JP2007018162A - Program for supporting personal information protection, storage medium, and device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a program for supporting personal information protection that enable a business enterprise to make preparations necessary for protecting the personal information and required when becoming a "personal information protection handler" beforehand by receiving a warning before becoming the "personal information protection handler", a storage medium, and a device thereof. <P>SOLUTION: Regarding a business enterprise, the timing when exceeding a threshold to become the "personal information protection handler" is determined from the shift of the number of the piece of personal information handled by the business enterprise. A warning regarding the prospect to become the "personal information protection handler" is issued to the business enterprise beforehand. On the business enterprise, the level regarding the information protection of the business enterprise is diagnosed by using the existing technique. The timing when issuing the warning regarding the prospect to become the "personal information protection handler" is changed corresponding to the level regarding the information protection already constituted by the business enterprise. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  This technology is used to warn business operators who handle personal information to make preparations required by businesses that handle personal information protection before they become businesses that handle personal information protection.

As a method of managing personal information for a company to support a product, by accessing a protected portal site that has both personal information and product information using the product information as a key, individuals corresponding to the product information Techniques for obtaining information on the are shown. (Patent Document 1)
In addition, as a method of judging the level of information protection of a company, a service that diagnoses the security level by conducting a security test on company employees and ranking the company based on how employees have awareness and knowledge, etc. As a result of investigating the risk of leakage from information devices, such as whether software that may cause information leakage has been installed on personal computers, services that rank companies are diagnosed and security levels are diagnosed externally from corporate office equipment, etc. A service has been provided that examines the ease of intrusion and ranks companies and diagnoses their security level.
JP 2004-110269 A

  With the enforcement of the “Personal Information Protection Law”, a company that handles personal information exceeding the specified number of persons for a specified period of time becomes a “personal information protection handling company” and imposes certain obligations to protect personal information. Will be. Some advance preparation is required to meet these obligations.

  In addition, since the level of information protection that has already been established differs depending on the company, the period of advance preparation required to achieve a level that satisfies certain obligations for protecting personal information also depends on the company's information. Depending on the level of protection, there is a problem that it is generally not possible to issue a warning many months before the threshold is exceeded.

  For a company, determine the time when the threshold of becoming a “personal information protection dealer” will be exceeded based on the change in the number of personal information handled by that company, and warn the company about the prospect of becoming a “personal information protection dealer” in advance. I do.

  In addition, a company is diagnosed with the level of information protection of the company using existing technology, and becomes a “personal information protection handling company” according to the level of information protection already established by the company. Vary the timing of forecast warnings.

  By receiving a warning before becoming a “Personal Information Protection Dealer”, the company may make necessary preparations to protect the personal information required when becoming a “Personal Information Protection Dealer” in advance. It becomes possible.

  Also, depending on the current level of information protection, it is possible to warn companies that are late in preparation early and those that are in preparation early.

  An embodiment of the present invention will be described with reference to FIGS.

  FIG. 1 shows a configuration example in an example of performing a warning for taking measures for protecting personal information in accordance with the number of personal information held by the company and the security level of the company.

  The personal information number acquisition 110 of the personal information protection support apparatus 100 is configured to acquire the number of personal information held by a company.

  The personal information number transition determination 130 of the personal information protection support apparatus 100 is configured to determine when the number of personal information possessed by the company exceeds a predetermined threshold from the transition of the number of personal information possessed by the company.

  The warning output 150 of the personal information protection support apparatus 100 is configured to determine when to warn the company that the number of personal information held by the company exceeds a predetermined threshold and output the warning.

  The personal information number DB 510 is configured to have information on the number of personal information items held by a company.

  The company-specific security level DB 530 is configured to have information on the company security level. In this example, the results of conducting security tests on company employees, the results of investigating whether software that could leak information on company computers, etc., and the ease of intrusion from the outside It is assumed that a DB that records the results of ranking the companies in advance based on the results of the investigation is used.

  The company-side apparatus 300 has a personal information DB 550 that records personal information held by the company.

  FIG. 4 shows an example of a personal information DB owned by company A as an example of the personal information DB 550.

  The personal information protection support apparatus 100 and the company side apparatus 300 are configured to be able to communicate via the communication line 900.

  The personal information number acquisition 110 of the personal information protection support apparatus 100 acquires the number of personal information held by the company, and the personal information number transition judgment 130 determines the number of personal information held by the company from the number of acquired personal information. An example in which the warning output 150 determines whether or not the warning output 150 warns the company that the number of personal information held by the company exceeds a predetermined threshold and outputs a warning is shown in FIG. It demonstrates using thru | or FIG.

  An example of processing in which the personal information number acquisition 110 acquires the number of personal information held by a company and stores the acquired information in the personal information number DB will be described with reference to the flowchart of FIG.

  The personal information number acquisition 110 accesses the corporate personal information DB 550 at predetermined intervals. In this example, when it is determined that the monthly batch processing time has come, the process proceeds to acquisition of the number of personal information items in step S113 (step S111).

  The personal information number acquisition 110 is for acquiring the number of personal information, accesses the personal information DB 550 of the company side device 300, and acquires the number of personal information of the target company. In one example of this embodiment, the fact that company A has 4000 pieces of personal information is acquired from the personal information DB of company A shown in FIG. 4 as an example (step S113).

  The personal information number acquisition 110 stores personal information number information, associates the information related to the number of personal information acquired in step S113 with the information related to the time when the number of personal information was acquired, and stores it in the personal information number DB. In an example of the present embodiment, the fact that company A acquired in step S113 has 4000 pieces of personal information is given as “June” as the acquired month and stored in the personal information number DB shown in FIG. S115).

  Although not illustrated in an example of the processing of the present embodiment, the number of personal information held by each company to be monitored is acquired by repeating the same processing for each target company.

  The personal information number transition determination 130 of the personal information protection support apparatus 100 determines when the number of personal information held by the company exceeds a predetermined threshold from the transition of the number of personal information held by the company. In addition to determining when the number of personal information held by a company exceeds a predetermined threshold, the company's security level determines when to warn that measures should be taken to protect personal information, and issues a warning. An example of output will be described with reference to the flowchart of FIG. In an example of this embodiment, after a series of processes in acquiring the number of personal information items is completed, it is determined as a threshold when the number of personal information items exceeds 5000.

  The personal information number transition judgment 130 accesses the personal information number DB 510 at a predetermined interval (step S131).

  The personal information number transition determination 130 is a personal information number threshold excess time determination, and determines the time when the number of personal information items exceeds the threshold number. In this example, “Company A” has doubled the number of personal information held, so the time when the threshold value of 5000 is exceeded is determined to be July. Since the increase number of information is 1000, the time when the threshold value of 5000 is exceeded is determined to be August, and for “Company C”, the increase in the number of personal information held is 100. It is determined that the time when the above 5000 is exceeded is December (step S133).

  The warning output 150 is a warning judgment, the time when the predetermined threshold value judged by the personal information number transition judgment 130 is exceeded, the rank of the system for protecting personal information of each company, and which threshold is exceeded according to the rank of the system Whether or not to output a warning to a company is determined with reference to a table that records whether or not a warning should be issued before a certain period. In this example, “Company A” has a security level of “B” from the company-specific security level DB 530, and one month that exceeds the threshold from the warning time DB 590 that records how long the warning is issued according to the security level. It is determined that it is necessary to issue a warning before, and it is determined that it is necessary to output a warning if one month before July when it is determined in step S133 that the threshold value is exceeded. “Company B” determines that the security level is “B” from the company-specific security level DB 530 and that a warning needs to be issued one month before the threshold is exceeded from the warning timing DB 590, and that the threshold is exceeded in step S133. It is determined that it is necessary to output a warning if one month before the month. “Company C” determines that the security level is “E” from the company-specific security level DB 530 and that a warning needs to be issued 12 months before the threshold is exceeded from the warning time DB 590, and that the threshold is exceeded in step S133 12 If it is 12 months before the month, it is determined that a warning needs to be output (step S135).

  The warning output 150 is a warning output, and outputs a warning to a company that has determined that it is necessary to issue a warning in step S135. In this example, it is necessary to warn “Company A” one month before July when the threshold value is exceeded. For “Company B”, a warning is issued. Since it is necessary to give a warning a month ago, no warning is given yet, and a warning is given to “Company C” since it is necessary to give a warning 12 months before December when the threshold value is exceeded (step S139).

  By performing these processes, a company can receive a warning to that effect when it should take measures to protect personal information according to the transition of the number of personal information held by the company and the security level of the company. It becomes possible.

  Next, when the personal information deletion determination 170 of the personal information protection support apparatus 100 receives a request for deletion of personal information from the DB from the user, the company contacts the user such as after-sales service or user support. If it is determined whether or not there is still a deadline that needs to be communicated, it will not be possible to contact the user's request and delete the personal information before deleting. An example of outputting a warning to that effect will be described with reference to FIGS.

  FIG. 8 shows an example of the overall configuration of a process for deleting personal information after confirming whether or not it is necessary to contact the user who performs the deletion when deleting personal information. .

  The contract DB 570 is configured to have information for identifying the user and the contract period of the user in association with each other. In addition, the contract DB 570 deletes personal information in response to a request from the user when deleting the personal information for contacting in spite of the remaining contract period in response to the request from the user. Thus, information indicating that the user has accepted regarding the fact that communication for support cannot be made may be recorded together.

  The personal information deletion determination accepts a request for deletion of personal information transmitted from the user's terminal in the reception of personal information deletion request. In this example, it is assumed that deletion of personal information is received from the user “AAA”. (Step S171).

  In the personal information deletion determination, it is determined whether or not it is necessary to contact the user who has received the deletion of the personal information in step S171 in the confirmation of the remaining contract period. In this example, the contract DB is referred to, and it is determined whether or not it is necessary to contact the user based on whether or not the support contract period for the user accepted in step S171 remains. To do. In this example, it is assumed that the support end date and time for the user AAA in the contract DB is after the date when the deletion of the personal information is accepted from the user “AAA”, and there is a remaining support period. Determine that it is necessary to contact them. (Step S173).

  In the personal information deletion judgment, if it is determined that it is necessary to contact the user in the confirmation of the remaining contract period in the deletion confirmation, there will be a period to contact the user in the future, and it will become impossible to contact if the personal information is deleted. Then, a message for confirming whether or not the personal information can be deleted is output (step S175).

  In the deletion of personal information, in the deletion, the company side apparatus 300 is instructed to delete the personal information of the user requested to be deleted in step S171 from the personal information DB 550 (step S177).

  By performing these processes, when a request for deletion of personal information is received from a user, the personal information of the user who still needs to be contacted is deleted from the DB, and the necessary communication can be obtained. It can be prevented from disappearing.

  The personal information count threshold value excess determination process is not limited to this example, and other statistical methods may be used to determine when the threshold value is exceeded.

  In the personal information deletion determination, in step S175, a deletion confirmation message may be output to either the operator of the personal information protection support apparatus 100 or the terminal of the user who has requested deletion.

  The personal information deletion determination may be configured such that, in step S177, if the user does not need to be contacted and responds to delete, the response is recorded in the contract DB or the like. . The record of the user code “4444” in FIG. 10 is an example of the DB when the personal information is deleted as described above, and the part for specifying the individual is deleted, and the user can set the company as a personal information deletion flag. This is an example in which a message requesting deletion of personal information is recorded because it may not be possible to contact from the side. Instead of storing the message itself as shown in this example, information such as a URL may be stored.

  The personal information deletion judgment may be configured to delete the information of the user who is requested to delete from the personal information DB by accessing the personal information DB by itself instead of having the company delete in step S177. Good.

The following is added.
(Appendix 1) A computer that outputs a warning to a company to take measures to protect personal information.
A determination means for determining when the number of personal information exceeds a predetermined threshold;
A notification means for outputting a warning when the determination means determines that the threshold value is exceeded during a predetermined period; and
A program characterized by making it function.
(Appendix 2) The notification means changes the predetermined period according to a notification destination,
The program according to appendix 1, characterized by:
(Supplementary note 3) A computer-readable storage medium recording a program executed in a computer that outputs a warning to a company to take measures for protecting personal information,
Computer
A determination means for determining when the number of personal information exceeds a predetermined threshold;
A notification means for outputting a warning when the determination means determines that the threshold value is exceeded during a predetermined period; and
A computer-readable storage medium storing a program to function as a computer.
(Additional remark 4) The said notification means is functioned so that the said predetermined period may be changed according to a notification destination,
A computer-readable storage medium on which the program according to appendix 3 is recorded.
(Appendix 5) A computer that outputs a warning to a company to take measures to protect personal information,
A determination step for determining when the number of personal information items exceeds a predetermined threshold;
A notification step of outputting a warning when the determination means determines that the threshold is exceeded during a predetermined period;
The method characterized by making it function.
(Appendix 6) The notification step changes the predetermined period according to a notification destination,
The method according to appendix 1, characterized by:
(Appendix 7) A program that accepts a request from a user whose personal information is stored in the personal information DB and deletes the user's information from the personal information DB,
Request accepting means for accepting a request to delete personal information; and
Confirming means for confirming the remaining support period for a user who has received a request for deletion of personal information by the request accepting means with reference to a DB that records a support period provided to an individual;
When the confirmation means determines that there is a remaining support period, it outputs a message confirming whether or not deletion is possible, and upon receiving a signal indicating that deletion is possible, a deletion means for deleting personal information;
A program characterized by making it function.
(Supplementary Note 8) When the deletion means receives a signal indicating that deletion is possible from the user, the personal information is deleted after recording the signal indicating that deletion is possible received from the user,
The program according to appendix 7, characterized by:
(Supplementary note 9) A computer-readable recording medium storing a program for receiving a request from a user whose personal information is stored in the personal information DB and deleting the user's information from the personal information DB. ,
The program is
Request accepting means for accepting a request to delete personal information; and
Confirming means for confirming the remaining support period for a user who has received a request for deletion of personal information by the request accepting means with reference to a DB that records a support period provided to an individual;
When the confirmation means determines that there is a remaining support period, it outputs a message confirming whether or not deletion is possible, and upon receiving a signal indicating that deletion is possible, a deletion means for deleting personal information;
A program characterized by causing the computer to function,
A computer-readable storage medium on which is recorded.
(Appendix 10) An apparatus for accepting a request from a user whose personal information is stored in a personal information DB and deleting the user's information from the personal information DB,
Request accepting means for accepting a request to delete personal information; and
Confirming means for confirming the remaining support period for a user who has received a request for deletion of personal information by the request accepting means with reference to a DB that records a support period provided to an individual;
When the confirmation means determines that there is a remaining support period, it outputs a message confirming whether or not deletion is possible, and upon receiving a signal indicating that deletion is possible, a deletion means for deleting personal information;
The apparatus characterized by having.

It is a figure which shows an example of a structure of the process which performs the warning of a personal information protection to a company. It is a figure which shows an example of the flow of a process which acquires the number of cases of personal information which a company etc. have. It is a figure which shows an example of the flow of a process which issues a warning to a company from transition of the number of cases of personal information. It is a figure which shows an example of DB of personal information which a company etc. have. It is a figure which shows an example of DB which totaled the transition of the number of cases of personal information which a company etc. have. It is a figure which shows an example of DB regarding a company's security level. It is a figure which shows an example of the table which shows how much warning is issued before according to the security level of a company. It is a figure which shows an example of a structure of the process which deletes personal information. It is a figure which shows an example of the flow of a process which deletes personal information. It is a figure which shows an example of DB regarding the support contract which a company has.

Explanation of symbols

100 personal information protection support device 300 company side device 510 personal information number DB
530 Enterprise Security Level DB
550 Personal Information DB
900 Communication line

Claims (3)

A computer that outputs warnings to companies to take measures to protect personal information,
A determination means for determining when the number of personal information exceeds a predetermined threshold;
A notification means for outputting a warning when the determination means determines that the threshold value is exceeded during a predetermined period; and
A program characterized by making it function. The notification means changes the predetermined period according to a notification destination;
The program according to claim 1. A program that accepts a request from a user whose personal information is stored in the personal information DB and deletes the user's information from the personal information DB,
Request accepting means for accepting a request to delete personal information; and
Confirming means for confirming the remaining support period for a user who has received a request for deletion of personal information by the request accepting means with reference to a DB that records a support period provided to an individual;
When the confirmation means determines that there is a remaining support period, it outputs a message confirming whether or not deletion is possible, and when receiving a signal indicating that deletion is possible, it functions as a deletion means for deleting personal information. A featured program.

Images