIG. 6, the information acquisition instruction transmission / reception function unit 183 performs transmission of the communication 405, reception of the communication 409, reception of the communication 420, and reception of the communication 421.
The decryption / accumulation function unit 184 executes processing 410 and processing 411 among the functions shown in FIG.

(Program and recording medium)
When the processing and communication steps of the flowcharts shown in FIGS. 4, 5, and 6 are coded into a program and stored in a recording medium such as a CD-ROM, the program is lent or sold. It is convenient, and by installing the program on the computer of the information source control devices (A) 61, (B) 62, the information collection control device 30, the information acquisition device 80, and the intermediate integration device 70, the program is installed. The present invention can be easily realized.

(Function)
The present invention has the following effects.
Video information, which is large-capacity information, is used as information sources sequentially when the CPU is idle, taking advantage of a certain amount of time from when the information is generated until the user actually gives a playback instruction. The data is transferred from the control device (A) 61 to the intermediate stacking device 70 which is an intermediate stacking station.
As a result, even if the network 9 to which the information source control device (A) 61 is connected is temporarily congested or the connection becomes unstable, such as via a wireless section, the transfer takes some time. Therefore, the transfer to the intermediate stacking device 70 can be completed without any problem. When the user actually gives a reproduction instruction, the intermediate accumulation device 70 and the information acquisition device 80 are connected to each other via the high-speed and stable network 9, so that large-capacity video information can be quickly transferred from the intermediate accumulation device 70 to the information acquisition device. As a result, the reading process is quickly completed in response to the user's instruction, and the video can be displayed.

In this case, information on what kind of video can be used and information on what identifier should be used to acquire the video from another route, that is, the information source control device (A) 61, Since the information is stored in advance in the storage list 34 of the information acquisition device 80 via 30, the video list is quickly presented to the user, and the target information is acquired from the intermediate accumulation device 70. Can do.
Regarding the privacy protection related to the traceability of the user, the information given to the information source control device (A) 61 is only the time zone to be stored and the IP address of the intermediate integration device 70. Information regarding which user the video is is never given from the information collection control device 30 to the information source control device (A) 61, and the intermediate integration device 70 is a storage destination of video information. It functions like a proxy for communication with the information acquisition device 80 and hides the user's privacy information. Thereby, the danger of the privacy leak with respect to the information source control apparatus (A) 61 which became a problem by the prior art can be solved.

  Regarding the privacy protection related to the traceability of the user, the information given to the intermediate accumulation device 70 is only the IP address of the information acquisition device 80. That is, when the information source control device (A) 61 transfers the video information to the intermediate stacking device 70, no fixed identifier indicating which user the information is associated with is included. Are recorded on the storage device (C) 53 without distinction. At this time, the information of a certain user must be kept secret from other users, but authentication is performed using an encryption key and password generated by a random number, and the information required for those authorized users to read is Information confidentiality can be achieved by transferring in advance through another path through the storage list 34. Therefore, if the user changes the IP address of the information acquisition device 80 as appropriate by periodically switching the connection destination of the Internet provider, a fixed identifier for identifying the user given to the intermediate integration device 70 is obtained. It can be eliminated, and the problem that a high security level is required for the proxy, which has been a problem in the conventional technology, can be solved.

In the above-described embodiment, both the encryption key and the password are used as authentication information for concealing the information of the user who has the intermediate accumulation device 70 from other users.
However, the scope of rights as the present invention is not limited to this, and only one of them may be used. For example, when only the encryption key is used, there is a possibility that the encrypted information of other users may be transferred from the intermediate accumulation device 70 to the unauthorized information acquisition device 80. However, the unauthorized information acquisition device 80 has a storage list. Since the regular encryption key is not stored in Table 34, the information cannot be decrypted. Therefore, the original information cannot be obtained correctly and the information is kept secret. That is, without using a password, only the encryption key functions as authentication information.
On the other hand, for example, when only a password is used, since the unauthorized information acquisition device 80 does not have a legitimate password, there is no possibility that video information of other users will be transferred. However, in this case, since the video information is stored in the intermediate integration device 70 without being encrypted, there arises a problem that the intermediate integration device 70 can browse the contents of the information, that is, the accessed content. The security level that can be achieved by the invention is lower than when the encryption key is used.
On the other hand, when a password is used, in addition to the function of the present embodiment, for example, when an old information deletion function is added to the intermediate stacking apparatus 70 and an old information deletion instruction function is added to the information acquisition apparatus 80, The password used in this embodiment can be used to confirm the validity of the deletion instruction from the information acquisition device 80 to the intermediate stacking device 70. That is, when adding a deletion function, it becomes easy to realize a defense function against a security attack known as a denial of service attack that makes an information unavailable to an external attacker.
In the present embodiment, by using both the encryption key and the password, the authentication is doubled to make the authentication stronger and prevent the intermediate stacker 70 from browsing the contents of the information. In addition, when adding a function such as a function for deleting old information, the above password can be used to confirm the validity, so that a defense against a denial of service attack can be easily realized.

    In the embodiment, a plurality of video camera and wireless ID tag base stations are installed in the building, the movement of the user wearing the wireless ID tag is detected, and the state of the user is photographed and stored. did. However, the scope of rights of the present invention is not limited to this, and is broadly applicable to any combination of means for acquiring a user's state (context) and a sensor for acquiring information about the user. Applicable.

(Application example)
In the above embodiment, an example of recording and storing an individual's behavior history with a camera has been shown, but since the purpose is to mainly store personal events with video and audio, in the present invention It is possible to use not only a camera but also an A / V sensor including voice recording. These A / V sensors can be installed in an entrance / exit management system installed in an office building, a system for grasping employees entering a conference room or a meeting, and the like.
In the ubiquitous society, the user's health such as the number of steps and body temperature is measured, the growth process of animals and plants to be bred and the houses are monitored for crime prevention. It is expected that sensors for grasping the state of the user and the surroundings such as monitoring the state of the user will be installed in various places, and the scope of rights of the present invention naturally applies to these sensor systems.

It is a block diagram of the information collection transfer acquisition system which concerns on one Example of this invention. It is a data block diagram which the user database in FIG. 1 hold | maintains. It is a data block diagram which the accumulation | storage list in FIG. 1 hold | maintains. It is an operation | movement flowchart which records the video information which concerns on one Example of this invention in a memory | storage device (A). 4 is an operation flowchart for transferring video information according to an embodiment of the present invention to an intermediate integration device. 5 is an operation flowchart of video reproduction processing according to an embodiment of the present invention. It is a block diagram of the information collection control apparatus which concerns on one Example of this invention. It is a block diagram of the information source control apparatus which concerns on one Example of this invention. 1 is a configuration diagram of an intermediate integration device according to an embodiment of the present invention. It is a block diagram of the information acquisition apparatus which concerns on one Example of this invention.

Explanation of symbols

11 ... Base station group, 9 ... Network, 30 ... Information collection control device,
31 ... User database, 34 ... Accumulation list, 41 ... Camera (A),
42 ... Camera (B), 51 ... Storage device (A), 52 ... Storage device (B),
53 ... Storage device (C), 54 ... Storage device (D), 61 ... Information source control device (A),
62 ... Information source control device (B), 70 ... Intermediate accumulation device, 80 ... Information acquisition device,
131 ... Information source identification function unit, 132 ... Accumulation instruction transmission / reception function unit,
133 ... Accumulation list recording function unit 161 ... Accumulation instruction response function unit 162 ... Encryption function unit
163 ... Accumulation location securing function unit, 164 ... Information recording function unit, 165 ... Information transfer function unit,
171 ... Information transfer response function unit, 172 ... Information acquisition response function unit,
173 ... Information existence confirmation function part, 174 ... Password verification function part,
181 ... Terminal input / output function unit, 182 ... Accumulation list management function unit,
183... Information acquisition finger transmission / reception function unit, 184.

Claims (8)

An information collection control device that controls the storage of information, a plurality of information source control devices that hold and store information, an intermediate integration device that stores information transferred from the information source control device, and an accumulation in the intermediate integration device An information collection transfer acquisition system in which a plurality of information acquisition devices that acquire the information obtained are connected by a communication network,
Each user unit has a set including an information storage location identifier and an encryption key for the information, and has a storage list that cannot be accessed by other users.
The information collection control device includes:
An accumulation instruction transmission / reception means for transmitting an accumulation instruction for requesting encryption and accumulation of information held by the information source control apparatus to the information source control apparatus, and receiving an accumulation response as a response;
A storage list recording means for recording the storage location identifier and encryption key of the information in the storage list corresponding to the user specified by the information;
The information source control device includes:
Storage,
Means for encrypting information to be stored when receiving a storage instruction, storing the information in the storage, and transmitting a storage response as a response;
Means for transmitting a storage instruction including stored encrypted information and a storage location identifier to the intermediate stacking device;
The intermediate stacking device includes:
Storage,
Means for storing the encrypted information in the storage location indicated by the storage location identifier in the storage upon receiving a storage instruction including the encrypted information and the storage location identifier;
Means for receiving an acquisition request including a storage location identifier and reading out encrypted information from the storage location indicated by the storage location identifier in the storage and transmitting it as a response;
The information acquisition device includes:
Means for obtaining a storage location identifier and an encryption key of information from the storage list corresponding to the user of the device;
Means for transmitting an acquisition request including the storage location identifier to the intermediate storage device and receiving encrypted information as a response;
An information collection transfer acquisition system comprising: means for decrypting the encrypted information using the encryption key. An information collection control device that controls the storage of information, a plurality of information source control devices that hold and store information, an intermediate integration device that stores information transferred from the information source control device, and an accumulation in the intermediate integration device An information collection transfer acquisition system in which a plurality of information acquisition devices that acquire the information obtained are connected by a communication network,
Each user unit has a set including an information storage location identifier and a password for obtaining the information, and has a storage list that cannot be accessed by other users.
The information collection control device includes:
An accumulation instruction transmission / reception means for transmitting an accumulation instruction for requesting accumulation of information held by the information source control apparatus to the information source control apparatus, and receiving an accumulation response as a response;
Storage list recording means for recording the storage location identifier and password of the information in the storage list corresponding to the user specified by the information;
The information source control device includes:
Storage,
Means for receiving the storage instruction, storing the stored information in the storage together with the password, and transmitting a storage response as a response;
Means for transmitting a storage instruction including stored information, a storage location identifier and a password to the intermediate storage device;
The intermediate stacking device includes:
Storage,
Means for storing the information and password in the storage location indicated by the storage location identifier in the storage upon receiving a storage instruction including information, storage location identifier and password;
When receiving the acquisition request including the storage location identifier and the password, when the password verification is successful, it has means for reading out information from the storage location indicated by the storage location identifier in the storage and sending it as a response,
The information acquisition device includes:
Means for obtaining a storage location identifier and password from the storage list corresponding to the user of the device;
An information collection transfer acquisition system comprising means for transmitting an acquisition request including the storage location identifier and a password to the intermediate storage device and receiving information as a response thereto. The information collection control device
An ID that can identify the information source control device and an ID that can identify the user are received, and for each user, refer to a database that records a set of an ID that can identify the user and an identifier of the accumulation list corresponding to the user. The information collection transfer acquisition system according to claim 1, further comprising: means for identifying the user and the information source control device holding the information specifying the user.   The information according to any one of claims 1 to 3, wherein the accumulation list is provided for each corresponding user in the information acquisition device of the user, or the information collection control device is provided in a lump. Collection transfer acquisition system. It is connected to a plurality of information source control devices that hold and store information through a communication network, and sends to the information source control device an accumulation instruction for requesting accumulation of information held by the information source control device. An accumulation instruction transmission / reception means for receiving an accumulation response;
The storage location identifier of the information and the encryption key of the information or the password for accessing the information can be accessed only by the user specified by the information, and the storage list provided in the device corresponding to the user or the user An information collection control device comprising storage list recording means for recording in a table. An information collection control method in an information collection control device connected by a communication network with a plurality of information source control devices that hold and store information,
A storage instruction for requesting storage of information held by the information source control device is transmitted to the information source control device, and as a response, a storage response is received.
The storage location identifier of the information and the encryption key of the information or the password for accessing the information can be accessed only by the user specified by the information, and the storage list provided in the device corresponding to the user or the user An information collection control method characterized by recording in a table.   A program for causing a computer of the information collection control apparatus to execute the information collection control method according to claim 6.   A computer-readable recording medium on which the program according to claim 7 is recorded.

Images