JP2006185311A - Device, method and program for setting document anonymity, and document management device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To dynamically adjust an anonymity setting level in setting a proper name in a document in anonymity in accordance with usage environment. <P>SOLUTION: An anonymity setting level adjusting means 21 inputs a document ID set of documents to be accessed and the condition of the usage environment of electronic documents. The anonymity setting level adjusting means 21 determines an anonymity setting level according to user's attributes and place and conditions of using methods of browsing, copying and the like. A proper name anonymity level setting means 22 determines an anonymity expression for setting a proper name in anonymity according to the anonymity setting level determined by the anonymity setting level adjusting means 21. A document outputting means 24 replaces the proper name in the document with the anonymity expression determined by the proper name anonymity setting means 22 and outputs the electronic document to be accessed. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a document anonymization device, a document anonymization method, and a document anonymization program for anonymizing an electronic document, in particular, a database of documents exchanged between a customer and a company, within a company, etc. The present invention relates to a document anonymization apparatus, a document anonymization method, and a document anonymization program that can anonymize and generalize the proper name of a document. The present invention also relates to a document management apparatus, an information sharing system, a document management method, and an information sharing method using a document anonymization apparatus.

  When using a document management device that manages electronic documents to manage and share information between customers and companies or within the company, proper names (proper nouns such as person names) included in the documents ) May be anonymized to protect confidential information such as customer information. In addition, this type of document management device does not anonymize the unique name by referring only to the information such as the personal name, but also considers the personal peripheral information such as the name of the organization to which the individual belongs. Anonymization and generalization of the proper name is performed.

  For example, as an example of a conventional document management apparatus, Patent Document 1 describes a document anonymization apparatus that can anonymize an expression that identifies an individual in a document. The document management apparatus described in Patent Literature 1 has a degree of specificity that evaluates how strong an anonymous target notation extracted from an input document can identify an individual, and a degree of specificity that is greater than a predetermined threshold An anonymization processing unit for anonymizing the notation in the input document.

  The document management apparatus described in Patent Document 1 extracts a person name and a surrounding notation from an input document, and calculates a degree of specificity for evaluating how strong the extracted person name and the surrounding notation can identify an individual. To do. Then, the document management apparatus anonymizes a person name having a degree of specificity greater than a predetermined threshold and a peripheral notation by performing obfuscation, generalization, lower degree of specificity, encryption, and the like. By doing so, it is possible to determine whether or not to anonymize the name of a public person such as “Prime Minister XX” or the name of a person such as “Director-General A of the Information Research Laboratory”.

  For example, Patent Document 2 describes a document script processing apparatus that can extract a unique name in a document and automatically convert the unique name into a hidden character.

JP 2002-269081 A (paragraphs 0033-0059, FIG. 2-3) JP 2002-259363 A (paragraphs 0010-0018, FIG. 1-2)

  If the conventional document management apparatus described in Patent Document 1 is used, the personal name and peripheral notation in the document should be protected as personal information, or there is no need for protection such as a public person name. It can be anonymized by judging whether it is information. Further, if the document management apparatus described in Patent Document 2 is used, the proper name in the document can be automatically converted into a hidden character. However, in the conventional document management apparatuses described in Patent Document 1 and Patent Document 2, it is not considered to reuse an anonymized document, and anonymization of a proper name in a document is performed according to the use environment. The level cannot be adjusted.

  For example, (a) “In a specific department or a specific room that processes the document, the original information before being turned over is handled as it is”, (b) “in-house information sharing,“ △△ ” Individuals such as "A department manager" cannot be specified, but they are stored as information that can specify the department name, etc. ", (c)" When disclosed to the outside, the individual such as "Mr. A" cannot be specified. The anonymous expression cannot be dynamically changed in accordance with the environment in which the document is used or the range in which the document is shared, such as “save as information”.

  In addition, in the conventional document management apparatus described in Patent Document 1 or Patent Document 2, when handling a plurality of documents, the same person's person name is always converted to the same name, or the person name is different. It cannot be guaranteed that a person's name will always be hidden / generalized with a different name. For example, when the document A and the document B are anonymized using the document management apparatus described in Patent Document 1 or Patent Document 2, an anonymous “A” who appears in the document A and an anonymous “A” that appears in the document B I do n’t know if “san” represents the same person or a different person.

  Accordingly, the present invention has been made to solve the above-described problem, and a document anonymization device, a document management device, an information sharing system, and a document anonymity that can dynamically adjust the level of anonymization according to a document access environment. An object of the present invention is to provide a conversion method, a document management method, an information sharing method, and a document anonymization program. Further, the present invention provides a document anonymization device, a document management device, an information sharing system, which can represent the same target with the same anonymous expression and a different target with a different anonymous expression among a plurality of documents to be referred to. An object is to provide a document anonymization method, a document management method, an information sharing method, and a document anonymization program.

  The document anonymization device according to the present invention is a document anonymization device for anonymizing an electronic document, and anonymization indicating the degree of anonymization of an electronic document based on usage environment information indicating a usage environment for using the electronic document Anonymization level determination means for determining the level (for example, realized by anonymization level adjustment means 21) and anonymization level determined by the anonymization level determination means anonymize proper nouns in the electronic document to be processed Anonymous expression determination means (for example, realized by the proper name anonymization means 22) for determining the anonymous expression to be used, and the proper noun in the electronic document to be processed are replaced with the anonymous expression determined by the anonymous expression determination means Document conversion means (for example, realized by the document output means 24) is provided.

  Further, the document anonymization apparatus inputs an anonymization level storage unit (for example, a usage environment database 11 and a usage environment condition for a user to use an electronic document) that stores usage environment information and anonymization level in association with each other. Use condition input means (for example, realized by the anonymization level adjustment means 21), and the anonymization level determination means inputs the use condition input means among the use environment information stored in the anonymization level storage means. If there is usage environment information that matches the usage environment conditions, and if there is usage environment information that matches the usage environment conditions, anonymity corresponding to the usage environment information that matches the usage environment conditions According to such a configuration, a concealment level that conforms to the conditions of the usage environment in which the user uses the electronic document may be used. It can readily determine the levels.

  The anonymization level storage means stores information on presence / absence of access authority to the electronic document, usage location of the electronic document or usage method of the electronic document in association with the anonymization level as usage environment information, and input usage conditions The means inputs the presence / absence of the user's access authority, the location where the user uses the electronic document, or the method where the user uses the electronic document as the conditions of the usage environment, and the anonymization level determination means is the anonymization level storage means Is used to determine whether the access authority information, usage location or usage method information matches the access authority input, usage location or usage method entered by the usage condition input means. Also good. According to such a configuration, it is possible to easily determine the presence / absence of the user's access authority, the place where the user uses the electronic document, and the anonymization level suitable for the method used.

  Further, the document anonymization apparatus includes an anonymous expression storage unit (for example, realized by the proper name attribute database 14) that stores an anonymous expression in association with a proper noun in advance, and the anonymous expression determination unit is an electronic device to be processed. A proper noun included in the document may be specified, and an anonymous expression corresponding to the specified proper noun may be extracted from the anonymous expression storage unit. According to such a configuration, an anonymous expression for anonymizing the specified proper noun can be easily determined.

  The anonymity expression storage means stores the anonymity expression for each anonymization level in advance in association with the proper noun, and the anonymity expression determination means anonymizes the anonymity expression corresponding to the anonymization level determined by the anonymization level determination means. It may be extracted from the expression storage means. According to such a configuration, an anonymous expression suitable for the anonymization level can be easily determined.

  Further, the document anonymization apparatus, when the anonymous expression determination means determines an anonymous expression for the proper noun in the electronic document to be processed, predetermined evaluation information for evaluating the degree of anonymization (for example, real-world evaluation information) And anonymity expression evaluation means (e.g., realized by the proper name anonymization means 22) for evaluating whether or not the anonymization level of the determined anonymous expression matches the degree of anonymization in the real world. It may be a thing. According to such a configuration, it is possible to evaluate whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world.

  Further, the document anonymization device includes an anonymous expression changing means (for example, realized by the expression distinguishing means 23) for changing the anonymous expression determined by the anonymous expression determining means according to a predetermined condition, and the anonymous expression changing means is anonymous. Among the plurality of anonymous expressions determined by the expression determining means, it is determined whether there is an anonymous expression that is a different expression and indicates the same proper noun, and there is an anonymous expression that is a different expression and indicates the same proper noun. If it is determined, each anonymous expression indicating the same proper noun is changed to the same expression with different expressions, and among the plurality of anonymous expressions determined by the anonymous expression determining means, an anonymous expression indicating the same proper expression and different proper nouns is obtained. If there is an anonymous expression indicating the same expression and different proper nouns, the anonymous expression indicating the same expression and different proper nouns is different. Change in expression, the document conversion means, a proper noun in the electronic document to be processed, or may be replaced with an anonymous representation changed anonymous expression changing means. According to such a configuration, the same anonymous expression is selected and anonymized for the same unique name among a plurality of documents, and different anonymous expressions are selected and anonymized for different unique names. Therefore, the same object can be represented by the same anonymous expression and different objects can be represented by different anonymous expressions among the plurality of documents to be referred to. In addition, an anonymized electronic document can be output so that the correspondence between a plurality of documents is not impaired by anonymization.

  A document management apparatus according to the present invention is a document management apparatus for accumulating and managing electronic documents, and an anonymization level indicating a degree of anonymizing an electronic document based on usage environment information indicating a usage environment in which the electronic document is used Anonymization level determination means for determining anonymity expression determination means for determining anonymity expression for anonymizing proper nouns in the electronic document to be processed according to the anonymization level determined by the anonymization level determination means, and processing Document conversion means for replacing the proper noun in the target electronic document with the anonymous expression determined by the anonymous expression determination means is provided.

  The document management apparatus also includes a document storage unit (for example, realized by the document database 12) that stores a plurality of electronic documents, and a document extraction unit (for example, anonymized name) that extracts a processing target electronic document from the document storage unit. The document conversion means may output the electronic document by replacing the proper noun in the electronic document extracted by the document extraction means with an anonymous expression.

  Further, when the anonymous expression determining means determines the anonymous expression for the proper noun in the electronic document to be processed, the document management apparatus determines the anonymous expression determined based on the predetermined evaluation information for evaluating the degree of anonymization. Anonymity level evaluation means for evaluating whether or not the anonymization level matches the degree of anonymization in the real world may be provided. According to such a configuration, it is possible to evaluate whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world.

  Further, the document management device includes an anonymous expression changing means for changing the anonymous expression determined by the anonymous expression determining means according to a predetermined condition, and the anonymous expression changing means is a plurality of anonymous expressions determined by the anonymous expression determining means, Judge whether there is an anonymous expression with different expressions and indicating the same proper noun, and if it is determined that there is an anonymous expression with different expressions and indicating the same proper noun, it will show the same proper noun with different expressions Each anonymous expression is changed to the same expression, and it is determined whether or not there is an anonymous expression that is the same expression and indicates a different proper noun among a plurality of anonymous expressions determined by the anonymous expression determination means. If there is an anonymous expression indicating a different proper noun, each anonymous expression indicating the same specific but different proper noun is changed to a different expression, and the document conversion means converts the electronic sentence to be processed. Proper nouns in, or may be replaced with an anonymous representation changed anonymous expression changing means. According to such a configuration, the same anonymous expression is selected and anonymized for the same unique name among a plurality of documents, and different anonymous expressions are selected and anonymized for different unique names. Therefore, the same object can be represented by the same anonymous expression and different objects can be represented by different anonymous expressions among the plurality of documents to be referred to.

  An information sharing system according to the present invention is an information sharing system for sharing an electronic document, and includes a user terminal and a document management device that stores and manages the electronic document. An extraction request is transmitted to a document management apparatus via a network. The document management apparatus stores a plurality of electronic documents, a document storage unit that extracts electronic documents requested from a user terminal from the document storage unit, and Anonymization level determination means for determining anonymization level indicating the degree of anonymization of the electronic document based on usage environment information indicating the usage environment for using the electronic document, and anonymization level determined by the anonymization level determination means In accordance with the anonymity expression determination means for determining the anonymous expression for anonymizing the proper noun in the electronic document, and the proper noun in the electronic document extracted by the document extraction means, Document converting means for replacing the anonymous expression determined by the name expression determining means, and document transmitting means for transmitting the electronic document in which the proper noun is replaced with the anonymous expression to the user terminal via the network (for example, a document management server) 2A CPU and a network interface unit).

  The document anonymization method according to the present invention is a document anonymization method for anonymizing an electronic document, and anonymization indicating the degree of anonymization of an electronic document based on usage environment information indicating a usage environment for using the electronic document A step of determining a level, a step of determining an anonymous expression for anonymizing the proper noun in the electronic document to be processed according to the determined anonymization level, and a proper noun in the electronic document to be processed are determined And a step of replacing it with an anonymous expression.

  A document management method according to the present invention is a document management method for accumulating and managing electronic documents, and an anonymization level indicating a degree of anonymizing an electronic document based on usage environment information indicating a usage environment in which the electronic document is used Determining anonymity expression for anonymizing the proper noun in the processing target electronic document according to the determined anonymization level, and determining the proper noun in the processing target electronic document. And a step of outputting an electronic document by replacing it with an expression.

  In addition, when the document management method determines the anonymous expression for the proper noun in the electronic document to be processed, the anonymization level of the determined anonymous expression is based on predetermined evaluation information for evaluating the degree of anonymization. It may include a step of evaluating whether or not it matches the degree of anonymization. According to such a configuration, it is possible to evaluate whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world.

  In addition, the document management method includes a step of determining whether or not there is an anonymous expression indicating the same proper noun among different determined anonymous expressions, and a different expression indicating the same proper noun. If it is determined that an anonymous expression exists, a step of changing each anonymous expression that is a different expression and indicating the same proper noun to the same expression, and a step of replacing the proper noun in the electronic document to be processed with the changed anonymous expression It may be included. According to such a configuration, the same anonymous expression is selected and anonymized with respect to the same proper name among a plurality of documents. Therefore, the same object can be expressed by the same anonymous expression among a plurality of documents to be referenced.

  In addition, the document management method includes a step of determining whether or not there is an anonymous expression that indicates the same proper expression and a different proper noun among the plurality of determined anonymous expressions, and indicates a proper proper noun that is the same expression. If it is determined that an anonymous expression exists, the steps of changing each anonymous expression indicating the same proper and different proper noun to a different expression and replacing the proper noun in the electronic document to be processed with the changed anonymous expression. It may be included. According to such a configuration, different anonymous expressions are selected for anonymity different among a plurality of documents and anonymized. Therefore, different objects can be represented by different anonymous expressions among a plurality of documents to be referenced.

  An information sharing method according to the present invention is an information sharing method for sharing an electronic document, in which a document management apparatus that stores and manages electronic documents stores a plurality of electronic documents in advance, and a user terminal that performs processing Transmitting the electronic document extraction request to the document management apparatus via the network, the document management apparatus extracting the electronic document requested from the user terminal, and the document management apparatus using the electronic document. A step of determining an anonymization level indicating the degree of anonymization of an electronic document based on usage environment information indicating a usage environment, and a document management device anonymizing proper nouns in the electronic document according to the determined anonymization level Determining an anonymous expression to be performed, replacing the proper noun in the extracted electronic document with the determined anonymous expression by the document management device, and a document Management device, an electronic document replacing proper names anonymous representation, characterized in that it comprises the steps of transmitting to the user terminal via the network.

  A document anonymization program according to the present invention is a document anonymization program for anonymizing an electronic document, and anonymizes the electronic document based on usage environment information indicating a usage environment in which the electronic document is used. A process for determining the anonymization level indicating the degree, a process for determining an anonymous expression for anonymizing the proper noun in the electronic document to be processed according to the determined anonymization level, and a uniqueness in the electronic document to be processed And processing for replacing the noun with the determined anonymous expression.

  Further, when the document anonymization program determines an anonymous expression for the proper noun in the electronic document to be processed in the computer, the anonymity of the determined anonymous expression is determined based on predetermined evaluation information for evaluating the degree of anonymization. You may perform the process which evaluates whether the conversion level is in agreement with the degree of anonymization in the real world. According to such a configuration, it is possible to evaluate whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world.

  In addition, the document anonymization program is the same as the processing for determining whether or not there is an anonymous expression indicating the same proper noun among different determined anonymous expressions in the computer. If it is determined that there is an anonymous expression indicating a proper noun, the process of changing each anonymous expression indicating the same proper noun to the same expression that is a different expression and the proper noun in the electronic document to be processed into the changed anonymous expression The replacement process may be executed. According to such a configuration, the same anonymous expression is selected and anonymized with respect to the same proper name among a plurality of documents. Therefore, the same object can be expressed by the same anonymous expression among a plurality of documents to be referenced.

  Further, the document anonymization program is the same expression and different from the process of determining whether or not there is an anonymous expression indicating the same proper and different proper nouns among a plurality of determined anonymous expressions on the computer. If it is determined that there is an anonymous expression indicating a proper noun, the process of changing each anonymous expression indicating the same specific and different proper noun to a different expression and the proper noun in the electronic document to be processed are changed to the changed anonymous expression. The replacement process may be executed. According to such a configuration, different anonymous expressions are selected for anonymity different among a plurality of documents and anonymized. Therefore, different objects can be represented by different anonymous expressions among a plurality of documents to be referenced.

  ADVANTAGE OF THE INVENTION According to this invention, the document which adjusted the anonymization level flexibly according to a user's utilization environment can be output. Therefore, the anonymization level can be dynamically adjusted according to the document access environment. In addition, it is possible to output a highly readable document with little risk of information leakage.

Embodiment 1 FIG.
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an example of a configuration of a document management apparatus using a document anonymization apparatus according to the present invention. As shown in FIG. 1, the document management apparatus includes a storage device 1 that stores various information and a data processing device 2 that operates under program control. The document management device is specifically realized by an information processing device such as a workstation or a personal computer, and a database device such as a magnetic disk device.

  In the present embodiment, the document management apparatus stores various electronic documents. Then, the document management apparatus extracts and outputs an electronic document according to a user request. The document management apparatus is applied to, for example, an information sharing system for sharing electronic documents with related departments. For example, in a contact center or call center that accepts e-mails and telephone calls from customers, the information sharing system accumulates and shares information such as e-mails from customers, questionnaire results received from customers, and information written on bulletin boards. In this case, in the information sharing system, for example, the document management apparatus extracts an electronic document to be stored according to a request from the user terminal, and transmits the extracted electronic document to the user terminal via the network.

  Specifically, the storage device 1 is realized by a database device such as a magnetic disk device. As shown in FIG. 1, the storage device 1 includes a usage environment database 11, a document database 12, a proper name appearance position database 13, a proper name attribute database 14, and a real world information database 15.

  The usage environment database 11 stores in advance usage environment information indicating a usage environment in which an electronic document is used. In the present embodiment, the usage environment database 11 includes, as usage environment information, attribute information indicating whether the user has the authority to access personal information (hereinafter also referred to as a unique name access attribute), a usage location of an electronic document ( For example, information on the inside and outside) and usage methods (for example, browsing and copying) are stored. In addition, the usage environment database 11 stores in advance an anonymization level indicating the degree of anonymization when an electronic document is anonymized. In the present embodiment, the usage environment database 11 stores the usage environment information and the anonymization level in association with each other in advance.

  The document database 12 stores a plurality of electronic documents. For example, the document database 12 stores a plurality of electronic documents such as e-mails from customers, questionnaire results received from customers, and information written on bulletin boards. In the present embodiment, the document database 12 stores a document ID (for example, a document file name or a predetermined identification number) for identifying an electronic document in association with the original electronic document.

  Each electronic document stored in the document database 12 includes a proper name expression (proper noun) such as a personal name in the document. In the present embodiment, the document database 12 stores each electronic document in a state where the position of the proper name expression in the document is known. That is, the document database 12 stores each electronic document with additional information indicating the position of the proper name expression in the document. For example, the document database 12 stores each electronic document with an underline added to the location of the proper name expression in the document.

  The proper name appearance position database 13 stores in advance appearance position information indicating the appearance position of the proper name expression. In the present embodiment, the unique name appearance position database 13 includes a unique name ID for identifying the proper name expression, and appearance position information (for example, the proper name is shown) indicating the position where the proper name expression appears on the document database 12. The name of an appearing document and information indicating the character number in the document) are stored in association with each other.

  The unique name attribute database 14 stores in advance unique name attribute information indicating attributes of unique names in the electronic document. For example, the proper name attribute database 14 stores, as proper name attribute information, attribute information such as an individual address, work place, and post. Also, the proper name attribute database 14 stores in advance a specific anonymous expression for anonymizing a proper name (proper noun) in the electronic document in association with the proper name.

  Further, the proper name attribute database 14 stores different anonymous expressions for each anonymization level for the same proper name. That is, the proper name attribute database 14 stores in advance an anonymous expression for each anonymization level in association with a proper name. In the present embodiment, the proper name attribute database 14 stores a proper name ID, a proper name attribute, and an anonymous expression for each level of anonymization in association with each other.

  The real world information database 15 stores in advance predetermined evaluation information for evaluating the degree of anonymization. In the present embodiment, the real world information database 15 includes evaluation information (hereinafter referred to as real world evaluation information) for evaluating what level of anonymous expression the anonymized expression actually corresponds to in the real world (real world). ) Is remembered. For example, the real world information database 15 stores, as real world evaluation information, an attribute name indicating an anonymized expression and an actual anonymization level in the real world in association with each other.

  Specifically, the data processing device 2 is realized by a CPU of an information processing device that operates according to a program. As shown in FIG. 1, the data processing device 2 includes an anonymization level adjustment unit 21, a proper name anonymization unit 22, and a document output unit 24.

  The anonymization level adjusting means 21 has a function of accepting a document ID set of an electronic document to be accessed (hereinafter referred to as an access target document). For example, the anonymization level adjusting unit 21 inputs each file name of the electronic document to be accessed as a document ID set in accordance with the user's instruction operation. Then, the anonymization level adjustment unit 21 passes the input document ID set to the proper name anonymization unit 22. In the case of using the information sharing system, the anonymization level adjusting unit 21 may receive a set of document IDs from the user terminal via a network, for example.

  Further, the anonymization level adjusting means 21 has a function of accepting input of conditions for a usage environment in which the user uses an electronic document. For example, when the user ID (for example, login name or user account) is input in accordance with the user's instruction operation, the anonymization level adjusting unit 21 determines whether the user has access authority based on the input user ID. And the anonymization level adjustment means 21 inputs the presence or absence of a user's access authority as conditions of use environment based on the determination result. Further, for example, the anonymization level adjusting means 21 inputs the user's usage location (for example, in-house or outside) and the usage method (for example, browsing or copying) as the conditions of the usage environment in accordance with the user's instruction operation.

  When the information sharing system is used, the anonymization level adjusting unit 21 may receive information on the user ID, the usage place, and the usage method from the user terminal via the network as conditions for the usage environment.

  The anonymization level adjusting means 21 has a function of determining the anonymization level based on the usage environment information. In the present embodiment, the anonymization level adjusting unit 21 determines whether there is information that matches the input usage environment condition among the usage environment information stored in the usage environment database 11. And the anonymization level adjustment means 21 extracts the anonymization level corresponding to the usage environment information that matches the usage environment conditions from the usage environment database 11 and determines it as the anonymization level used for the access target document.

  The proper name anonymization means 22 has a function of extracting each access target document from the document database 12 based on the document ID set from the anonymization level adjustment means 21. The proper name anonymization means 22 has a function of adding a proper name ID and an attribute value to the proper name portion of the extracted access target document and determining an anonymous expression according to the anonymization level.

  In the present embodiment, the proper name anonymization means 22 extracts the proper name ID corresponding to the extracted access target document from the proper name appearance position database 13. Also, the proper name anonymization means 22 extracts proper name attribute information (such as an individual's address, work place, title, etc.) corresponding to the extracted proper name ID from the proper name attribute database 14. Then, the unique name anonymization means 22 adds the unique name ID and the attribute value to the unique name portion of the access target document by associating the extracted unique name ID and unique name attribute information with the access target document.

  Further, the proper name anonymization means 22 uses the anonymous name used for the proper name portion of the access target document based on the extracted proper name ID and proper name attribute information and the anonymization level determined by the anonymization level adjustment means 21. To decide. In this case, the proper name anonymization means 22 uses an anonymous expression corresponding to the anonymization level determined by the anonymization level adjusting means 21 among the respective anonymous expressions corresponding to the proper name ID and proper name attribute information. 14 to extract. And the proper name anonymization means 22 determines the extracted proper name expression as an anonymous expression used for the proper name part of the access target document.

  Further, the proper name anonymization means 22 has a function of evaluating, based on the real world evaluation information stored in the real world information database 15, what level of anonymous expression actually corresponds to the determined anonymous expression in the real world. . Moreover, the proper name anonymization means 22 has a function of determining whether or not the anonymization level of the determined anonymous expression matches the actual anonymization level of the real world based on the evaluation result. For example, if the proper name anonymization means 22 determines that it does not match the actual anonymization level of the real world, it displays an alarm indicating that it does not match the real anonymization level of the real world. Further, for example, if the proper name anonymization means 22 determines that it does not match the actual anonymization level of the real world, it updates the anonymous expression of each anonymization level stored in the proper name attribute database 14.

  The document output means 24 has a function of outputting a document set in which each access target document is replaced with an anonymous expression. In the present embodiment, the document output means 24 converts the proper name expression in each access target document extracted by the proper name anonymization means 22 into the anonymous expression determined by the proper name anonymization means 22. Then, the document output unit 24 outputs each access target document obtained by converting the proper name expression into the anonymous expression. For example, the document output unit 24 displays each converted access target document on a display device such as a display device or copies it to a recording medium such as a flexible disk. For example, when using an information sharing system, the document output unit 24 transmits each converted access target document to the user terminal via the network.

  In the present embodiment, the storage unit of the document management apparatus stores various programs for anonymizing the electronic document. For example, the storage unit of the document management apparatus determines the anonymization level indicating the degree of anonymization of the electronic document based on the usage environment information indicating the usage environment in which the electronic document is used. In order to execute processing for determining an anonymous expression for anonymizing a proper noun in the processing target electronic document and processing for replacing the proper noun in the processing target electronic document with the determined anonymous expression according to the conversion level The document anonymization program is memorized.

  Next, the operation will be described. In the present embodiment, the document management apparatus stores electronic documents such as e-mails from customers, questionnaire results, and bulletin board writing information in the document database 12 in advance. In the present embodiment, for each electronic document stored in the document management apparatus, a unique name expression in the document is specified in advance, and a unique name ID is assigned to each unique name expression of the electronic document. Then, the document management apparatus stores the specified unique name expression position and unique name ID in the proper name appearance position database 13 in advance. In the present embodiment, an anonymous expression for each identified proper name expression is created in advance for each anonymization level, and the document management apparatus stores the created anonymous expression in the proper name attribute database 14 in advance. .

  In this embodiment, the anonymization level for the usage environment is determined in advance, and the document management apparatus stores the determined anonymization level in advance in the usage environment database 11 in association with the usage environment information. In the present embodiment, the document management apparatus stores in advance in the usage environment database 11 the anonymization level determined in accordance with the presence / absence of the user's access authority and the location and method of use of the electronic document. ing.

  Further, in the present embodiment, real world evaluation information indicating which level each anonymous expression actually corresponds to in the real world is generated, and the document management apparatus executes the generated real world evaluation information. It is stored in the public information database 15 in advance. For example, real-world evaluation information is generated in advance based on statistical information such as the population of each region and the number of employees of a company, and the document management apparatus stores the created real-world evaluation information in the real-world information database 15. .

  FIG. 2 is a flowchart illustrating an example of a document anonymization process in which the document management apparatus converts a proper name expression in an electronic document into an anonymous expression. First, the anonymization level adjusting unit 21 of the document management apparatus reads the document ID set of the access target document and the conditions of the usage environment. For example, the anonymization level adjusting means 21 inputs the document ID of each access target document and the conditions of the usage environment according to the user's instruction operation. Further, when using the information sharing system, for example, the user operates the user terminal to input an instruction for each document ID and usage environment conditions. In this case, the anonymization level adjusting unit 21 receives the document ID set and the usage environment conditions from the user terminal via a network such as the Internet or a LAN.

  For example, the anonymization level adjusting means 21 inputs the file name of each access target document as the document ID. Further, the anonymization level adjusting means 21 inputs a user ID according to the user's instruction operation, and determines whether or not the user has the access authority based on the input user ID. For example, the document management apparatus includes a database in which a user ID and a user access authority are associated with each other, and the anonymization level adjusting unit 21 determines whether the user has the access authority based on the access authority information stored in the database. To do. And the anonymization level adjustment means 21 inputs the presence or absence of access authority as conditions of a use environment based on the determination result. Further, the anonymization level adjusting means 21 inputs the user's usage location (for example, in-house or outside) and the usage method (for example, browsing or copying) as conditions for the usage environment in accordance with the user's instruction operation.

  When the document ID set and the usage environment conditions are input, the anonymization level adjusting unit 21 refers to the usage environment database 11 and determines the anonymization level based on the usage environment information (step S11). In the present embodiment, the anonymization level adjusting means 21 is information that matches the input usage environment conditions among the usage environment information (user access authority, usage location, usage method) stored in the usage environment database 11. Judge whether there is. If it is determined that there is matching usage environment information, the anonymization level adjusting unit 21 extracts the anonymization level corresponding to the matching usage environment information from the usage environment database 11. And the anonymization level adjustment means 21 determines the extracted anonymization level to the anonymization level at the time of anonymizing an access object document.

  The anonymization level adjustment unit 21 passes the input document ID set to the proper name anonymization unit 22. The proper name anonymization means 22 extracts all electronic documents to be accessed from the document database 12 based on each document ID from the anonymization level adjustment means 21. The unique name anonymization means 22 adds a unique name ID to the unique name portion of the extracted access target document. In the present embodiment, the proper name anonymization means 22 extracts the proper name ID corresponding to the appearance location of the proper name expression of the access target document from the proper name appearance position database 13. Then, the unique name anonymization means 22 associates the extracted unique name ID with the unique name portion of the access target document.

  Further, the proper name anonymization means 22 determines an anonymous expression corresponding to the anonymization level for each proper name portion of the access target document (step S12). In the present embodiment, the proper name anonymization means 22 determines an anonymous expression of each proper name part based on the specific name ID added to each proper name part and the anonymization level determined by the anonymization level adjustment means 21. To do. In this case, the proper name anonymization means 22 extracts from the proper name attribute database 14 an anonymous expression corresponding to the anonymization level determined by the anonymization level adjustment means 21 among the anonymous expressions corresponding to the proper name ID. . And the specific name anonymization means 22 determines the extracted expression as an anonymous expression used for the specific name portion of the access target document.

  The document output means 24 outputs a document set in which the proper name portion of the access target document is replaced with the anonymous expression in accordance with the anonymous expression determined by the proper name anonymization means 22 (step S13). In this case, the document output unit 24 converts each unique name portion of the access target document into an anonymous expression determined by the proper name anonymization unit 22. Then, the document output unit 24 outputs an access target document obtained by converting the unique name portion into an anonymous expression. For example, the document output unit 24 displays the converted access target document on a display device or copies it to a recording medium. For example, when using an information sharing system, the document output unit 24 transmits the converted access target document to the user terminal via the network.

  In step S12, when the proper name anonymization means 22 determines the anonymous expression, it corresponds to what level of anonymous expression the determined anonymous expression is based on the real world evaluation information stored in the real world information database 15 in the real world. Evaluate what to do. In this case, the proper name anonymization means 22 determines whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world based on the evaluation result. If it is determined that the level does not match the actual anonymization level of the real world, the proper name anonymization means 22 displays an alarm indicating that it does not match the level of anonymization of the real world, and each of the proper name attribute database 14 stores Encourage anonymity updates. Moreover, when the proper name anonymization means 22 determines that the actual anonymization level in the real world does not match, the proper name anonymization means 22 may update the anonymous expression of each anonymization level stored in the proper name attribute database 14.

  As described above, according to the present embodiment, the document management apparatus outputs a document in which the anonymization level is flexibly adjusted according to the user's usage environment. Therefore, the anonymization level can be dynamically adjusted according to the document access environment. In addition, it is possible to output a highly readable document with little risk of information leakage.

Embodiment 2. FIG.
Next, a second embodiment of the present invention will be described with reference to the drawings. FIG. 3 is a block diagram illustrating another configuration example of the document management apparatus using the document anonymization apparatus. As shown in FIG. 3, the document management apparatus includes a storage device 1 and a data processing device 3. As shown in FIG. 3, this embodiment differs from the first embodiment in that the data processing device 3 includes an expression distinguishing means 23 in addition to the components of the data processing device 2 shown in FIG. Different. In the present embodiment, the functions of the anonymization level adjustment means 21, the proper name anonymization means 22, and the document output means 24 are the same as those functions in the first embodiment. In the present embodiment, the information stored in the storage device 1 is the same as the information stored in the storage device 1 described in the first embodiment.

  The expression distinguishing unit 23 has a function of determining whether or not there is an anonymous expression having the same expression among the plurality of anonymous expressions determined by the unique name anonymizing unit 22 even though the unique name IDs are different. Prepare. In addition, if the expression distinguishing unit 23 determines that the anonymous expressions are the same even though the unique name IDs are different, the expression distinguishing unit 23 has a function of changing the anonymous expressions to other anonymous expressions that can be distinguished.

  Further, the expression distinguishing unit 23 determines whether or not there are anonymous expressions having different expressions even though the unique name IDs are the same among the plurality of anonymous expressions determined by the unique name anonymizing unit 22. It has a function. Further, if the expression distinguishing means 23 determines that the anonymous expressions are different even though the unique name IDs are the same, the expression distinguishing means 23 has a function of changing those anonymous expressions to the same anonymous expressions.

  Next, the operation will be described. FIG. 4 is a flowchart illustrating another example of a document anonymization process in which the document management apparatus converts a proper name expression in an electronic document into an anonymous expression. First, the anonymization level adjusting unit 21 of the document management apparatus reads the document ID set of the access target document and the conditions of the usage environment. For example, the anonymization level adjusting means 21 inputs the document ID of each access target document and the conditions of the usage environment according to the user's instruction operation. When using the information sharing system, for example, the user operates the user terminal to instruct input of each document ID and usage environment conditions. In this case, the anonymization level adjusting unit 21 receives the document ID set and the usage environment conditions from the user terminal via the network.

  When the document ID set and the usage environment conditions are input, the anonymization level adjusting unit 21 refers to the usage environment database 11 and determines the anonymization level based on the usage environment information (step S21). In the present embodiment, the anonymization level adjusting means 21 is information that matches the input usage environment conditions among the usage environment information (user access authority, usage location, usage method) stored in the usage environment database 11. Judge whether there is. If it is determined that there is matching usage environment information, the anonymization level adjusting unit 21 extracts the anonymization level corresponding to the matching usage environment information from the usage environment database 11. And the anonymization level adjustment means 21 determines the extracted anonymization level to the anonymization level at the time of anonymizing an access object document.

  The anonymization level adjustment unit 21 passes the input document ID set to the proper name anonymization unit 22. The proper name anonymization means 22 extracts all electronic documents to be accessed from the document database 12 based on each document ID from the anonymization level adjustment means 21. The unique name anonymization means 22 adds a unique name ID to the unique name portion of the extracted access target document. In the present embodiment, the proper name anonymization means 22 extracts the proper name ID corresponding to the appearance location of the proper name expression of the access target document from the proper name appearance position database 13. Then, the unique name anonymization means 22 associates the extracted unique name ID with the unique name portion of the access target document.

  Moreover, the proper name anonymization means 22 determines the anonymous expression according to the anonymization level for each proper name portion of the access target document (step S22). In the present embodiment, the proper name anonymization means 22 determines an anonymous expression of each proper name part based on the specific name ID added to each proper name part and the anonymization level determined by the anonymization level adjustment means 21. To do. In this case, the proper name anonymization means 22 extracts from the proper name attribute database 14 an anonymous expression corresponding to the anonymization level determined by the anonymization level adjustment means 21 among the anonymous expressions corresponding to the proper name ID. . And the specific name anonymization means 22 determines the extracted expression as an anonymous expression used for the specific name portion of the access target document.

  The expression distinguishing means 23 includes expressions having different anonymous expressions even though the unique name IDs are the same among the anonymous expressions corresponding to the unique names of the access target document set determined by the unique name anonymizing means 22. It is determined whether or not to do. If it is determined that different anonymous expressions exist even though the unique name IDs are the same, the expression distinguishing means 23 changes those anonymous expressions to the same anonymous expression.

  In addition, the expression distinguishing means 23 includes expressions having different unique name IDs in the anonymous expressions corresponding to the unique names of the access target document set determined by the unique name anonymizing means 22 even though the anonymous expressions are the same. It is determined whether or not exists. If it is determined that there are expressions having different unique names ID even though the anonymous expressions are the same, the expression distinguishing means 23 changes these anonymous expressions to different anonymous expressions (step S23).

  The document output means 24 outputs a document set in which the proper noun part of the access target document is replaced with the anonymous expression according to the anonymous expression determined by the proper name anonymization means 22 or the anonymous expression changed by the expression distinguishing means 23 (step S24). In this case, the document output means 24 converts each unique name portion of the access target document into an anonymous expression determined by the proper name anonymization means 22 or an anonymous expression changed by the expression distinguishing means 23. Then, the document output unit 24 outputs the converted access target document. For example, the document output unit 24 displays the converted access target document on a display device or copies it to a recording medium. For example, when using an information sharing system, the document output unit 24 transmits the converted access target document to the user terminal via the network.

  In step S22, when the proper name anonymization means 22 determines the anonymous expression, the determined anonymous expression corresponds to what level of anonymous expression in the real world based on the real world evaluation information stored in the real world information database 15. Evaluate what to do. In this case, the proper name anonymization means 22 determines whether or not the determined anonymization level of the anonymous expression matches the actual anonymization level of the real world based on the evaluation result. If it is determined that the level does not match the actual anonymization level of the real world, the proper name anonymization means 22 displays an alarm indicating that it does not match the level of anonymization of the real world, and each of the proper name attribute database 14 stores Encourage anonymity updates. Moreover, when the proper name anonymization means 22 determines that the actual anonymization level in the real world does not match, the proper name anonymization means 22 may update the anonymous expression of each anonymization level stored in the proper name attribute database 14.

  As described above, according to the present embodiment, the document management apparatus selects and anonymizes the same anonymous expression for the same unique name among a plurality of documents, and different anonymous expressions for different unique names. Select to anonymize. Therefore, the same object can be represented by the same anonymous expression and different objects can be represented by different anonymous expressions among the plurality of documents to be referred to. In addition, an anonymized electronic document can be output so that the correspondence between a plurality of documents is not impaired by anonymization.

  Next, a first embodiment of the present invention will be described with reference to the drawings. The document management apparatus shown in this embodiment corresponds to the document management apparatus shown in the first embodiment of the present invention. In this embodiment, the document management apparatus stores in advance in the document database 12 electronic documents such as e-mails from customers, questionnaire results, and bulletin board writing information. Further, in this embodiment, a unique name expression in each electronic document is specified in advance, and a unique name ID is assigned to each unique name expression of the electronic document. Then, the document management apparatus stores the specified unique name expression position and unique name ID in the proper name appearance position database 13. In this embodiment, an anonymous expression for each proper name expression is created in advance for each anonymization level, and the document management apparatus stores the created anonymous expression in the proper name attribute database 14.

  In this embodiment, the document management apparatus determines the anonymization level for the usage environment in advance, and the document management apparatus stores the determined anonymization level in advance in the usage environment database 11 in association with the usage environment information. ing. Further, in this embodiment, real world evaluation information indicating which level of anonymous expression each anonymous expression actually corresponds to in the real world is generated in advance, and the document management apparatus converts the generated real world evaluation information to the real world It is stored in the information database 15.

  FIG. 5 is an explanatory diagram illustrating an example of information stored in the usage environment database 11. The usage environment database 11 stores, as usage environment information, information on a user's unique name access attribute, usage location and usage method of an electronic document. In this embodiment, as shown in FIG. 5, the usage environment database 11 includes user access authority “present” or “none” information, information such as “confidential room” and “in-department” as usage locations, and usage. Information such as “browsing” and “copying” is stored as a method.

  In addition, the usage environment database 11 stores anonymization levels in association with specific name access attributes, usage locations, and usage methods. In this embodiment, as shown in FIG. 5, the anonymization level is set to “none”, “small”, “medium”, or “large” in association with the user's unique name access attribute, usage location, and usage method. It is classified and stored in stages. In FIG. 5, the anonymization level “none” indicates that the anonymization of the proper name expression in the electronic document is not performed. Further, the anonymization level is not limited to that shown in the present embodiment. For example, the usage environment database 11 may store an anonymization level obtained by further subdividing the degree of anonymization. For example, the usage environment database 11 may store information such as “infinity” or “minimum” as the anonymization level.

  In the example illustrated in FIG. 5, for example, when the access attribute of the user's unique name is “Yes”, the usage location is “Confidential Room”, and the usage method is “Browse”, the corresponding anonymization level is “None”. It shows that there is. For example, when the access attribute of the user's proper name is “Yes”, the usage location is “External” and the usage method is “Browse”, the corresponding anonymization level is “Large”. .

  The anonymization level adjusting means 21 inputs a set of document IDs of the documents that the user wants to access and attributes of the user's usage environment according to the user's operation. In this embodiment, the anonymization level adjusting means 21 has the presence / absence of an access attribute to the user's unique name as the usage environment attribute, and the usage location is “confidential room”, “inside the company” or “outside the company”. Such as whether the usage is just browsing or copying. The anonymization level adjusting means 21 can obtain the anonymization level corresponding to the usage attribute of the user by referring to the usage environment database 11.

  In the example shown in FIG. 5, for example, when an access authority “Yes”, a usage location “confidential room”, and a usage method “browse” are input as conditions of the usage environment of the user, the anonymization level adjusting unit 21 corresponds to the usage environment. The anonymization level “none” to be extracted is extracted from the usage environment database 11. Further, for example, when the access authority “Yes”, the usage location “external”, and the usage method “browsing” are input as the conditions of the usage environment of the user, the anonymization level adjusting unit 21 sets the anonymization level “high” corresponding to the usage environment. Is extracted from the usage environment database 11.

  FIG. 6 is an explanatory diagram showing an example of information stored in the document database 12. As shown in FIG. 6, the document database 12 stores a document ID and the document itself in association with each other. Further, the document database 12 stores the electronic document with the position of the unique name appearing in the document added. In this embodiment, as shown in FIG. 6, a case will be described where the document database 12 stores an electronic document with an underline added to the position of the unique name for convenience.

  FIG. 7 is an explanatory diagram illustrating an example of information stored in the unique name appearance position database 13. As illustrated in FIG. 7, the unique name appearance position database 13 stores a unique name ID and a unique name appearance location in association with each other. In the example illustrated in FIG. 7, for example, the unique name expression corresponding to the unique name ID “Tanaka 001” exists in the 102nd character of the document with the document ID “document 1” among the electronic documents stored in the document database 12. It shows that

  FIG. 8 is an explanatory diagram showing an example of information stored in the unique name attribute database 14. As illustrated in FIG. 8, the unique name attribute database 14 stores a unique name ID, an address and work place that are attributes of the unique name, and each anonymous expression in association with each other. In the example illustrated in FIG. 8, for example, the proper name having the proper name ID “Tanaka 001” indicates that the address attribute is “Shimonumabe, Nakahara-ku, Kawasaki City”. Also, the unique name with the unique name ID “Tanaka 001” is anonymized with the expression “Mr. A” when the anonymization level is “maximum (infinity)”, and when the anonymization level is “large”, It means that it is anonymized by the expression “Mr. A in Kawasaki City”. Furthermore, the unique name with the unique name ID “Tanaka 001” is anonymized with the expression “Mr. A in Nakahara-ku, Kawasaki City” when the anonymization level is “medium”, and when the anonymization level is “small” It shows that it is anonymized by the expression “Mr. A from Shimonumabe, Nakahara-ku, Kawasaki City”.

  FIG. 9 is an explanatory diagram showing an example of information stored in the real world information database 15. The real world information database 15 stores real world evaluation information for evaluating what level of anonymous expression the anonymized expression actually corresponds to in the real world. In this embodiment, as shown in FIG. 9, the real world information database 15 stores the real world evaluation period, the attribute name of the anonymous expression, and the anonymization level in association with each other as real world evaluation information. ing.

  For example, a system using a document management apparatus includes a real world information acquisition server that obtains real world evaluation information in advance. For example, the real world information acquisition server obtains in advance the number of people in the real world corresponding to the anonymized expression based on statistical information such as the population of each region and the number of employees of the company. In this case, the real-world information acquisition server, for example, has 1 million people who correspond to the anonymous expression “Mr. A in Kawasaki City” based on the information of population “1 million” in Kawasaki City in 2003. We ask that it can exist. Moreover, the real world information acquisition server calculates | requires the anonymization level in the real world of the expression anonymized based on the calculated | required number of persons. For example, the real-world information acquisition server requests an anonymization level “large” when the requested number is 1 million or more, and requests an anonymization level “medium” when the number is 10,000 or more. When the number of persons is 1000 or more, the anonymization level “small” is obtained, and when the number of persons is less than 1000, the anonymization level “minimal” is obtained.

  For example, in the example shown in FIG. 9, based on the population of Kawasaki City in 2003, it is required that there can be one million people corresponding to the anonymous expression “Mr. A in Kawasaki City”. It can be seen that this corresponds to the “Large” level. In addition, for example, based on the number of employees and managers of XX Company in 2004, it is required that there can be 1000 people who correspond to the anonymous expression “XX Company & General Manager”. It can be seen that this corresponds to the conversion level “small”.

  The proper name anonymization means 22 receives the set of document IDs of the documents to be accessed and the determined anonymization level from the anonymization level adjustment means 21. Further, the proper name anonymization means 22 takes out a document to be accessed from the document database 12 based on the set of document IDs. Further, the proper name anonymization means 22 takes out the proper name ID of the proper name portion in the document to be accessed from the proper name appearance position database 13. The proper name anonymization means 22 searches the proper name attribute database 14 using the proper name ID and the anonymization level as keys, and determines an anonymous expression corresponding to each proper name.

  For example, the case where the document ID set of the access target document received from the anonymization level adjusting unit 21 is {document 1} and the determined anonymization level is “high” will be described as an example. The unique name anonymization means 22 extracts an electronic document corresponding to the document ID “document 1” as an access target document from the document database 12 shown in FIG. 6 based on the document ID set {document 1}. Further, the unique name anonymization means 22 extracts the unique name ID “Tanaka 001” of the 102nd character's unique name portion of the “document 1” that is the access target document from the unique name appearance position database 13 shown in FIG. . Then, the proper name anonymization means 22 searches the proper name attribute database 14 shown in FIG. 8 using the proper name ID “Tanaka 001” and the anonymization level “Large” as keys, and determines an anonymous expression corresponding to the proper name. To do.

  In this example, the unique name anonymization means 22 uses the unique name shown in FIG. 8 as an anonymous expression corresponding to the unique name part “Mr. Tanaka of Shimonuma, Nakahara-ku, Kawasaki City” of the document with the document ID “Document 1” shown in FIG. The expression “Mr. A in Kawasaki City” is selected from the name attribute database 14.

  Further, the proper name anonymization means 22 determines whether the anonymization level of the selected anonymous expression corresponds to the anonymization level in the real world at a certain time based on the real world information database 15 shown in FIG. To check. For example, the proper name anonymization means 22 is based on the real-world information database 15 shown in FIG. 9 and the real-world anonymization level in 2004 of the selected anonymous expression “Mr. A in Kawasaki City” is “high”. It is determined that And the proper name anonymization means 22 determines that the anonymization level “large” of the determined anonymous expression corresponds to the anonymization level in the real world and is an appropriate expression.

  If it is determined that the anonymization level of the determined anonymous expression does not match the anonymization level in the real world, the proper name anonymization means 22 uses, for example, an alarm that the level does not match the level of anonymization in the real world The system administrator is prompted to update the unique name attribute database 14. Moreover, the proper name anonymization means 22 updates the anonymous expression of each anonymization level which the proper name attribute database 14 memorize | stores, for example.

  The document output unit 24 receives the anonymous expression corresponding to the access target document, the unique name ID, and the unique name ID from the proper name anonymization unit 22. Then, the document output means 24 converts the proper name expression in the document to be accessed into an anonymous expression and outputs it. In the present embodiment, the document output means 24 converts the unique name portion “Mr. Tanaka of Shimonuma, Nakahara-ku, Kawasaki City” into the anonymous expression “Mr. A of Kawasaki City” in the document with the document ID “Document 1”. Output.

  Next, a second embodiment of the present invention will be described with reference to the drawings. The document management apparatus shown in this embodiment corresponds to the document management apparatus shown in the second embodiment of the present invention. In the present embodiment, the functions and operations of the anonymization level adjusting unit 21, the proper name anonymizing unit 22, and the document output unit 24 are the same as those in the first embodiment.

  In the present embodiment, when the proper name anonymization means 22 determines the anonymous expression, the expression distinguishing means 23 includes an expression in which the anonymous expression is the same among the plurality of determined anonymous expressions although the specific name IDs are different. Determine if it exists. If it is determined that the same anonymous expression is used although the unique name ID is different, the expression distinguishing means 23 changes the same anonymous expression to another expression that can be distinguished.

  For example, when the two anonymous expressions determined by the anonymization level adjusting means 21 use the same expression “Mr. A” even though the unique name IDs are different, the expression distinguishing means 23 uses one anonymous expression “ “Mr. A” is modified (changed) to the expression “Mr. B”. In addition, for example, the expression distinguishing unit 23 changes the two anonymous expressions into distinguishable expressions by encrypting the corresponding unique name ID and embedding it in the document. In this case, for example, the expression distinguishing unit 23 corrects the two anonymous expressions to expressions “Mr. A (ID = xaiA0a)” and “Mr. A (ID = eEaIa0)”, respectively.

  Further, when the proper name anonymization means 22 determines the anonymous expression, the expression distinguishing means 23 includes, in the determined plural anonymous expressions, whether there are expressions with different anonymous expressions even though the specific name ID is the same. Determine whether or not. If the expression distinguishing means 23 determines that different anonymous expressions having the same unique name ID but the same unique ID are used, these different anonymous expressions are changed to expressions that show the identity.

  For example, when two anonymous expressions “Mr. A of Kawasaki City” and “Mr. B of XX Company” determined by the anonymization level adjusting means 21 have the same unique name ID (different anonymous expressions for the same person) The expression distinguishing means 23 corrects and unifies these anonymous expressions into the expression “Mr. A of Kawasaki City (XX company)”.

  Also, for example, the expression distinguishing means 23 changes these different anonymous expressions to expressions that can be identified by embedding the unique name ID. In this case, for example, the expression distinguishing means 23 corrects these different anonymous expressions to expressions “Mr. A of Kawasaki City (ID = xaiA0a)” and “Mr. A of XX Company (ID = xaiA0a)”, respectively. Further, for example, the expression distinguishing unit 23 outputs the unique name attribute information together with the document, thereby changing the different anonymous expressions into expressions that can be identified by the identity. In this case, the expression distinguishing means 23 unifies the anonymous expression into the expression “Mr. A (ID = xaiA0a)” in the document and outputs it. Then, the expression distinguishing means 23 outputs, for example, information “Mr. A = (ID = xaiA0a, address = Kawasaki City, company = XX company)” as specific name attribute information separately from the document to be accessed. To do.

  Next, a third embodiment of the present invention will be described with reference to the drawings. FIG. 10 is a block diagram illustrating an example of a configuration of an information sharing system using a document management apparatus. In this embodiment, a case will be described in which an electronic document such as an e-mail from a customer or a questionnaire result is shared using an information sharing system in a contact center that accepts an e-mail or a phone call from the customer.

  As shown in FIG. 10, the information sharing system includes a document management device 20, a customer terminal 40, an operator terminal 50, a document registration server 60, a real world information acquisition server 70, and user terminals 80A, 80B, and 80C.

  The customer terminal 40 is a terminal used by a customer, for example, an information processing terminal such as a personal computer, a mobile phone, or a PDA. Further, the customer terminal 40 may be, for example, a telephone or a facsimile terminal. The customer terminal 40 has a function of transmitting various electronic documents to a contact center via a communication network such as the Internet or a telephone network in accordance with a customer operation. In the present embodiment, the customer terminal 40 transmits an electronic document including various customer personal information to the contact center. For example, the customer terminal 40 transmits a document including an inquiry mail for a product or service and a questionnaire result to the contact center. In FIG. 10, one customer terminal 40 is shown, but the information sharing system includes a plurality of customer terminals 40.

  The operator terminal 50 is a terminal used by an operator at a contact center window, and is, for example, an information processing terminal such as a personal computer. The operator terminal 50 may be, for example, a telephone or a facsimile terminal. The operator terminal 50 has a function of receiving various electronic documents from the customer terminal 40 via a communication network. The operator terminal 50 also has a function of outputting various electronic documents from the customer terminal 40 to the document registration server 60.

  For example, the operator terminal 50 outputs an e-mail (product inquiry or questionnaire result) received from the customer terminal 40 to the document registration server 60. Further, for example, the operator terminal 50 outputs an electronic document including a questionnaire result and the like input according to an input operation of the operator to the document registration server 60 during a call between the customer and the operator. Although one operator terminal 50 is shown in FIG. 1, the information sharing system includes a plurality of operator terminals 50.

  Specifically, the document registration server 60 is an information processing apparatus such as a workstation or a personal computer. The document registration server 60 has a function of storing various electronic documents input from the operator terminal 50 in the document database 12 of the document management apparatus 20. Further, the document registration server 60 has a function of specifying a proper name expression in the input electronic document. In addition, the document registration server 60 has a function of storing the position and unique name ID of each identified unique name expression in the unique name appearance position database 13 of the document management apparatus 20. In addition, the document registration server 60 has a function of creating an anonymous expression for each identified proper name expression for each anonymization level. Further, the document registration server 60 has a function of storing the created anonymous expression in the proper name attribute database 14.

  The real world information acquisition server 70 is specifically an information processing apparatus such as a workstation or a personal computer. The real world information acquisition server 70 has a function of generating real world evaluation information indicating which level of anonymous expression each anonymous expression actually corresponds to in the real world. The real world information acquisition server 70 has a function of storing the generated real world evaluation information in the real world information database 15 of the document management apparatus 20.

  The document management apparatus 20 includes a document management server 2A, a usage environment database 11, a document database 12, a proper name appearance position database 13, a proper name attribute database 14, and a real world information database 15 as shown in FIG.

  Specifically, the document management server 2A is an information processing apparatus such as a workstation or a personal computer. In this embodiment, the basic function of the document management server 2A is the same as the function of the data processing device 2 shown in the first embodiment or the data processing device 3 shown in the second embodiment. It is.

  Specifically, the usage environment database 11, the document database 12, the proper name appearance position database 13, the proper name attribute database 14, and the real world information database 15 are database devices such as magnetic disk devices. In this embodiment, the contents of the information stored in the usage environment database 11, the document database 12, the proper name appearance position database 13, the proper name attribute database 14, and the real world information database 15 are the same as those in the first embodiment or the first embodiment. The contents of the information stored in those databases shown in the second embodiment are the same.

  The user terminals 80A, 80B, and 80C are terminals used by users who use electronic documents, and are information processing terminals such as personal computers, for example. In the present embodiment, the user terminals 80A, 80B, 80C are used by, for example, a user (for example, an operator) belonging to a department in the contact center. The user terminals 80A, 80B, and 80C are used by users in related departments (for example, sales departments) other than the contact center, for example.

  The user terminals 80A, 80B, and 80C have a function of transmitting a request for using an electronic document to the document management apparatus 20 via an in-house network such as a LAN in accordance with a user operation. Further, the user terminals 80A, 80B, and 80C have a function of receiving an electronic document from the document management apparatus 20 via the in-house network. The user terminals 80A, 80B, and 80C have a function of displaying the received electronic document on a display device such as a display device.

  The user terminals 80A, 80B, and 80C are not limited to internal terminals such as companies, but may be external terminals used by customers, for example. In this case, the user terminals 80A, 80B, and 80C transmit an electronic document use request to the document management apparatus 20 via a communication network such as the Internet. In addition, the user terminals 80A, 80B, and 80C receive the electronic document from the document management device 20 via a communication network such as the Internet, and display the received electronic document on the display device. 10 shows three user terminals 80A, 80B, and 80C, the information sharing system may include four or more user terminals.

  Next, the operation of this embodiment will be described. In this embodiment, a service image at a contact center using an information sharing system will be described with reference to FIG. The customer terminal 40 transmits a document including personal information such as an e-mail about a product inquiry and a questionnaire result to the operator terminal 50 at the contact center in accordance with the operation of the customer. The document registration server 60 registers the electronic document from the customer terminal 40 in the document database 12 in advance. Further, the document registration server 60 extracts the range of personal information (name and address) in the document and registers the specified unique name expression information in the databases 13 and 14 in advance.

  When the electronic document is requested, the document management server 2A selects the electronic document to be accessed based on the usage environment conditions received from the user terminals 80A, 80B, and 80C and the usage environment information stored in the usage environment database 11. Determine the anonymization level when anonymizing. Further, the document management server 2A extracts all electronic documents to be accessed from the document database 12 based on the document ID set received from the user terminals 80A, 80B, 80C. Further, the document management server 2A determines an anonymity expression when the access target document is anonymized based on the determined anonymization level and information stored in the proper name appearance position database 13 and the proper name attribute database 14.

  Further, the document management server 2A evaluates whether or not the determined anonymization level of the anonymous expression matches the level in the real world based on the real world evaluation information stored in the real world information database 15. Further, the document management server 2A replaces the unique name expression in the extracted electronic document to be accessed with the determined anonymous expression. Then, the document management server 2A transmits the electronic document replaced with the anonymous expression to the user terminals 80A, 80B, and 80C via the in-house network.

  In this embodiment, when referring to the registered information, for example, (1) when a user A belonging to a department in the contact center accesses from a contact center window, the name or address is displayed as it is in a document displayed as it is. Make it accessible. That is, the document management apparatus 20 outputs the original electronic document as it is to the user terminal 80A without performing anonymization. Further, for example, (2) when the user B belonging to the related department of the contact center accesses, it is controlled so that only the anonymized document such as “Mr. A in Kawasaki City” can be accessed. . That is, the document management apparatus 20 replaces the proper name expression in the electronic document with the anonymous expression “Mr. A in Kawasaki City” and outputs the electronic document to the user terminal 80B. By doing so, the user B can understand the contents of the documents accumulated in the contact center, but the use document can be prevented from including personal information, and the user B intentionally or mistakenly stores the personal information. Leakage can be prevented.

  The present invention can be applied to the use of a document management apparatus for viewing or copying electronic texts (electronic documents) of information such as e-mails from customers, questionnaire results, bulletin boards, and the like stored on a computer. The present invention can also be applied to the use of an information sharing system for sharing an electronic document. Further, the present invention can be applied to the use of a program for realizing the document management apparatus using a computer.

It is a block diagram which shows an example of a structure of the document management apparatus by this invention. It is a flowchart which shows an example of the document anonymization process which anonymizes the specific name in a document and outputs a document. It is a block diagram which shows the other structural example of a document management apparatus. It is a flowchart which shows the other example of the document anonymization process which anonymizes the specific name in a document and outputs a document. It is explanatory drawing which shows the example of the information which a utilization environment database memorize | stores. It is explanatory drawing which shows the example of the information which a document database memorize | stores. It is explanatory drawing which shows the example of the information which a proper name appearance position database memorize | stores. It is explanatory drawing which shows the example of the information which a proper name attribute database memorize | stores. It is explanatory drawing which shows the example of the information which a real world information database memorize | stores. It is a block diagram which shows an example of a structure of the information sharing system using a document management apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Storage device 2 Data processing apparatus 11 Usage environment database 12 Document database 13 Unique name appearance position database 14 Unique name attribute database 15 Real world information database 21 Anonymization level adjustment means 22 Specific name anonymization means 24 Document output means

Claims (22)

A document anonymization device for anonymizing an electronic document,
Anonymization level determination means for determining an anonymization level indicating the degree of anonymization of the electronic document based on the usage environment information indicating the usage environment for using the electronic document;
According to the anonymization level determined by the anonymization level determination means, anonymity expression determination means for determining an anonymous expression for anonymizing a proper noun in the electronic document to be processed;
A document anonymization apparatus comprising: a document conversion unit that replaces a proper noun in an electronic document to be processed with an anonymous expression determined by the anonymous expression determination unit. Anonymization level storage means for storing the usage environment information and the anonymization level in association with each other;
Use condition input means for inputting conditions of a use environment in which a user uses an electronic document,
Anonymization level determination means
Of the usage environment information stored by the anonymization level storage means, determine whether there is usage environment information that matches the usage environment conditions input by the usage condition input means,
The document according to claim 1, wherein when it is determined that there is usage environment information that matches the usage environment condition, an anonymization level corresponding to the usage environment information that matches the usage environment condition is extracted from the anonymization level storage unit. Anonymization device. The anonymization level storage means stores the presence / absence of access authority to the electronic document, the usage location of the electronic document or the usage method of the electronic document in association with the anonymization level as usage environment information,
The use condition input means inputs the presence / absence of the user's access authority, the location where the user uses the electronic document, or the method where the user uses the electronic document as the conditions of the usage environment,
Anonymization level determination means includes information on presence / absence of access authority, usage location or usage method stored in the anonymization level storage means, presence / absence of access authority input by the usage condition input means, usage location, or usage method The document anonymization device according to claim 2, wherein the document anonymization device is determined. Anonymous expression storage means for storing the anonymous expression in association with the proper noun in advance is provided,
The anonymous expression determination means identifies a proper noun included in the electronic document to be processed, and extracts an anonymous expression corresponding to the specified proper noun from the anonymous expression storage means. The document anonymization apparatus of Claim 1. Anonymous expression storage means stores in advance an anonymous expression for each anonymization level in association with a proper noun,
The document anonymization device according to claim 4, wherein the anonymous expression determination unit extracts an anonymous expression corresponding to the anonymization level determined by the anonymous level determination unit from the anonymous expression storage unit.   When the anonymous expression determination means determines the anonymous expression for the proper noun in the electronic document to be processed, the anonymization level of the determined anonymous expression is determined in the real world based on predetermined evaluation information for evaluating the degree of anonymization. The document anonymization device according to any one of claims 1 to 5, further comprising an anonymous expression evaluation unit that evaluates whether or not the degree of anonymization is met. Anonymous expression changing means for changing the anonymous expression determined by the anonymous expression determining means according to a predetermined condition,
The anonymous expression changing means is:
Among the plurality of anonymous expressions determined by the anonymous expression determining means, it is determined whether there is an anonymous expression that is a different expression and indicates the same proper noun,
If it is determined that there is an anonymous expression that is a different expression and indicates the same proper noun, each anonymous expression that is the different expression and indicates the same proper noun is changed to the same expression,
Among the plurality of anonymous expressions determined by the anonymous expression determination means, it is determined whether there is an anonymous expression indicating the same proper and different proper nouns,
If it is determined that there is an anonymous expression indicating the same proper and different proper noun, each anonymous expression indicating the same proper and different proper noun is changed to a different expression,
The document anonymization device according to any one of claims 1 to 6, wherein the document conversion unit replaces the proper noun in the electronic document to be processed with the anonymous expression changed by the anonymous expression changing unit. A document management device for storing and managing electronic documents,
Anonymization level determination means for determining an anonymization level indicating the degree of anonymization of the electronic document based on the usage environment information indicating the usage environment for using the electronic document;
According to the anonymization level determined by the anonymization level determination means, anonymity expression determination means for determining an anonymous expression for anonymizing a proper noun in the electronic document to be processed;
A document management apparatus comprising: a document conversion unit that replaces a proper noun in an electronic document to be processed with an anonymous expression determined by the anonymous expression determination unit. Document storage means for storing a plurality of electronic documents;
A document extraction unit that extracts an electronic document to be processed from the document storage unit;
The document management apparatus according to claim 8, wherein the document conversion unit outputs the electronic document by replacing the proper noun in the electronic document extracted by the document extraction unit with an anonymous expression.   When the anonymous expression determination means determines the anonymous expression for the proper noun in the electronic document to be processed, the anonymization level of the determined anonymous expression is determined in the real world based on predetermined evaluation information for evaluating the degree of anonymization. The document management apparatus according to claim 8 or 9, further comprising an anonymous expression evaluation unit that evaluates whether or not the degree of anonymization is met. Anonymous expression changing means for changing the anonymous expression determined by the anonymous expression determining means according to a predetermined condition,
The anonymous expression changing means is:
Among the plurality of anonymous expressions determined by the anonymous expression determining means, it is determined whether there is an anonymous expression that is a different expression and indicates the same proper noun,
If it is determined that there is an anonymous expression that is a different expression and indicates the same proper noun, each anonymous expression that is the different expression and indicates the same proper noun is changed to the same expression,
Among the plurality of anonymous expressions determined by the anonymous expression determination means, it is determined whether there is an anonymous expression indicating the same proper and different proper nouns,
If it is determined that there is an anonymous expression indicating the same proper and different proper noun, each anonymous expression indicating the same proper and different proper noun is changed to a different expression,
The document management apparatus according to any one of claims 8 to 10, wherein the document conversion unit replaces the proper noun in the electronic document to be processed with the anonymous expression changed by the anonymous expression changing unit. An information sharing system for sharing electronic documents,
A user terminal,
A document management device for storing and managing electronic documents,
The user terminal sends an extraction request for an electronic document to be processed to the document management apparatus via a network,
The document management apparatus includes:
Document storage means for storing a plurality of electronic documents;
Document extraction means for extracting the electronic document requested from the user terminal from the document storage means;
Anonymization level determination means for determining an anonymization level indicating the degree of anonymization of the electronic document based on the usage environment information indicating the usage environment for using the electronic document;
According to the anonymization level determined by the anonymization level determination means, anonymity expression determination means for determining an anonymous expression for anonymizing proper nouns in the electronic document;
Document conversion means for replacing the proper noun in the electronic document extracted by the document extraction means with the anonymous expression determined by the anonymous expression determination means,
An information sharing system comprising: a document transmission unit that transmits an electronic document in which the document conversion unit replaces a proper noun with an anonymous expression to the user terminal via a network. A document anonymization method for anonymizing an electronic document,
Determining an anonymization level indicating a degree of anonymizing the electronic document based on usage environment information indicating a usage environment for using the electronic document;
According to the determined anonymization level, determining an anonymous expression for anonymizing the proper noun in the electronic document to be processed;
Replacing the proper noun in the electronic document to be processed with the determined anonymous expression. A document management method for storing and managing electronic documents,
Determining an anonymization level indicating a degree of anonymizing the electronic document based on usage environment information indicating a usage environment for using the electronic document;
According to the determined anonymization level, determining an anonymous expression for anonymizing the proper noun in the electronic document to be processed;
Replacing the proper noun in the electronic document to be processed with the determined anonymous expression and outputting the electronic document.   When the anonymous expression for the proper noun in the electronic document to be processed is determined, the anonymization level of the determined anonymous expression is determined based on the predetermined evaluation information for evaluating the degree of anonymization. The document management method according to claim 14, further comprising a step of evaluating whether or not they match. A step of determining whether or not there is an anonymous expression indicating the same proper noun among different determined anonymous expressions;
If it is determined that there is an anonymous expression indicating the same proper noun in different expressions, the step of changing each anonymous expression indicating the same proper noun in the same expression to the same expression,
The document management method according to claim 14, further comprising: replacing a proper noun in the electronic document to be processed with the changed anonymous expression. A step of determining whether or not there is an anonymous expression indicating a different proper noun among the plurality of determined anonymous expressions;
If it is determined that there is an anonymous expression indicating the same proper and different proper noun, the step of changing each anonymous expression indicating the same proper and different proper noun to a different expression,
The document management method according to any one of claims 14 to 16, further comprising: replacing a proper noun in the electronic document to be processed with the changed anonymous expression. An information sharing method for sharing an electronic document,
A document management device for storing and managing electronic documents, storing a plurality of electronic documents in advance;
A step in which a user terminal sends an extraction request for an electronic document to be processed to the document management apparatus via a network;
The document management device extracting an electronic document requested from the user terminal;
The document management device determines an anonymization level indicating a degree of anonymizing the electronic document based on usage environment information indicating a usage environment in which the electronic document is used;
The document management device determines an anonymity expression for anonymizing proper nouns in the electronic document according to the determined anonymization level;
The document management device replacing a proper noun in the extracted electronic document with the determined anonymous expression;
The document management apparatus includes a step of transmitting an electronic document in which the proper noun is replaced with an anonymous expression to the user terminal via a network. A document anonymization program for anonymizing an electronic document,
On the computer,
A process of determining an anonymization level indicating a degree of anonymizing an electronic document based on usage environment information indicating a usage environment for using the electronic document;
According to the determined anonymization level, a process for determining an anonymous expression for anonymizing a proper noun in the electronic document to be processed;
A document anonymization program that executes processing for replacing a proper noun in a processing target electronic document with the determined anonymous expression. On the computer,
When the anonymous expression for the proper noun in the electronic document to be processed is determined, the anonymization level of the determined anonymous expression is determined based on the predetermined evaluation information for evaluating the degree of anonymization. The document anonymization program according to claim 19, wherein a process for evaluating whether or not they match is executed. On the computer,
Among the plurality of determined anonymous expressions, a process of determining whether there is an anonymous expression that is a different expression and indicates the same proper noun,
When it is determined that there is an anonymous expression indicating the same proper noun with different expressions, a process of changing each anonymous expression indicating the same proper noun to the same expression with the same proper noun,
21. The document anonymization program according to claim 19 or 20, wherein a process for replacing a proper noun in an electronic document to be processed with the changed anonymous expression is executed. On the computer,
Among the plurality of determined anonymous expressions, a process for determining whether there is an anonymous expression indicating the same proper and different proper nouns; and
If it is determined that there is an anonymous expression indicating the same proper and different proper noun, the process of changing each anonymous expression indicating the same proper and different proper noun to a different expression,
The document anonymization program according to any one of claims 19 to 21, wherein a process of replacing a proper noun in an electronic document to be processed with the changed anonymous expression is executed.

Images