JP2008059136A - Leaking personal information retrieval system, leaking personal information retrieval method, leaking personal information retrieval device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To narrow down outflow date and time with simple configurations in order to specify the outflow source of leaking data when personal information data is flowed out. <P>SOLUTION: When personal information data included in a personal information database 231 are updated, a personal information history storage part 11 adds a start period and an end period to the personal information data, and stores it in a storage part 14 as a personal information update history database 144. When the personal information data is flowed out, a leaking data retrieval part 13 extracts words included in the leaking data one by one, and retrieves whether or not the personal information data including words matched with the personal information update history database 144 are present, and narrows down the period when the leaking data is flowed out based on the start period and end period added to the matched personal information data. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a leaked personal information search system, a leaked personal information search method, a leaked personal information search device, and a program. In particular, when data such as personal information leaks, leaked personal information that narrows down when the data leaked The present invention relates to a search system, a leaked personal information search method, a leaked personal information search device, and a program.

  When personal information is leaked from the personal information management system that manages personal information, the leaked work, the person in charge of the work, the personal information extraction data file that became the leak source, the data extractor, It is desirable to specifically specify the date and time of data extraction. In fact, it is more desirable to be able to identify the leaked personal information for a short time and with high accuracy when, for whom and for what purpose.

  A lot of personal information data is extracted every day, and there are countless personal information extraction data files. In addition, each personal information (address, telephone number, e-mail address, etc.) is updated every day, and when the leaked data pieces are obtained, the personal information has already changed significantly. There are many combinations of leaked personal information. Therefore, among a large number of personal information extraction data files, the identification of personal information extraction data files, data extractors, and data extraction dates and times that may have been the source of leaked personal information data fragments can be quickly and highly It is difficult to do accurately.

  An example of a conventional leaked personal information retrieval system is described in Patent Document 1. This conventional leaked personal information search system includes a search request acquisition unit for acquiring a search request for a database together with identification information of a search requester, and a search for searching a database based on the search request and mixing dummy data in the search result. Information indicating the correspondence between the processing unit, the search result output unit that outputs the search result mixed with dummy data to the search requester, and the identification information of the search requester and the dummy data mixed in the search result And a usage history creation section for creating. When personal information etc. is leaked to the outside, the source of the leak is specified based on dummy data.

Japanese Patent Laying-Open No. 2005-222135 (page 6-8, FIG. 1)

  The conventional leaked personal information retrieval system described above has a problem that it is necessary to prepare a complicated configuration in order to mix dummy data or to create a correspondence between identification information of a search requester and dummy data. was there.

  The object of the present invention is to solve the above-mentioned conventional problems and to identify leaked personal information search system, leaked personal information search method, leaked personal information search, which narrows down the leaked date and time with a simple configuration in order to identify the leaked data leak source. To provide an apparatus and a program.

The first leaked personal information search system of the present invention has a personal information management system and a leaked personal information search device,
The personal information management system includes a personal information database in the first storage unit,
The leaked personal information search device adds a start time and an end time to the corresponding personal information data when the personal information data included in the personal information database is updated, and serves as a second storage unit as a personal information update history database. Personal information history storage section to store in,
The words included in the leaked data are retrieved one by one to search for personal information data including words that match the personal information update history database, and the start time and end time added to the matched personal information data, And a leaked data search unit for narrowing down the leaked time of the leaked data.

The second leaked personal information search system of the present invention is the first leaked personal information search system, wherein the leaked personal information search device is extracted when personal information data is extracted in the personal information management system. A copy of the personal information data is added to the extracted data storage file in the second storage unit with the file identifier added, and the file identifier, extractor identifier, and extraction time are stored in the extracted data index in the second storage unit. It has an extraction recording part that writes to a file,
The leaked data search unit narrows down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file.

According to the first leaked personal information retrieval method of the present invention, when the personal information data included in the personal information database is updated, the start time and the end time are added to the corresponding personal information data and stored as a personal information update history database. A step of storing in the department;
Retrieving words contained in leaked data one by one and searching for personal information data containing words that match the personal information update history database; and
And a step of narrowing down the leaked time of the leaked data based on the start time and end time added to the matched personal information data.

According to a second leaked personal information search method of the present invention, in the first leaked personal information search method, when the personal information data is extracted from the personal information database, a copy of the extracted personal information data is stored as a file identifier. Adding and saving the extracted data storage file in the storage unit, and writing the file identifier, extractor identifier, and extraction time in the extracted data index file in the storage unit;
A step of narrowing down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file.

A first leaked personal information search device of the present invention includes a personal information history storage unit that adds a start time and an end time to personal information data and stores them in a storage unit as a personal information update history database;
The words included in the leaked data are retrieved one by one to search for personal information data including words that match the personal information update history database, and the start time and end time added to the matched personal information data, And a leaked data search unit for narrowing down the leaked time of the leaked data.

The second leaked personal information retrieval apparatus of the present invention adds a file identifier to a copy of the extracted personal information data when the personal information data is extracted from the personal information database in the first leaked personal information search apparatus. And an extraction recording unit that saves the extracted data storage file in the storage unit, and writes the file identifier, extractor identifier, and extraction time in the extracted data index file in the storage unit,
The leaked data search unit narrows down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file.

The first program of the present invention, when the personal information data included in the personal information database is updated, adds the start time and end time to the corresponding personal information data and stores it in the storage unit as a personal information update history database. Processing,
Processing for retrieving words included in leaked data one by one and searching for personal information data including words that match the personal information update history database;
According to another aspect of the present invention, the computer executes a process of narrowing down the leaked time of the leaked data based on the start time and end time added to the matched personal information data.

According to a second program of the present invention, when personal information data is extracted from the personal information database in the first program, a copy of the extracted personal information data is added with a file identifier to extract data in the storage unit. Saving to a save file, and writing the file identifier, extractor identifier, and extraction time into the extracted data index file in the storage unit;
According to another aspect of the present invention, the computer executes a process of narrowing down the files in the extracted data storage file based on the narrowed leakage time and the extraction time included in the extracted data index file.

  The present invention has an effect that it is possible to narrow down the time when leaked data is leaked by adding a start time and an end time to the personal information data.

  The best mode for carrying out the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the overall configuration of the first embodiment of the present invention. The first embodiment includes a leaked personal information search device 1, a personal information management system 2, a customer terminal 3, a user terminal 4, and an administrator terminal 5.

  The leaked personal information search device 1 narrows down the leak time of personal information and specifies the leak source when the personal information leaks.

  The personal information management system 2 is a computer system that manages personal information of end users and extracts personal information for business use.

  The customer terminal 3 is a personal computer, a portable terminal, or the like used by an end user as input means for registering / updating personal information using the web or the like.

  The user terminal 4 is an information processing apparatus such as a personal computer used as input / output means for inputting a command for extracting personal information used by a personal information user and outputting an extraction result.

  The administrator terminal 5 is a personal computer used as an input / output means for a personal information manager to input a leaked personal information data fragment to input a command for searching for a leak source of personal information and to output a search result. And the like.

  An end user is a person who performs an address change procedure for a related business operator when moving, for example. The personal information user is, for example, a person in charge who uses the personal information of the end user within a business such as electricity, water, gas, telephone, and communication provider.

  The leaked personal information search device 1 includes a personal information history storage unit 11, an extraction recording unit 12, a leaked data search unit 13, and a storage unit 14. The storage unit 14 is, for example, a magnetic disk storage unit, and stores a personal information update history database 144, an extracted data index file 145, and an extracted data storage file 146.

  The personal information management system 2 includes an update unit 21, a personal information search unit 22, and a storage unit 23. The storage unit 23 is, for example, a magnetic disk storage unit, and stores a personal information database 231.

  The updating unit 21 updates the personal information database 231 with personal information data input from the customer terminal 3 in order for the end user to register / update personal information. At that time, as illustrated in FIG. 2, the update unit 21 acquires the personal identifier, the data update date / time, the updated personal information type, the pre-update data, and the post-update data from the personal information database 231, and leaked personal information Input to the search device 1.

  The personal information history storage unit 11 receives a series of data including a personal identifier, data update date / time, personal information type, pre-update data, and post-update data input from the personal information management system 2 as illustrated in FIG. As illustrated in FIG. 3, the data is edited in the format of personal identifier, personal information type, personal information data, data start date and time, and data end date and time, and is written in the personal information update history database 144 of the storage unit 14. The data start date and time is the date and time when the personal information is updated to become this personal information, and the data end date and time is the date and time when this personal information is updated and becomes another personal information.

  The personal information search unit 22 reads data from the personal information database 231 of the storage unit 23 based on the personal information data extraction conditions input from the user terminal 4 of the user who extracts the data of personal information for business use. Data search. The personal information search unit 22 returns the personal information extraction data file obtained by this search to the user terminal 4. The personal information search unit 22 also inputs the copy of the personal information extraction data file to the leaked personal information search device 1 to save it as a backup copy (storage file) in preparation for a personal information leakage accident.

  The extraction recording unit 12 attaches a storage file number as a file identifier to a copy (storage file) of the personal information extraction data file input from the personal information search unit 22 of the personal information management system 2 and extracts the extracted data from the storage unit 14. Store in the save file 146. Further, as illustrated in FIG. 4, the extraction recording unit 12 writes the storage file number, the extractor identifier of the personal information extractor, and the data extraction date / time into the extracted data index file 145 of the storage unit 14.

  The leaked data search unit 13 uses the leaked personal information data fragment, the personal information update history database 144, the extracted data index file 145, and the extracted data storage file 146 information input from the administrator device 5 of the personal information manager. Reconcile, narrow down the leak time, or identify a personal information extraction data file that may have caused the leak.

  The operation of the leaked personal information retrieval apparatus 1 according to the embodiment of the present invention can be performed by computer program control. That is, the program recorded on the recording medium is read by the leaked personal information search device 1 or the program is read from the network by the leaked personal information search device 1 and the operation described below is executed.

  Next, the operation of the first embodiment will be described. FIG. 5 is a flowchart showing the operation of the first embodiment. When personal information data is leaked, an operation for narrowing down the time when the leaked data was leaked will be described with reference to FIG.

  First, the leakage data search unit 13 initializes data of the leakage start date and time and the leakage end date and time temporarily used during the search (step A1). The initial setting is “1900/01/01 00:00:00” which is a sufficiently past date and time for the leak start date and time, and a sufficiently future date and time for the leak end date and time “2999/12/31 23: Set 59:59 ”.

  Next, the leaked data search unit 13 reads the first word of the leaked data segment input from the administrator terminal 5 (step A2). Here, it is assumed that there is an input of leaked data segments of at least one word (No in step A3).

  Next, the leaked data search unit 13 searches the data on the personal information update history database 144 for data that matches the read word (step A4). If there is no matching data in step A4, the process returns to step A2 to read one word of the next leaked data fragment.

  When there is matching data in step A4, the leaked data search unit 13 determines the data start date and time value of the corresponding personal information update history in the personal information update history database 144, the leak start date and time temporarily stored, and Are compared (step A5), and if the data start date is larger, the leakage start date is updated to the data start date value (step A9). If the data start date is smaller or equivalent, the process proceeds to the next step.

  Next, the leaked data search unit 13 compares the value of the data end date / time of the corresponding personal information update history in the personal information update history database 144 with the value of the leak end date / time temporarily stored (Step S1). A6) If the data end date is smaller, the leakage end date is updated to the value of the data end date (step A10). If the data end date is larger or equivalent, the process proceeds to the next step.

  Next, the leaked data search unit 13 compares the value of the leak start date and time with the value of the leak end date and time (step A7), and if the leak start date and time becomes a larger (not old) value, the leak time Is returned to the manager terminal 5 (step A8), and the search is terminated. If the value of the leakage start date / time is less than or equal to the value of the leakage end date / time, the process returns to step A2 to continue the search by reading the next word.

  Thereafter, the above steps are repeated, and if the answer is Yes in step A3, the leaked data search unit 13 returns the leak start date and leak end date and time updated at that time to the administrator terminal 5. The administrator terminal 5 displays the value returned from the leaked data search unit 13 (step A11).

  Next, as a specific example, the character strings “Shinagawa-ku Osaki 1-1”, “Chiyoda-ku Chiyoda 1”, “aom@bglb.ne.jp” were given as leaked personal information data fragments. The operation in this case will be described with reference to FIGS. In the following description, the part in which the subject (subject) of the operation is omitted is the operation of the leaked data search unit 13.

  First, the values of the leak start date and time and the leak end date and time are respectively initialized (step A1). As an initial setting, “1900/01/01 00:00:00” is set for the leak start date and time, and “2999/12/31 23:59:59” is set for the leak end date and time.

  Next, “Shinagawa-ku Osaki 1-1”, “Chiyoda-ku Chiyoda 1”, “aom@bglb.ne.jp” are input from the administrator terminal 5 of the personal information manager to the leaked data search unit 13.

  Next, “Shinagawa-ku Osaki 1-1”, which is the first word of the leaked data fragment, is matched with the data in the personal information update history database 144 (steps A2, A3, A4). Note that “one word” here refers to elements such as “1-1 Osaki Shinagawa-ku”, “1 Chiyoda-ku Chiyoda”, “aom@bglb.ne.jp”, etc. included in the personal information data. 'One word'. As shown in FIG. 3, “Shinagawa-ku Osaki 1-1” is update history data with the personal identifier “ABC12345”, “ABC12345, address, 1-1 Osaki Shinagawa-ku, 2004/08/15 09:35:40 , 2005/12/01 19:45:08 ”. Thereby, first, “2004/08/15 09:35:40” is set as the leak start date and time, and “2005/12/01 19:45:08” is set as the leak end date (steps A9 and A10). ).

  Next, compare the leak start date and time “2004/08/15 09:35:40” with the leak end date and time “2005/12/01 19:45:08” (step A7), and the leak start date and time is leaked Since it is less than the date and time, the process returns to step A2, and the next word “Chiyoda 1 Chiyoda” is similarly searched (steps A2 to A2). As shown in FIG. 3, the personal information update history database 144 does not have a value of “Chiyoda 1 Chiyoda 1” (step A4).

  Returning to the beginning, the next word “aom@bglb.ne.jp” is similarly searched (steps A2 to A2). As shown in FIG. 3, the data start date and time of “aom@bglb.ne.jp” in the personal information update history database 144 is “2005/09/05 23:12:30”, and the leakage start date and time “2004 / Compared with 08/15 09:35:40 ", it is larger (step A5). Therefore, the leakage start date is updated with “2005/09/05 23:12:30” (step A9).

  As shown in FIG. 3, the data end date is “NULL”. “NULL” means that this personal information continues even now. Therefore, since it is determined that it is larger than “2005/12/01 19:45:08” by comparison with the leakage end date and time set earlier, the leakage end date and time is not updated (step A6).

  From the above, it can be seen that the interval between the leakage start date and time and the leakage end date and time is narrower than at the time of initial setting. Thereafter, the same search as described above is repeated until the last word of the leaked data fragment.

  According to the first embodiment, by using the data start date and time and the data end date and time of the personal information from the leaked personal information data fragment, the time when the personal information is leaked can be narrowed down in a short time. There is an effect that can be done. Further, even when personal information is leaked from other systems, the time when the leaked personal information can be narrowed down in a short time.

  Next, a second embodiment of the present invention will be described. The configuration of the second embodiment is the same as that of the first embodiment (FIG. 1).

  FIG. 6 is a flowchart showing the operation of the second embodiment. With reference to FIG. 6, an operation for specifying the personal information extraction data file that has become a leakage source in a short time and with high accuracy will be described.

  First, the leakage data search unit 13 initializes the data of the leakage start date and time and the leakage end date and time temporarily used during the search (step B1). The initial setting is “1900/01/01 00:00:00” which is a sufficiently past date and time for the leak start date and time, and a sufficiently future date and time for the leak end date and time “2999/12/31 23: Set 59:59 ”.

  Next, the leaked data search unit 13 reads the first word of the leaked data segment input from the administrator terminal 5 (step B2). Here, it is assumed that there is an input of a leaked data segment of at least one word (No in step B3).

  Next, the leaked data search unit 13 searches the data on the personal information update history database 144 for data that matches the read one word (step B4). If there is no matching data in step B4, the fact that the corresponding personal information extraction data file does not exist is output and the search is completed (step B8).

  If there is matching data in step B4, the leaked data search unit 13 sets the data start date and time value of the corresponding personal information update history in the personal information update history database 144 and the leak start date and time temporarily stored. The value is compared in magnitude (step B5), and if the data start date is larger, the leakage start date is updated to the value of the data start date (step B9). If the data start date is smaller or equivalent, the process proceeds to the next step.

  Next, the leaked data search unit 13 compares the value of the data end date / time of the corresponding personal information update history in the personal information update history database 144 with the value of the leak end date / time temporarily stored (Step S1). B6) If the data end date / time is smaller, the leakage end date / time is updated to the value of the data end date / time (step B10). If the data end date is larger or equivalent, the process proceeds to the next step.

  Next, the leaked data search unit 13 counts the number of saved file numbers in which the data extraction date / time of the extracted data index file 145 is between the leak start date / time and the leak end date / time (step B7). When the number of cases becomes 0 in step B7, the search in the personal information update history database 144 is terminated, and the process proceeds to step B8, outputting that the corresponding personal information extraction data file does not exist, and the search is completed. . When the number of cases becomes one or more, the process returns to step B2, and the next word is read in order to similarly search for the next word.

  In step B3, if the input word is EOF (end of file) indicating the end of the leaked data fragment, the search in the personal information update history database 144 is terminated, and the process proceeds to step B11 to extract the extracted data index. The contents of the index file of the saved file No. in which the data extraction date / time in the file 145 is between the leakage start date / time and the leakage end date / time are returned to the administrator terminal 5, and the search is completed (step B11). If it is not EOF, go to the next step.

  Thereafter, the above steps are repeated.

  Next, as a concrete example, FIG. 2 shows an operation when a character string “Shinagawa-ku Osaki 1-1”, “aom@bglb.ne.jp” is given as a leaked personal information data fragment. This will be described with reference to 3, 4, and 6. In the following description, the part in which the subject (subject) of the operation is omitted is the operation of the leaked data search unit 13.

  First, the values of the leak start date and time and the leak end date and time are respectively initialized (step B1). As an initial setting, “1900/01/01 00:00:00” is set for the leak start date and time, and “2999/12/31 23:59:59” is set for the leak end date and time.

  Next, “Shinagawa-ku Osaki 1-1” and “aom@bglb.ne.jp” are input from the administrator terminal 5 to the leaked data search unit 13.

  Next, “Shinagawa-ku Osaki 1-1”, which is the first word of the leaked data fragment, is matched with the data in the personal information update history database 144 (steps B2, B3, and B4). Here, “one word” means “one word” such as “1-1 Osaki Shinagawa-ku” and “aom@bglb.ne.jp”. As shown in Fig. 3, "Shinagawa-ku Osaki 1-1" is update history data with personal identifier "ABC12345" "ABC12345, address, 1-1 Shinagawa-ku Osaki 1-1, 2004/08/15 09:35:40, 2005/12/01 matches 19:45:08 ”. Thereby, first, since the data start date and time is “2004/08/15 09:35:40”, the leak start date and time is larger than the leak start date and time “1900/01/01 00:00:00” at this time. Therefore, the leakage start date is updated to “2004/08/15 09:35:40”. Similarly, the leakage end date and time is updated to “2005/12/01 19:45:08” (steps B9 and B10).

  Next, the number of extractions in which the data extraction date / time is between the leakage start date / time and the leakage end date / time in the extracted data index file 145 (FIG. 4) is counted (step B7). If the number is 0, the search result is returned to the administrator terminal 5 to the effect that there is no leaked data, and the search ends (step B8). In this example, since the number of cases is one or more, the process returns to the beginning and searches similarly for the next word “aom@bglb.ne.jp” (steps B2 to B2).

  As shown in the personal information update history database 144 in FIG. 3, the data start date and time of “aom@bglb.ne.jp” is “2005/09/05 23:12:30”, and the leakage start date and time at this point “2004” Compared to / 08/15 09:35:40 ", it is larger (step B5). Therefore, the leakage start date is updated with “2005/09/05 23:12:30” (step B9).

  As shown in FIG. 3, the data end date is “NULL”. “NULL” means that this personal information continues even now. Therefore, since it is determined that it is larger than “2005/12/01 19:45:08” by comparison with the leakage end date and time set earlier, the leakage end date and time is not updated (step B6).

  As before, the number of data extractions performed between the leak start date and time “2005/09/05 23:12:30” and the leak end date and time “2005/12/01 19:45:08” is counted ( Step B7).

  It can be seen that the interval between the leak start date and the leak end date is narrower than before. Therefore, it can be seen that the number of extraction data candidates that have become leakage sources is reduced.

  By the above, it is possible to narrow down the time when the personal information extraction data file that may have become the leakage source was extracted from the leaked personal information data fragment, and to extract the personal information that may have been the leakage source The number of data files can be narrowed down. Thereafter, only the narrowed personal information extraction data file needs to be matched with the leaked personal information data fragment.

  In the second embodiment, when personal information data is extracted in the personal information management system 2, a copy of the extracted personal information data is added to a file identifier and stored in the extracted data storage file 146. By writing the identifier, extractor identifier, and extraction time in the extracted data index file 145, it is possible to narrow down the personal information extraction data file that may have become a leakage source in a short time and with high accuracy. There is.

It is a block diagram which shows the whole structure of the 1st and 2nd embodiment of this invention. It is a figure which shows the example of the data content sent to the personal information log | history preservation | save part from an update part. It is a figure which shows the example of the content of the personal information update history database. It is a figure which shows the example of the content of the extraction data index file. It is a flowchart which shows the operation | movement of the 1st Embodiment of this invention. It is a flowchart which shows the operation | movement of the 2nd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Leakage personal information search device 2 Personal information management system 3 Customer terminal 4 User terminal 5 Administrator terminal 11 Personal information history storage part 12 Extraction recording part 13 Leakage data search part 14 Storage part 21 Update part 22 Personal information search part 23 Storage Department 144 Personal information update history database 145 Extracted data index file 146 Extracted data storage file 231 Personal information database

Claims (8)

A personal information management system and leaked personal information retrieval device;
The personal information management system includes a personal information database in the first storage unit,
The leaked personal information search device adds a start time and an end time to the corresponding personal information data when the personal information data included in the personal information database is updated, and serves as a second storage unit as a personal information update history database. Personal information history storage section to store in,
The words included in the leaked data are retrieved one by one to search for personal information data including words that match the personal information update history database, and the start time and end time added to the matched personal information data, A leaked personal information search system comprising: a leaked data search unit that narrows down the time when the leaked data leaked based on When the personal information data is extracted in the personal information management system, the leaked personal information search device adds a file identifier to a copy of the extracted personal information data and stores the extracted data in the second storage unit An extraction recording unit that stores the file identifier, the extractor identifier, and the extraction time in an extracted data index file in the second storage unit;
2. The leaked individual according to claim 1, wherein the leaked data search unit narrows down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file. Information retrieval system. A step of adding a start time and an end time to the corresponding personal information data when the personal information data included in the personal information database is updated, and storing it in the storage unit as a personal information update history database;
Retrieving words contained in leaked data one by one and searching for personal information data containing words that match the personal information update history database; and
A leaked personal information search method comprising: a step of narrowing down the leaked time of leaked data based on a start time and an end time added to the matched personal information data. When personal information data is extracted from the personal information database, a copy of the extracted personal information data is added to a file identifier and stored in an extracted data storage file in a storage unit, and the file identifier, extractor identifier, and extraction are extracted. Writing the time into the extracted data index file in the storage unit;
4. The leaked personal information search according to claim 3, further comprising a step of narrowing down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file. Method. A personal information history storage unit for adding a start time and an end time to the personal information data and storing it in a storage unit as a personal information update history database;
The words included in the leaked data are retrieved one by one to search for personal information data including words that match the personal information update history database, and the start time and end time added to the matched personal information data, A leaked personal information search device comprising: a leaked data search unit that narrows down the leaked time of leaked data based on When personal information data is extracted from the personal information database, a copy of the extracted personal information data is added to a file identifier and stored in an extracted data storage file in the storage unit, and the file identifier, extractor identifier, and extraction time And an extraction recording unit for writing to the extracted data index file in the storage unit,
6. The leaked individual according to claim 5, wherein the leaked data search unit narrows down the files in the extracted data storage file based on the narrowed leak time and the extraction time included in the extracted data index file. Information retrieval device. When personal information data included in the personal information database is updated, a process of adding a start time and an end time to the corresponding personal information data and storing it in a storage unit as a personal information update history database;
Processing for retrieving words included in leaked data one by one and searching for personal information data including words that match the personal information update history database;
A program for causing a computer to execute a process of narrowing down the leaked time of leaked data based on the start time and end time added to the matched personal information data. When personal information data is extracted from the personal information database, a copy of the extracted personal information data is added to a file identifier and stored in an extracted data storage file in a storage unit, and the file identifier, extractor identifier, and extraction are extracted. Processing to write the time to the extracted data index file in the storage unit;
8. The program according to claim 7, which causes a computer to execute a process of narrowing down files in the extracted data storage file based on the narrowed leakage time and the extraction time included in the extracted data index file.

Images