JP2009146078A - Database maintenance method and system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method and system for maintaining a database by verifying the database under operation without using any personal information in a database system including personal information. <P>SOLUTION: This database maintenance method includes: a verification data creation process for creating a data set for verification for concealing the items to be concealed of a database under operation in an operation management terminal; a correction data set generation process for generating a data set for correction from records corrected by specifying a failure factor in a database system for verification in which the data set for verification has been imported in a verification management terminal; and a DB updating process for checking the changed content of the records of the database system under operation, and for updating the records by using the data set for correction whose concealed items have been restored according to an update rule corresponding to the changed content in the operation management terminal. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

The present invention relates to a method and system for maintaining a database without stopping an operating database system.
The present invention is particularly useful in the maintenance of a database system containing personal information.

In modern corporate activities, the Personal Information Protection Law has been enforced, and it is increasingly important to prevent and manage personal information leakage so that personal information managed by companies is not illegally or inadvertently leaked outside. It has become.
In the personal information leakage prevention management, in order to ensure that the organization securely manages the personal information, the personal information is managed and monitored so that the personal information is handled based on a predetermined standard and procedure.

This Personal Information Protection Act is an abbreviation for the Act on the Protection of Personal Information, and it is obliged to notify the purpose of use at the time of acquisition, to limit provision to a third party, and to request for suspension of use of disclosure requests from a principal. Etc. are defined.
Personal information is information such as name, date of birth, and student ID number that can identify and specify a living individual.

For security management of personal information, for example, in Patent Document 1, when a telegram including personal information is transmitted, a character string of personal information is converted into a one-to-one correspondence using a substitution table that replaces the characters with a one-to-one correspondence. A technique for reducing the risk of leakage of message contents during transmission by substituting and transmitting by masking personal information is disclosed.
Alternatively, Patent Document 2 discloses a technique for preventing leakage by presenting personal information irreversibly masked to a development maintenance person in development maintenance using a production system.
Alternatively, in Patent Document 3, in a database that handles personal information, the personal information received by the proxy server device 3 is encrypted and registered in the database, and the encrypted personal information in the database is decrypted by the proxy server device 3. A technique for concealing and managing personal information in a database by transmitting the information in this manner is disclosed.
JP 2007-102540 A (paragraph 0009, FIG. 2) Japanese Patent Application No. 2006-268378 (paragraph 0030, FIG. 2) Japanese Patent Application No. 2005-309846 (paragraph 0034-paragraph 0036, FIG. 1)

However, in the technique of Patent Document 1, since the conversion table is used, the characters before conversion and after conversion correspond one-to-one, and when a large amount of data such as a database is handled, the conversion rule can be easily analogized. There is a weak point that it can be done.
Further, since the technique of Patent Document 2 is an invention used in an operating database system, for example, when a database defect is verified and a countermeasure against the defect is taken, there is an inconvenience that an actual process is adversely affected.
Further, in the technique of Patent Document 3, for example, when verifying a problem in a database or taking countermeasures for the problem, the processing result of the database is obtained via the proxy server device 3, so that personal information is decrypted. The personal information cannot be concealed.

The present invention has been made in order to solve the above-described problems, and an object of the present invention is to verify an operating database without using personal information in a database system including personal information. It is to provide a method and system for maintenance.

This invention solves the said subject by the means as described in each following aspect.
That is, the first invention of the present invention is a database system verification and maintenance method using an operation management terminal device and a verification management terminal device. (1) The operation management terminal device scans an operating database system. Operation database scan step for obtaining all records, (2) Sequence number addition step in which the operation management terminal device adds sequence number information to each record for all records in the database, (3) Sequence in the operation management terminal device A storage registration step of encrypting an item to be concealed of each record having number information, creating a storage data set, and storing it in the storage data recording unit; (4) the operation management terminal device stores the sequence number information; The verification data set created by concealing the items to be concealed of each record Data output step for verification to output the verification data to the verification management terminal device; (5) input history reception in which the verification management terminal device receives the verification data set output from the operation management terminal device and stores it in the input history data recording unit (6) Import process in which the verification management terminal device imports the received verification data set into the verification database system, (7) Correction that identifies and corrects the record causing the failure in the verification database system Step (8) In the verification management terminal device, a correction data set creation step of collecting a corrected record and creating a correction data set with the same sequence number information as the sequence number information attached to the verification data set; (9) The correction data set output process in which the verification management terminal device outputs the correction data set. (10) The correction data set receiving process in which the operation management terminal device receives the correction data set output from the verification management terminal device. (11) The operation management terminal device has the same sequence as the sequence number information of the correction data set. The process of taking out the storage data set with number information from the storage data recording section and decrypting it. (12) A hidden item restoration step in which the operation management terminal device creates a correction data set in which the hidden items of the correction data set are restored using the decrypted items of the storage data set. (13) A record collation step in which the operation management terminal apparatus collates the decrypted storage data set with the corresponding record of the operating database system. (14) If there is no change in the record of the operating database system from the result of the record collation process, the operation management terminal updates and corrects using the correction data set in which the hidden item is restored. DB update process for storing information in the correction history DB. (15) When there is a change in the record of the operating database system from the result of the record collation process, the operation management terminal device refers to the update rule and extracts the corresponding update rule according to the change content. Rule extraction process. (16) Update the changed record of the operating database system by using the correction data set in which the concealed item is restored in accordance with the update rule extracted by the rule extraction step, and update the correction information to the correction history DB Change DB update process to be saved in. This is a database maintenance method characterized by being performed in a process including

As described above, when the personal information is read from the database system, the security can be managed by encrypting the personal information. Moreover, it is possible to prevent the leakage of personal information by replacing the personal information with a meaningless character string and concealing it.

The second invention of the present invention prepares a verification data set to be used in the verification database system on the verification side from the operating database system, and reflects the record corrected in the verification database system to the operating database system Operation management terminal device to be verified and verification management that accepts a verification data set, inputs it to the verification database system, and outputs a record corrected by the verification database system as a correction data set to be passed to the operation management terminal device A database migration system comprising a terminal device, wherein the operation management terminal device has an update rule that describes an update processing method when updating a record of an operating database system using a correction data set. The rule recording part to be recorded and the storage data A storage unit configured to record a data set for storage, an encryption key data recording unit that records encryption key information, and a user management information recording unit that records user management information including user identification information; DB scan means for scanning all database and record definition data, sequence number adding means for adding sequence number information to records acquired by the DB scan means, and records acquired by the DB scan means With reference to the definition data, the sequence number information is added using the concealment item setting means for extracting the items to be concealed in the record and setting the concealment items and the encryption key information recorded by the encryption key data recording unit. Encrypt items to be concealed in each record, or record them by the encryption key data recording unit The encryption / decryption means for decrypting the encrypted item of the storage data set using the encryption key information, and the storage for creating the storage data set using the record in which the item to be hidden by the encryption / decryption means is encrypted Data creation means, storage registration means for registering a storage data set in the storage data recording section, and verification data in which each item to be concealed set by the concealment item setting means is concealed by replacing it with an arbitrary character string Item concealment means for creating a set, verification data output means for outputting the verification data set created by the item concealment means, correction record input means for acquiring the correction data set output by the verification management terminal device, and correction A storage data set for retrieving from the storage data recording unit a storage data set with the same sequence number information as the sequence number information of the storage data set. Data retrieval means, personal information restoration means for creating a correction data set by restoring the concealed items of the correction data set and restoring the personal information using the items decrypted by the encryption / decryption means, and storage Replacing the encrypted item of the storage data set taken out by the data extraction means with the item decrypted by the encryption / decryption means, and operating the corresponding storage data set replaced with the decrypted item The record matching means for checking whether or not there is a change in the record in the operating database system by comparing with the record of the database system in the database, and the result of the verification in the record matching means is that the record in the operating database system is changed. If there is, the rule extracting means for extracting the relevant update rule according to the contents of the change with reference to the update rule, and the rule extraction According to the update rule extracted by the means, the record display means for displaying the correction data and the record with the change, and the correction data or the personal information restored by restoring the personal information according to the update rule extracted by the rule extraction means When there is no change in the records of the operating database system as a result of the verification by the change DB updating means for updating the operating database system using the data of the specific item of the correction data and the record matching means Is updated using a correction data set in which personal information is restored, or, if the update rule extracted by the rule extraction unit is a rule to be updated, an operation DB update unit that updates in accordance with the update rule, The verification management terminal device includes an input history data record for recording a verification data set. A recording unit comprising: a verification data input means for acquiring the verification data set output from the operation management terminal device; and the verification data set received by the verification data input means is stored in the input history data recording unit Input history storage means, verification data registration means for registering a verification data set in the verification database system, verification DB scan means for scanning the verification database system to obtain all records, Match the sequence number information with the verification data set of the same sequence number information stored in the input history data recording unit, collect the records with items that do not match, and the same sequence as the sequence number information attached to the verification data set Correction data creation means for creating a correction data set with number information; and A database maintenance system comprising: a correction data output means for outputting a correction data set.

According to the present invention, in a database system for handling personal information,
(1) The database system can be verified using a database system for verification different from the database system in operation.
(2) The database system can be verified using data that cannot restore the hidden personal information.
(3) It is possible to reflect the verification result in the database system in the operating state.

Hereinafter, embodiments of the present invention will be described in more detail with reference to the drawings.

FIG. 1 is a diagram showing an active database system 300 and a verification database 500 that are objects to be maintained and managed by the database maintenance method according to the present invention.
In the database maintenance system 1, a database system 300 operating on the Internet 900 and an operation management terminal device 100 are connected to a network.
It is assumed that a verification management terminal device 200 is connected to the verification database system 500 via a LAN 700.

The operation management terminal device 100 and the verification management terminal device 200 are obtained by mounting a dedicated program described later on a personal computer.

The operating database system 300 and the verification database system 500 are obtained by mounting an existing database management system (DBMS) on a server computer.

FIG. 2 is a diagram for explaining the general flow of the database maintenance method.
A database maintenance manager (hereinafter referred to as a terminal operator who has the authority to handle personal information) scans the operating database system 300 to obtain all records to be verified, and the personal information of each record is encrypted. And stored in the storage DB (FIG. 2 (1)).
At this time, the terminal operator who has the authority to handle personal information creates a verification data set that shields the items of personal information in each record and records them on the storage medium 800 (for example, DVD) ((2)). .

The terminal operator who cannot handle personal information registers the verification data set recorded on the DVD in the verification database system 500 ((3)).

A terminal operator who cannot handle personal information verifies the verification data in the verification database system 500, and identifies and corrects the record causing the failure ((4)).

A terminal operator who cannot handle personal information extracts a record corrected by the verification work from the verification database system 500 and creates a correction data set ((5)).

The terminal operator having authority to handle personal information decrypts the encrypted personal information stored in the storage DB and restores the shielded personal information of the correction data set recorded on the DVD (( 6)).
A terminal operator who has authority to handle personal information updates a record in the operating database system 300 using a correction data set obtained by restoring the personal information. At this time, if the record to be updated is changed during the verification operation, an update process according to the update rule is performed ((7)).

3 and 4 are diagrams for explaining the database of the database system 300 in operation.

FIG. 3 is an example of the database of the database system 300 in operation.
The database is composed of tables. The table has record definition data and records. As an example of the table, a member TBL 310, an order TBL 320, and a product TBL 330 are shown.

FIG. 4 is a diagram for explaining record definition data. The record definition data is data that defines the record items of the table. FIG. 4 exemplifies record definition data of a table constituting the database of FIG.

FIG. 4A is a diagram for explaining the definition items of the record definition data 311 of the member TBL 310. The definition items of the record definition data 311 include a member ID 311a, a name 311b, an address 311c, and a total point 311d.
Each definition item defines a character type (for example, “half-width alphanumeric characters only”, “half-width numbers only”, “hiragana only”, “full-width kanji only”), the number of characters, a numerical range, and the like.
Here, the definition item “name” 311b and the definition item “address” 311c are personal information, and each character type is “only double-byte kanji”.

FIG. 4B is a diagram for explaining the definition items of the record definition data 321 of the order TBL 320.
The definition items of the record definition data 321 are composed of an order number 321a, a point 321b, a member ID 321c, and a product ID 321d.
Here, items defined by the record definition data 321 do not include personal information.

(C) of FIG. 4 is a figure explaining the definition item of the record definition data 331 of goods TBL330. The definition items of the record definition data 331 include a product ID 331a, a product name 331b, and a unit price 331c.
Here, items defined by the record definition data 321 do not include personal information.

FIG. 3 illustrates a table record. For example, as an example of the record 312 of the member TBL, a record with a member ID 311a = “A001”, a name 311b = “Taro Yamada”, an address 311c = “Tokyo”, and a total point 311d = “100” is shown.
In this example, the member name with the member ID “A001” is “Taro Yamada”, the address is “Tokyo”, and the total point is “100”. Here, the member name “Taro Yamada” and the address “Tokyo” are personal information.

Similarly, as the record 313 of the member TBL, the member ID 311a = “A002”, the name 311b = “Jiro Sato”, the address 311c = “Chiba”, and the total point 311d = “10” are exemplified.
The meaning of this example is that the member name with the member ID “A0021” is “Jiro Sato”, the address is “Chiba”, and the total point is “10”. Here, the member name “Jiro Sato” and the address “Chiba” are personal information.

In addition, as an example of the record 321 of the order TBL 320, a record in which the order No. 321a = “101”, the point 321b = “10”, the member ID 321c = “A002”, and the product ID 321d = “Z01” is illustrated.
The meaning of this example is that the order No. is “101”, the product ID “Z01” is received from the member with the member ID “A002”, and the point to be added to the total points of this member is “10”. Is.

Further, as an example of the record 331 of the product TBL 330, a record with the product ID 331a = “Z01”, the product name 331b = “gentleman suit”, and the unit price 331c = “120,000” is shown.
This example means that the product with the product ID “Z01” has the product name “gentleman suit” and the unit price “120,000”.

The general flow of the database maintenance method of FIG. 2 will be specifically described with reference to FIG.

FIG. 5 is an operational flow of database maintenance.

<< (1-1) Acquisition of record to be verified >>
When a terminal operator having authority to handle personal information receives user authentication of the operation management terminal device 100 and instructs the operation management terminal device 100 to scan the database, the operation management terminal device 100 sets the database system 300 in operation. Scan and obtain all records to be verified (FIG. 5 (1-1))

<< (1-2) Addition of sequence number >>
The operation management terminal device 100 adds a sequence number to the acquired record ((1-2)).
Here, the record to which the sequence number is added will be described with reference to FIG.

FIG. 6 is a diagram for explaining a format and an example of a record to which a sequence number is added.

FIG. 6A illustrates the format of a record 190d to which a sequence number is added.
The record 190d to which the sequence number is added is composed of a sequence number 191n, table name information 191b, and a table record 191r.
The sequence number 191n is a sequence number that is unique throughout the database.
The table name information 191b is the name of the table in which the record is recorded.
The table record 191r is data of a record recorded in the table.
Note that a sequence number unique to the entire database is added to a record acquired from the operating database system 300 because information for associating a storage data set and a correction data set, which will be described later, with a record unit is used. Because I want to add it as something completely unrelated.

FIG. 6B shows an example of a record set 190 to which sequence numbers are added.
FIG. 6B illustrates a record set 190 in which a sequence number is added to the record acquired from the operating database system 300 in FIG.

For example, as an example of the record 190d included in the record set to which the sequence number is added, the sequence number 191n = “# 1”, the table name information 191b = “member TBL”, and the table record 191r = “A001, Taro Yamada” , Tokyo, 100 "is shown.
This example means that the record with the sequence number “# 1” added has the table name “Member TBL” and the contents of the record “A001, Taro Yamada, Tokyo, 100”.

Similarly, as another example of the record 190d included in the set of records to which the sequence number is added, the sequence number 191n = “# 2”, the table name information 191b = “member TBL”, and the table record 191r = “A002” Jiro Sato, Chiba, 10 ”is shown.
This example means that the record with the sequence number “# 2” has the table name “Member TBL” and the record content “A002, Jiro Sato, Chiba, 10” .

<< (1-3) Encryption of personal information >>
Refer to the schema (= record definition data) of the database system 300 in operation by the terminal operator who has authority to handle personal information, and identify the items to be concealed (for example, personal information items) of the record to which the sequence number is added. By designating, the operation management terminal device 100 creates a storage data set in which data of items to be concealed (for example, personal information) of the record to which the sequence number is added is encrypted, and is stored in a file. It records in the DB for use (FIG. 5 (1-3)).
Here, the storage data set will be described with reference to FIG.

FIG. 7 is an example of the storage data set 191.
The storage data set 191 is a set of storage data 191d obtained by encrypting personal information included in the record 190 to which a sequence number is added.
The storage data set 191 is stored in a file and stored in a storage DB.
FIG. 7 shows an example in which a storage data set 191 created from the record 190 added with the sequence number described in FIG. 6B is stored in a file.

For example, as an example of the storage data 191d included in the storage data set, the stored file ID 191i = “ID1200301”, sequence number 191n = “# 1”, table name information 191b = “member TBL”, Table record 191r = “A001, Gl89ds, Hjkda, 100” is shown.
The meaning of this example is that the ID of the stored file is “ID1200301”, the sequence number 191n is “# 1”, and the personal information of the record is “A001, Gl89ds, Hjkda, 100”. It is that.
Here, “Gl89ds” is obtained by encrypting personal information “Taro Yamada, Tokyo”, and “Hjkda” is obtained by encrypting personal information “Tokyo”.

Similarly, as another example of the storage data 191d included in the storage data set 191, file ID 191i = “ID1200301”, sequence number 191n = “# 2”, table name information 191b = “member TBL”, Table record 191r = “A002, kldS; b, po93s, 10” is shown.
This example means that the file ID is “ID1200301”, the sequence number 191n is “# 2”, and the result of encrypting the personal information of the record is “A001, kldS; b, po93s, 10”. That's what it means.
Here, “kldS; b” is encrypted personal information “Jiro Sato”, and “po93s” is encrypted personal information “Chiba”.

Next, a procedure for creating the storage data set 191 from the acquired record to be verified will be described with reference to FIG.

FIG. 11 is a diagram illustrating a procedure for creating the storage data set 191.
The operation management terminal device 100 receives an instruction from a terminal operator who is authorized by the user and who has the authority to handle personal information, scans the database system 300 in operation, and acquires records and record definition data 311/321/331. (Fig. 11 (1))
In the operation management terminal device 100, a sequence number is added to the acquired record ((2)).

The operation management terminal device 100 displays the acquired record definition data 311/321/331, and receives an input of an instruction for shielding the items of the name 311b and the address 311c included in the record definition data 311 of the member TBL310. Set as a concealment item ((3))

In the operation management terminal device 100, the table name information 191b “member TBL” is extracted from the record to which the sequence number is added, and the encryption / decryption means 136 encrypts the items of “name” and “address”. A storage data set 191 is created.
(4)
In the operation management terminal device 100, the storage data set 191 in which the shielding item is encrypted is stored in the file having the file ID “ID1200301” and stored in the storage DB ((5)).

<< (2) Output of validation data set >>
The operation management terminal device 100 creates a verification data set obtained by replacing the encrypted personal information in the storage data set with an arbitrary character string, stores it in a file, and records it on the DVD 800 (FIG. 5 ( 2)). Alternatively, the verification data set may be created by replacing the data (= personal information) of the item to be concealed in the record to which the sequence number is added with an arbitrary character string.
Here, the verification data set will be described with reference to FIG.

FIG. 8 is an example of a verification data set.
The verification data set 192 is a set of verification data 192d that conceals personal information. The verification data set 192 is stored in a file having a file ID. The ID of the file that stores the verification data set 192 is associated with the ID of the file that stores the storage data set 191.
The verification data 192d and the storage data 191d are associated with each other by a sequence number.

FIG. 8 illustrates a verification data set 192 corresponding to the storage data set 191 described in FIG.
For example, as an example of the verification data 192d included in the storage data set 191, the stored file ID 192i = “ID1200301”, sequence number 192n = “# 1”, table name information 191b = “member TBL” , Table record 192r = “A001, ***, **, 100” is shown.
In this example, the file ID is “ID1200301”, the sequence number 192n is “# 1”, and the result of concealing personal information is “A001, ***, **, 100”. It is.
Here, the replaced arbitrary character strings “***” and “**” are concealed personal information “Taro Yamada” and “Tokyo”. Since personal information is concealed with arbitrary characters, it is impossible to restore the personal information.
Note that the character type of an arbitrary character string to be replaced corresponds to the character type of the item to be hidden. Therefore, for example, if the character type of the item to be concealed is “double-byte kanji only”, the arbitrary character string to be replaced is an arbitrary “double-byte kanji” character string.
The character types of items to be concealed include “half-width alphanumeric characters only”, “half-width numbers only”, “Hiragana only”, “full-width kanji characters only”, and the like.

Next, a procedure for outputting a verification data set will be described with reference to FIG.

FIG. 12 is a diagram for explaining the procedure for creating the verification data set.
The operation management terminal device 100 displays the acquired record definition data 311/321/331 and accepts an input of an instruction for shielding the items of the name 311b and the address 311c included in the record definition data 311 of the member TBL310. This is set as a concealment item (FIG. 12 (1)).
The operation management terminal device 100 creates a verification data set 192 in which each set item to be concealed is replaced with an arbitrary character string ((2)).
In the operation management terminal device 100, the created verification data set 192 is stored in a file and recorded on the DVD 800 ((3)).

<< (3) Verification database system registration of verification data set >>
The terminal operator who cannot handle the personal information of the verification management terminal device 200 receives user authentication and instructs verification data set registration, and the verification management terminal device 200 verifies the verification data set recorded on the DVD 800. Registration in the database system (FIG. 5 (3)).

<< (4) Verification database system record correction >>
The terminal operator who cannot handle personal information analyzes the result verified by the verification database system 500, identifies the record causing the failure, and corrects the record in the verification database system 500 (FIG. 5 (4)). .

<< (5) Output of correction data set >>
The operation management terminal device 200 scans the verification database system 500, acquires all records, compares all the records with the verification data set, extracts all the records having different contents, and sets the correction data set. It is created, stored in a file, and recorded on a DVD 800 (FIG. 5 (5)).
Here, the correction data set 291 will be described with reference to FIG.

FIG. 9 is an example of the correction data set 291.
The correction data set 291 is a set of records with sequence numbers that have been verified and corrected by the verification database system 500.

The correction data set 291 is stored in a file having a file ID.
The format of the correction data 291d is the same as the format of the verification data 192d.
That is, the correction data 291d is associated with the stored file ID 291i, and is composed of a sequence number 291n, table name information 291b, and correction record data 291r.

The file ID 291i has the same value as the file ID 192i of the associated verification data 192.
The sequence number 291n is the same value as the sequence number 192n of the associated verification data 192d.
The table name information 291b is the same as the table name information 192b of the associated verification data 192d.
The corrected record data 191r is a record that has been verified and corrected.
The sequence number of the correction data set 291 and the sequence number of the verification data set 192 are associated with each other.
Similarly, the ID of the file storing the correction data set 291 and the ID 191i of the file storing the verification data set 192 are associated with each other.

FIG. 9 illustrates correction data 291d corresponding to the verification data 192d of FIG.
For example, correction data 291d “file ID 291i =“ ID1200301 ”, sequence number 291n =“ # 2 ”, table name information 291b =“ member TBL ”, record data 291r =“ A777, ***, **, 10 "is illustrated.
The exemplified correction data 291d corresponds to the file ID included in the verification data set 192 and the verification data 192d “stored file ID 192i =“ ID1200301 ”having the same sequence number.

<< (6) Restoration of personal information >>
The operation management terminal device 100 refers to the storage DB, extracts a storage data set corresponding to the correction data set recorded on the DVD 800, and decrypts the encrypted personal information of the storage data set. Then, the personal information is restored by reflecting it in the shielding item of the correction data set ((6) in FIG. 5).

Next, the procedure for restoring personal information will be described with reference to FIG.

FIG. 13 is a diagram illustrating a procedure for restoring the concealed item of the correction data 291d.
The operation management terminal device 100 receives an instruction from a terminal operator who cannot handle personal information authenticated by the user, and acquires a correction data set 291 stored in a file output from the verification management terminal device 200 (FIG. 13 ( 1)).

The operation management terminal device 100 searches the storage DB using the file ID “ID1200301” of the acquired file as a key, and acquires a storage data set 191 having the same ID ((2)).
In the operation management terminal device 100, the storage data 191d having the same sequence number as the sequence number of one correction data 291d extracted from the correction data set 291 is extracted from the storage data set 191 ((3)). .

The operation management terminal device 100 decrypts the encrypted item of the extracted storage data 191d ((4)).
In the operation management terminal device 100, the secret item of the extracted one correction data 291 is replaced with the decrypted item and restored to create the correction data 292 in which the personal information is restored ((5)). )

In the operation management terminal apparatus 100, a correction target record corresponding to the correction data 292 obtained by restoring the created personal information is searched from the operating database system, and the searched correction target record and the decrypted storage are stored. Confirm that the content of the record to be modified has not been changed by collating with the data set for data ((6))

In the operation management terminal apparatus 100, the correction target record of the operating database system is updated using the correction data 292 obtained by restoring the personal information ((7)).

<< (7) Updating a running database system >>
Whether the record of the operating database system 300 is changed during verification or not, the operation management terminal device 100 updates the update rule in order to reflect the verification result to the operating database system 300 without contradiction. Is used to update the operating database system 300. In this update rule, an update method according to the change content of the record is described.
Therefore, a record corresponding to the correction data (= record to be updated with the correction data) is extracted from the operating database system. When the extracted record is changed, the update rule is referred to, the update rule corresponding to the change content is applied, and the record extracted by the update method described in the update rule is updated. If the extracted record is not changed, it is updated using the correction data obtained by restoring the personal information (FIG. 5 (7)).

Here, the update rule 193 will be described with reference to FIG.

FIG. 10 is an example of the update rule 193. The update rule 193 describes an update processing method for updating a record in the operating database system 300 using the correction data set. The types of update rules 193 are “update with personal data restored for correction data”, “update with values calculated according to calculation formula”, and “restore changed records and personal information”. The correction data is displayed, and an instruction inputted by a terminal operator who has authority to handle personal information is received and updated according to the instruction.

Note that the update rule 193 is applied when the record of the operating database system 300 is changed after the database system 300 is scanned to create a verification data set.

FIG. 10 illustrates an update rule 193. The update rule 193 includes a rule number and a rule sentence. As an example of the update rule 193 of the type of “update with the correction data restored personal information”, for example, if the rule number is “r001” and the rule sentence is “the attribute of the changed item is a price, The update rule is “Update”. In this example, if the attribute of the changed item in the record of the operating database system 300 is a price, the operating database system 300 is updated using the correction data obtained by restoring the personal information. That's what it means.

Alternatively, as an example of an update rule 193 of the type “update using a value calculated according to a calculation formula”, the rule number is “r002” and the rule sentence is “the attribute of the changed item is personal information. The update rule is “Update to the last update date”. The meaning of this example is that if there is a change in the record of the database system 300 that is in operation, if the attribute of the changed item of the record is personal information, the change date of the record is compared with the verification date. Then, it is updated so as to be in the state of the record of the latest date.

Alternatively, as an example of an update rule 193 of the type “update using a value calculated according to a calculation formula”, the rule number is “r003” and the rule sentence is “the attribute of the changed item is a cumulative point. For example, an update rule is shown that updates the accumulated points that have been recalculated by adding the difference changed during the verification period. In this example, if the attribute of the changed item of the record of the operating database system 300 is a cumulative point, the difference between the points changed in the operating database system during the verification period is obtained. This is added to the accumulated points of the correction data set, and the operating database system is updated using the accumulated points.

Alternatively, an update rule 193 of a type that “displays the changed record and the correction data in which the personal information is restored, accepts an instruction determined and input by a terminal operator having authority to handle the personal information, and updates according to the instruction”. As an example, an update rule having a rule number “r101” and a rule sentence “displayed if the attribute of the changed item is an ID” is shown.
The meaning of this example is that if the attribute of the changed item of the record of the database system 300 in operation is ID, the correction data for restoring the personal information and the record with the change are displayed together. This prompts the terminal operator to input and accepts the input from the terminal operator.

Next, the operation management terminal device 100 and the verification management terminal device 200 will be described with reference to FIGS. 14 and 15.

FIG. 14 is a detailed configuration diagram of the operation management terminal device 100.
The operation management terminal device 100 includes a CPU 101, a display unit 104, an input unit 103, a network communication unit 105, a memory 109, and a dedicated program.

The CPU 101 is a central processing circuit. The display unit 104 is an LCD (liquid crystal display) or an EL (organic electroluminescence) display. The input unit 103 is a mouse or a keyboard. The network communication unit 105 is a LAN connection circuit.
The memory 109 is a semiconductor memory or a magnetic memory.

The memory 109 includes a rule recording unit 109a, a storage data recording unit 109b, an encryption key data recording unit 109c, a user management information recording unit 109d, and a correction history data recording unit 109e.

The rule recording unit 109a records the update rule 193.
The update rule 193 describes an update processing method for updating a record when the record of the operating database system 300 is changed while the verification database system 500 is verifying.
The update rules include an update rule of a type “update with personal data restored for correction”, an update rule of a type “update using a value calculated according to a calculation formula”, and “changed record and personal It is composed of an update rule of a type that displays correction data in which information is restored, accepts an instruction determined and input by a terminal operator having authority to handle personal information, and updates it according to the instruction.

The storage data recording unit 109b records the storage data set 191.
The encryption key data recording unit 109c records encryption key information 197.
The user management information recording unit 109d records user management information 195 including user identification information.
The correction history data recording unit 109e records the correction data set 291 together with the worker identification information.

In addition, the DB scanning unit 110, the sequence number adding unit 122, the concealed item setting unit 123, the encryption / decryption unit 136, the storage data creation unit 120, the storage registration unit 140, the item concealment unit 126, Verification data output means 150, correction data input means 160, storage data extraction means 170, personal information restoration means 173, record collation means 176, rule extraction means 130, record display means 133, change A DB update unit 185, an operation DB update unit 180, a user management unit 139, and a correction history storage unit 138 are provided. Each of these means is realized as a dedicated program, and functions when the dedicated program is interpreted and executed by the CPU 101.

The DB scanning unit 110 scans the operating database system 300 and acquires all records and record definition data.

The sequence number adding unit 122 adds sequence number information to the record acquired by the DB scanning unit 110.

The concealment item setting unit 123 refers to the record definition data acquired by the DB scanning unit 110, extracts the concealment item of the record, and the sequence number adding unit 122 sets the concealment item of the record to which the sequence number information is added. .

The encryption / decryption means 136 encrypts the item to be concealed of each record set by the concealment item setting means 123 using the encryption key information recorded by the encryption key data recording part 109c, or the encryption key data recording part 109c. Is used to decrypt the encrypted item of the storage data set 191.

The storage data creation unit 120 creates a storage data set 191 using each record in which the items to be concealed by the encryption / decryption unit 136 are encrypted.
The storage registration unit 140 stores the storage data set 191 created by the storage data creation unit 120 in a file and registers it in the storage data recording unit 109b.

The item concealment unit 126 creates a verification data set 192 in which each item to be concealed set by the concealment item setting unit 123 is replaced with an arbitrary character string.
Here, the character type of the arbitrary character string to be replaced is made to correspond to the character type of the item to be hidden.
The character types of items to be concealed include “half-width alphanumeric characters only”, “half-width numbers only”, “Hiragana only”, “full-width Kanji only”, and the like. Therefore, for example, if the character type of an arbitrary character string to be replaced is “double-byte kanji only”, the character string is replaced with an arbitrary “double-byte kanji” character string.

The verification data output unit 150 outputs (for example, records on a DVD) the verification data set 192 created by the item concealment unit 126.
The correction data input unit 160 acquires the correction data set 291 output from the verification management terminal device 200.

The storage data extraction unit 170 extracts a file having the same file ID as the file ID of the file in which the correction data set is stored from the storage data recording unit 109b, and is the same as the sequence number information of the correction data set. A storage data set 191 with sequence number information is taken out.

The personal information restoring unit 173 uses the personal information of the item decrypted by the encryption / decryption unit 136 in the storage data set 191 to restore the personal information of the hidden item of the correction data set 291. Create

The record matching unit 176 replaces the encrypted item of the storage data set extracted by the storage data extraction unit 170 with the item decrypted by the encryption / decryption unit 136, and the storage data replaced with the decrypted item. The set is compared with the corresponding record of the active database system 300 to determine whether there is a change in the record of the active database system 300.

When there is a change in the record of the operating database system 300 as a result of the collation by the record collating unit 176, the rule extracting unit 130 refers to the update rule 193 and extracts the corresponding update rule according to the change content. To do.

The record display means 133 indicates that the update rule extracted by the rule extraction means 130 indicates that the terminal operator having the authority to handle personal information displays the changed record and the correction data obtained by restoring the personal information. In the case of the type of accepting an instruction and updating in accordance with the instruction, the correction data set 291 and a record with a change are displayed.

As a result of the collation by the record collating unit 176, when there is no change in the record of the database system 300 in operation, the operation DB updating unit 180 updates using the correction data set 292 in which the personal information is restored.

As a result of the collation by the record collating unit 176, when there is a change in the record of the operating database system 300, the modified DB updating unit 185 is a modification in which the personal information is restored in accordance with the update rule extracted by the rule extracting unit 130. The operating database system 300 is updated using the data of a specific item of the data for correction or the data for correction restored personal information or the received input instruction.

For example, when the extracted update rule is of the type “update with personal data restored correction data”, the change DB update unit 185 is operating using the correction data restored personal information according to the update rule. The database system 300 is updated.

Alternatively, when the extracted update rule is of a type “update using a value calculated according to a calculation formula”, the change DB update unit 185 calculates a value using a predetermined calculation formula according to the update rule. The operating database system 300 is updated using the correction data to which the calculated value is applied.

Alternatively, the extracted update rule is “display modified records and correction data sets that restored personal information, accept instructions entered by terminal operators authorized to handle personal information, and update according to instructions” In the case of the type to perform, the record display unit 133 displays the correction data set 291 and the record with the change, and the change DB update unit 185 receives the input of the correction instruction and restores the personal information. The operating database system 300 is updated using the data of the specific item of the correction data or the correction data obtained by restoring the personal information.

The user management unit 139 compares the worker ID input by the terminal operator who has the authority to handle personal information with the user identification information recorded in the user management information recording unit 109d, and authenticates the user if the two match.
The correction history storage unit 138 stores the correction data set together with the worker identification information in the correction history data recording unit.

FIG. 16 is a flowchart for creating a verification data set.
(1) User management processing: The user management means 139 compares the worker ID input by the terminal operator who has authority to handle personal information with the user identification information recorded in the user management information recording unit 109d, If they match, user authentication is performed. (Step S110)
(2) DB scan processing: The DB scan unit 110 scans the database system 300 in operation and acquires all records and record definition data. (Step S120)
(3) ID / sequence # assignment processing: The sequence number adding means 122 adds sequence number information to the record acquired by the DB scanning means 110. (Step S130)
(4) Concealment item setting process: The concealment item setting unit 123 refers to the record definition data acquired by the DB scan unit 110 and extracts the record item to which the sequence number information is added by the sequence number addition unit 122. Set as a hidden item. (Step S140)
(5) Encryption / decryption processing: The encryption / decryption means 136 is set by the concealment item setting means 123 for the record to which the sequence number information is added, using the encryption key information recorded by the encryption key data recording unit 109c. Encrypt the items to be hidden in each record. (Step S150)
(6) Hidden item encryption processing: The storage data creation unit 120 uses the record to which the sequence number information is added, in which the items to be hidden are encrypted by the encryption / decryption unit 136, to store the storage data set 191. create. (Step S160)
(7) Storage processing: The storage registration unit 140 registers the storage data set 191 in the storage data recording unit 109b. (Step S170)
(8) Concealment processing: The item concealment unit 126 creates a verification data set 192 in which each item to be concealed set by the concealment item setting unit 123 is concealed by an arbitrary character string. (Step S180)
(9) Verification data output processing: The verification data output means 150 outputs the verification data set 192 created by the item concealment means 126. (Step S190)

FIG. 17 is a flowchart of processing for updating an operating database system using a correction data set.
(1) User management processing: The user management means 139 compares the worker ID input by the terminal operator who has authority to handle personal information with the user identification information recorded in the user management information recording unit 109d, If they match, user authentication is performed. (Step S200)
(2) Correction Data Set Acceptance Management Process: The correction data input means 160 inputs the correction data set 291 output from the verification management terminal device 200. (Step S210)
(3) Encryption / decryption processing: The record matching unit 176 replaces the encrypted item of the storage data set taken out by the storage data extraction unit 170 with the item decrypted by the encryption / decryption unit 136 and decrypts it. Create the stored data set. (Step S220)
(4) Restoration (update record creation) processing: The personal information restoration unit 173 restores the personal information by restoring the concealed item of the correction data set 291 using the item decrypted by the encryption / decryption unit 136. A correction data set 292 is created. (Step S230)
(5) Change confirmation processing: The record collating unit 176 uses the decrypted storage data set to collate whether or not there is a change compared to the record of the corresponding operating database system 300. (Step S240)
(6) Update process:
(6-1) If there is no change in the records of the operating database system 300 as a result of the collation by the record collating unit 176, the operation DB updating unit 180 uses the correction data set 292 in which the personal information is restored. The operating database system 300 is updated.
(6-2) Alternatively, if there is a change in the record of the operating database system 300 as a result of the collation by the record collating unit 176, the rule extracting unit 130 refers to the update rule 193 and responds to the content of the change. To extract the relevant update rule.
(6-2-1) When the update rule extracted by the rule extraction unit 130 is of a type “update with the correction data obtained by restoring the personal information”, the change DB update unit 185 The operating database system 300 is updated using the correction data whose information has been restored.
(6-2-2) When the update rule extracted by the rule extraction unit 130 is of a type that “updates using a value calculated according to the calculation formula”, the change DB update unit 185 performs a predetermined process according to the update rule. A value is calculated using a calculation formula, and the operating database system 300 is updated using correction data to which the calculated value is applied.
(6-2-3) The update rule extracted by the rule extraction means 130 is “display the changed record and the correction data set in which the personal information is restored, and the terminal operator who has authority to handle the personal information determines and inputs In the case of a type in which the received instruction is received and updated in accordance with the instruction ”, the record display unit 133 displays the correction data set 291 and the record with the change. Then, the change DB update unit 185 receives the input of the correction data reflection instruction, and specifies the correction data set in which some personal information is restored or the correction data set in which some personal information is restored. The operating database system 300 is updated using the item data. (Step S250)

FIG. 15 is a detailed configuration diagram of the verification management terminal device 200.

The verification management terminal device 200 includes a CPU 201, a network communication unit 205, a memory 209, and a dedicated program.

The CPU 201 is a central processing circuit.
The network communication unit 205 is a LAN connection circuit.

The memory 209 is a semiconductor memory or a magnetic memory.
The memory 209 includes an input history recording unit 209b and a user management information recording unit 209d.

The input history recording unit 209b records the verification data set 192.
The user management information recording unit 209d records user management information including user identification information.

In addition, verification data input means 210, input history storage means 220, verification data registration means 230, verification DB scan means 240, correction data creation means 250, correction data output means 260, And user management means 239. Each of these means is realized as a dedicated program, and functions when the dedicated program is interpreted and executed by the CPU 201.

The verification data input unit 210 acquires the verification data set 192 output by the verification management terminal device 200 (for example, recorded on a DVD) from the operation management terminal device 100.

The input history storage unit 220 stores the verification data set 192 received by the verification data input unit 110 in the input history data recording unit 209.
Note that the input history storage unit 220 may store the verification data set 192 together with the worker identification information in the input history data recording unit 209.

The verification data registration unit 230 registers the verification data set stored in the input history data recording unit 209 in the verification database system 500.

The verification DB scanning unit 240 scans the verification database system to obtain all records.
The correction data creation means 250 matches the sequence number information of the obtained records with the verification data set 192 of the same sequence number information stored in the input history data recording unit 209c, and collects records having items that do not match, A correction data set 291 with the same sequence number information as the sequence number information attached to the verification data set 192 is created.

The correction data output means 260 outputs the correction data set 291 (for example, records on a DVD).

The user management means 239 collates the worker ID input by the terminal operator that cannot handle personal information with the user identification information recorded in the user management information recording unit 209d, and authenticates the user if they match.

FIG. 18 is a flowchart of the verification management process.
(1) User management processing: The user management means 239 collates the worker ID input by the terminal operator who cannot handle personal information with the user identification information recorded in the user management information recording unit 209d, and the two are matched. User authentication. (Step S300)
(2) Input history management processing: The verification data input unit 210 receives the verification data set 192 output from the operation management terminal device 100 by the verification management terminal device 200.
The input history storage unit 220 stores the verification data set 192 received by the verification data input unit 210 in the input history data recording unit 209. (Step S310)
(3) Verification database registration (verification registration) processing: The verification data registration unit 230 registers the verification data set received by the verification data input unit 210 in the verification database system 500. (Step S320)
(4) DB scan processing: The verification DB scanning means 240 scans the verification database system to obtain all records. (Step S330)
(5) Difference data acquisition processing: The correction data creation means 250 matches the sequence number information of the obtained record with the verification data set 192 of the same sequence number information stored in the input history data recording unit 209c, and matches. Collect records with items that do not. (Step S340)
(6) Correction data creation process: The correction data creation means 250 creates a correction data set 291 in which the collected record is attached with the same record identification information as the record identification information attached to the verification data set 192. . (Step S350)
(7) Output history management process: The correction data output means 260 outputs the correction data set 291 to the operation management terminal device. At this time, the output history may be recorded in the output history DB. (Step S360)

The figure which showed the database system 300 in operation and the database 500 for verification which are the object of maintenance management by the database maintenance method by this invention Diagram explaining the general flow of the database maintenance method Running database example Figure explaining record definition data Database maintenance operation flow Diagram explaining record format and example with sequence number added Sample storage dataset Example validation dataset The figure explaining the format and example of the correction data set 291 Example of update rule 193 The figure explaining the procedure which creates the data set 191 for storage Diagram explaining the procedure for creating a validation data set The figure explaining the procedure which restores the concealed item of the correction data 291 Detailed configuration diagram of the operation management terminal device 100 Detailed configuration diagram of the verification management terminal device 200 Flow chart for creating verification data set Flowchart of processing for updating an operating database system using a correction data set Flow chart of verification management processing

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Database maintenance system 100 Operation management terminal device 109 Memory 109a Rule recording part 109b Storage data recording part 109c Encryption key data recording part 109d User management information recording part 109e Correction history data recording part 110 DB scanning means 120 Storage data creation means 122 Sequence number addition means 123 Concealed item setting means 126 Item concealment means 130 Rule extraction means 133 Record display means 136 Cryptographic decryption means 138 Correction history storage means 139 User management means 140 Storage registration means 150 Verification data output means 160 Correction data input means 170 Storage Data Extraction Unit 173 Personal Information Restoration Unit 176 Record Verification Unit 185 Change DB Update Unit 180 Operation DB Update Unit 199 User Management Unit 191 Storage Data Set 192 For Verification Data set 193 Update rule 200 Verification management terminal device 209b Input history recording unit 209d User management information recording unit 210 Verification data input unit 220 Input history storage unit 230 Verification data registration unit 239 User management unit 240 Verification DB scan unit 250 Correction Data creation means 260 Correction data output means 292 Correction data set 300 Database system 500 in operation Database database for verification

Claims (2)

A verification maintenance method for a database system using an operation management terminal device and a verification management terminal device,
(1) An operation database scanning process in which the operation management terminal device obtains all records by scanning an operating database system;
(2) a sequence number adding step in which the operation management terminal device adds sequence number information to each record for all records in the database;
(3) A storage registration step of encrypting the items to be concealed in each record having sequence number information in the operation management terminal device, creating a storage data set, and storing it in the storage data recording unit;
(4) A verification data output step in which the operation management terminal device outputs to the verification management terminal device a verification data set created by concealing the items to be concealed of the records having the sequence number information;
(5) An input history reception storing step in which the verification management terminal device receives the verification data set output from the operation management terminal device and stores it in the input history data recording unit;
(6) an import process in which the verification management terminal device imports the received verification data set into the verification database system;
(7) In the verification database system, a correction process for identifying and correcting the record causing the failure,
(8) A correction data set creation step of collecting correction records in the verification management terminal device and creating a correction data set with the same sequence number information as the sequence number information attached to the verification data set;
(9) The correction data set output step in which the verification management terminal device outputs the correction data set;
(10) A correction data set receiving process in which the operation management terminal device receives the correction data set output from the verification management terminal device;
(11) A step in which the operation management terminal device takes out and decodes the storage data set with the same sequence number information as the sequence number information of the correction data set and decodes it.
(12) A hidden item restoration step in which the operation management terminal device creates a correction data set in which the hidden items of the correction data set are restored using the decrypted items of the storage data set.
(13) A record collation step in which the operation management terminal apparatus collates the decrypted storage data set with the corresponding record of the operating database system.
(14) If there is no change in the record of the operating database system from the result of the record matching process, the operation management terminal device updates and corrects using the correction data set in which the concealed item is restored. DB update process for storing information in the correction history DB.
(15) When there is a change in the record of the operating database system from the result of the record collation process, the operation management terminal device refers to the update rule and extracts the corresponding update rule according to the change content. Rule extraction process.
(16) According to the update rule extracted by the rule extraction step, the modified record of the operating database system is updated using the correction data set in which the hidden item is restored, and the correction information is stored in the correction history DB. Change DB update process to save.
A database maintenance method characterized by being performed in a process including: An operation management terminal device that prepares a verification data set to be used in the verification database system on the verification side from the operating database system, and reflects the records corrected in the verification database system in the operating database system, and for verification A database composed of a verification management terminal device that accepts a data set, inputs the data set to the verification database system, and outputs a record corrected by the verification database system to the operation management terminal device as a correction data set A migration system,
The operation management terminal device
A rule recording unit that records an update rule that describes an update processing method when updating a record of an operating database system using a correction data set;
A storage data recording unit for recording the storage data set;
An encryption key data recording unit for recording encryption key information; a user management information recording unit for recording user management information including user identification information;
A recording unit comprising:
DB scanning means for scanning an operating database system and acquiring all records and record definition data;
Sequence number adding means for adding sequence number information to the record acquired by the DB scanning means;
With reference to the record definition data acquired by the DB scanning unit, the item to be concealed is extracted, and the concealed item setting unit that sets the concealed item,
The encryption key information recorded by the encryption key data recording unit is used to encrypt the items to be concealed of the records to which the sequence number information is added, or the encryption key information recorded by the encryption key data recording unit is And decryption means for decrypting the encrypted item of the storage data set,
A storage data creation means for creating a storage data set using a record in which items to be hidden by the encryption / decryption means are encrypted;
Storage registration means for registering a storage data set in the storage data recording unit;
Item concealment means for creating a verification data set by replacing each concealed item set by the concealment item setting means with an arbitrary character string,
A verification data output means for outputting the verification data set created by the item hiding means;
A correction record input means for acquiring a correction data set output by the verification management terminal device;
Storage data extraction means for extracting from the storage data recording unit a storage data set with the same sequence number information as the sequence number information of the correction data set;
Personal information restoration means for creating a correction data set that restores the personal information by restoring the concealed item of the correction data set using the item decrypted by the encryption / decryption means;
The encrypted item of the storage data set taken out by the storage data extraction means is replaced with the item decrypted by the encryption / decryption means, and the storage data set replaced with the decrypted item is operated correspondingly. A record collation means for collating with a record of the database system in the middle to determine whether there is a change in the record of the database system in operation;
As a result of the collation of the record collating means, when there is a change in the record of the operating database system, a rule extracting means for referring to the update rule and extracting the corresponding update rule according to the change content;
In accordance with the update rule extracted by the rule extraction means, a record display means for displaying correction data and a record having a change,
A change DB that updates an operating database system using correction data obtained by restoring personal information or data of a specific item of correction data obtained by restoring personal information in accordance with an update rule extracted by the rule extraction means Update means;
As a result of the collation by the record collating means, if there is no change in the record of the database system in operation, the record is updated using the correction data set in which the personal information is restored, or the update rule extracted by the rule extracting means is If the rule is to be updated, the operation DB update means for updating according to the update rule;
A terminal device comprising:
The verification management terminal device
A recording unit composed of an input history data recording unit for recording the verification data set;
Verification data input means for acquiring a verification data set output from the operation management terminal device;
Input history storage means for storing the verification data set received by the verification data input means in the input history data recording unit;
A verification data registration means for registering the verification data set in the verification database system;
A DB scan means for verification that scans the database system for verification and obtains all records;
Match the sequence number information of the obtained record with the verification data set of the same sequence number information stored in the input history data recording unit, collect the records with items that do not match, and assign the sequence number assigned to the verification data set Correction data creation means for creating a correction data set with the same sequence number information as the information;
Correction data output means for outputting a correction data set;
A database maintenance system comprising: a terminal device comprising:

Images