JP2010113387A - Search mediation system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a search mediation system with which a person trying to access information can collect the information simultaneously from a database holding the records regarding a related object and which provides the location information of the object to a person requiring to find imitation or a recalled object. <P>SOLUTION: The search mediation system includes a table 170 which records a surveillance key in response to a surveillance request demand from a surveillance requesting person. The system includes a surveillance report creating means and a surveillance report providing means. When a search requesting means 24 performs a search request to each database and receives the search results from each database, the surveillance report creating means 19 refers to the surveillance key table 170 and creates a surveillance report. The surveillance report is notified to the surveillance requesting person through the surveillance report providing means 29. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a technique for searching a plurality of databases with different founders.

In recent years, it has been required to share information on logistics management and article location management across companies. As represented by ebXML (electronic business XML), basic information acquisition mechanisms, information sharing / exchange frameworks, and common items of information to be exchanged are being developed. Using this common information sharing / exchange framework, it is possible to start a smooth business operation by allowing existing or potential business partners to search a database that stores business information as needed. is there. On the other hand, a system for mediating data storage destinations has already been proposed (see Patent Document 1).
JP 2006-146293 A

  Disclosing information managed by the company has the advantage that new customers can be cultivated thereby. However, if the information is unconditionally disclosed, there is also a problem that it reveals the hand to the competitor. This is not only the contents of the information, but also the location of the database itself should be made known to potential customers, but it should be kept secret to inconvenient partners such as competitors in order to prevent industrial espionage and cracking interference. You will have inconsistent demands. Today, as standardized data sharing and exchange methods are becoming popular, the benefits of this are linked to a common foundation, and there is a potential opportunity for new, more advantageous business relationships that have never been met before. ing. However, it is still difficult to detect the presence and location even if it is shared as a base.

  On the other hand, infringement of intellectual property rights due to the distribution of counterfeit products has become a serious problem not only in emerging markets but also in developed markets.喪失 Not only commercial damage, such as loss of sales opportunities for genuine products by brand products, confusion with genuine products of bad counterfeit products, damage to brand value due to misidentification, risk of user life such as pharmaceuticals and auto parts The fact that counterfeit products are rampant for important products directly connected to is a serious problem around the world. On the other hand, in some states in the United States, a law requiring that a certificate that records the distribution channel of pharmaceuticals be attached at the time of sale is enforced, and a mechanism called ePedigree that realizes this electronically has also been put into practical use. Yes. However, there are limited products such as pharmaceuticals that have certain qualification management for sales and handling, and there is no sufficient mechanism to prevent the distribution of bad counterfeit automobile parts that can cause the same serious situation. .

  On the other hand, even if it is a product that is properly manufactured and sold, it may be harmful to the human body, such as ignition or poisoning, due to various defects during design, manufacture, distribution, etc. An accident has occurred. Businesses involved in distribution and transportation from the middle to the end from manufacturers and importers have been shipped under the guidance of the government authorities for these serious situations or at their own discretion. In many cases, recalls to collect or refurbish items are frequently invoked. However, as a mechanism for grasping the distribution route of these general products at present, the shipping destination in the sales slip can be tracked, and the sales and shipping destination of each seller and handler can be tracked, or a large amount of advertising There is only an inefficient way of spending money and encouraging notifications from buyers and owners via the mass media.

With regard to tracking sales slips, it is expected that electronic commerce data exchange and the spread of EDI will enable a certain degree of electronic linkage. However, originally there are information items necessary for buying and selling goods and transportation. Designed to be exchanged, the identification number of the individual product necessary for detailed identification of the product that caused the problem, or the lot number that can identify to some extent the individual set that shares the manufacturing conditions, or its number It is common not to include an item that describes an alternative production line and date of manufacture.
For this reason, identifying where an individual with a background situation common to the product that caused the accident is present at the time of the recall has great difficulty, and any subsequent damage should be stopped. Priority is given, and a large recall is made without specifying a lot or a production date, and advertisements by the mass media mentioned above are carried out.

  In order to solve the above two problems fundamentally, an individual identification number is assigned to each of the products to be sold, or to a unit package in which a plurality of products of the same type as a shipping unit are packed in a cardboard box or the like. A system of individual product traceability for creating and storing or exchanging records of sales and transportation including manufacturing and intermediate distribution for each individual number is being put into practical use. In many cases, the individual identification number assigned for this individual product traceability is labeled or printed on the individual product or collective package that becomes the tracking unit using the means that are subject to automatic recognition. It is physically attached using the means described above. Recently, RFID technology has been actively introduced as a carrier for this individual identification information, and not only a physical identifier carrier but also a method for holding identifier information and a wireless carrier for reading and communication with a writing device. In addition, activities to standardize the data format and communication protocol of individual handling records exchanged between companies are being actively promoted.

  However, it is still not enough to solve the above-mentioned important problems simply by preparing a mechanism for identifying individuals, creating handling records, and exchanging them between companies. Records are maintained between companies that have direct business relationships with a product, and the locations of databases that can be searched and acquired with specific conditions are notified to each other or unidirectionally. , By granting search access, we can build a mechanism to disclose the actual movement of these products, but we cannot directly know how the company ahead or before was involved in the product. This alone does not realize progress from repeating tracking as the same daisy chain as tracing shipment slip data.

  Therefore, the present invention is a search mediating system in which a person who wants to access information can collect information collectively from a database that holds records of related objects. It is an object of the present invention to provide a search intermediary system that provides information on the location of an object by interfering with the information collecting activity for those who need to find it.

The invention according to claim 1 for solving the above-mentioned problem is as follows.
A system that mediates search when searching a plurality of databases with different founders from a user terminal,
A request accepting means that accepts an externally defined request and causes each process according to the request;
Monitoring requester information storage means for recording information required for the monitoring requester authentication process;
A monitoring identifier storage means for storing the identifier number when the received request is a monitoring request notification including an identifier number as a key;
Search request means for making a search request to each database based on the search request from the search requester terminal and obtaining the result;
When there is a search result obtained from each of the databases that matches the identifier number recorded in the monitoring key information storage means, the identifier number and specific recording information relating to the identifier are extracted to obtain monitoring report data. First monitoring report creation means to create,
Search result providing means for providing the search result to the search requester terminal;
Monitoring report providing means for providing the monitoring report data to a monitoring requester;
A search mediation system comprising:
According to such a configuration of the search mediation system, even if the monitoring requester does not become a party who receives the information provided to the database creator, the search requester uses the search result of the search requester unrelated to himself / herself to be recalled. It is possible to obtain monitoring report information and the like useful for tracking the product.

The invention according to claim 2 is the search mediation system according to claim 1,
2. The first monitoring report according to claim 1, wherein the identifier number is a number composed of a combination of three types of a manufacturer code, a product type code, and a solid number, or a combination of any two types of portions. Instead of creating means,
In the search results obtained from each database, if there is a record of an identifier number recorded in the monitoring key information storage means and an identification number common to the parts of the manufacturer code and the product code, the identifier number And a second monitoring report generating means for extracting specific recording information relating to the identifier and generating monitoring report data for the monitoring requester.
By adopting a configuration including the second monitoring report creating means, it is possible to collect information on products with an identifier issued illegally.

The invention according to claim 3 is the search mediation system according to claim 1,
2. The monitoring report generating means according to claim 1, wherein the identifier number is a number composed of a combination of three types of a manufacturer code, a product type code, and a solid number, or a combination of any two types of portions. Instead of,
In the search results obtained from the respective databases, there is a record of an identification number in which the identifier number recorded in the monitoring key information storage means and the part of the manufacturer code and the product code are common, and the identification number A search characterized by comprising third monitoring report creating means for extracting the identifier number and specific record information relating to the identifier and creating monitoring report data to the monitoring requester when there is no issue record It is a mediation system.
By adopting the configuration including the third monitoring report creating means, it is possible to collect information on the commodity with the identifier issued illegally more effectively.

  4. The search mediation system according to claim 1, 2, or 3, wherein the specific record information relating to the identifier includes information for specifying a record creation time and place where the identifier information is recorded in the database. More preferably.

The invention according to claim 5 is the search mediation system according to the invention according to claim 1, in place of the first monitoring report creating means according to claim 1,
A movement history storage means for managing recording of the movement history of an identifier for each identifier number as a collection of one record including recording time and information for specifying a recording location;
When there is a search result obtained from each database that matches the identifier number recorded in the monitoring key information storage means, information identifying the recording time and recording location is extracted for the recording of the corresponding identifier. The movement history update means registered in the movement record storage means as one record corresponding to the identification number, and the identifier newly added to the movement history storage means, the immediately preceding location specifying information, the presence immediately after that Obtain location identification information and / or one of the following: (previously existing location identifying information, information identifying the recording location of the added identifier), (information identifying the recording location of the added identifier, immediately existing location) A mobile two-point specifying means for specifying a combination of one set or two sets of mobile two-points of identification information),
A travel time calculation means for obtaining an actual travel time and a possible travel time of travel between two points from a combination of one or two pairs of travel two points identified by the travel two-point identification unit;
A fourth monitoring report creating means for judging whether or not the newly added identifier carrier is a fake based on the obtained actual moving time and the possible moving time, and creating monitoring report data to that effect when it can be judged as a fake; It is characterized by providing.
With the configuration including the fourth monitoring report creating means, it is possible to determine whether or not the newly added identifier carrier is fake based on the moving time of the identifier carrier having the same number.

  The travel time calculation means includes possible travel time acquisition means for obtaining possible travel time required to travel between the two points by requesting information specifying two different points on the earth from a predetermined address through the network. It is preferable to provide.

The invention according to claim 7 is the search mediation system according to the invention according to claim 1, in place of the first monitoring report creating means according to claim 1,
A movement history storage means for managing recording of the movement history of the identifier for each identifier number as a collection of one record including a recording time and a state placed immediately after the identifier is recorded;
When there is a search result obtained from each database that matches the identifier number recorded in the monitoring key information storage means, the record of the corresponding identifier is placed immediately after the recording time and identifier are recorded. The history of the recorded information is recorded, and the record newly recorded in the movement record storage means as one record corresponding to the identification number and the identifier newly added to the movement history storage means are recorded before the recording time. About the state that was placed immediately after the identifier of the movement history record with the record was recorded, the state that was placed immediately after the identifier of the movement history record with the recording time after the recording time, and the newly added identifier Compare the status of the identifier immediately after it was recorded and whether or not a logical contradiction occurs, A fifth monitoring report creating means for determining whether there is a suspicion of a thing, and when it can be determined that there is a suspicion of fake,
It is characterized by providing.

According to an eighth aspect of the present invention, the search intermediary system includes information on a searcher including information necessary for information granularity processing in the search intermediary system according to any one of the first to seventh aspects. Stored searcher information storage means;
The provision condition storage means for describing the provision condition of each database as a rule for determining the granularity of information to be provided as a search result, and storing the rule,
Based on the searcher information and the provision conditions, a search result acquired by the search result acquisition unit is extracted from a search result that can be disclosed to the searcher, or converted into a value of an information granularity level that can be disclosed. Further comprising information granularity processing means for data to be provided to the user terminal,
The search result providing unit provides the search requester terminal with data obtained as a result of processing by the information granularity unit. With such a configuration, the search mediation system according to the inventions of claims 1 to 7 can provide information to the searcher while further performing information granularity processing.

The provision condition is expressed by all combinations of a searcher category determined by a searcher registration attribute and a searcher disclosure attribute and a corresponding granularity processing rule,
The granularity processing rule defines the number of levels of granularity for each item of the database and the conversion rule or replacement vocabulary applied when displaying the original value of the item at each granularity level at the granularity level. And
The information granularity processing means determines a searcher category of a searcher from the original data that is the acquired search result according to the provision condition, and applies a specific granularity processing rule according to the provision condition to determine each item of the search result. It is more preferable that the data is converted into a display of the granularity level to be processed result data.

A tenth aspect of the present invention is the search mediation system according to the eighth aspect of the present invention, wherein the search receiving means extracts searcher information about a searcher who is a search request source from the searcher information storage means. Then, referring to the provision condition storage means with the searcher information, specify a database that can be disclosed to the searcher,
The search request means is configured to make a search request only for the specified database.

The invention according to claim 11 is the search mediation system according to any one of claims 1 to 10, further comprising:
Calculate the information provision fee for the information provided to the search requester, the information provision fee or the monitoring implementation fee for the report data to the monitoring requester, the distribution amount to the database opener, the charge amount to the searcher, Content fee calculation means to calculate the amount charged to the monitoring client,
Charge / distribution means for creating and recording the charge / distribution amount calculated by the content charge aggregation means as a record associated with each identification information of the searcher, the monitoring requester, and the database opener;
A search mediation system comprising:

  A twelfth aspect of the present invention is a software program that causes a computer to function as the search mediation system according to any one of the first to eleventh aspects of the present invention.

According to the search mediation system according to the present invention, when the monitoring requester who requests monitoring monitoring of recall monitoring, unauthorized issue monitoring, and counterfeit distribution monitoring requests the monitoring client himself as a searcher, or himself Each time a searcher unrelated to a search request makes a search report that can be handled, an unprecedented effect can be achieved. In particular, even if a legitimate monitoring client who is responsible for the product brand is not allowed to directly acquire data by the business operator that holds the handling records of the goods, it is necessary to interfere with the data exchange between third parties. It has a special effect that it can collect information.

First Embodiment
(Outline) Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of a search mediation system according to the present invention. In FIG. 1, 10 is a searcher terminal, 20 is a search mediation system, and 30a to 30c are independent database systems (hereinafter simply referred to as databases). Searcher terminal 10 and search mediation system 20 are connected by network 2. The search mediation system 20 and the databases 30 a to 30 c are connected to the network 3. The networks 2 and 3 may be the same. An identifier issuing system 40 and an identifier using system 50 are further connected to the network 3 (or network 2).

  The searcher terminal 10 is a terminal device used by a user who performs a search, and is realized by a general-purpose computer that can access the search mediation system 20 via a network. The search mediation system 20 is a server computer having a function of searching a database on the network in response to a search request from the searcher terminal 10 and returning a search result to the searcher terminal 10. 81, second searcher information storage unit 21, provision condition storage unit 22, request reception unit 23, search request unit 24, information granularity processing unit 17, monitoring report creation unit 19, monitoring key storage unit 18, monitoring report providing unit 29 , A search result providing means 26, a content fee totaling means 27, a charging / distributing means 28, and a user information storage means 82.

  The first searcher information storage unit 81 stores information necessary for authentication processing of a searcher who uses the search mediation system 20 in a storage area managed by the searcher information storage unit 81. The first searcher information storage unit 81 may include a return address of a search result by the search mediation system 20. The second searcher information storage unit 21 stores information related to the searcher necessary for performing the information granularity processing described in detail later in a storage area managed by the searcher information storage unit 21. The provision condition storage unit 22 stores the provision conditions of the databases 30a to 30c in a storage area managed by the provision conditions. The request accepting unit 23 accepts various requests from the outside such as a search request from the searcher terminal 10, a monitoring request from the monitoring requester, a user registration request from the searcher and the identifier issuer, It has a function to cause each process according to the request such as monitoring key registration. The search request unit 24 has a function of making a search request to the databases 30a to 30c in accordance with the search request received from the searcher terminal 10 and acquiring a search result for the request.

  The databases 30a to 30c may be a single unit instead of a plurality. Even in this case, the basic structure and operation of the search mediation system is the same as the following, and this single unit is responsible for concealing the network address of the database body, charging connection restrictions and information granularity restrictions, and charging information acquisition fees. Acts as a dedicated proxy for the database.

    The user information storage means 82 stores information necessary for authenticating an identifier issuer, a monitoring requester, etc., capable of transmitting an identifier service notification, that is, a notification of an identifier number, in a storage area managed by the user information storage unit 82. The monitoring key storage means 18 stores an identifier number to be monitored (referred to as a monitoring identifier) included in the monitoring request from the monitoring requester in a predetermined storage area. The monitoring report creation means 19 creates a monitoring report related to the monitoring key registered in the monitoring key storage means 18.

  The information granularity processing means 17 refers to the searcher information stored by the second searcher information storage means 21 and the provision conditions stored by the provision condition storage means 22, and among the search results acquired from the databases 30a to 30c, Only search results that can be disclosed to the searcher are extracted, or data is replaced to obtain search result data. The search result providing means 26 has a function of providing the search result data to the searcher terminal 10 that is the search request source.

  The content fee aggregation means 27 has a function of calculating an information provision fee and a processing fee based on the granularity and number of cases of the provision information aggregated by the search result providing means 26, and calculating charging / distribution to the searcher and the database. is doing. Also, a record of the amount charged for the monitoring usage fee to the monitoring requester according to the number of monitoring report data created by the monitoring report creation means 19 and a record of the distribution amount of the information provision fee to the databases 30a to 30c are respectively searched. It is created as a record associated with the identification information of the operator, information provider, and monitoring requester. The monitoring requester is not charged according to the number of monitoring report data, but according to the number of monitoring requests, the manufacturer or brand of the identifier to be monitored by the monitoring request, or the number of products An implementation fee may be charged. This record is notified to the searcher and the monitoring requester, and the distribution amount is notified to the database establishment person by a method such as mailing or a telecommunication method such as e-mail. (Dotted broken lines 4, 5, and 8 in FIG. 1 indicate this notification.)

  The databases 30a to 30c are databases that are managed by different companies and permit access from the search mediation system 20. The databases are independent of each other and do not cooperate with each other unless the search mediating system 20 is used. In FIG. 1, the network 2 that connects the searcher terminal 10 and the search mediation system 20, and the network 3 that connects the search mediation system 20 and the databases 30a to 30c may be the same or different. The searcher terminal 10 can reach the databases 30a to 30c as potential communication paths, but the location as the communication destination is not known, and the searcher terminal 10 is known from the viewpoint of the databases 30a to 30c. Direct access is not allowed because there is no relationship. Since the databases 30a to 30c record important information managed by the company, only the search mediation system 20 is permitted to access. In this way, the searcher terminal 10 cannot directly access the databases 30a to 30c, and the search mediation system 20 is always mediated. Conversely, by using this mechanism, the searcher need not specify the location of the databases 30a to 30c. In practice, it is not necessary for the searcher to request and negotiate individually with the openers of the databases 30a to 30c to conclude an access permission contract.

  The search mediation system 20 is connected to a network, and includes a control unit including a CPU and a main storage device, a large-capacity storage device such as a hard disk, a communication control unit responsible for electrical and logical connection with an external network, and the like. This is realized by incorporating a dedicated program into the configured server computer. Further, a data storage area for information stored and managed by each of the first searcher information storage unit 81, the second searcher information storage unit 21, the provision condition storage unit 22, and the user information storage unit 82 Is secured in a mass storage device such as a hard disk. Here, the dedicated program is interpreted by the CPU and executed on the server computer, whereby the search request means 24, the first / second searcher information storage means, the monitoring report creation means 19, and the monitoring key storage means 18 A computer program that operates as the information granularity processing means 17, the search result providing means 26, the content fee totaling means 27, the accounting / distribution means 28, the provision condition storage means 22, and the user information storage means 82.

  When the Internet is adopted as a network connecting the searcher terminal 10 and the search mediation system 20, the search mediator system 10 has the function of an XML Web service server, so that the searcher terminal 10 has the XML Web service. Can be used to access the search mediation system 20. In order for the search mediation system 20 to have the function of an XML Web service server, for example, software called Apache axis (registered trademark) is incorporated in a computer that implements the search mediation system 20. For example, the request receiving means 23 is realized by the cooperation of the communication control unit, which is a part of the hardware of the server computer, and the function of the XML Web service server realized by Apache axis.

(Identifier issuing system)
Reference numeral 40 denotes an identifier issuing system. There is no duplication, depending on the application, issue number management means 41 for generating continuous identification numbers, issue management means 42 for creating and storing issue records, or registering them externally, and the identification numbers that have been issued are actually things. Is provided with an issuing device 43 that is integrated with the device. FIG. 15 is a block diagram showing the configuration of the identifier issuing system 40. In addition to the above means, issuer notification receiving means 45 for receiving a reward distribution accompanying the circulation of identifier usage records from the search mediation system 20 is also provided. The identifier issuing system 40 can notify the search mediation system 20 of the identification number issued.

  The identifier issuance system 40 has a network communication function based on a predetermined communication protocol, and a computer in which a dedicated program for operating the computer as numbering management means 41, issue management means 42, and issuer notification reception means 45 is installed in the storage device. And a device that operates as the issuing device 43 under computer control.

  The numbering management means 41 is given a unique identifier as a type, and in the case of the same type, a case such as a certain article or slip recognized by the same type identifier has no or no duplication and a serial number or An identification number that is not duplicated and has a missing number specified is issued, and the issued number is recorded in a storage device as data in a specified table format. It does not sense whether it is physically or electromagnetically integrated with the target object (this is called service). The issue management means 42 manages the service.

  The issue management means 42 requests the issue number management means 41 to designate the type identifier of the target thing and issue an identifier to the individual thing, and also issues the identifier thus issued to the issue thing. It is a mechanism that gives instructions to physically or electromagnetically associate and report the completion. It also has a function for notifying other information systems that an identifier has been issued and that the identifier that has been issued is combined with a subject matter, that is, the commissioning. This function functions as a means for notifying and requesting the search mediation system 20 to monitor the exchange of the record that observed the identifier issued by the issue management means 42. In addition, the operation records to be notified may be held by themselves, or may not be prepared by themselves, and these records may be placed outside another external recording device, for example, the database 30b in FIG.

  In response to an instruction from the issue management device 42, the issue device 43 writes the individual number A of the identifier issued by the number management device 41 to the physical identifier carrier 44, or machine-reads the individual number A of the identifier. A possible character or code is printed on the identifier carrier 44 so that the individual number is physically present and movement can be initiated. The types of physical carriers and writing methods include all those within the scope of automatic recognition technology. RFID that changes the internal memory state by electromagnetic induction and communicates the contents by wireless communication may be used. It can be printed as a one-dimensional or two-dimensional bar code on paper, or it can be printed as a readable character string for OCR acquisition or visual reading with the naked eye, and fixed to a specific physical method. Is not to be done. The issuing device 43 is realized by, for example, an RFID writer or a barcode printer. In order to integrate the physical carrier and the article that is the original object of the individual number, the issuing device 43 must also have a function of attaching the physical carrier to the article, if necessary. Accordingly, the issuing device 43 may include a device that physically fixes the identifier carrier to the article, such as a labeling machine (labeler). On the other hand, the individual number A is not only a physical thing such as an article such as a cargo or a handwritten or printed document. It is also put into service for electronic data held and communicated electromagnetically. In this case, the issuing device may be realized as a partial function of a normal computer device and an electronic document creation program operating on the computer device.

(Identifier usage system)
Reference numeral 50 denotes an identifier utilization system. An identifier reading device 51, an identifier use recording unit 52, and an identifier user notification receiving unit 53 are provided. FIG. 16 is a configuration block diagram of the identifier issuing system 50. The identifier utilization system 50 operates the identifier reading device 51 to obtain a work record accompanied with handling of articles and electronic data, and operates the identifier utilization recording means 52 to identify the identifier in a fixed format in a specific database, for example, 30a. Register usage records. A broken line 7 with an arrow in FIG. 1 indicates a registration request for the identifier use record.

  The identifier utilization system 50 includes an identifier reader 51, a network communication function based on a predetermined communication protocol, an interface function for sending a control signal to the identifier reader 51 and receiving the read signal (read data), and a storage device. It can be configured and realized by a computer in which a dedicated program for operating the computer as the identifier use recording means 52 is installed in the storage device.

  The identifier reading device 51 is a device for detecting the identifier it carries from the identifier carrier. As a physical form, this is a device that automatically recognizes an identifier converted into an optical signal including a radio wave signal and a character string, or a device that purely detects only an identifier from communication data of an electronic document. Or As a specific example, to obtain the individual number of the identifier, the RFID tag is read wirelessly using an RFID reader. Alternatively, a one-dimensional or two-dimensional symbol is read using a barcode reader. Alternatively, it is a device that reads a character string using an OCR camera. The identifier reading device 51 collects information by being directly related to the business handling the identifier for which the device is installed.

  The identifier usage recording unit 52 receives a notification that the identifier A is detected from the identifier reading device 51, acquires background information of the identifier handling job associated with the identifier reading device 51, and the time and place of the job occurrence Integrating fact information such as, and creating identifier usage record information. The background information of the identifier handling work includes the installation location of the identifier utilization system 50 and the work contents (for example, the work at the place where the reading function of the identifier utilization system 50 is arranged, such as “arrival inspection”, “assembly process”, “shipment inspection”, etc. Information indicating the content), the state of the object placed immediately after the identifier is recorded, and the slip number related to the commercial flow or work. The identifier usage recording means 52 registers the generated identifier usage recording information in a predetermined database (30a or the like) via a network.

(data structure)
FIG. 2 is a diagram illustrating an example of searcher information stored by the first searcher information storage unit 81 and the second searcher information storage unit 21. A person who wants to perform a search using this system must register information about the searcher himself as searcher information in advance. In this embodiment, as shown in FIG. 2, as searcher information, a searcher ID, a login password of the searcher, and public key data are stored in the first searcher information storage table 810 managed by the first searcher information storage unit 81. Information necessary for user authentication of the searcher including the searcher name, type of business, location, annual commercial scale, searcher information disclosure condition in the second searcher information storage table 210 managed by the second searcher information storage means 21 And other information is registered. Each searcher is issued a searcher ID for specifying the searcher, and is registered in the first searcher information storage table 810 and the second searcher information storage table 210 in association with the above information. The searcher information disclosure condition defines the conditions for disclosing the searcher information to the database opener. The searcher information disclosure conditions are set for each item of the searcher information and the settings according to the type of business of the opener. It is possible.

  In the search mediation system 20, the “granularity” of information obtained by searching each database according to the relationship between the searcher and the database founder can be controlled and provided to the searcher. That is, the information granularity processing means 17 has a granularity processing rule table determined by each database founder as shown in FIG. 3, and the value of each item recorded in the database is set according to the disclosed granularity level. It is converted into a value represented by roughness defined for each item and provided to the searcher. The disclosure granularity level of each item in the database at the time of a certain search request is determined according to a class correspondence table and a class definition table, which will be described later. As shown in FIG. 3, in the granularity processing rule table, for each item, the degree of accuracy with which information is provided in a maximum of seven levels from level A to level d is defined. In order to execute the granularity process, a conversion rule of “value” corresponding to the granularity level is determined for each DB item. This is because, as illustrated in FIG. 4, the expression vocabulary or conversion rule of “value” corresponding to each granularity level is hierarchically defined in advance from the coarsest level D to the finest level A. There is nothing else.

  An example of information recorded in the database 30a is shown in FIG. As shown in FIG. 7, information of one record is recorded in the database 30 a according to items of recording time, product ID, product location, inventory quantity, purchase source (product supply source), and delivery destination. This one record usually corresponds to data when the reader reads the RFID tag once. Therefore, when the reader reads a plurality of tags at a time, a plurality of product IDs, which are recorded contents of the read tags, are recorded in the item of product ID. Further, in this case, the number of cases when the content fee aggregation means 27 calculates as the information provision fee is counted not as one case but as the number of product tags. The merchandise location is recorded in a hierarchical structure as shown in FIG. The databases 30a to 30c are independent from each other, and the databases 30b and 30c may be different from the structures shown in FIGS.

  FIG. 4 is a diagram showing a hierarchical structure (used vocabulary and conversion rules when displaying at each granularity level) of the item “product location”. The item “product location” has four levels of granularity from level A to level D. For example, when the value of the item “product location” is displayed at level A, “storage area a”, “storage area b”, etc. Displayed by value. In level B, the value of the item “product location” is displayed as “building / facility a”, “building / facility b”, and the like. That is, a set of values (vocabulary) that can be taken at each granularity level is defined in advance. In addition, the value displayed in any one of “Storage Area A”, “Storage Area B”, and “Storage Area C” at Level A should be displayed at Level B with the granularity level raised by one layer. Converted to “building / facility a”. That is, “building / facility a” is a replacement vocabulary for “storage area a”, “storage area b”, and “storage area c”. The hierarchical structure shown in FIG. 4 shows what values of lower level values are replaced at higher levels, that is, conversion rules.

  In order to reduce the information granularity, an operation load of data processing by the search mediation system 20 is required. Originally, in order to protect the confidentiality of information and economic value due to personal circumstances, each database should perform conversion processing on its own, and the search mediating system 20 is acting as a proxy for processing, and the cost for this granularity reduction processing It is reasonable that the database provider who provides the information bears the burden. For this reason, the granularity reduction processing cost is accumulated in the content fee aggregation means 27 for each vocabulary process or as a comprehensive process regardless of the number of processes or the number of processes indiscriminately. The information granularity reduction processing cost accumulated by the contents fee aggregation means as a periodic aggregation such as every time the search and response is completed or monthly etc. is also distributed to each database founder for the information providing consideration compensation accumulated by the same means It is sent to the billing / distribution means 28 in a form offset from the amount, and is recorded in association with the identification information of the information provider by the function of the means 28. By being settled by electronic or conventional commercial transaction means based on this record, each of the databases 30a-c can provide the information granularity for each item of information provided, the reduction processing cost, and the compensation as the sum of the number of items. Can receive distribution.

  In the storage area managed by the provision condition storage unit 22, the class definition table, the class correspondence table for each searcher category, and the information provision unit price table are recorded for the provision conditions. In this embodiment, the provision conditions are determined by the class definition table and the class correspondence table for each searcher category. FIG. 5 shows an example of a class definition table, FIG. 6 shows an example of a class correspondence table for each searcher category, and FIG. 9 shows an example of an information provision unit price table. In the class definition table, the level of disclosure of each item of information held in the database is set for each class. A class is a set of disclosure granularity levels when the disclosure granularity level for each item in the database is defined for all items. In the example of FIG. 5, class 1, class 2,... May be considered as names given to various sets of such disclosure granularity levels. That is, a set of disclosure granularity levels is specified by class 1, class 2,. This class definition table allows the database founder to easily set the disclosure granularity level of each item without setting each item individually when setting how much information is disclosed. .

When these searchers using this mechanism and the database share a common data exchange format standard, the format of the original original record and the provided data after the conversion process may not match due to the information granularity processing. there is a possibility. Alternatively, the database may have data in a format different from the common format. In this case, the search result providing means 26 can also create data that has been changed to a format different from the notation format of the original record and provide it to the searcher.

  In the example of FIG. 5, class 1 is the strictest, and the content becomes more gradual as the class number increases. Class 1 cannot disclose the existence of a database, nor can it disclose the type of business of the person who established the database. In the case of class 1, since the existence of the database cannot be disclosed, the items of information recorded in the database cannot be disclosed. Class 2 can disclose the existence of a database, but cannot disclose the type of business of the founder, and the inventory quantity and product location are disclosed at level D. As for levels, level A provides the most detailed information, and as levels B, C, and D, rough information is provided. Accordingly, Class 2 provides information in a very vague manner with respect to both the number of stocks and the location of goods. From Class 3 onwards, both the existence of the database and the type of business of the founder can be made public, and each item will be disclosed at a more detailed level as the class number increases with regard to inventory quantity and product location. I understand that.

  Furthermore, information provision unit prices corresponding to the granularity are set for these items. In general, the content of information items provided at a finer granularity is more useful in terms of accuracy and precision of information, and has a higher economic value as a business secret. The price can be set higher than the price, but a flat price can be arbitrarily set according to the intention of the provider. FIG. 9 is an example of the information provision unit price table of the database 30a. For example, the item: product ID is set at 100 yen per case when provided at level A (recorded contents as it is), but is set at 10 yen per item when received at level c (product classification). ing.

  FIG. 6 shows an example of a class correspondence table by searcher category. The searcher category is a category for identifying a searcher determined by the database operator for the convenience of the database operator. The searcher category is usually determined by multiplying a category arbitrarily defined by the database founder based on the searcher attribute information registered as searcher information, with two combinations of whether the searcher is an identity disclosure searcher or not. . “Identity” in an identity non-disclosure searcher or an identity disclosure searcher means information sufficient to specify the searcher, and in this embodiment is a searcher name. The class correspondence table for each searcher category shown in FIG. 6 is for one database, and the same one is set for each database. The setting of the class can be arbitrarily set by the founder, but normally, as shown in FIG. 6, it is strict for non-disclosure searchers. It is also possible to specify a searcher name directly as a category and set a class.

  By determining the category, the disclosure granularity level for each item which is a combination of the disclosure restrictions in FIG. 5 is determined.

  FIG. 17 shows a monitoring key table. This is because when the search mediation system 20 receives a monitoring request from a monitoring requester, the monitoring key storage unit 18 to which the monitoring key included in the monitoring request is passed from the request receiving unit 23 is registered in the storage area managed by the monitoring key storage unit 20. This is a monitoring key table 170 to be used. One line in FIG. 17, that is, (monitoring key, monitoring type flag (recall monitoring, unauthorized issue, counterfeit distribution monitoring)) corresponds to the contents of one monitoring request. The monitoring key has a format of one identifier number, and means monitoring of an identifier number corresponding to the identifier by the monitoring type flag, or monitoring of another identifier number related to the number. The identifier to be monitored determined by the monitoring key and the monitoring type flag is called a monitoring target identifier and is distinguished from the monitoring key. The monitoring key is composed of three parts (manufacturer code), (product type code), and (solid number), and is displayed as 36987-12364-956814, for example, connected by a hyphen. The upper digits of (Manufacturer code)-(Product code) can be made to match the current JAN code.

Next, the monitoring type flag will be described. The monitoring request is composed of (monitoring key) + (monitoring type flag), and the monitoring type flag indicates what kind of monitoring is requested and the type of monitoring. There are three types of monitoring options: (1) recall monitoring, (2) unauthorized issue monitoring, and (3) fake distribution monitoring. In the following description, the monitoring target identifier may be expressed as “observed”. This is because the search mediation system 20 makes a search request and obtains a search result for each database from the search result data. Means that the record of the monitoring target identifier is included.
(1) When the recall monitoring flag is set, when an identifier number matching the monitoring key number is observed in the search result data, the location information of the identifier is reported to the monitoring requester. (Monitoring target identifier = monitoring key number)
(2) When the unauthorized issue monitoring flag is set, when the search result data that matches the monitoring key number and (manufacturer code)-(product code) is observed, the identifier is assigned to all of them. Report the number and location to the monitoring requester. (It is also possible to use a function that reports only those items for which normal issuance records cannot be confirmed, but not “all of them”, but this will be described in the section of “Embodiment 3” and “Embodiment 4” below.) (Monitoring identifier = all identifiers whose monitoring key number matches the manufacturer code and product type code)
(3) When the counterfeit distribution option is set, the movement history is recorded whenever an identifier corresponding to the monitoring key number is observed, and a new observation record is extracted for the identifier of that number. It is determined whether the movement is consistent with the movement records accumulated so far, and if it can be determined that the movement is suspicious, that fact is reported to the monitoring client. (Monitoring target identifier = monitoring key number)

  Users of this system other than searchers and information providers (identifier issuers and monitoring requesters who do not use this system as searchers) are required to use the system (information required for user authentication, provision (Information sending address, distribution / billing amount notification address, etc.) are registered on the storage device managed by the usage information storage means 82 in association with the user ID assigned by the system. Stored in a certain area.

(Processing operation)
Next, the processing operation of the system shown in FIG. 1 will be described. First, as a preparation stage, the search mediation system 20 accepts and registers various setting information from a monitoring requester, an identifier issuer, a searcher, and an information provider (database creator). FIG. 14 is a schematic flowchart at the time of registration processing of the present invention. The monitoring requester, the searcher, and the information provider each set necessary information in the search mediation system 20. The searcher registers the searcher name, type of business, location, searcher condition disclosure information, demand granularity, etc., which are information necessary for registration as a searcher. These are registered in the first searcher information storage table 810 and the second searcher information storage table 210 (S20). The information provider registers the provision conditions of the database in addition to the information necessary for registration as the information provider (S30).
The identifier issuer performs a registration procedure as an identifier issuer. The monitoring client performs a registration procedure as a monitoring client (S10). Further, a monitoring request is sent to the search mediation system 20 as needed (S12). The contents of the monitoring request are registered in the monitoring key table 170 in the format shown in FIG.

  FIG. 13 is a flowchart for schematically explaining the search operation of the search mediation system 20. The subsequent operation flow will be described with reference to FIG. A user registered as a searcher in the search mediation system 20 accesses the search mediation system 20 from the searcher terminal 10 and transmits a search request (FIG. 13, S22). At this time, when the request receiving means 23 checks the request contents and confirms that the request is a search request, the request receiving means 23 refers to the contents registered by the first searcher information storage means 81 to authenticate the searcher, and is registered in advance. Identify which searcher you are. This may be performed, for example, by registering a password in the first searcher information storage table 810 and requesting the searcher ID and password from the accessing user.

  When the searcher ID is specified, the request reception unit 23 leaves the subsequent processing to the search request unit 24. The search request means 24 refers to the second searcher information storage table 210 with the searcher ID and acquires the searcher attribute information. Here, the business type and searcher information disclosure conditions are acquired as attribute information. Subsequently, the searcher category-specific class setting table (FIG. 6) and the class definition table (FIG. 5), which are the tables recorded by the provision condition storage means 22 with the acquired attribute information, are referenced and disclosed to the searcher. Get possible database addresses. For example, in the examples of FIGS. 5 and 6, for the industry non-disclosure searcher, since it corresponds to the class 1, the existence of the database cannot be disclosed, and therefore no address is acquired. In the examples of FIGS. 5 and 6, in other cases, the database address is acquired. In this way, the search request unit 24 acquires the address of the database that can be disclosed to the accepted searcher.

  Subsequently, the search request unit 24 requests the search for all databases from which addresses have been acquired so as to search the contents according to the search request received from the searcher terminal 10 (FIG. 13, S710). Therefore, when the searcher's attribute does not meet the provision condition of the database (that is, when the searcher cannot make it public), the address for the database is not acquired, and thus the search request is not made. As a result, useless search processing and invalid traffic on the way are suppressed in advance in order to obtain a search result that is determined in advance to be invalidated and discarded in the search mediation system 20. When all the addresses of the databases 30a to 30c have been acquired, a search request is transmitted to the database 30a, the database 30b, and the database 30c.

  If the data sharing / exchange method is standardized and all of the databases 30a to 30c requested to be searched conform to this, each database 30a to 30c is searched with the same content in this common format. Is requested. On the other hand, for a database that does not conform to this standard method, it is entrusted after converting it to a communication procedure and search expression format that can be communicated with the database. For this, use a conversion comparison table designed by acquiring the specifications of the database in advance, or apply transformation rules based on XSLT (XML Stylesheet Language Transformations).

  In each of the databases 30a to 30c, when a search request is received, the search request is received after authenticating that the request is from the search mediation system 20 (S32 in FIG. 13). Each database searches its own database according to the received request contents, and transmits each search result to the search mediation system 20 (S34 in FIG. 13). The search result returned at this time may include confidential business information that needs to be restricted from being disclosed depending on the searcher. It is possible to realize the process of recognizing the actual searcher in the reply and omitting the contents to be concealed by referring to the business relationship on the side of the answering databases 30a to 30c. The database system developed for in-house use needs to be modified to provide an unexpected external information management function, and the information management processing load causes pressure on the original application. May occur or you may be forced to increase your capacity in anticipation of it. In the present invention, since the search mediation system 20 performs public content extraction based on the provision conditions, it is not necessary to bear this confidential processing load on the databases 30a to 30c side.

  In the search mediation system 20, the search request unit 24 acquires the search results transmitted from the databases 30a to 30c (S720 in FIG. 13). In practice, when the search intermediary system 20 selects information providers that can accept the search request of the searcher and makes a search request to all of them in S710, the search intermediary system 20 receives a search request from the searcher for later processing. A unique search identifier is generated for each search request and stored in the storage means in association with the searcher's identification information, and the search request is made to the information provider with this search identifier. The information provider side receives the search formula (S32), searches the database, adds the search identifier to the result, and returns it to the search mediation system 20 (S34).

  The search results returned from all the databases 30a to 30c requested to be searched can be considered logically as a group of search results for one search request, if the search identifier is common. Therefore, this is referred to as “aggregated search result (for one search request)”. Since the aggregated search result is a collection of raw data searched and extracted from each database, the identifier information is specified up to the individual number. However, when referring to “aggregated search results” in the following description, it does not necessarily mean that the search results obtained from each database are physically aggregated.

  Next, for the “aggregated search results”, a granularity process (FIG. 13, S730) according to the provision conditions of the information provider and a monitoring report creation process (FIG. 13, S726) are performed in parallel. First, the granularity processing according to the provision conditions of the information provider will be described.

  The information granularity processing means 17 includes searcher information stored by the second searcher information storage means 21, provision conditions stored by the provision condition storage means 22, that is, a class setting table (FIG. 6) for each searcher category, The search result to be provided is extracted with reference to the class definition table (FIG. 5). For example, when the searcher ID of this search is A001, the information granularity processing means 17 refers to the second searcher information storage means 21 and “industrial industry“ drug store chain ”and the searcher information disclosure condition“ pharmaceutical industry ” "Only business type is disclosed." Then, the information granularity processing means 17 refers to the provision conditions, that is, the class setting table by searcher category (FIG. 6) and the class definition table (FIG. 5) with the acquired information.

  Here, processing of search result data acquired from the database 30a will be described. Since the searcher A001 is “disclosure of only the business type to the pharmaceutical industry”, the information granularity processing means 17 confirms the business type of the founder of the database 30a. Assuming that the founder of the database 30a is the pharmaceutical industry, the searcher information of the searcher A001 is “disclose only industry” for the database 30a. Then, the information granularity processing means 17 refers to the class correspondence table by searcher category (FIG. 6) for the non-identity searcher and the industry “drug store chain”, and acquires “class 4”. Furthermore, with reference to the class definition table (FIG. 5) with this “class 4”, “publicly available” in the presence of the database, “publicly available” in the establishment industry, product location “level C”, inventory quantity “level C”, The product ID “level B” is acquired.

The information granularity processing means 17 refers to the hierarchical structure information of the granularity processing corresponding to FIG. 4 for each item of the record for the search result data acquired from the database 30a, and applies the granularity level to the data. Convert to
The information granularity processing means 17 performs a class correspondence table for each searcher category (FIG. 6) registered in the search mediation system 20 as a provision condition by the database every time a search result from the database 30x is obtained. (FIG. 5), search result data subjected to necessary granularity processing with reference to the hierarchical structure information of the granularity processing of each item (information indicating the hierarchical structure corresponding to FIG. 4 for each item).

  Next, the monitoring report creation process (S726) will be described. When a search request for each database is issued, the monitoring report creating means 19 creates a monitoring report corresponding to the monitoring type option of each monitoring request by referring to the monitoring key table 170 with respect to the search result. As an example of the monitoring report, text information as shown in FIG. 18 may be created. In the example of FIG. 18, one monitoring report (181, 182, 183, etc., which is one row in the table of FIG. 18) includes a report number, report creation time, target monitoring key, monitoring type, observation location, observation time, and report content. Consists of. The observation location is information specifying the location where the corresponding identifier to be reported was observed (the location where the observed identifier utilization system or database exists). The observation time is the time when the observed identifier is registered in the database. The report contents vary depending on the type of monitoring. In the case of recall monitoring, it is a set of the observation location ID of the observation target identifier and the same observation time. In the case of fraudulent issuance monitoring, it is a list of information in which the lower digit (individual number) of the number whose upper digit matches the monitoring key number, the observation location ID of the individual number, and the observation time as one set. In the case of counterfeit distribution monitoring, the text is “suspected to contain counterfeit identifier”, or a sign or flag information meaning this.

(1) Recall monitoring and (2) Unauthorized issuance monitoring can be realized by describing a program that functions as monitoring report creating means 19 that creates a monitoring report of the monitoring type when interpreted and executed by a computer. .
The monitoring report creation means 19 refers to the monitoring key table 170 and acquires all the monitoring keys and their monitoring type flags. A monitoring target identifier is determined for each monitoring key. Then, it is examined from the aggregated search results whether there is a thing corresponding to the monitoring target identifier. When there is a monitoring target identifier and the monitoring type is recall monitoring, the report content is (observation place ID, observation time) for one target monitoring key as shown in the second row 181 of FIG. A good monitoring report. The observation place ID and the observation time are included in the search result data.

  If there is something that corresponds to the monitoring target identifier and the monitoring type is unauthorized issue monitoring, a set of (observation place ID, observation time, individual number) of that data is assigned to the monitoring key (manufacturer code + product type). Add to the end of the list of reports prepared for the code. When all the search results have been checked, a monitoring report as shown in the third row 182 of FIG. 18 is created. In 182, the report content is a list of data with a set of (observation place ID, observation time, individual number).

  (3) If there is a monitoring target identifier and the monitoring type is counterfeit distribution monitoring, a monitoring report for counterfeit distribution monitoring must be created. For fake distribution monitoring, the program functioning as the monitoring report creation means 19 sends a possible travel time request including specific information on two points on the earth to the server 70 of the travel time calculation service organization as shown in FIG. It must contain instructions that issue and accept the response to control the computer to determine whether it is a normal move or an incorrect (false) move. This will be described below.

  FIG. 11 is a diagram showing (3) a monitoring object identifier movement history table G10 and two new detection records G20 and G30 used in the case of counterfeit distribution monitoring. It is a table created on the storage device of the search mediation server 20 for the monitoring target identifier for which the fake distribution flag is set. For each identifier for which a fake distribution flag is set, for one record in which it was detected (observation time G02, recording location ID G03, corresponding location master record G04 (address display etc.), latitude and longitude G05, possible movement Time G06, actual travel time G07, post-recording result G08, and determination result G09) are recorded as one record in one row of the table.

  In FIG. 11, four movement history records are stored as G10 for the identifier numbers 36987-12364-956814 and 36987-12364-958675, respectively, as registered movement records. This is because, in order to correctly calculate the time required, it is necessary to keep a certain number of records for one identifier number as recently as possible. The observation time G02 indicates the time when each detection record is recorded in the database 30x at each place. The actual travel time G07 is the same as the other record that has the closest time (most recent time) in the observation time before or after the observation time of the target record (target row). It is a numerical value that expresses the time difference in hours and minutes. On the other hand, the possible travel time G06 is also the shortest when traveling using a suitable means of transportation between the recording point of one record of interest and another recording point having the latest observation time. It is a numerical value that represents the required time. This term is obtained by transmitting the latitude and longitude information of the two observation records to the server 70 of the travel time calculation service organization and returning the information. G08 is the post-recording result. It represents the situation when the identifier was recorded, or the state placed immediately after the identifier was recorded. This value includes “shipped”, “transportation storage”, “transshipment completion”, “store display”, “sales elimination”, and the like.

There are two types of determination as to whether or not the observation record in the case of counterfeit distribution monitoring is suspected to be counterfeit: determination based on travel time and determination based on post-record results.
In the determination based on the travel time, the actual travel time G07 cannot be less than the possible travel time G06 in the normal travel. Therefore, if G07> = G06, it is determined that the travel is normal, and the determination result G09 indicates “Normal” will be recorded. Otherwise, it is very likely that an item with one identifier number was present at two different locations on the earth at the same time, either one (or both) may be a fake It is determined that the property is high. In this case, “abnormal” is set in the determination G09 column.

  In the determination based on the post-recording result, it is determined whether the transition of the post-recording result is fake based on whether the time sequence is consistent or not by comparing the G08 value before and after the observation time for the same identifier. To do. This is because it is possible to determine that at least one of the articles having the same identifier number is “fake” after being “sales erased” and then “fake”.

To explain with the sample data of FIG. 11, it is assumed that a new detection record G20 is newly confirmed for the identifier number 36987-12364-956814. Since the recording time is 2006-03-27T18: 05Z and the recording location is Kobe, the first line of the same identification number of G10 which is the record with 2006-03-26T03: 28Z which is the time immediately before this time Record (recording place London) and the record of the second line (recording place Rotterdam), which has a record immediately after this time, 2006-03-28T05: 36Z, and the newly detected record G20 Become. The actual travel time from London to Kobe is 38:17, and the possible travel time is 15:00, so it is normal with G06 <G07. In addition, G08 “shipped” in London and “customs clearance” in Kobe, which are consistent, this sets “normal” in the result alignment column of G20. Since the result matching is “normal” and the movement time is also normal, “normal” is set in the determination column of G20.
Similarly, from the record of Kobe → Rotterdam, the ex-post result is “customs clearance” → “transport storage”, but there is no contradiction, but since the travel time is 16:00, the actual travel time is 11:31. “Abnormal” is set in the determination column.

  The new record G03 with the identifier number 958675 is (recording time: 2006-05-01T12: 36Z, recording place: Naples, post-recording result: arrival display), but the record immediately before the registered movement record G10. Then (recording time: 2006-04-30T16: 20Z, recording place: Hanover, post-recording result: sales erasure) After the sales erasure, it is in stock, so it does not fit. Therefore, abnormality is set in both the result matching and determination columns.

Commercial services already exist as travel time calculation service organizations. The shortest travel time (possible travel time) can be obtained by requesting transmission of latitude / longitude information at two points in a predetermined format to the URL of a server disclosed by a commercial service.
12A and 12B are flowcharts summarizing the processing of the monitoring report means 17 when the fake monitoring flag is set. If there is a record of an identifier number that matches the monitoring key for which the fake monitoring flag is specified in the search result, first record that record (recording time, recording location ID, latitude / longitude, post-recording result). An entry is made in the movement history table G10 of that identifier number (S601). The counterfeit distribution determination process shown in FIG. 12B is executed at the stage where the entry into the movement history table is completed for all of the aggregated search results corresponding to the single search request from the searcher.

  First, the records in the movement history table are sorted by the recording time G02 (S603). Regarding the movement history table after sorting, since the recording before and after the new recording entered in S601 is the recording immediately before and after, the recording location information and the recording result after recording are read from the corresponding row of the table G10 ( S605). In this way, the combination of the two moving two points of (previous recording location information, new recording location information) and (new recording location information, immediately following recording location information) is specified. Each of the combinations is inquired to the server 70 to obtain the possible travel time for each movement (S607). In some cases, the new recording is the latest recording time, or the new recording is the oldest recording time. Therefore, there may be only one combination of the two moving points. Based on the above results, it is determined whether there is a contradiction in the transition of normal movement / impossible movement or post-recording result as described above (S611). As a result of the determination, if it is recognized that there is a contradiction in the impossible movement or the transition of the post-recording result, one monitoring report as shown at 183 in FIG. 18 is created (S613). The processes from S605 to S613 are repeated until all the new records entered in S601 are completed (S615).

  The monitoring report created in S613 will be notified to the monitoring requester by the monitoring report providing means 29 later. This notification may be made by automatically sending an e-mail or the like by specifying the notification destination by referring to the registration data of the identifier issuer and database creator by using the manufacturer code of the identifier number and the recording location IDG03 as a clue. . However, S613 can also be operated manually.

The process for creating the S726 monitoring report is completed in FIG.
From here onward, one united search result is advanced in that unit.

  Since one aggregated search result is obtained, the amount charged to the searcher and the amount distributed to the information provider can be calculated based on the data amount of the search result. Further, since the monitoring report to be reported to the monitoring requester has been created, if the fee per monitoring report is determined, the amount charged to the monitoring requester can be calculated accordingly (FIG. 13). , S750). A monitoring report is transmitted to the monitoring requester and a charge amount is notified (FIG. 13, S759). Data provision to the searcher, billing and billing notice, and distribution notice to the information provider are performed (S760). The searcher and the monitoring requester receive the provided data and the billing notification (S24). The information provider receives a distribution notice (S36).

(Summary of Embodiment 1)
According to the search mediation system 20 according to the first embodiment described in detail so far, if the monitoring requester transmits a monitoring request request including the monitoring key and the monitoring type flag, then the search mediator system from the searcher. Each time a search request is issued to 20, a monitoring report based on the search result can be received. Of course, if the monitoring requester is also registered as a searcher, a monitoring report can be obtained immediately when necessary by making a search request after requesting the monitoring request. Actually, it is needless to say that a request message (request) such as a monitoring cancellation request needs to be defined in the same manner.
According to the search mediation system 20, a monitoring client who wants to perform recall monitoring, unauthorized issue monitoring, and counterfeit distribution monitoring requests a search as a searcher himself or whenever a searcher unrelated to himself requests a search. The monitoring report desired by the monitoring client can be obtained.

  In the description of the search mediation system 20 according to the first embodiment, there has been described a system in which there are three types of monitoring types, that is, recall monitoring, unauthorized issue monitoring, and counterfeit distribution monitoring, and a monitoring report of each monitoring type can be provided. It is possible to construct a system in which the means 17 does not correspond to all of these, but only one or two of them, for example a system that only provides monitoring reports for recall monitoring. Even in such a case, a corresponding monitoring request can be provided as a searcher by himself or every time a searcher unrelated to himself requests a search. The effect which is not in the past can be produced.

  In addition, as a function for monitoring fake distribution, it has been explained that the determination of whether or not it is a fake is based on two determinations: a determination based on travel time and a determination based on post-recording results. It is also possible to provide a counterfeit distribution monitoring function. In practice, it is desirable that the monitoring method can be selected according to the request of the monitoring client.

  In any case, the most characteristic feature of the present invention is that, in particular, when any of the databases 30x has restrictions such as coarsening the granularity of information provided by the name of the searcher or the type of industry, the searcher himself If the identifier issuer that falls under this restriction target, there is a possibility that the desired monitoring may be hindered, but according to the function provided in the search mediation system 20 according to the first embodiment, by the appropriate other person It is expected that necessary monitoring report information can be obtained from the search result from each database 30x obtained by the search request. That is, the monitoring requester can obtain necessary monitoring report information without becoming a party of data exchange. This has the prominent effect that manufacturers can voluntarily investigate the location of accidental products and the presence of counterfeit products by paying appropriate survey costs before they become a social disturbance. Play.

<< Embodiment 2 >>
Next, a second embodiment of the present invention will be described. In the second embodiment, the information granularity conversion processing of search data obtained from each database performed mainly by the information granularity processing means 17 from the search mediation system 20 of the first embodiment is omitted. FIG. 10 is a functional block configuration diagram of the search mediation system 20a according to the second embodiment. The search mediation system 20 according to the first embodiment is configured by excluding the second searcher information storage unit 21, the provision condition storage unit 22, and the information granularity processing unit 17. The other configuration is the same as that of the search mediation system 20 according to the first embodiment.

  The processing operation of the search mediation system 20a is different from the search mediation system 20 as follows. First, if the searcher registers information to be recorded in the first searcher information in S20 of FIG. 14, registration of the information to be recorded in the second searcher information may be omitted. Further, in the step of S30 in the figure, the information provider only needs to request registration for information necessary for registration as its own information provider, and it is not necessary to register the provision conditions of the database. Then, the search result providing means 26 aggregates response data having the same search identifier, forms search result data, and transmits it to the searcher terminal 10. The processing operation of the search mediation system 20a according to the second embodiment has a form in which step S730 in FIG. 13 is omitted.

  Although it is a search mediation system that does not involve information granularity conversion processing, the monitoring report creation processing (step S726) is executed. In the case where the search mediation system 20a according to the second embodiment is used, a large number of monitoring requests are accumulated, and processing for normal search requests and processing for monitoring requests are performed by one server device (search mediation system 20). When there are a large number of sufficient monitoring requesters at the timing when the monitoring client himself / herself makes a search request, the search intermediary system 20a performs processing for the monitoring request of such a monitoring client. It is assumed that they are separated. This is because the granularity process (S730) is not necessary for such monitoring request of the monitoring requester.

  Also in the search mediation system 20a according to the second embodiment, the monitoring report creation means 17 does not support all of recall monitoring, unauthorized issue monitoring, and counterfeit distribution monitoring, but a system corresponding to only one or two of them, for example, It is possible to configure a system that provides monitoring reports only for unauthorized issue monitoring. Even in such a case, a searcher who searches for the corresponding monitoring request as a searcher himself / herself or who is unrelated to himself / herself is requested. Each time a search request is made, it is possible to provide an unprecedented effect that a monitoring report that can be handled can be provided.

<< Embodiment 3 >>
Next, a third embodiment of the present invention will be described. In the third embodiment, the unauthorized issue monitoring function of the search mediation system 20 (20a) of the first embodiment and the second embodiment is modified to a more preferable form. When a monitoring request for unauthorized issue monitoring is issued in the first or second embodiment, the search mediation system 20 (20a) matches the search key number with (maker code)-(product code) in the search result data. If any of these are observed, report the identifier number (only the individual number) and the location of the observation to the monitoring client. In the information to be reported, there is a mixture of identifiers of solid numbers that are actually issued (real) by identifier issuers and identifiers of fake numbers that should not have been issued (not exist) (fake) Conceivable. If the user who issued the monitoring request only needs to report on the latter identifier, it is sufficient to report only information on the identifier that should not exist in the monitoring report. If the monitoring request issuer is the issuer of the identifier of the monitoring key number, if the identifier issued by itself is recorded and managed as a database, information relating to the identifier issued by itself may be excluded from the entire monitoring report. Although it is possible, when such provision is not made or when the monitoring request issuer is not the issuer of the identifier of the monitoring key number, the search mediating system 20 checks whether the identifier does not exist and does not exist. It is more reasonable to report only information about the identifier to the monitoring request issuer.

  The third embodiment provides a search mediation system that provides such an unauthorized issue monitoring function. Hereinafter, only (data structure) and (processing operation related to unauthorized issue monitoring) that are different from the search mediation system 20 (20a) of the first or second embodiment will be described.

(data structure)
The monitoring key storage means 18 records and manages the issued solid number list 171 in addition to the monitoring key table 170. The issued solid number list 171 is a table for registering and managing a newly commissioned identifier number included in the issuance notification when the search mediation system 20 receives the (identifier) issuance notification issued by the identifier issuance system 40. FIG. 19 is a conceptual explanatory diagram of a portion related to the issued confirmation function.

(Processing related to unauthorized issue monitoring)
FIG. 20 is a schematic flowchart for explaining processing operations related to unauthorized issue monitoring according to the third embodiment. The difference from the unauthorized issue monitoring function of the first embodiment is that the identifier number recorded in the issued individual number list 171 is not included in the monitoring report even if it corresponds to the monitoring target identification number. . This will be described below with reference to the flowchart of FIG.

  The issue management means 42 of the identifier issuing system 40 “issues issue” to the search mediation system 20 as needed for the newly placed identifier number (S800). This issue notification is also one of various requests accepted by the search mediation system 20. When receiving the issuance notification, the search mediation system 20 operates the monitoring key storage unit 18 to register the newly commissioned identifier number included in the issuance notification in the issued solid number list 171 (S820).

  On the other hand, every time a search result from the database is obtained in response to a search request from the searcher, the monitoring report creating means 19 checks whether information related to the monitoring target identifier is included (S840, S842). With reference to the monitoring key table 180, when it is a monitoring target identifier and the unauthorized issue monitoring flag is set, further refer to the issued individual number list 171 and if it is not an issued individual number, The number, the observation location ID of the individual number, and information with the same observation time as one set are added to the end of the list of report contents of the monitoring report (corresponding to 182 in FIG. 8) for the monitoring key number (S842). ~ S846). If S842 to S846 have been inspected over all the search result data (Yes in S848), the monitoring report regarding the search result data is collected for each target monitoring key as data in the form as shown at 182 in FIG. (S850). (Of course, in the case where recall monitoring or counterfeit distribution monitoring is designated as the monitoring type, data in the form shown in 181 or 183 in FIG. 8 is created in parallel, but the flow in FIG. The monitoring report providing means notifies the monitoring requester of the monitoring report at an appropriate timing (S860). The monitoring requester receives the monitoring report and obtains information on the suspicious individual number (S810).

  By configuring the search mediation system 20 as described above, regarding the unauthorized issue monitoring function, it is related to an identifier that should not actually exist among the search key data and (maker code)-(product code) that match the search result data. It is possible to provide a function for reporting only information to the monitoring requester. However, this is not the only method for realizing the unauthorized issue monitoring function. Next, another embodiment, Embodiment 4, will be described.

<< Embodiment 4 >>
Hereinafter, only differences from the third embodiment will be described as the fourth embodiment.

(data structure)
FIG. 21 is a conceptual explanatory diagram of a portion related to the issued confirmation function of the fourth embodiment.
The monitoring key storage means 18 records and manages a monitoring key table 170 and a reference address list 172 for each identifier issuer. Registered in the reference address list 172 is a URL used when the search intermediary system 20 inquires of the identifier issuer whether the identifier number has been issued. Also, each identifier issuer prepares an identifier issuer's own issued solid number book 49 corresponding to the issued solid number book 171, and the newly commissioned identifier number is registered in this issued solid number book 49 at any time. deep. Then, it is necessary to prepare an inquiry response function capable of responding to the inquiry addressed to the inquiry destination address from the search mediation system 20 as to whether the number has been issued or not. This can be realized easily by those skilled in the art by installing well-known WWW server software on the server computer specified on the network by the URL of the inquiry destination, and will not be described in detail.

(Processing related to unauthorized issue monitoring)
FIG. 18 is a flowchart illustrating processing operations related to unauthorized issue monitoring according to the fourth embodiment. Although it is almost the same as FIG. 20, there are four different portions of S801, S803, S821, and S843. First, the issue management means 42 reports the identification number reference address to the search mediation system 20 (S801). The monitoring key storage means registers the identification number reference address in the reference address list 172 (S821). The monitoring report creating means 19 makes an inquiry to the inquiry destination URL corresponding to the corresponding manufacturer code recorded in the inquiry address list 172, instead of determining whether it is an issued number or not by referring to the issued individual number list 171. The determination is made by receiving the response result (S843, S803). The rest is the same as the flowchart of FIG.

  The network address pointed to by the inquiry URL can be selected from a reference to an internal database assembled in the issue management device and a database 30b to which the issue management device entrusts issue records. Any of the communication methods can use a standardized method for storing and retrieving other identifier handling records as they are, or can be realized by data communication as a specific or simplified code or flag. .

In addition to the third and fourth embodiments, a combination of these is also possible. That is, both the issued solid number list 171 and the reference address list 172 are prepared in the monitoring key storage means 19 so that the user can select which one to use depending on the circumstances of the identifier issuer. In such a configuration, when the monitoring report generating means verifies whether or not the issued individual number, for example, the inquiry address list 172 is first referred to using the manufacturer code as a key, and the inquiry address is recorded there. If there is no inquiry address in the inquiry address list 172, the issued individual number list 171 may be referred to. Naturally, there is also a method to make sure that the issued solid number list 171 is referred to in the reverse order first, and when there is no notification, the reference address list 172 is referred to and reconfirmed whether there is an undelivered issue record. is there.

1 is an overall configuration diagram of a first embodiment of a search mediation system according to the present invention. It is a figure which shows an example of the searcher information memorize | stored in the 1st, 2nd searcher information storage means. It is a figure which shows a granularity process rule table | surface. It is a figure which shows the hierarchical structure of the merchandise location which is one item of merchandise information. It is a figure which shows the class definition table memorize | stored in the provision condition memory | storage means. It is a figure which shows the class correspondence table classified by searcher category memorize | stored in the provision condition memory | storage means. It is a figure which shows an example of the information memorize | stored in the database 30a. It is an example of a monitoring report. It is an example of the information provision unit price table set to the database 30a. It is a functional block block diagram of the search mediation system 20a which concerns on 2nd Embodiment. It is a figure explaining the processing content of fake distribution monitoring. It is a movement record registration process flowchart in case the fake monitoring flag is set. It is an outline | summary flowchart at the time of the search of 1st Embodiment. It is an outline flowchart at the time of registration processing of a 1st embodiment. 3 is a functional configuration diagram of an identifier issuing system 40. FIG. 3 is a functional configuration diagram of an identifier utilization system 50. FIG. This is a monitoring key table 170. It is a flowchart explaining the processing operation regarding the unauthorized issue monitoring of the search mediation system which concerns on 4th Embodiment. It is a conceptual explanatory drawing of the part in connection with the issued confirmation function of the search mediation system concerning a 3rd embodiment. It is a flowchart explaining the processing operation regarding the unauthorized issue monitoring of the search mediation system concerning a 3rd embodiment. It is a conceptual explanatory drawing of the part in connection with the issued confirmation function of the search mediation system concerning a 4th embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Searcher (monitoring requester) terminal 17 ... Information granularity processing means 18 ... Monitoring key storage means 19 ... Monitoring report preparation means 20 ... Search mediation system 21 ... 2nd search Person information storage means 22 ... Provision condition storage means 23 ... Request reception means 24 ... Search request means 26 ... Search result provision means 27 ... Content fee aggregation means 28 ... Billing / distribution means 29 ... Monitoring report providing means 81 ... First searcher information storage means 82 ... User information storage means 70 ... Server device of travel time calculation service organization 29 ... Monitoring report providing means 30a- 30c ... Database 40 ... Identifier issuing system 44 ... Identifier carrier 49 ... Issued number list 50 ... Identifier use system 170 ... Monitoring key table 171 ... Issued number Number book 172 .. Reference address list

Claims (12)

A system that mediates search when searching a plurality of databases with different founders from a user terminal,
A request accepting means that accepts an externally defined request and causes each process according to the request;
Monitoring requester information storage means for recording information required for the monitoring requester authentication process;
A monitoring identifier storage means for storing the identifier number when the received request is a monitoring request notification including an identifier number as a key;
Search request means for making a search request to each database based on the search request from the search requester terminal and obtaining the result;
When there is a search result obtained from each of the databases that matches the identifier number recorded in the monitoring key information storage means, the identifier number and specific recording information relating to the identifier are extracted to obtain monitoring report data. First monitoring report creation means to create,
Search result providing means for providing the search result to the search requester terminal;
Monitoring report providing means for providing the monitoring report data to a monitoring requester;
A search mediation system comprising: In the search mediation system according to claim 1,
2. The monitoring report generating means according to claim 1, wherein the identifier number is a number composed of a combination of three types of a manufacturer code, a product type code, and a solid number, or a combination of any two types of portions. Instead of,
In the search results obtained from each database, if there is a record of an identifier number recorded in the monitoring key information storage means and an identification number common to the parts of the manufacturer code and the product code, the identifier number And a second monitoring report generating means for extracting specific record information relating to the identifier and generating monitoring report data for the monitoring requester. In the search mediation system according to claim 1,
2. The monitoring report generating means according to claim 1, wherein the identifier number is a number composed of a combination of three types of a manufacturer code, a product type code, and a solid number, or a combination of any two types of portions. Instead of,
In the search results obtained from the respective databases, there is a record of an identification number in which the identifier number recorded in the monitoring key information storage means and the part of the manufacturer code and the product code are common, and the identification number A search characterized by comprising third monitoring report creating means for extracting the identifier number and specific record information relating to the identifier and creating monitoring report data to the monitoring requester when there is no issue record Mediation system.   4. The specified record information relating to the identifier includes information for specifying a time and place of record creation in which the identifier information is recorded in the database. The search mediation system according to any one of the above. In the search mediation system according to claim 1, instead of the first monitoring report creating means according to claim 1,
A movement history storage means for managing recording of the movement history of an identifier for each identifier number as a collection of one record including recording time and information for specifying a recording location;
When there is a search result obtained from each database that matches the identifier number recorded in the monitoring key information storage means, information identifying the recording time and recording location is extracted for the recording of the corresponding identifier. The movement history update means registered in the movement record storage means as one record corresponding to the identification number, and the identifier newly added to the movement history storage means, the immediately preceding location specifying information, the presence immediately after that Obtain location identification information and / or one of the following: (previously existing location identifying information, information identifying the recording location of the added identifier), (information identifying the recording location of the added identifier, immediately existing location) A mobile two-point specifying means for specifying a combination of one set or two sets of mobile two-points of identification information),
A travel time calculation means for obtaining an actual travel time and a possible travel time of travel between two points from a combination of one or two pairs of travel two points identified by the travel two-point identification unit;
A fourth monitoring report creating means for judging whether or not the newly added identifier carrier is a fake based on the obtained actual moving time and the possible moving time, and creating monitoring report data to that effect when it can be judged as a fake;
The search mediation system according to claim 1, further comprising:   The travel time calculation means includes possible travel time acquisition means for obtaining possible travel time required to travel between the two points by requesting information specifying two different points on the earth from a predetermined address through the network. The search mediation system according to claim 5, wherein the search mediation system is provided. In the search mediation system according to claim 1, in place of the first monitoring report creating means according to claim 1,
A movement history storage means for managing recording of the movement history of the identifier for each identifier number as a collection of one record including a recording time and a state placed immediately after the identifier is recorded;
When there is a search result obtained from each database that matches the identifier number recorded in the monitoring key information storage means, the record of the corresponding identifier is placed immediately after the recording time and identifier are recorded. The history of the recorded information is recorded, and the record newly recorded in the movement record storage means as one record corresponding to the identification number and the identifier newly added to the movement history storage means are recorded before the recording time. About the state that was placed immediately after the identifier of the movement history record with the record was recorded, the state that was placed immediately after the identifier of the movement history record with the recording time after the recording time, and the newly added identifier Compare the status of the identifier immediately after it was recorded and whether or not a logical contradiction occurs, A fifth monitoring report creating means for determining whether there is a suspicion of a thing, and when it can be determined that there is a suspicion of fake,
The search mediation system according to claim 1, further comprising: In the system that mediates the search according to any one of claims 1 to 7,
Searcher information storage means for storing searcher information including information necessary for information granularity processing;
The provision condition storage means for describing the provision condition of each database as a rule for determining the granularity of information to be provided as a search result, and storing the rule,
Based on the searcher information and the provision conditions, a search result acquired by the search result acquisition unit is extracted from a search result that can be disclosed to the searcher, or converted into a value of an information granularity level that can be disclosed. Information granularity processing means as data to be provided to the user terminal,
Further comprising
The search mediation system, wherein the search result providing means provides data obtained as a result of processing by the information granularity means to a search requester terminal. The provision condition is expressed by all combinations of a searcher category determined by a searcher registration attribute and a searcher disclosure attribute and a corresponding granularity processing rule,
The granularity processing rule defines the number of levels of granularity for each item of the database and the conversion rule or replacement vocabulary applied when displaying the original value of the item at each granularity level at the granularity level. And
The information granularity processing means determines a searcher category of a searcher from the original data that is the acquired search result according to the provision condition, and applies a specific granularity processing rule according to the provision condition to determine each item of the search result. 9. The search intermediary system according to claim 8, wherein the search mediation level is converted into a display of processing result data. The search reception means extracts searcher information about a searcher who is a search request source from the searcher information storage means, refers to the provision condition storage means with the searcher information, and Identify databases that can be published,
The search mediation system according to claim 8, wherein the search request unit is configured to make a search request only for the identified database. In the search mediation system according to any one of claims 1 to 10,
further,
Calculate the information provision fee for the information provided to the search requester, the information provision fee or the monitoring implementation fee for the report data to the monitoring requester, the distribution amount to the database opener, the charge amount to the searcher, Content fee calculation means to calculate the amount charged to the monitoring client,
Charge / distribution means for creating and recording the charge / distribution amount calculated by the content charge aggregation means as a record associated with each identification information of the searcher, the monitoring requester, and the database opener;
A search mediation system comprising:   A software program for causing a computer to function as the search mediation system according to any one of claims 1 to 11.

Images