JP2011248753A - Personal information management system, personal information management method, personal information management type terminal, personal information management server and program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal information management type terminal that can prevent leakage of confidential information.SOLUTION: The personal information management type terminal comprises: a personal information dictionary matching function part that evaluates how many keywords registered in a personal information dictionary storage part are included in a file stored in a storage part, and that generates a retrieval result of the keyword and the file matching the retrieval; a personal identification evaluating function part that evaluates presence/absence of personal identification by combination of the keyword based on the retrieval result and that generates personal identification degree, given an evaluation value; a personal information price calculating function part that calculates a total amount of personal information stored in the personal information management type terminal by referring to a personal information price storage part based on the retrieval result and the personal identification degree; an asset management policy change function part that decides and allots asset management policy according to the total amount of the personal information by referring to an asset management policy storage part and that dynamically changes the asset management policy as for taking out the personal information management type terminal; and a personal information price output function part that displays the total amount of the personal information and the decided asset management policy on a display unit.

Description

  The present invention relates to a personal information management system, a personal information management method, a personal information management type terminal, a personal information management server, and a program thereof that prevent leakage of confidential information to be managed in a company.

  In recent years, many leaks of confidential information that should be managed in a company have occurred, and the company is being held responsible for protecting personal information, causing damage to the company. Under such circumstances, it is required to appropriately perform asset management of IT assets in the enterprise.

  In particular, information leakage caused by taking a notebook personal computer storing personal information (hereinafter referred to as “notebook PC”) out of the office and losing / stolen the notebook PC is still uncommon. There are many cases where companies are asked to take responsibility.

  Therefore, in order to prevent leakage of confidential information, there is a technique for checking the contents of information (electronic file) and knowing in advance how much danger there is when information is leaked (see, for example, Patent Document 1). ).

  In the technique of Patent Document 1, a personal information dictionary is prepared, whether or not a keyword in the dictionary is included in information (electronic file), and whether or not an individual can be specified from a hit keyword group is determined. And measure the level of confidentiality. Thereby, the comprehensive protection level of the information (electronic file) can be determined.

  In addition, as a “terminal take-out management system” using RFID, there is a technique for attaching a RFID tag to a take-out terminal such as a notebook PC and giving a warning when an attempt is made to take a terminal that violates the policy (for example, non-patent literature) 1).

JP 2007-323511 A

"RFID" terminal take-out management system ", NTT Comware Corporation, [online], [April 12, 2010 search], Internet <http://www.nttcom.co.jp/case /project/019_rfid_mobile/index.html>

  In the technique of Patent Document 1, the value of information stored in a notebook PC managed by the employee himself / herself is not known or / or conscious of the employee's low awareness and ignorance. Therefore, there is a risk that the consciousness when handling the notebook PC outside the company will be low, leading to loss / theft.

  In the technology of Non-Patent Document 1, with regard to asset management and take-out management based on the value of information stored in a notebook PC, current employees manually assign information value ranks with electronic labels, etc. However, asset management / take-out management is performed manually or automatically based on this, and a complete system has not been achieved. For this reason, when assigning the value of information, an employee may give a label with an incorrect value, and information leakage due to this may occur.

  In view of the above problems, an object of the present invention is to prevent leakage of confidential information to be managed in a company, a personal information management system, a personal information management method, a personal information management type terminal, a personal information management server, and these Is to provide a program.

  In the present invention, the technique disclosed in Patent Document 1 is further improved, personal information stored in the terminal is searched, and the number of pieces of information included and the value thereof are automatically calculated. From the calculated value, calculate the approximate amount of compensation that the company must pay in the event of information leakage, and display / call it in a way that is visible to the user. Take out management.

  Further, in the technology of Non-Patent Document 1, a policy for taking out requires manual application / approval. When changing a policy, it is necessary to apply / approve each time. The take-out policy is automatically controlled according to the value of the information stored in the terminal. This eliminates the need for manual application and approval.

  That is, the personal information management type terminal according to the first aspect of the present invention is a personal information management type terminal having a storage unit for storing personal information and having a function of self-management of the personal information, which is set in advance. A personal information dictionary storage unit that functions as a database for storing a personal information dictionary registered in advance for personal information using a search keyword as a search key, and the personal information dictionary according to the total amount of personal information in advance using the total amount of personal information as a search key An asset management policy storage unit that functions as a database for storing an asset management policy for taking out personal information management type terminals, a price of personal information according to a predetermined numerical value of personal identification, and a price of personal information according to the keyword And a keyword registered in the personal information dictionary stored in the personal information dictionary storage unit. A personal information dictionary matching function unit that evaluates how many files are contained in the file stored in the storage unit in the personal information management type terminal, generates a keyword and a corresponding file searched and matched as a search result, and A personal identification evaluation function unit that evaluates the presence or absence of individual identification from a combination of keywords registered in the personal information dictionary based on the search result, and generates an evaluation value by giving an evaluation value; Based on the search result and the degree of personal identification, the personal information price storage unit is referred to, a personal information price calculation function unit that calculates the total amount of personal information stored in the personal information management type terminal, Referring to the asset management policy storage unit, an asset management policy corresponding to the total amount of the personal information is determined and assigned, and asset management related to taking out the personal information management type terminal The asset management policy change function unit that dynamically changes the policy, the total amount of personal information calculated by the personal information price calculation function unit, and / or the asset management policy determined by the asset management policy change function unit are predetermined. And a personal information price output function unit to be displayed on the display device.

  The personal information management method according to the first aspect of the present invention is a personal information management method using a personal information management type terminal having a storage unit for storing personal information and having a function of self-managing the personal information, The personal information management type terminal uses a search keyword set in advance as a search key, searches a personal information dictionary storage unit that functions as a database for storing a personal information dictionary registered in advance for personal information, and searches the total amount of personal information The key is an asset management policy storage unit that functions as a database for storing an asset management policy for taking out the personal information management type terminal in advance according to the total amount of personal information, and a personal information corresponding to a predetermined personal identification value. A personal information price storage unit for storing the price and the price of the personal information corresponding to the keyword, a personal information dictionary matching function unit, A personal identification evaluation function unit, a personal information price calculation function unit, an asset management policy change function unit, and a personal information price output function unit. How many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal by the information dictionary matching function unit A search keyword that matches the keyword and the corresponding file is generated as a search result, and a combination of keywords registered in the personal information dictionary based on the search result by the personal identification evaluation function unit From the step of evaluating the presence / absence of individual identification, generating an evaluation value as a degree of individual identification, and the personal information price calculation function unit Calculating the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the retrieved result and the personal identification level, and changing the asset management policy The function unit refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and dynamically changes the asset management policy related to taking out the personal information management type terminal. A predetermined display device for displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy change function unit by the personal information price output function unit And a step of displaying on the screen.

  The personal information management type terminal program according to the first aspect of the present invention is a personal information management type terminal having a storage unit for storing personal information and having a function of self-management of the personal information, and is set in advance. A personal information dictionary storage unit that functions as a database for storing a personal information dictionary registered in advance for personal information using a search keyword as a search key and a total amount of personal information according to the total amount of personal information in advance An asset management policy storage unit that functions as a database for storing an asset management policy related to taking out the personal information management type terminal, a price of personal information according to a predetermined numerical value of personal identification, and personal information according to the keyword A computer configured as a personal information management type terminal comprising a personal information price storage unit for storing the price of Based on the results, from the combination of keywords registered in the personal information dictionary, evaluating the presence or absence of individual identifiability, giving an evaluation value and generating as a personal identification level, the generated search results and the Based on the degree of personal identification, referring to the personal information price storage unit, calculating the total amount of personal information stored in the personal information management type terminal, referring to the asset management policy storage unit, Determining and assigning an asset management policy in accordance with the total amount of personal information, dynamically changing the asset management policy for taking out the personal information management type terminal, and calculating the total amount of personal information and / or And a step for displaying the determined asset management policy on a predetermined display device.

  Furthermore, the personal information management system according to the second aspect of the present invention provides a personal information management type terminal provided with a storage unit for storing personal information in cooperation with a personal information management server to store the personal information as individual personal information management type. A personal information management system managed by an RFID system using an RFID attached to a terminal, wherein the personal information management server uses a search keyword set in advance as a search key to register a personal information in advance. A personal information dictionary storage unit that functions as a database for storing an information dictionary, a personal information price storage unit that stores a price of personal information according to a predetermined numerical value of personal identification, and a price of personal information according to the keyword And using the total amount of personal information as a search key, the asset management policy for taking out the personal information management type terminal according to the total amount of personal information in advance The personal information management type terminal is registered in the personal information dictionary stored in the personal information dictionary storage unit in communication with the personal information management server. Personal information dictionary matching that evaluates how many keywords are included in the file stored in the storage unit of the personal information management type terminal, and generates keywords and matching files as search results A personal identification evaluation function that evaluates the presence / absence of individual identifiability from a combination of keywords registered in the personal information dictionary based on the search result and generates an individual value as an evaluation value And the personal information price storage unit on the basis of the generated search result and the personal identification degree, and stored in the personal information management type terminal. A personal information price calculation function unit for calculating the total amount of the personal information, and the personal information management server refers to the asset management policy storage unit to determine an asset management policy corresponding to the total amount of the personal information. An asset management policy change function unit for determining and assigning, dynamically changing an asset management policy for taking out the personal information management type terminal, and sending the determined asset management policy to the RFID system; Type terminal displays a total amount of personal information calculated by the personal information price calculation function unit and / or a personal information price output function for displaying the asset management policy determined by the asset management policy change function unit on a predetermined display device It further has a section.

  Furthermore, a personal information management system according to a modification of the second aspect of the present invention is a personal information management system for managing a personal information management type terminal having a storage unit for storing personal information by a personal information management server, The personal information management server uses a search keyword set in advance as a search key, a personal information dictionary storage unit that functions as a database for storing a personal information dictionary registered in advance for personal information, and a search key for the total amount of personal information As an asset management policy storage unit that functions as a database for storing an asset management policy for taking out the personal information management type terminal in advance according to the total amount of personal information, and a price of personal information according to a predetermined personal identification value And a personal information price storage unit that stores a price of personal information corresponding to the keyword, and the personal information The physical type terminal communicates with the personal information management server, and the keyword registered in the personal information dictionary stored in the personal information dictionary storage unit is stored in the storage unit in the personal information management type terminal. It is registered in the personal information dictionary based on the search result, and a personal information dictionary matching function unit that evaluates how much is included in the file and generates a search result by matching the keyword and the corresponding file. From the combination of keywords, the presence / absence of individual identification is evaluated, an evaluation value is given and generated as a degree of personal identification, and the search result and the degree of personal identification are generated, A personal information price calculation function unit that refers to a personal information price storage unit and calculates the total amount of personal information stored in the personal information management type terminal; The management server refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and dynamically changes the asset management policy for taking out the personal information management type terminal. An asset management policy change function unit for sending the determined asset management policy to the personal information management type terminal, wherein the personal information management type terminal has a total amount of personal information calculated by the personal information price calculation function unit, And / or a personal information price output function unit for displaying the asset management policy determined by the asset management policy change function unit on a predetermined display device.

  Furthermore, the personal information management method according to the second aspect of the present invention is a personal information management method by a personal information management system for managing a personal information management type terminal having a storage unit for storing personal information by a personal information management server. The personal information management server includes a personal information dictionary storage unit functioning as a database for storing a personal information dictionary registered in advance with respect to personal information using a search keyword set in advance as a search key, and a predetermined personal identification degree The personal information price storage unit for storing the price of personal information according to the numerical value of the personal information and the price of personal information according to the keyword, the asset management policy change function unit, and the total amount of personal information as a search key Assets that function as a database for storing asset management policies related to taking out personal information management terminals according to the total amount of information Referring to the physical policy storage unit and the asset management policy storage unit, an asset management policy corresponding to the total amount of the personal information is determined and assigned, and the asset management policy related to taking out the personal information management type terminal is dynamically determined An asset management policy change function unit that changes and sends the determined asset management policy to the personal information management type terminal, the personal information management type terminal comprising: a personal information dictionary matching function unit; and a personal identification evaluation A function unit, a personal information price calculation function unit, and a personal information price output function unit, communicated with the personal information management server by the personal information dictionary matching function unit of the personal information management type terminal, The keyword registered in the personal information dictionary stored in the personal information dictionary storage unit is stored in the file stored in the storage unit in the personal information management type terminal. A step of generating a search result and a matching keyword and a corresponding file as a search result, and a personal identification management function unit of the personal information management type terminal based on the search result, From the combination of keywords registered in the personal information dictionary, the step of evaluating the presence or absence of individual identifiability, giving an evaluation value and generating the degree of personal identification, and the personal information price calculation function unit of the personal information management type terminal Calculating the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the generated search result and the degree of personal identification; The asset management policy change function unit of the information management server refers to the asset management policy storage unit and sets the asset management policy corresponding to the total amount of the personal information. Determined, assigned, and calculated by the personal information price calculation function unit by the step of dynamically changing the asset management policy for taking out the personal information management type terminal and the personal information price output function unit of the personal information management type terminal And displaying the total amount of the personal information and / or the asset management policy determined by the asset management policy changing function unit on a predetermined display device.

  Furthermore, the personal information management type terminal in the personal information management system according to the present invention includes a communication function unit that communicates with the personal information management server, and keywords registered in the personal information dictionary stored in the personal information dictionary storage unit. A personal information dictionary matching function unit that evaluates how much of the file stored in the storage unit in the personal information management type terminal is included, and generates a search result as a keyword and a matching keyword; Based on the search result, from the combination of keywords registered in the personal information dictionary, a personal identification evaluation function unit that evaluates the presence / absence of individual identification and gives an evaluation value as a degree of personal identification, and generation Based on the search result and the degree of personal identification, the personal information price storage unit is referred to and stored in the personal information management type terminal. A personal information price calculation function unit for calculating the total amount of personal information, a total amount of personal information calculated by the personal information price calculation function unit, and / or an asset management policy determined by the asset management policy change function unit And a personal information price output function unit to be displayed on the display device.

  Furthermore, the personal information management server in the personal information management system according to the present invention refers to a communication function unit that communicates with the personal information management type terminal and the asset management policy storage unit, and an asset corresponding to the total amount of the personal information. And an asset management policy changing function unit that dynamically determines and assigns a management policy and dynamically changes the asset management policy related to taking out the personal information management type terminal.

  Furthermore, a program for a personal information management terminal in the personal information management system according to the present invention is stored in the personal information dictionary storage unit in a step of communicating with the personal information management server in a computer configured as a personal information management terminal. Evaluate how many keywords registered in the personal information dictionary are included in the file stored in the storage unit of the personal information management type terminal, and search and find the matching keyword and the corresponding file. And, based on the search result, from the combination of keywords registered in the personal information dictionary, evaluating the presence or absence of individual identifiability, giving an evaluation value and generating as a personal identification level, Based on the generated search result and the degree of personal identification, the personal information price storage unit is referred to, and the personal information management type Calculating the total amount of personal information stored at the end, the total amount of personal information calculated by the personal information price calculation function unit, and / or the asset management policy determined by the asset management policy change function unit And a step of displaying on a predetermined display device.

  Further, the program of the personal information management server in the personal information management system according to the present invention refers to the step of communicating with the personal information management type terminal in the computer configured as the personal information management server, and the asset management policy storage unit. , Determining and assigning an asset management policy corresponding to the total amount of the personal information, and dynamically changing the asset management policy related to taking out the personal information management type terminal.

  According to the present invention, for example, even when an employee cannot recognize the value of information stored in a notebook PC, a specific amount can be displayed on the notebook PC, and the employee's awareness can be increased. It can be expected that employees will call attention when handling notebook PCs.

  Further, according to the present invention, for example, the value of the information stored in the notebook PC is automatically calculated, so that it is not necessary for the employee to manually give the value of the information stored in the notebook PC. For this reason, it becomes possible to avoid a situation in which it is possible to take out the notebook PC by giving an incorrect value label.

It is a block diagram of the terminal of Example 1 by this invention. It is an operation | movement flowchart of the terminal of Example 1 by this invention. It is a block diagram of the personal information management system of Example 1 by this invention. It is an operation | movement flowchart of the personal information management system of Example 1 by this invention.

  Hereinafter, a terminal, a method and a program thereof according to the first aspect of the present invention will be described as a first embodiment.

(Terminal of Example 1)
FIG. 1 is a block diagram of a terminal according to a first embodiment of the present invention. Hereinafter, the terminal 100 shown in FIG. 1 will be referred to as a “personal information management type terminal” for convenience of explanation. From the description of the personal information management type terminal 100, the method and the program thereof according to the present invention will also become clear.

  The personal information management type terminal 100 is configured, for example, as a notebook PC used by an employee in a company, and has a form in which all processing related to personal information management can be executed only by this terminal.

  The personal information management type terminal 100 includes a user I / F 10, a control unit 20, a storage unit 30, a personal information dictionary storage unit 40, a personal information price storage unit 50, and an asset management policy storage unit 60. The control unit 20 includes a personal information dictionary matching function unit 201, a personal identification evaluation function unit 202, a personal information price calculation function unit 203, an asset management policy change function unit 204, and a personal information price output function unit 205. Prepare. In addition, although each function of the control part 20 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the personal information management type terminal 100. The personal information management type terminal 100 can be configured as a computer, and a program describing processing contents for realizing each function of the control unit 20 is stored in the storage unit 30 of the computer, and the central processing of the computer is performed. This can be realized by reading and executing this program by a processing device (CPU).

  The user I / F 10 is a functional unit that constitutes a man-machine interface between the personal information management type terminal 100 and a user. For example, when the user (employee) of the personal information management type terminal 100 wants to know the value of the information stored in the notebook PC that constitutes the personal information management type terminal 100, the user uses the user I / F 10. By giving a predetermined control instruction, the control unit 20 that has received this control instruction executes each function of the control unit 20.

  The personal information dictionary storage unit 40 functions as a database that stores a personal information dictionary registered in advance with respect to personal information using a search keyword set in advance as a search key.

  The personal information price storage unit 50 is a dictionary of personal information managed by the company and its value. The personal information value (price) pair according to the numerical value of personal identification, the above keyword and personal Information value (price) pairs are stored.

  The asset management policy storage unit 60 functions as a database that stores in advance an asset management policy related to taking out the terminal corresponding to the total amount of personal information using the total amount of personal information as a search key. For example, the asset management policy storage unit 60 does not allow terminals that store personal information of 1 million yen or more in total to be taken out of the company, and terminals that store personal information of 10 million yen or more in total. Stores an asset management policy in which rules such as not permitting the server room to be taken out are determined in advance.

  In the personal information dictionary matching function unit 201, keywords registered in the personal information dictionary stored in the personal information dictionary storage unit 40 set in advance are stored in the storage unit 30 in the personal information management type terminal 100. It has a function of evaluating how much is included in the file and sending the hit keyword and the corresponding file to the personal identification evaluation function unit 202 and the personal information price calculation function unit 203 as a search result. Specifically, for example, if “Yamada Ichiro” is registered as data having the “name” attribute in the personal information dictionary, there is a file containing “Ichiro Yamada” by the personal information matching function unit 201. Extract this.

  Based on the search result obtained from the personal information dictionary matching function unit 201, the personal identification evaluation function unit 202 evaluates the presence / absence of individual identification from a combination of keywords registered in the personal information dictionary. A value is given and sent to the personal information price calculation function unit 203 as a degree of personal identification. Specifically, for example, when a combination of data having a “name” attribute and data having an “address” attribute appears in the result output from the personal information matching function unit 201, the personal identification degree is set to “ A rule such as “80%” is set in advance, and a pair of a keyword group and an identification degree that match these rules is sent to the personal information calculation function unit 203.

  The personal information price calculation function unit 203 refers to the personal information price storage unit 50 based on the search result obtained from the personal information dictionary matching function unit 201 and the personal identification degree obtained from the personal identification evaluation function unit 202. The total amount of personal information stored in the terminal is calculated. Specifically, if the numerical value of the personal identification level output by the personal identification evaluation function unit 202 is 80%, the personal information price storage unit 50 refers to this numerical value, and the data of the personal identification level 80% If it is 500 yen per case, this is added as a price, and the sum of the prices of the personal information stored in the terminal is obtained.

  The asset management policy change function unit 204 refers to the asset management policy storage unit 60 and determines an asset management policy corresponding to the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203. Then, allocation is performed as an asset management policy for taking out the terminal, and the asset management policy for taking out the terminal is dynamically changed by being stored in a predetermined area of the storage unit 30. Specifically, terminals that store personal information with a total amount of 1 million yen or more are not allowed to be taken outside the company, and terminals that store personal information with a total amount of 10 million yen or more are out of the server room. By pre-deciding rules such as disallowing take-out of personal information and comparing the rules with the sum of the prices of personal information calculated by the personal information price calculation function, the asset management policy regarding the take-out of the terminal is dynamically changed change.

  The personal information price output function unit 205 displays the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203 and / or the asset management policy determined by the asset management policy change function unit 204. indicate.

  Hereinafter, the operation of the personal information management type terminal 100 of the first embodiment will be described with reference to FIG.

  In the personal information management type terminal 100, the personal information dictionary matching function unit 201 uses a keyword registered in the personal information dictionary stored in the personal information dictionary storage unit 40 set in advance according to a control instruction from the outside. Is included in the file stored in the storage unit 30 in the personal information management type terminal 100, and the keyword matched by the search (that is, the hit keyword) and the corresponding file are used as a search result. Extract (step S1).

  Next, the personal information management type terminal 100 uses the combination of keywords registered in the personal information dictionary based on the search result obtained from the personal information dictionary matching function unit 201 by the personal identification evaluation function unit 202. Evaluate the presence / absence of individual identifiability, give an evaluation value and send it to the personal information price calculation function unit 203 as the degree of personal identification, and the personal information price calculation function unit 203 obtains a search obtained from the personal information dictionary matching function unit 201 Based on the result and the individual identification degree obtained from the individual identification evaluation function unit 202, the personal information price storage unit 50 is referred to calculate the total amount of personal information stored in the terminal (step S2).

  Next, in the personal information management type terminal 100, the asset management policy change function unit 204 determines an asset management policy according to the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203. Then, the allocation is performed as an asset management policy for taking out the terminal and stored in a predetermined area of the storage unit 30 to dynamically change the asset management policy for taking out the terminal (step S3).

  Next, the personal information management type terminal 100 uses the personal information price output function unit 205 to change the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203 and / or change the asset management policy. The asset management policy determined by the function unit 204 is displayed on the display device 100a (step S4).

  As a result, for example, even when an employee cannot recognize the value of information stored in a notebook PC, a specific amount can be displayed on the notebook PC. It can be expected to attract attention when handling notebook PCs.

  Hereinafter, a personal information management system, a personal information management method, a personal information management type terminal, a personal information management server, and these programs according to a second aspect of the present invention will be described as a second embodiment.

(Personal information management system of Example 2)
FIG. 3 is a block diagram of the personal information management system according to the second embodiment of the present invention. Hereinafter, from the description of the personal information management system according to the second embodiment shown in FIG. 3, the personal information management method, personal information management type terminal, personal information management server, and these programs according to the present invention will be clarified.

  In the personal information management system according to the second embodiment, a terminal used by an employee in a company is connected to a corporate local area network (LAN), and an RFID system using an RFID attached to each terminal (for example, a non-terminal). This is a form that is assumed to be managed by an IT resource management system as disclosed in Patent Document 2. The contents corresponding to the first embodiment will be described with the same reference numerals.

  The personal information management system according to the second embodiment includes a personal information management type terminal 100, a personal information management server 300, and an RFID system 500. The personal information management type terminal 100 according to the second embodiment includes a user I / F 10, a control unit 20, a storage unit 30, and a communication I / F 70. The control unit 20 includes a personal information dictionary matching function unit 201, A personal identification evaluation function unit 202, a personal information price calculation function unit 203, a personal information price output function unit 205, and a communication function unit 206 are provided. The personal information management server 300 includes a control unit 20a, a storage unit 30a, a personal information dictionary storage unit 40a, a personal information price storage unit 50a, and an asset management policy storage unit 60a. The control unit 20a has a communication function. Unit 206a and asset management policy change function unit 204a.

  User I / F 10, control unit 20, storage unit 30, personal information dictionary matching function unit 201, personal identification evaluation function unit 202, personal information price calculation function unit 203, and personal information management type terminal 100 of Example 2 The personal information price output function unit 205 is the same as that in the first embodiment. Therefore, the personal information management type terminal 100 can be configured as a computer, and a program describing processing contents for realizing each function of the control unit 20 is stored in the storage unit 30 of the computer, This can be realized by reading and executing this program by a central processing unit (CPU).

  The communication I / F 70 in the personal information management type terminal 100 according to the second embodiment is an interface for communicating with the personal information management server 300 and the RFID system 500 through the corporate LAN.

  The communication function unit 206 in the personal information management type terminal 100 according to the second embodiment utilizes the personal information dictionary storage unit 40a and the personal information price storage unit 50a held in the personal information management server 300 through the corporate LAN. 1, the personal information dictionary matching function unit 201 and the personal identification evaluation function unit 202 are made to function, and the asset management policy change function unit 204 a and the asset management policy storage unit 60 a held in the personal information management server 300 are In order to function, it has a function of controlling communication with the personal information management server 300.

  The personal information dictionary storage unit 40a, the personal information price storage unit 50a, the asset management policy storage unit 60a, and the asset management policy change function unit 204a in the personal information management server 300 of the second example are stored in the personal information dictionary storage of the first example. Unit 40, personal information price storage unit 50, asset management policy storage unit 60, and asset management policy change function unit 204. Accordingly, the personal information management server 300 can be configured as a computer, and a program describing the processing contents for realizing each function of the control unit 20a is stored in the storage unit 30a of the computer, and the central portion of the computer is stored. This can be realized by reading out and executing this program by an arithmetic processing unit (CPU).

  However, the personal information price storage unit 50 according to the second embodiment is a dictionary of personal information managed by the company and its value, and is changed at each company, so that it is not the client side but the server side. It is assumed that it is centrally managed.

  Further, the asset management policy change function unit 204a determines an asset management policy according to the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203, together with information for identifying the terminal. The asset management policy is sent to an RFID system 500 (IT asset management system) using an RFID attached to each terminal. Thereby, the RFID system 500 can also manage a policy for the personal information management type terminal 100 managed by the RFID.

  The communication I / F 70a in the personal information management server 300 is an interface for communicating with the personal information management type terminal 100 and the RFID system 500 of the second embodiment through the corporate LAN.

  The communication function unit 206a in the personal information management server 300 uses the personal information dictionary storage unit 40a and the personal information price storage unit 50a held in the personal information management server 300 through the corporate LAN for the personal information management type terminal 100. As in the first embodiment, the personal information dictionary matching function unit 201 and the personal identification evaluation function unit 202 are allowed to function, and the asset management policy change function unit 204a and the asset management policy storage unit 60a are allowed to function. It has a function of controlling communication with the management type terminal 100 and the RFID system 500.

  The operation of the personal information management system according to the second embodiment will be described below with reference to FIG.

  First, the personal information management type terminal 100 communicates with the personal information management server 300 according to a control instruction from the outside by the communication function unit 206, and is held in the personal information management server 300 by the personal information dictionary matching function unit 201. The keyword registered in the personal information dictionary set in advance in the personal information dictionary storage unit 40a is acquired, and the keyword is stored in the file stored in the storage unit 30 in the personal information management type terminal 100. Only the keywords included in the search (i.e., the hit keyword) and the corresponding file are extracted as search results and sent to the personal information price calculation function unit 203.

  Next, the personal information management type terminal 100 uses the combination of keywords registered in the personal information dictionary based on the search result obtained from the personal information dictionary matching function unit 201 by the personal identification evaluation function unit 202. The presence / absence of individual identification is evaluated, and an evaluation value is given and sent to the personal information price calculation function unit 203 as the degree of individual identification.

  Next, the personal information management type terminal 100 communicates with the personal information management server 300 through the communication function unit 206, the search result obtained from the personal information dictionary matching function unit 201 through the personal information price calculation function unit 203, Based on the degree of personal identification obtained from the discriminability evaluation function unit 202, the total amount of personal information obtained by referring to the personal information price storage unit 50 held in the personal information management server 300 and stored in the terminal is calculated. The total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203 is displayed on the display device 100a.

  Next, the personal information management type terminal 100 communicates with the personal information management server 300 through the communication function unit 206, and information on the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203. Is sent to the personal information management server 300, and the personal information management server 300 responds to the total amount of personal information stored in the terminal calculated by the personal information price calculation function unit 203 by the asset management policy change function unit 204a. The asset management policy is determined and assigned as an asset management policy for taking out the terminal, and stored in a predetermined area of the storage unit 30, or transmitted to the RFID system 500 for management, and the terminal is taken out. Change the asset management policy dynamically.

  Further, when the asset management policy corresponding to the total amount of personal information determined by the personal information management server 300 is sent to the personal information management type terminal 100 and stored without being sent to the RFID system 500, the first embodiment is compared with the first embodiment. Accordingly, the personal information management server 300 can be configured as a system in which a part of the functions of the personal information management type terminal 100 is provided.

  The personal information management type terminal 100 can display an asset management policy when the control instruction is stored in a predetermined area of the storage unit 30, and can communicate with the RFID system 500 to communicate its own asset. Management policy can be displayed.

  In this way, for a certain terminal, personal information stored in this terminal is searched using the personal information dictionary matching function unit 201 and the personal identification evaluation function unit 202, and the hit keyword group is searched. The personal information price calculation function unit 203 refers to the obtained personal information list, a personal information managed separately in the company and a dictionary about its value, and the personal information management type terminal 100 The total amount of personal information stored in can be calculated.

  For example, if a company manages customer information (name / address) and the amount of compensation that can be generated when such customer information is leaked is 500 yen per piece of information, "500 yen x number of pieces of information" Is the total amount.

  The personal information price output function unit 205 displays the calculated total amount on the display screen when the personal information management type terminal 100 is activated, for example, to the user of the personal information management type terminal 100 (for example, a notebook PC). A strong awareness can be expected of “how much personal information is included in the notebook PC and how much liability the company will be liable for if the terminal is lost / stolen”.

  Further, in order to reflect the policy for asset management / take-out management, the asset management policy change function unit 204a uses the calculated total amount when performing asset management / take-out management, and performs asset management according to this amount. Change the policy.

  For example, a terminal with a total amount of XX yen or more cannot be taken out of the XX room, a terminal with a △△ yen or more of less than XX yen cannot be taken outside the company, etc. Select and change one of the policies.

  Thereby, for example, since the value of the information stored in the notebook PC is automatically calculated, there is no need for the employee to manually give the value of the information stored in the notebook PC. For this reason, it becomes possible to avoid a situation in which it is possible to take out the notebook PC by giving an incorrect value label.

  When each of the personal information management type terminal and the personal information management server according to the present invention is configured by a computer, a program describing processing contents for realizing each function is stored in an internal or external storage unit of the computer. It can be realized by reading and executing this program by the central processing unit (CPU) of the computer. In addition, such a program can be distributed by selling, transferring, or lending a portable recording medium such as a DVD or a CD-ROM, and such a program is stored in a storage unit of a server on a network, for example. And the program can be distributed by transferring the program from the server to another computer via the network. In addition, a computer that executes such a program can temporarily store, for example, a program recorded on a portable recording medium or a program transferred from a server in its own storage unit. As another embodiment of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and each time the program is transferred from the server to the computer. In addition, the processing according to the received program may be executed sequentially. Therefore, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  According to the present invention, even when an employee cannot recognize the value of information stored in a notebook PC, a specific amount can be displayed on the notebook PC, and further, stored in the notebook PC. This eliminates the need for employees to manually assign the value of existing information, thereby reducing the risk of assigning an incorrect value label and taking out the notebook PC, and effectively preventing the leakage of personal information. Therefore, it is useful for the purpose of preventing leakage of personal information of a specific terminal.

10 User I / F
20, 20a Control unit 30, 30a Storage unit 40, 40a Personal information dictionary storage unit 50, 50a Personal information price storage unit 60, 60a Asset management policy storage unit 100 Personal information management type terminal 100a Display device 201 Personal information dictionary matching function unit 202 Personal identification evaluation function unit 203 Personal information price calculation function unit 204, 204a Asset management policy change function unit 205 Personal information price output function unit 206, 206a Communication function unit 300 Personal information management server 500 RFID system

Claims (10)

A personal information management type terminal comprising a storage unit for storing personal information and having a function of self-managing the personal information,
A personal information dictionary storage unit functioning as a database for storing a personal information dictionary registered in advance with respect to personal information, using a search keyword set in advance as a search key;
An asset management policy storage unit that functions as a database for storing an asset management policy related to taking out the personal information management type terminal according to the total amount of personal information, using the total amount of personal information as a search key;
A personal information price storage unit for storing a price of personal information according to a numerical value of a predetermined personal identification level and a price of personal information according to the keyword;
Evaluate and search how many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal A personal information dictionary matching function unit that generates matching keywords and corresponding files as search results;
Based on the search results, from a combination of keywords registered in the personal information dictionary, the presence / absence of individual identification is evaluated, an evaluation value is given and generated as a personal identification level,
A personal information price calculation function unit that calculates the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the generated search result and the personal identification degree; ,
Asset management policy change that refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and dynamically changes the asset management policy related to taking out the personal information management type terminal A functional part;
A personal information price output function unit for displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device;
A personal information management type terminal characterized by comprising: A personal information management method by a personal information management type terminal having a function of self-managing personal information, comprising a storage unit for storing personal information,
The personal information management type terminal uses a preset search keyword as a search key, a personal information dictionary storage unit that functions as a database for storing a personal information dictionary registered for personal information in advance, and a total amount of personal information As a search key, an asset management policy storage unit that functions as a database for storing an asset management policy for taking out the personal information management type terminal corresponding to the total amount of personal information in advance, and personal information corresponding to a predetermined personal identification value A personal information price storage unit that stores the price of the personal information according to the keyword, a personal information dictionary matching function unit, a personal identification evaluation function unit, a personal information price calculation function unit, an asset, It has a management policy change function part and a personal information price output function part,
The processing procedure of the personal information management type terminal is as follows:
The keyword stored in the personal information dictionary stored in the personal information dictionary storage unit is included in the file stored in the storage unit in the personal information management type terminal by the personal information dictionary matching function unit. To generate a search result with the keyword and the corresponding file matched by searching,
Based on the search result, the personal identification evaluation function unit evaluates the presence or absence of individual identification from a combination of keywords registered in the personal information dictionary, and generates an evaluation value by giving an evaluation value. Steps,
The personal information price calculation function unit refers to the personal information price storage unit based on the search result generated and the personal identification degree, and calculates the total amount of personal information stored in the personal information management type terminal. A calculating step;
The asset management policy change function unit refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and relates to the asset management policy for taking out the personal information management type terminal. Dynamically changing steps,
The personal information price output function unit displays the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device. Steps,
A personal information management method comprising: A personal information management type terminal having a storage unit for storing personal information and having a function of self-managing the personal information, wherein the individual registered in advance with respect to personal information using a preset search keyword as a search key A personal information dictionary storage unit functioning as a database for storing an information dictionary, and a database for storing an asset management policy related to taking out the personal information management type terminal corresponding to the total amount of personal information in advance using the total amount of personal information as a search key An individual comprising a functioning asset management policy storage unit, a personal information price storage unit that stores a price of personal information according to a predetermined numerical value of personal identification, and a price of personal information according to the keyword A computer configured as an information management type terminal
Based on the search results, from a combination of keywords registered in the personal information dictionary, evaluating the presence or absence of individual identifiability, giving an evaluation value and generating as a personal identification degree;
Based on the generated search result and the degree of personal identification, referring to the personal information price storage unit, calculating the total amount of personal information stored in the personal information management type terminal,
Referring to the asset management policy storage unit, determining and assigning an asset management policy according to the total amount of the personal information, and dynamically changing the asset management policy related to taking out the personal information management type terminal;
Displaying the calculated total amount of personal information and / or the determined asset management policy on a predetermined display device;
A program for running An individual who manages a personal information management type terminal provided with a storage unit for storing personal information in cooperation with a personal information management server by an RFID system using an RFID attached to each personal information management type terminal. An information management system,
The personal information management server includes:
A personal information dictionary storage unit functioning as a database for storing a personal information dictionary registered in advance with respect to personal information, using a search keyword set in advance as a search key;
A personal information price storage unit for storing a price of personal information according to a numerical value of a predetermined personal identification level and a price of personal information according to the keyword;
With the total amount of personal information as a search key, an asset management policy storage unit that functions as a database for storing an asset management policy related to taking out the personal information management type terminal corresponding to the total amount of personal information in advance,
The personal information management type terminal communicates with the personal information management server,
Evaluate and search how many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal A personal information dictionary matching function unit that generates matching keywords and corresponding files as search results;
Based on the search results, from a combination of keywords registered in the personal information dictionary, the presence / absence of individual identification is evaluated, an evaluation value is given and generated as a personal identification level,
A personal information price calculation function unit that calculates the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the generated search result and the personal identification degree; With
The personal information management server includes:
Referring to the asset management policy storage unit, an asset management policy corresponding to the total amount of the personal information is determined and assigned, and the asset management policy related to taking out the personal information management type terminal is dynamically changed. An asset management policy change function unit for sending a management policy to the RFID system;
The personal information management type terminal is
A personal information price output function unit for displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device; A personal information management system characterized by that. A personal information management system for managing a personal information management type terminal having a storage unit for storing personal information by a personal information management server,
The personal information management server includes:
A personal information dictionary storage unit functioning as a database for storing a personal information dictionary registered in advance with respect to personal information, using a search keyword set in advance as a search key;
An asset management policy storage unit that functions as a database for storing an asset management policy related to taking out the personal information management type terminal according to the total amount of personal information, using the total amount of personal information as a search key;
A personal information price storage unit for storing a price of personal information according to a predetermined numerical value of personal identification and a price of personal information according to the keyword;
The personal information management type terminal communicates with the personal information management server,
Evaluate and search how many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal A personal information dictionary matching function unit that generates matching keywords and corresponding files as search results;
Based on the search results, from a combination of keywords registered in the personal information dictionary, the presence / absence of individual identification is evaluated, an evaluation value is given and generated as a personal identification level,
A personal information price calculation function unit that calculates the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the generated search result and the personal identification degree; With
The personal information management server includes:
Referring to the asset management policy storage unit, an asset management policy corresponding to the total amount of the personal information is determined and assigned, and the asset management policy related to taking out the personal information management type terminal is dynamically changed. An asset management policy change function unit for sending a management policy to the personal information management type terminal;
The personal information management type terminal is
A personal information price output function unit for displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device; A personal information management system characterized by that. A personal information management method by a personal information management system for managing a personal information management type terminal having a storage unit for storing personal information by a personal information management server,
The personal information management server includes a personal information dictionary storage unit functioning as a database for storing a personal information dictionary registered in advance with respect to personal information using a search keyword set in advance as a search key, and a predetermined personal identification degree A personal information price storage unit for storing the price of personal information according to a numerical value and the price of personal information according to the keyword, an asset management policy change function unit, and the total amount of personal information as a search key An asset management policy storage unit that functions as a database for storing an asset management policy for taking out the personal information management type terminal corresponding to the total amount of the personal information, and referring to the asset management policy storage unit, according to the total amount of the personal information Determine and assign an asset management policy, and dynamically change the asset management policy for taking out personal information management type terminals. The determined asset management policy includes a asset management policy changing function unit to be sent to the personal information management type terminal,
The personal information management type terminal includes a personal information dictionary matching function unit, a personal identification evaluation function unit, a personal information price calculation function unit, and a personal information price output function unit.
The keyword registered in the personal information dictionary stored in the personal information dictionary storage unit communicates with the personal information management server by the personal information dictionary matching function unit of the personal information management type terminal. Evaluating how many files are contained in the file stored in the storage unit in the terminal, generating a matched keyword and the corresponding file as a search result by searching,
Based on the search results, the personal identification management function unit of the personal information management type terminal evaluates the presence or absence of individual identification from a combination of keywords registered in the personal information dictionary, and gives an evaluation value. Generating as personal identity,
The personal information price calculation function unit of the personal information management type terminal refers to the personal information price storage unit based on the generated search result and the personal identification degree, and is stored in the personal information management type terminal. Calculating the total amount of personal information
The asset management policy change function unit of the personal information management server refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and takes out the personal information management type terminal. Dynamically changing the asset management policy for
The personal information price output function unit of the personal information management terminal determines the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit. Displaying on the display device;
A personal information management method comprising: A personal information management type terminal in the personal information management system according to claim 4 or 5,
A communication function unit that communicates with the personal information management server;
Evaluate and search how many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal A personal information dictionary matching function unit that generates matching keywords and corresponding files as search results;
Based on the search results, from a combination of keywords registered in the personal information dictionary, the presence / absence of individual identification is evaluated, an evaluation value is given and generated as a personal identification level,
A personal information price calculation function unit that calculates the total amount of personal information stored in the personal information management type terminal with reference to the personal information price storage unit based on the generated search result and the personal identification degree; ,
A personal information price output function unit for displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device;
A personal information management type terminal characterized by comprising: A personal information management server in the personal information management system according to claim 4 or 5,
A communication function unit for communicating with the personal information management type terminal;
Asset management policy change that refers to the asset management policy storage unit, determines and assigns an asset management policy corresponding to the total amount of the personal information, and dynamically changes the asset management policy related to taking out the personal information management type terminal A functional part;
A personal information management server comprising: A computer configured as a personal information management type terminal in the personal information management system according to claim 4 or 5,
Communicating with the personal information management server;
Evaluate and search how many keywords registered in the personal information dictionary stored in the personal information dictionary storage unit are included in the file stored in the storage unit in the personal information management type terminal Generating matched keywords and the corresponding file as search results;
Based on the search results, from a combination of keywords registered in the personal information dictionary, evaluating the presence or absence of individual identifiability, giving an evaluation value and generating as a personal identification degree;
Based on the generated search result and the degree of personal identification, referring to the personal information price storage unit, calculating the total amount of personal information stored in the personal information management type terminal,
Displaying the total amount of personal information calculated by the personal information price calculation function unit and / or the asset management policy determined by the asset management policy change function unit on a predetermined display device;
A program for running A computer configured as a personal information management server in the personal information management system according to claim 4 or 5,
Communicating with the personal information management type terminal;
Referring to the asset management policy storage unit, determining and assigning an asset management policy according to the total amount of the personal information, and dynamically changing the asset management policy related to taking out the personal information management type terminal;
A program for running

Images