JP2010026588A - Personal information protection device, personal information protection method, program, and monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent taking out of personal information to outside and information leakage of personal information without deteriorating convenience of personal information or information which contains the personal information. <P>SOLUTION: When a photographed image, information relating to toll (passage date and time, toll, credit card number or the like), and voice data by intercom are output to the outside, a general interface parts 20-7 and 30-7 discriminate types of data to be output to the outside and performs required processing according to the data type. For a photographed image, image degradation processing is performed to a license plate out of the image and an area in which a driver is reflected to make them unidentifiable. The information relating to the toll is output to outside after replacing the credit card number etc. with other data. Further the voice data are output to the outside after performing amplification/fade-out processing by voice grade, FM modulation and AM modulation. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a personal information protection device, a personal information protection method, a program, and a monitoring system.

  At the toll gate, a camera called an ITV camera for monitoring the lane condition is installed. The video of this camera is displayed on the display section of a device called a lane monitoring panel, which can be viewed by the toll gate staff (monitor), and this image can be viewed as a VTR according to operational and maintenance needs. And so on. Due to recent technological advances, such video data can be recorded as digital data represented by HDD recorders, DVD recorders, etc., and digital data can be copied to other computer equipment without deterioration, or on a network. It has become easier to distribute data.

  On the other hand, in Japan, the Personal Information Protection Law has been enforced, and data that can identify an individual is normally only available between the operator and its contractor, and without the consent of the person. Disclosure of data to the three parties is prohibited. The image captured by the ITV camera includes a user's face, a vehicle license plate, and the like, and may correspond to personal information depending on the resolution. Therefore, there is an increased risk of personal information (video information) obtained at the toll gate being erroneously or intentionally disclosed to a third party without permission or leaking information, and some technical measures are required. It has become.

For example, in a system for recording video from a surveillance camera, when a recording device main unit failure, a recording device internal failure, or a network failure occurs, backup recording of image data is performed on the monitoring camera device side, and the failure or failure If the backup memory for backup recording is removed from the main unit, the maintenance staff is notified by e-mail or telephone, and the image data is wholly or partially transmitted. A technique for encryption has been proposed (see, for example, Patent Document 1).
JP 2007-036369 A

  However, the above-described prior art depends on existing personal authentication and human management (thorough confidentiality, moral improvement) when taking out personal information such as recorded images to an external recording medium. Once information is output to the outside, there is a problem that information leakage occurs. In this case, it may be possible to apply strong encryption to the information output to the outside, but it is necessary to prepare a decryption means on the user side, and it is not convenient when considering flexible use of information. There was a problem.

  The present invention has been made in consideration of such circumstances, and its purpose is to bring personal information to the outside without reducing the convenience of personal information or information containing personal information, An object of the present invention is to provide a personal information protection device, a personal information protection method, a program, and a monitoring system that can prevent information leakage of personal information.

In order to solve the above-described problems, the present invention provides an information collecting unit that collects information including personal information and an individual included in the information to be externally output when the information collected by the information collecting unit is externally output. Personal information protection comprising processing means for processing information into non-personal information that cannot identify an individual while maintaining the information format, and output means for externally outputting information processed by the processing means Device.
Therefore, it is possible to prevent personal information from being taken out and leakage of personal information without deteriorating the convenience of personal information or information including personal information.

The present invention, in the above invention, when the information collected by the information collecting means is externally output, the present invention comprises a data type determining means for determining the data type of the information to be externally output, and the processing means comprises the data type determining The processing method for the personal information included in the information to be externally output is selected based on the data type determined by the means.
Therefore, an appropriate processing method can be selected according to the data type of information, and personal information can be taken out and leakage of personal information can be reliably prevented.

According to the present invention, in the above invention, the information collecting unit is a photographing unit that captures an image including personal information, and the processing unit externally outputs an image captured by the photographing unit. Image processing means for performing image processing for processing personal information included in the image to be processed into non-personal information in which an individual cannot be specified while maintaining the information format, and the output means performs image processing by the image processing means. The applied image is output externally.
Therefore, even when personal information is included in the photographed image, it is possible to prevent personal information from being taken outside or leakage of personal information without reducing the convenience of the information.

According to the present invention, in the above invention, the image processing means includes a personal information area specifying means for specifying an area of personal information included in the image to be externally output, and personal information specified by the personal information area specifying means. And image degradation processing means for performing image degradation processing on the area.
Therefore, even if personal information is included in the captured image, the personal information area is subjected to image deterioration processing, so that personal information is not taken out and leakage of personal information is prevented. Can do.

According to the present invention, in the above invention, the personal information area specifying unit includes a background image acquiring unit that acquires a background image in which an image related to personal information is not previously captured, the image to be externally output, and the background image acquiring unit. The image processing apparatus is characterized by comprising cutout means that takes a difference from the acquired background image and cuts out an M × N area where the difference has reached a certain value or more as a personal information area.
Therefore, even if personal information is included in the captured image, the personal information is surely cut out and subjected to image degradation processing, thus preventing personal information from being taken outside and leakage of personal information. Can do.

  According to the present invention, in the above invention, the image deterioration processing unit takes an average of all pixel values in the area of personal information cut out by the cutting out unit, and fills all pixels in the area of personal information with the average value. It is characterized by that. Therefore, even if personal information is included in the captured image, the personal information can be surely deteriorated, so it is possible to prevent the personal information from being taken out and leakage of personal information. .

According to the present invention, in the above invention, the information collecting unit is a voice collecting unit that collects a user's voice, and the processing unit externally outputs the voice data collected by the voice collecting unit. Audio processing means for performing audio processing for processing personal information included in the audio data to be output into non-personal information that cannot identify an individual while maintaining the information format; and the output means performs audio processing by the audio processing means. The processed sound data is output to the outside.
Therefore, even when an individual can be identified from the collected voice characteristics, it is possible to prevent the personal information from being taken out or leakage of personal information without reducing the convenience of the information. .

According to the present invention, in the above invention, the sound processing means is configured to perform at least one of amplification / attenuation processing for each sound band, FM modulation, or AM modulation, or a combination thereof, with respect to the sound data to be externally output. It is characterized by performing voice processing.
Therefore, even when an individual can be identified from the collected voice characteristics, it is possible to prevent the personal information from being taken out or leakage of personal information without reducing the convenience of the information. .

The present invention is characterized in that, in the above invention, output prohibition setting means for prohibiting external output of the voice data collected by the voice collection means is provided.
Therefore, even if an individual can be identified from the contents of the collected voice conversation, forcibly prohibiting output prevents personal information from being taken outside or leaking of personal information. Can do.

The present invention is the above invention, wherein the information collecting means is a charge payment information acquiring means for acquiring charge payment information relating to charge payment, and the processing means is stored by the charge payment information acquiring means. Data output processing means for replacing personal information included in externally output fee payment information with non-personal information that cannot identify an individual while maintaining the information format, The means outputs the fee payment information subjected to the replacement processing by the data replacement processing means to the outside.
Therefore, even if personal information can be identified from the acquired fee payment information, it is possible to prevent personal information from being taken outside or leakage of personal information without reducing the convenience of the information. it can.

In order to solve the above-described problem, the present invention includes a step of collecting information including personal information, and when the collected information is output externally, the personal information included in the information to be externally output is A personal information protection method comprising: processing into non-personal information in which an individual cannot be specified while maintaining an information format; and outputting the processed information externally.
Therefore, it is possible to prevent personal information from being taken out and leakage of personal information without deteriorating the convenience of personal information or information including personal information.

In order to solve the above-described problems, the present invention provides a computer for an information processing apparatus that collects information including personal information, a function of collecting information including personal information, and externally outputting the collected information. In this case, the personal information included in the information to be externally output is processed into non-personal information that cannot identify an individual while maintaining the information format, and the function of externally outputting the processed information is executed. It is a program.
Therefore, it is possible to prevent personal information from being taken out and leakage of personal information without deteriorating the convenience of personal information or information including personal information.

In order to solve the above-described problem, the present invention is a monitoring system for monitoring lane conditions in the vicinity of a toll gate on a toll road, and includes information including personal information relating to a vehicle passing through the toll gate. When the information collected by the information collection device and the information collection device to be output externally, the personal information included in the externally output information is processed into non-personal information that cannot identify an individual while maintaining the information format. A monitoring system comprising: processing means for performing output; and output means for externally outputting information processed by the processing apparatus.
Therefore, it is possible to prevent personal information from being taken out and leakage of personal information without deteriorating the convenience of personal information or information including personal information.

  According to the present invention, when information including personal information is collected and the collected information is externally output, the personal information included in the externally output information is processed into non-personal information while maintaining the information format. Since the data is output to the outside after that, it is possible to prevent personal information from being taken outside or leakage of personal information without deteriorating the convenience of the personal information or the information including the personal information. .

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a perspective view showing a configuration of a toll gate monitoring system according to an embodiment of the present invention. In the figure, in the lane on the entrance side, when the vehicle detection device 1 detects a vehicle M1 entering the toll road, the vehicle detection device 1 calculates a toll fee such as whether the vehicle M1 is a normal passenger car or a large car. One vehicle height, which is one parameter, is detected and notified to the automatic ticket issuing machine 2.

  The automatic ticket issuing machine 2 issues a ticket according to the vehicle type of the vehicle M1. The automatic ticket issuing machine 2 is provided with an interphone for carrying out a conversation between the driver of the vehicle M1 and a monitor on the toll gate monitoring device 20 side in the event of some trouble. The conversation is transmitted as voice data to the charge monitoring apparatus 20 via the communication line 3 such as the Internet. The monitoring camera 4 takes a picture of the entering vehicle M1 triggered by the detection of the entry of the vehicle M1 by the vehicle detection device 1, and transmits it to the toll gate monitoring device 20 via the communication line 3 such as the Internet. . The photographed image includes the entire vehicle, license plate, driver's face, and the like. The license plate, the driver's face, etc. are handled as personal information that can identify an individual.

  On the other hand, in the lane on the exit side, when the vehicle detection device 10 detects the vehicle M2 exiting from the toll road, one parameter for calculating the toll, such as whether the vehicle M2 is a normal passenger car or a large car. The vehicle height of the vehicle is detected, and the automatic toll collector 11 is notified.

  The automatic toll collector 11 collates the information on the pass ticket with the vehicle height of the vehicle M2 detected by the vehicle detection device 10, and collects a predetermined fee. Tolls can be paid by cash or credit card. The passage date and time, the toll, the credit card number, etc. at this time are transmitted to the toll gate monitoring apparatus 20 via the communication line 3 such as the Internet. The credit card number is handled as personal information that can identify an individual.

  In addition, the automatic toll collector 11 is provided with an interphone for carrying out a conversation between the driver of the vehicle and a monitor on the toll gate monitoring device 20 side when any trouble occurs. The conversation is transmitted as voice data to the charge monitoring apparatus 20 via the communication line 3 such as the Internet. The voice data is handled as personal information that can identify an individual.

  In addition, the automatic toll collector 11 instructs the start control device 12 to open the blocking bar 13 when the toll collection has been correctly performed or charged, while the vehicle detection device 14 passes the vehicle M2. Is notified, the start control device 12 is instructed to close the blocking bar 13. The monitoring camera 15 takes a picture of the entering vehicle M2 as a trigger when the entry of the vehicle M2 is detected by the vehicle detection device 14, and transmits it to the toll gate monitoring device 20 via the communication line 3 such as the Internet. . The photographed image includes the entire vehicle, license plate, driver's face, and the like. The license plate, the driver's face, etc. are handled as personal information that can identify an individual.

  An ETC that automatically collects tolls can be used in both the entrance lane and the exit lane. In this case, communication for transmitting and receiving information for collecting tolls to and from the ETC vehicle-mounted device mounted on the vehicles M1 and M2 is triggered by the detection of the vehicles M1 and M2 by the vehicle detection devices 1 and 10. Start. In particular, in the lane on the exit side, the automatic toll collector 11 automatically collects the toll by wireless communication with the ETC on-board device, and when it is correctly collected, the start control device 12 displays the automatic toll collector 11 The blocking bar 13 that restricts the traveling of the vehicles M1 and M2 is automatically opened and closed in accordance with the instruction from. Information on the ETC at this time, for example, passage date and time, toll, credit card number, etc. is transmitted to the toll gate monitoring apparatus 20 via the communication line 3 such as the Internet. The credit card number is handled as personal information that can identify an individual.

  Next, the toll gate monitoring apparatus 20 displays the images received by the monitoring cameras 4 and 15 received via the communication line 3 such as the Internet on a monitor or the like so that they can be monitored sequentially. The photographed image, information about tolls (passing date and time, tolls, credit card number, etc.), voice data by interphone, etc. are recorded.

  In addition, the toll gate monitoring device 20 remotely monitors recorded images taken by the monitoring cameras 4 and 15, information on tolls (passing date and time, tolls, credit card numbers, etc.), and voice data by an interphone. The information is transmitted to the remote monitoring device 30 through a service line (dedicated line) as appropriate. The remote monitoring device 30 collects images taken by the monitoring cameras 4 and 15 received from each tollgate monitoring device 20, information on tolls (passing date and time, tolls, credit card numbers, etc.), and voice data by an interphone. Record and manage.

  Next, FIG. 2 is a block diagram showing a schematic configuration of the toll gate monitoring device 20 and the remote monitoring device 30 described above. The toll gate monitoring apparatus 20 includes a display unit 20-2, an operation unit 20-3, a control unit 20-4, a storage unit 20-5, and a remote monitoring interface unit 20-6 on the toll gate monitoring panel 20-1. It has. The display unit 20-2 is a monitor that displays captured images and the like. The operation unit 20-3 is a pointing device such as a keyboard and a mouse. The control unit 20-3 controls the operation of each unit by executing a predetermined program. The storage unit 20-5 stores images taken by the monitoring cameras 4 and 15, information on tolls (passing date and time, tolls, credit card numbers, etc.), and voice data by the interphone. The remote monitoring interface unit 20-6 performs communication for exchanging data with the remote monitoring device 30.

  The toll gate monitoring panel 20-1 is connected to the automatic toll collection machine 11, the automatic ticket issuing machine 2, and other roadside devices 40, and transmits and receives each piece of information. Further, the general interface unit 20-7 is provided on an independent board connected to the toll gate monitoring device panel 20-1, and the captured images and traffic stored in the storage unit 20-5 are provided. Identify the type of information so that it does not output personal information as it is when externally outputting information related to charges (passing date and time, toll, credit card number, etc.) and voice data by interphone, and depending on the type of information The personal information is processed so as to be non-personal information that cannot identify an individual, or output is prohibited.

As an example of a processing method for processing personal information into non-personal information by the general interface unit 20-7,
-Image data: All or part of image quality degradation processing (mosaic processing, etc.)
・ Voice data: All voice conversion processing ・ License plate information: Dummy data replacement of serial number ・ Credit card number: Dummy data replacement ・ Other personally identifiable data: Dummy data replacement
By these processes, even if personal information is included in the data, the data is modified so that a person who views the data cannot specify the individual. Note that this modification makes it impossible to read the entire data as in the encryption process, and the entire data cannot be decrypted unless the decryption process or the like is performed. The data remains readable. That is, the information including the personal information is modified so that the individual cannot be specified while maintaining a format (state) that can be directly read by the information processing apparatus.

  External outputs include FD / MO / CD / DVD drive 20-8, USB / CF / SD slot 20-9, IEEE 1394 control unit 20-10, RS-232C control unit 20-11, Ethernet (registered trademark) control unit 20-12, and other external output control unit 20-13.

  The remote monitoring device 30 includes a display unit 30-2, an operation unit 30-3, a control unit 30-4, a storage unit 30-5, and a remote monitoring interface unit 30-6 on the remote monitoring panel 30-1. ing. The display unit 30-2 is a monitor that displays captured images and the like. The operation unit 30-3 is a pointing device such as a keyboard and a mouse. The control unit 30-3 executes a predetermined program and controls the operation of each unit. The storage unit 30-5 stores images taken by the monitoring cameras 4 and 15 received from the toll gate monitoring apparatus 20, information on tolls (passing date and time, tolls, credit card numbers, etc.), and voice data by the interphone. . The remote monitoring interface unit 30-6 performs communication for exchanging data with the toll gate monitoring apparatus 20.

  Further, the general interface unit 30-7 is provided on an independent board connected to the remote monitoring device board 30-1, and the captured image and the toll fee stored in the storage unit 30-5. When information related to information (passing date and time, toll, credit card number, etc.), voice data by interphone is output externally, the type of information is identified so that personal information is not output as it is, and according to the type of information, The personal information is processed so as to become non-personal information that cannot identify an individual while maintaining the information format, or output is prohibited. External outputs include FD / MO / CD / DVD drive 30-8, USB / CF / SD slot 30-9, IEEE 1394 (30-10), RS-232C (30-11), Ethernet (registered trademark) 30- 12 and other external outputs 30-13.

  In FIG. 2, in the block surrounded by the dotted line L1, personal information (photographed images, information on tolls (passing date / time, tolls, credit card number, etc.), voice data by interphone) is used for the original purpose of use. Shows the range. On the other hand, the block surrounded by the dotted line L2 indicates a range that may be used outside the intended purpose of use. When the general interfaces 20-7 and 30-7 output personal information used for its intended use within a range that may be used outside the intended use, the general interface 20-7 and 30-7 outputs the personal information. By applying image processing to a part or all of the information, it is processed into non-personal information that cannot identify an individual while maintaining its information format, and the use of personal information that deviates is prevented.

  Next, FIG. 3 is a block diagram showing a schematic configuration of the above-described general interface units 20-7 and 30-7. In the general interface units 20-7 and 30-7, captured images, information on tolls (passing date and time, tolls, credit card numbers, etc.), and voice data by the interphone are temporarily stored in the memory 50-1. . Thereafter, the type of data to be externally output is determined by software operating by the processor 50-2, and necessary processing is performed by the software or the dedicated sub-processor 50-3 according to the type of data. The processed data is temporarily expanded on the memory 50-1, and this data is sent to an external output destination. In the illustrated example, the Ethernet (registered trademark) control unit 50-4 externally outputs via the Ethernet (registered trademark) 50-5. Data before processing is deleted from the memory 50-1 after processing.

  Further, when data is input from the outside, if it is determined that the data is external input data by software temporarily stored in the memory 50-1 and operated by the processor 50-2, a special processing process is performed. Without being applied, the local bus control unit 50-6 sends it to the toll gate monitoring panel 20-1 or the remote monitoring device panel 30-1 via the local bus 50-7. The power supply unit 50-8 supplies operating power to each unit.

  Next, FIG. 4 is a flowchart for explaining the operation of the general interface units 20-7 and 30-7 of this embodiment. When there is a data input / output request, the general interface units 20-7 and 30-7 determine whether the input is an external input or an external output (step S10). The data type of the data is determined (step S11). The data type can be determined by examining the header information of each data. In this case, it is assumed that the data type is image, sound, other text, and the like. The images are images taken by the monitoring cameras 4 and 15, the voice is a conversation on the interphone, and the other texts are the date and time and the credit card number that accompany the payment.

  If the data type of the data to be externally output is an image, it is determined whether the image is prohibited from being output (step S12). If output is prohibited (prohibition in step S12), nothing is done (or notification that output is prohibited), and the process ends. On the other hand, if output is permitted (permitted in step S12), the image quality degradation target region (mosaic processing target region) is cut out (step S13). The image quality degradation target area is extracted in advance by storing a background image in which the personal information protection target is not captured (an image in which the vehicle is not captured), taking a difference between the output image and the background image, and the difference being a certain value or more. This is performed by cutting out the M × N area (which may be plural) reaching the image quality degradation target area.

  Next, image quality deterioration processing is performed on the cut out image quality deterioration target region (step S14). The image quality deterioration process is performed by taking an average of all the pixel values in the image quality degradation target area that has been cut out and filling all pixels in the image quality degradation target area with the average value. The value of N is selected to be large enough not to identify an individual, depending on the resolution of the image. As a result, it becomes impossible to identify the individual from the license plate that has moved into the image or the driver. Next, the image subjected to the image quality deterioration process is temporarily stored in the memory (step S20), and then output to a predetermined output destination (step S21).

  On the other hand, if the data type of the data to be externally output is not an image (others in step S11), it is determined whether or not the data type is voice (step S15). If the data type of the data to be externally output is voice, it is determined whether or not the voice is prohibited from being output (step S16). If the output is prohibited (prohibition in step S16), nothing is done (or notification that the output is prohibited) and the process is terminated. On the other hand, if output is permitted (permitted in step S16), audio modulation processing is performed (step S17). In the audio modulation processing, amplification / attenuation processing for each audio band, FM modulation, and AM modulation are performed. As a result, it becomes impossible to identify an individual from the characteristics of the voice. The sound subjected to the sound modulation process is temporarily stored in the memory (step S20), and then output to a predetermined output destination (step S21).

  Next, when the data type of the data to be externally output is neither an image nor a sound (others in steps S11 and S15), it is determined that the data type is text and whether or not the text is prohibited from being output. (Step S18). If the output is prohibited (prohibition in step S18), nothing is done (or notification that the output is prohibited) and the process is terminated. On the other hand, if output is permitted (permitted in step S18), data masking processing is performed (step S19).

In the data masking process, the portion corresponding to the personal information is replaced with dummy data according to the data contents. The location corresponding to the personal information is determined in advance according to the data specification. For example, in the case of a credit card number,
Original data: 0123-4567-8901-2345
Data after substitution: XXXX-XXXX-XXXX-XXXX
Mask it like this. This makes it impossible to identify an individual from the text. The text subjected to the data masking process is temporarily stored in the memory (step S20), and then output to a predetermined output destination (step S21).

  Further, when data is input from the outside (input in step S10), the input data is temporarily stored in the memory (step S22), and the toll gate monitoring panel is directly subjected to no special processing. 20-1 or the remote monitoring device panel 30-1 (step S23).

  In the above-described embodiment, the processing for information related to personal information may be disabled or settable as necessary. For example, when an external output of personal information is requested without processing due to criminal investigation purposes or circumstances related to human life, a person with specific authority invalidates this function according to the responsibility And In order to realize this invalidation function, the general interface processing units 20-7 and 30-7 may be provided with a user authentication processing function such as password verification. The HMI (Human Machine Interface) function required for user authentication uses the HMI function of the toll gate monitoring panel 20-1, the remote monitoring panel 30-1, or a dedicated external input device.

  Further, it may be possible to set so that external output itself is prohibited simultaneously with invalidation of this function (data processing function). This external output prohibition function can be set for each data type. For example, even if voice data cannot be identified due to voice modulation, personal information such as personal names may be included in the call content. It is more effective to prevent leakage of personal information if it can be set to prohibited.

  According to the Personal Information Protection Law, it is stipulated that if the request is valid, the personal information must be erased according to the request of the person. Accordingly, it is assumed that the function of the entire monitoring panel has a function of searching for and deleting personal information requested to be deleted.

  According to the above-described embodiment, when externally output, it is regarded as personal information or includes captured personal information, information about tolls (passing date and time, tolls, credit card number, etc.), interphone Since the processing by processing to the non-personal information that can not identify the individual while maintaining the information format, it is output externally, without reducing the convenience of information usage It is possible to prevent personal information from being taken outside and leakage of personal information.

It is a perspective view which shows the structure of the toll gate monitoring system by embodiment of this invention. 2 is a block diagram showing a schematic configuration of a toll gate monitoring device 20 and a remote monitoring device 30. FIG. It is a block diagram which shows the schematic structure of the general interface parts 20-7 and 30-7. It is a flowchart for demonstrating operation | movement of the general interface parts 20-7 and 30-7 of this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Vehicle detection apparatus 2 Automatic pass ticket issuing apparatus 3 Communication line 4 Monitoring camera 10 Vehicle detection apparatus 11 Automatic toll collection machine 12 Start control apparatus 13 Blocking bar 14 Vehicle detection apparatus 15 Monitoring camera 20 Tollgate monitoring apparatus 20-1 Tollgate monitoring Panel 20-2 Display unit 20-3 Operation unit 20-4 Control unit 20-5 Storage unit 20-6 Remote monitoring interface unit 20-7 General interface processing unit 20-8 FD / MO / CD / DVD drive 20-9 USB / CF / SD slot 20-10 IEEE 1394 control unit 20-11 RS-232C control unit 20-12 Ethernet (registered trademark) control unit 20-13 Other external output control unit 30 Remote monitoring device 30-1 Tollgate monitoring panel 30-2 Display unit 30-3 Operation unit 30-4 Control unit 30-5 Storage unit 30-6 Remote monitoring Interface section 30-7 General interface processing section 30-8 FD / MO / CD / DVD drive 30-9 USB / CF / SD slot 30-10 IEEE 1394 control section 30-11 RS-232C control section 30-12 Ethernet (registration) Trademark) Control Unit 30-13 Other External Output Control Unit

Claims (13)

An information collecting means for collecting information including personal information;
When externally outputting the information collected by the information collecting means, processing means for processing personal information included in the information to be externally output into non-personal information that cannot identify an individual while maintaining its information format;
An personal information protection device comprising: output means for outputting the information processed by the processing means to the outside. When externally outputting the information collected by the information collecting means, the data collecting means for judging the data type of the information to be externally output,
The processing means includes
2. The personal information protection apparatus according to claim 1, wherein a processing method for personal information included in the information to be externally output is selected based on the data type determined by the data type determination means. The information collecting means includes photographing means for photographing an image including personal information,
In the case where the image taken by the photographing means is output externally, the processing means processes the personal information included in the externally output image into non-personal information that cannot identify an individual while maintaining the information format. Image processing means for applying
3. The personal information protection apparatus according to claim 1, wherein the output unit outputs an image subjected to image processing by the image processing unit to the outside. The image processing means includes
Personal information area specifying means for specifying an area of personal information included in the image to be externally output;
The personal information protection device according to claim 3, further comprising: an image deterioration processing unit that performs an image deterioration process on the area of the personal information specified by the personal information area specifying unit. The personal information area specifying means includes
Background image acquisition means for acquiring a background image in which an image relating to personal information is not captured in advance;
A cutout unit that takes a difference between the image to be externally output and the background image acquired by the background image acquisition unit, and cuts out an M × N region where the difference has reached a predetermined value or more as a personal information region; The personal information protection device according to claim 4. The image deterioration processing means is
6. The personal information protection device according to claim 5, wherein an average of all pixel values in the area of personal information cut out by the cutout means is taken and all pixels in the area of personal information are filled with the average value. The information collecting means includes voice collecting means for collecting a user's voice,
When the voice data collected by the voice collecting means is output to the outside, the processing means processes the personal information included in the voice data to be externally output into non-personal information that cannot identify an individual while maintaining the information format. Voice processing means for performing voice processing to perform,
The personal information protection device according to claim 1, wherein the output unit outputs the audio data subjected to the audio processing by the audio processing unit to the outside.   The sound processing means performs sound processing on at least one of amplification / attenuation processing for each sound band, FM modulation, AM modulation, or a combination thereof on the sound data to be output externally. The personal information protection device according to claim 7.   9. The personal information protection device according to claim 7, further comprising output prohibition setting means for prohibiting external output of the voice data collected by the voice collection means. The information collecting means includes charge payment information acquisition means for acquiring charge payment information related to charge payment,
When the processing means outputs the accumulated charge payment information acquired by the charge payment information acquisition means to the outside, the personal information included in the charge payment information to be output externally is maintained while maintaining its information format. Data replacement processing means to replace non-personal information that cannot be specified,
10. The personal information protection apparatus according to claim 1, wherein the output unit outputs the fee payment information subjected to the replacement process by the data replacement processing unit to the outside. Collecting information including personal information;
When outputting the collected information externally, processing the personal information included in the information to be externally output into non-personal information that cannot identify an individual while maintaining the information format;
And outputting the processed information to the outside. In the computer of the information processing device that collects information including personal information,
The ability to collect information including personal information,
When the collected information is output to the outside, the personal information included in the information to be externally output is processed into non-personal information while maintaining the information format;
A program for executing the function of outputting the processed information to the outside. A monitoring system that monitors lane conditions in the vicinity of a toll gate on a toll road,
Information collecting means for collecting information including personal information relating to a vehicle passing through the toll gate;
When externally outputting the information collected by the information collection device, processing means for processing personal information included in the information to be externally output into non-personal information that cannot identify an individual while maintaining the information format;
And an output means for outputting the information processed by the processing means to the outside.

Images