JP2013020343A - Transmitter, information gathering system, processing method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a transmitter, and information gathering system, a communication method and a program for transmitting identification information in which user identification is made obscure.SOLUTION: The transmitter includes a concealment part for executing prescribed concealment processing to user identification information and outputting specific identification information, a transmission part for transmitting anonymous information including the specific identification information, a reception part for receiving a result of determining whether the anonymous information transmitted by the transmission part is peculiar and a control part for changing the prescribed concealment processing to other concealment processing on the basis of the determination result received by the reception pat and transmitting again, by using the transmission part, anonymous information including other specific identification information generated by executing the other concealment processing to the user identification information and output from the concealment part.

Description

  The present invention relates to a transmission device, an information collection system, a processing method, and a program, and more particularly, to a transmission device, an information collection system, a processing method, and a program that transmit personal information to the information collection device.

  In recent years, services using a server that collects personal information of each user from a large number of terminals are increasing. In a service using a server, there is a risk that data stored in the server is leaked.

  Patent Document 1 describes a server that controls access to a document file shared by a plurality of user terminals. The server described in Patent Literature 1 includes a document storage unit that stores a document file and an access right storage unit. In the access right storage unit, a document file access permission period is set for each user ID of the user terminal. Yes. The user ID is identification information for identifying the user of the user terminal.

  When the server described in Patent Document 1 receives a document request including a user ID from a user terminal, the access time to the document file specified by the user ID included in the document request is set in the access right storage unit. If it is within the access permission period, the document file is transmitted to the user terminal, and if it is outside the access permission period, this is notified to the user terminal.

JP 2009-140097 A

  The server described in Patent Literature 1 can also receive a user ID and personal information of a user of the user terminal from each of a plurality of user terminals, and store the user ID and personal information in association with each other. In this case, when the personal information stored in the server is leaked, there is a problem that the individual user may be specified by the user ID associated with the personal information.

  An object of the present invention is to provide a transmission apparatus, an information collection system, a processing method, and a program that transmit identification information in which the identification of a user is ambiguous.

  The transmission device of the present invention includes a concealing unit that performs predetermined concealment processing on user identification information and outputs specific identification information, a transmission unit that transmits anonymous information including the specific identification information, and the transmission unit Receiving means for determining whether or not the anonymous information transmitted is unique, and changing the predetermined anonymization process to another anonymization process based on the determination result received by the reception means, Control means for retransmitting the anonymous information including the other specific identification information output from the concealment means by performing the other concealment processing on the identification information using the transmission means.

  The information collection system of the present invention is an information collection system including a plurality of transmission devices and information collection devices, and each of the transmission devices performs specific concealment processing on user identification information and performs specific identification information. A concealment means for outputting the information, a transmission means for transmitting the anonymous information including the specific identification information to the information collection apparatus, and a determination result of whether or not the anonymous information transmitted by the transmission means from the information collection apparatus is unique And the predetermined concealment process is changed to another concealment process based on the determination result received by the reception unit, and the other concealment process is executed on the user identification information. Anonymity information including another specific identification information output from the concealment unit, and a control unit that transmits again using the transmission unit, and the information collection device is transmitted from each of the transmission devices. Communication means for receiving the anonymous information, holding means for holding the anonymous information received by the communication means, and when the communication means receives the transmission information that is the anonymous information, the anonymous information held in the holding means When the transmission information is unique, the determination result indicating that the transmission information is unique is returned to the transmission source of the transmission information using the communication means, and the transmission information is unique. If not, processing means for recording the transmission information in the holding means is included.

  The processing method of the present invention is a processing method performed by a transmitting apparatus, wherein a concealing step for generating specific identification information by executing predetermined concealment processing on user identification information, and anonymous information including the specific identification information A first transmission step of transmitting a message, a reception step of receiving a determination result as to whether or not the transmitted anonymous information is peculiar, and the predetermined anonymization processing based on the received determination result as another anonymization Change to processing, change step of generating another specific identification information by executing the other concealment processing on the identification information of the user, and second transmission for transmitting again the anonymous information including the other specific identification information Steps.

  The processing method of the present invention is a processing method of an information collecting system comprising a plurality of transmitting devices and an information collecting device, wherein the transmitting device executes a predetermined concealment process on the user identification information to specify specific identification information A concealment step for generating a first transmission step in which the transmission device transmits anonymous information including the specific identification information to the information collection device; and the information collection device is specified among the plurality of transmission devices. A holding step of holding the anonymous information transmitted from the transmission device in a holding unit, and transmission in which the information collection device is the anonymous information transmitted from a predetermined transmission device other than the specific transmission device among the plurality of transmission devices A first receiving step for receiving information, and the information collecting device, if the received transmission information is not unique compared to the anonymous information held in the holding means A reply step of recording information in the holding means and returning a determination result indicating that the transmission information is unique to the predetermined transmission device of the transmission information when the transmission information is unique; When the predetermined transmission device receives the determination result from the information collection device, the predetermined concealment process is changed to another concealment process, and the other concealment process is executed on the identification information of the user. A changing step for generating another specific identification information, and a second transmission step for transmitting again the anonymous information including the other specific identification information.

  The program of the present invention includes a concealment procedure for generating specific identification information by executing predetermined concealment processing on user identification information, and a first transmission procedure for transmitting anonymous information including the specific identification information to a computer. A reception procedure for receiving a determination result as to whether or not the transmitted anonymous information is unique, and changing the predetermined anonymization process to another anonymization process based on the received determination result, A change procedure for generating another specific identification information by executing the other concealment process on the identification information and a second transmission procedure for transmitting the anonymous information including the other specific identification information again are executed.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to transmit the identification information which made the user's identification obscure.

It is a block diagram which shows the structural example of the transmitter in one Embodiment of this invention. It is a block diagram which shows the structural example of the information collection system of this embodiment. It is a flowchart which shows the processing method of an information collection system. It is a block diagram which shows the other structural example of a transmitter. It is a block diagram which shows the other structural example of an information collection system.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram illustrating a configuration example of a transmission apparatus according to the present embodiment.

  The transmission device 10 is a mobile terminal that communicates with the information collection device and provides personal information such as user purchase information, location information, and questionnaire information to the information collection device. The transmission device 10 is realized by, for example, a mobile phone, a portable information terminal, a game machine, or the like.

  The transmission device 10 includes a concealment unit 11, a control unit 12, and a communication unit 13. The concealment unit 11 includes a cluster information memory 111 and an anonymization unit 112. The control unit 12 includes a personal information history memory 121 and an information processing unit 122. The communication unit 13 includes a transmission unit 131 and a reception unit 132.

  The concealment unit 11 can be generally referred to as concealment means.

  The concealment unit 11 executes predetermined concealment processing on the user-specific identification information of the transmission device 10 and outputs the user attribute identification information. The user identification information is a user ID (Identification) for identifying the user of the transmission device that communicates with the information collection device. The attribute identification information is specific identification information for identifying attributes such as the user's age and hobbies.

  The cluster information memory 111 is a memory that holds cluster classification definition information for classifying attributes such as the user's age and hobbies. In the cluster classification definition information, for each of a plurality of predetermined user attributes, cluster information indicating the user attributes and a cluster ID (Identification) for identifying the cluster information are associated with each other. . The cluster ID is also called specific identification information.

  For example, the cluster information associated with cluster ID 1 indicates the attributes of the user whose age is in his twenties and his hobby is a drive, and the cluster information associated with cluster ID 2 has his age in his thirties and his hobby is karaoke. The cluster classification definition information indicating the attributes of the user is stored in the cluster information memory 111. The cluster classification definition information is sent from an information collection device, for example.

  The anonymization unit 112 selects cluster information indicating an attribute close to the user's attribute from a plurality of pieces of cluster information included in the cluster classification definition information as a predetermined anonymization process, and associates the cluster information with the cluster information. The cluster ID is extracted from the cluster information memory 111. For example, the anonymization unit 112 displays the user attributes indicated in each cluster information, and selects the cluster information specified by the user operation.

  Alternatively, user information indicating attributes such as the age and hobbies of the user of the transmission device 10 is stored in the cluster information memory 111, and the anonymization unit 112 indicates an attribute close to the user's attribute using the user information. The selected cluster information may be selected. In this case, for each piece of cluster information included in the cluster classification definition information, the anonymization unit 112 displays the attribute indicated in the cluster information and the user information for each attribute such as age and hobby indicated in the cluster information. The higher the similarity between the two attributes, the higher the similarity. And the anonymization part 112 calculates | requires the sum total of the similarity of each attribute for every cluster information, and selects the cluster information with the largest sum total. When a weighting factor is associated with each attribute indicated in the cluster classification definition information, the anonymization unit 112 determines the similarity between the attribute and the attribute for each attribute indicated in the cluster classification definition information. You may obtain | require the sum total of the similarity of each attribute by multiplying with the weighting coefficient matched with the attribute.

  The anonymization unit 112 supplies the cluster ID that has been subjected to the predetermined concealment process, that is, the cluster ID extracted from the cluster information memory 111 (hereinafter referred to as “first cluster ID”) to the information processing unit 122. To do. Therefore, the information processing unit 122 can use the first cluster ID as identification information of the user of the transmission device 10.

  Control unit 12 can be generally referred to as control means.

  The control unit 12 is a computer that controls the concealment unit 11 and the communication unit 13. For example, the control unit 12 acquires personal information to be provided to the information collection device.

  The personal information history memory 121 is a memory that holds personal information of the user of the transmission device 10. The personal information history memory 121 stores, as user personal information, for example, questionnaire information, purchase information indicating the user's purchased items, position information indicating the user's position in time series, and the like. A program executed by the control unit 12 is held. The personal information history memory 121 is a computer-readable recording medium.

  The information processing unit 122 receives the first cluster ID from the anonymization unit 112. When the information processing unit 122 reads the personal information from the personal information history memory 121, the information processing unit 122 generates anonymous information including the personal information and the first cluster ID, and supplies the anonymous information to the transmission unit 131.

  For example, the information processing unit 122 displays questionnaire information for inquiring about recently purchased items to the user, and stores, for example, questionnaire information indicating fishing tools in the personal information history memory 121 as an answer to the questionnaire input by the user operation. To do. When the information processing unit 122 reads the questionnaire information from the personal information history memory 121, the information processing unit 122 generates anonymous information including the questionnaire information and the first cluster ID, and supplies the anonymous information to the transmission unit 131.

  Transmitter 131 can generally be referred to as a transmission means.

  When receiving the anonymous information from the information processing unit 122, the transmission unit 131 transmits the anonymous information to the information collection device. When the information collection device receives the anonymous information from the transmission device 10, for example, the information collection device determines whether the anonymous information is unique as compared with the anonymous information of the other transmission devices, and the anonymous information is unique. In this case, a determination result indicating that the anonymous information is unique is returned to the transmission device 10.

  Next, the operation of the transmission apparatus 10 when receiving a determination result indicating that anonymous information is unique from the information collection apparatus will be described.

  The receiving unit 132 receives a determination result indicating that the anonymous information is unique from the information collection device. The receiving unit 132 supplies the determination result to the information processing unit 122.

  The control unit 12 changes the predetermined concealment process to another concealment process based on the determination result received by the reception unit 132, and the other concealment process is performed on the user identification information so that the concealment unit 11 The anonymous information including the output other cluster ID is transmitted again using the transmission unit 131.

  In the present embodiment, when the information processing unit 122 receives a determination result indicating that the anonymous information is unique from the receiving unit 132, the information processing unit 122 changes the predetermined concealment process to another concealment process. A change instruction signal to that effect is supplied to the anonymization unit 112.

  When the anonymization unit 112 receives the change instruction signal from the information processing unit 122, as another concealment process, the cluster close to the user attribute is selected from the cluster information other than the cluster information associated with the first cluster ID. A process of selecting information and extracting another cluster ID associated with the cluster information from the cluster information memory 111 is executed.

  The anonymization unit 112 performs another concealment process and supplies another cluster ID to the information processing unit 122 as the second cluster ID. Therefore, the information processing unit 122 can use the second cluster ID as user identification information.

  When the information processing unit 122 receives the second cluster ID from the anonymization unit 112, the information processing unit 122 reads the personal information from the personal information history memory 121 and supplies the anonymous information including the second cluster ID and the personal information to the transmission unit 131. When receiving the anonymous information including the second cluster ID from the information processing unit 122, the transmission unit 131 transmits the anonymous information again to the information collection device.

  Each time the transmission device 10 receives a determination result indicating that the anonymous information is unique from the information collection device, the user of the transmission device 10 is selected from the cluster IDs other than the cluster ID transmitted to the information collection device. Another cluster ID associated with the cluster information close to the attribute is selected, and anonymous information including the cluster ID is retransmitted to the information collecting apparatus.

  FIG. 2 is a block diagram illustrating a configuration example of the information collection system in the present embodiment.

  The information collection system 30 includes a transmission device 10 among a plurality of transmission devices and an information collection device 20 that communicates with the plurality of transmission devices. Note that the transmission device 10 has the same configuration as the transmission device 10 shown in FIG. 1, and thus the same reference numerals are given and detailed description thereof is omitted here. In addition, each of the plurality of transmission devices has the same configuration as that of the transmission device 10.

  The transmission device 10 transmits anonymous information including the first cluster ID and the user's personal information to the information collection device 20.

  The information collection device 20 is a server that collects personal information of users of a plurality of transmission devices.

  The information collection device 20 includes a holding unit 21, a processing unit 22, and a communication unit 23. The holding unit 21 includes a cluster information memory 211 and a personal information memory 212. The communication unit 23 includes a transmission unit 231 and a reception unit 232.

  The holding part 21 can generally be called holding means.

  The holding unit 21 holds the personal information included in the anonymous information for each cluster ID included in the anonymous information from each transmission device.

  The cluster information memory 211 holds cluster classification definition information in which cluster information indicating user attributes and a cluster ID for identifying cluster information are associated with each other for each predefined user attribute. Note that all or part of the same information as the cluster classification definition information held in the cluster information memory 211 is stored in the cluster information memory 111.

  The personal information memory 212 stores the cluster ID and personal information included in the anonymous information received by the communication unit 23 in association with each cluster ID.

  Communication unit 23 can be generally referred to as communication means.

  The communication unit 23 receives the anonymous information transmitted from the transmission unit 131 in the transmission device 10.

  Specifically, the receiving unit 232 receives anonymous information including the first cluster ID and personal information from the transmitting unit 131. The receiving unit 232 supplies the received anonymous information to the processing unit 22.

  Processing unit 22 can be generally referred to as processing means.

  When receiving the transmission information that is the anonymous information of the transmission device 10 from the reception unit 232, the processing unit 22 is specified by the first cluster ID included in the transmission information among the personal information held in the holding unit 21. It is determined whether or not the personal information included in the transmission information is unique compared to the personal information.

  When it is determined that the personal information included in the transmission information is not unique, the processing unit 22 records the transmission information in the personal information memory 212. On the other hand, when it is determined that the personal information included in the transmission information is unique, the processing unit 22 communicates a determination result indicating that the transmission information is unique to the transmission apparatus 10 that is the transmission information transmission source. Reply using part 23.

  For example, among the personal information stored in the personal information memory 212, a lot of personal information indicating car supplies is stored in the personal information associated with the first cluster ID whose hobby specifies the attribute of the user of the drive. At this time, when the communication unit 23 receives from the transmitting device 10 anonymous information including the first cluster ID and personal information indicating a fishing tool as a user's purchased item, the processing unit 22 stores the personal information in the personal information memory 212. Among these, the personal information associated with the first cluster ID included in the anonymous information is compared with the personal information included in the anonymous information. For example, for each predetermined language, the processing unit 22 compares the personal information of the two using related language dictionary information in which a predetermined language and a related language related to the predetermined language are associated with each other. Then, the processing unit 22 relates the “fishing tool” indicated in the personal information in the anonymous information to the “car supplies” indicated in the personal information associated with the first cluster ID in the personal information memory 212. It is determined that there is no personal information included in the anonymous information.

  When it is determined that the personal information included in the anonymous information is unique, the processing unit 22 supplies a determination result indicating that the anonymous information is specific to the transmission unit 231, and the determination result is, for example, anonymous. The information is transmitted to a destination such as the IP address of the transmission device 10 indicated in the information.

  Next, the operation of the information collection system 30 will be described.

  FIG. 3 is a flowchart showing a processing method performed in the information collection system 30.

  First, in the information collecting apparatus 20, cluster classification definition information defined by a user operation is input. The processing unit 22 stores the cluster classification definition information input by the user operation in the cluster information memory 211. When the processing unit 22 reads the cluster classification definition information from the cluster information memory 211, the processing unit 22 supplies the cluster classification definition information to the transmission unit 231, and the transmission unit 231 transmits the cluster classification definition information to the transmission device 10 ( Step S91).

  In the transmission device 10, when the reception unit 132 receives the cluster classification definition information from the information collection device 20, the information processing unit 122 stores the cluster classification definition information in the cluster information memory 111. When the anonymization unit 112 reads the cluster classification definition information from the cluster information memory 111, the anonymization unit 112 displays a plurality of pieces of cluster information included in the cluster classification definition information.

  The anonymization unit 112, when the cluster information close to the attribute of the user of the transmission device 10 is designated by the user operation among the displayed cluster information, the cluster ID associated with the cluster information (hereinafter, “corresponding cluster” ID ”) is extracted from the cluster information memory 111 (step S92). The anonymization unit 112 supplies the extracted corresponding cluster ID to the information processing unit 122.

  When the information processing unit 122 receives the corresponding cluster ID from the anonymization unit 112 and reads the personal information indicating the behavior of the user of the transmission device 10 from the personal information history memory 121, the information processing unit 122 obtains the anonymous information including the corresponding cluster ID and the personal information. The data is supplied to the transmission unit 131. Then, the transmission unit 131 transmits the anonymous information to the information collection device 20 (step S93).

  In the information collection device 20, when the receiving unit 232 receives the anonymous information including the corresponding cluster ID and the personal information indicating the user's behavior from the transmitting device 10, the processing unit 22 includes the corresponding cluster ID included in the anonymous information. The personal information specified in (1) is read from the personal information memory 212 and compared with the personal information to determine whether or not the personal information included in the anonymous information is unique (step S94).

  If it is determined that the anonymous information is not unique, the processing unit 22 stores the anonymous information in the personal information memory 212. Thereafter, for each cluster ID stored in the personal information memory 212, the information collection device 20 uses the personal information associated with the cluster ID, for example, to obtain related information related to the personal information. The data is transmitted to the transmission device of the transmission source (step S98), and the processing method of the information collection system 30 is finished.

  On the other hand, when it is determined that the anonymous information is unique, the processing unit 22 returns a determination result indicating that to the transmitting apparatus 10 (step S96).

  In the transmission device 10, when the reception unit 132 receives a determination result indicating that the anonymous information is unique, the information processing unit 122 changes the concealment process performed on the anonymous information to another concealment process (step S1). S97). That is, the anonymization unit 112 extracts from the cluster information memory 111 a cluster ID that is close to the attribute of the user of the transmitting device 10 other than the corresponding cluster ID.

  Thereafter, the process returns to step S93, and the transmitting device 10 transmits the anonymous information including the extracted cluster ID and personal information again to the information collecting device 20, and until the information collecting device 20 determines that the anonymous information is not unique, A series of processing procedures in steps S93 to S97 are repeated.

  In addition, the information collection device 20 may cluster the user of the information collection device 20 when the anonymous information that is unique is frequently detected, for example, when the number of times that the anonymous information is determined to be unique exceeds a predetermined threshold. Notify that redefinition of classification definition information is requested. Then, the information collection device 20 stores the cluster classification definition information redefined by the user operation in the cluster information memory 211 and transmits a part or all of the cluster classification definition information to each transmission device. Upon receiving the cluster classification definition information, each transmission device stores the cluster classification definition information in the cluster information memory 111 and performs concealment processing using the cluster classification definition information.

  Next, another configuration example of the present embodiment will be described below.

  FIG. 4 is a block diagram illustrating another configuration example of the transmission apparatus 10.

  The transmission device 10 includes the concealment unit 11, the control unit 12, the transmission unit 131, and the reception unit 132 illustrated in FIG. Since these are the same as the structure demonstrated in FIG. 1, detailed description here is abbreviate | omitted.

  In the transmission device 10, the concealment unit 11 performs a predetermined concealment process on the user identification information and outputs a cluster ID. The transmission unit 131 transmits anonymous information including the cluster ID output from the concealment unit 11. The receiving unit 132 receives the determination result as to whether or not the anonymous information transmitted by the transmitting unit 131 is unique. The control unit 12 changes the predetermined concealment process to another concealment process based on the determination result received by the reception unit 132. Then, the control unit 12 transmits again the anonymous information including another cluster ID output from the concealment unit 11 by performing another concealment process on the user identification information using the transmission unit 131.

  FIG. 5 is a diagram illustrating another configuration example of the information collection system 30.

  The information collection system 30 includes the transmission device 10 illustrated in FIG. 4 and the information collection device 20 including the holding unit 21, the processing unit 22, and the communication unit 23 illustrated in FIG. Since the holding unit 21, the processing unit 22, and the communication unit 23 are the same as the configuration illustrated in FIG. 2, detailed description thereof is omitted here.

  In FIG. 5, the configuration of the transmission device 10 is the same as the configuration described in FIG. 4, and therefore only the information collection device 20 will be briefly described.

  In the information collection device 20, the communication unit 23 receives anonymous information transmitted from the transmission device 10 and other transmission devices. The holding unit 21 holds anonymous information transmitted from other transmission devices. When the communication unit 23 receives transmission information that is anonymous information transmitted from the transmission device 10, the processing unit 22 determines whether or not the transmission information is unique as compared with the anonymous information held in the holding unit 21. judge. When the transmission information is unique, the processing unit 23 returns a determination result indicating that the transmission information is unique to the transmission source of the transmission information using the communication unit 23, and when the transmission information is not unique. The transmission information is recorded in the holding unit 21.

  According to the present embodiment, in the transmission device 10, the concealment unit 11 performs a predetermined concealment process on the identification information (user ID) of the user of the transmission device 10. For example, the anonymity providing unit 11 corresponds to a user attribute of the transmission device 10 from among a plurality of cluster IDs for identifying attributes such as the user's age and hobbies defined as the predetermined anonymization process. A process of selecting a cluster ID is executed and the corresponding cluster ID is output. The transmission unit 131 transmits anonymous information including the corresponding cluster ID to the information collection device 20. The corresponding cluster ID can also be called specific identification information.

  For this reason, the transmission device 10 uses the cluster ID for identifying the attribute of a predetermined user as identification information included in the anonymous information, instead of the user ID unique to the user of the transmission device 10. Identification information in which the identification of the user is made ambiguous can be transmitted.

  Therefore, even if anonymous information is leaked from the information collection device 20 in a situation where a large number of anonymous information transmitted from each of a large number of transmission devices is stored in the information collection device 20, the cluster included in the anonymous information The individual user of the transmission device 10 is not specified by the ID. Therefore, in the information collection system 30 including the transmission device 10 and the information collection device 20, it is possible to avoid the individual user being specified by the anonymous information stored in the information collection device 20.

  In the present embodiment, in the information collecting apparatus 20, the holding unit 21 holds a lot of personal information in association with each of a plurality of cluster IDs. When the communication unit 23 receives the anonymous information including the cluster ID and the personal information from the transmission device 10, the processing unit 22 sets the corresponding cluster ID included in the anonymous information among the personal information stored in the holding unit 21. Using the associated personal information, it is determined whether or not the personal information included in the anonymous information is unique. Then, when the anonymous information is peculiar, the processing unit 22 returns a determination result indicating that the anonymous information is peculiar to the transmitting device 10 using the communication unit 23. On the other hand, the processing unit 22 records the anonymous information in the holding unit 21 when the anonymous information is not unique.

  For this reason, the information collection device 20 can collect personal information having high similarity between personal information for each attribute such as a user's hobby specified by the cluster ID.

  Furthermore, in this embodiment, when the receiving unit 132 receives a determination result indicating that the anonymous information is unique from the information collecting device 20 in the transmitting device 10, the control unit 12 controls the concealing unit 11 to apply the determination result. The concealment process performed on the cluster ID is changed to a predetermined concealment process. And the concealment part 11 selects another applicable cluster ID close | similar to the attribute of the user of the transmission apparatus 10 from cluster ID different from a relevant cluster ID. Then, the information processing unit 122 supplies anonymous information including another relevant cluster ID and personal information to the transmission unit 131, and the transmission unit 131 transmits the anonymous information to the information processing apparatus 20 again.

  For this reason, every time the transmission device 10 receives a determination result indicating that the anonymous information is unique from the information collection device 20, it transmits another cluster ID. Appropriate personal information can be transmitted to the information collecting apparatus 20.

  In the present embodiment, a server may be used as the transmission device 10, and a mobile terminal may be used as the information collection device 20.

  In the embodiment described above, the illustrated configuration is merely an example, and the present invention is not limited to the configuration.

DESCRIPTION OF SYMBOLS 10 Transmission apparatus 11 Concealment part 111, 211 Cluster information memory 112 Anonymization part 12 Control part 121 Personal information history memory 122 Information processing part 13, 23 Communication part 131,231 Transmission part 132,232 Reception part 20 Information collection apparatus 21 Holding Unit 212 Personal information memory 22 Processing unit 30 Information collection system

Claims (10)

A concealment means for executing a predetermined concealment process on the user identification information and outputting the specific identification information;
Transmitting means for transmitting anonymous information including the specific identification information;
Receiving means for receiving the determination result whether the anonymous information transmitted by the transmitting means is unique;
Based on the determination result received by the receiving means, the predetermined concealment process is changed to another concealment process, and the other concealment process is executed on the identification information of the user and output from the concealment means. And a control unit that transmits again the anonymous information including another specific identification information using the transmission unit. The transmission apparatus according to claim 1,
When the receiving unit receives the determination result indicating that the anonymous information is peculiar, the control unit changes the predetermined concealment process to another concealment process, and the user identification information A transmission apparatus that performs another concealment process and transmits again the anonymous information including the other specific identification information output from the concealment unit using the transmission unit. The transmission device according to claim 1 or 2,
The transmitting apparatus, wherein the concealing unit outputs the specific identification information for identifying the user attribute by executing the predetermined concealing process or the other concealing process on the identification information of the user. An information collection system comprising a plurality of transmission devices and an information collection device,
Each of the transmitting devices
A concealment means for executing a predetermined concealment process on the user identification information and outputting the specific identification information;
Transmitting means for transmitting anonymous information including the specific identification information to the information collecting device;
From the information collection device, receiving means for receiving a determination result whether or not the anonymous information transmitted by the transmitting means is unique,
Based on the determination result received by the receiving means, the predetermined concealment process is changed to another concealment process, and the other concealment process is executed on the identification information of the user and output from the concealment means. Anonymity information including another specific identification information, and a control unit that transmits again using the transmission unit, and
The information collecting device includes:
A communication means for receiving anonymous information transmitted from each of the transmission devices;
Holding means for holding anonymous information received by the communication means;
When the communication means receives the transmission information which is the anonymous information, the transmission information is unique when the transmission information is unique as compared with the anonymous information held in the holding means. And a processing unit that returns a determination result to the transmission source of the transmission information using the communication unit, and records the transmission information in the holding unit when the transmission information is not unique. The information collection system according to claim 4,
When the receiving unit receives the determination result indicating that the anonymous information is peculiar, the control unit changes the predetermined concealment process to another concealment process, and the user identification information The information collection system which transmits again the anonymous information containing the said another specific identification information output from the said concealment means by performing another concealment process using the said transmission means. A processing method performed by a transmitting device,
A concealment step of generating specific identification information by executing a predetermined concealment process on the user identification information;
A first transmission step of transmitting anonymous information including the specific identification information;
A receiving step of receiving a determination result of whether or not the transmitted anonymous information is unique;
Changing the predetermined concealment process to another concealment process based on the received determination result, and executing the other concealment process on the user identification information to generate another specific identification information Steps,
A second transmission step of again transmitting anonymous information including the other specific identification information. The processing method according to claim 6,
In the changing step, when the determination result indicating that the anonymous information is unique is received, the predetermined concealment process is changed to another concealment process, and the other identification information is added to the user identification information. The processing method which performs concealment processing and produces | generates said another specific identification information. An information collection system processing method comprising a plurality of transmission devices and an information collection device,
A concealing step in which the transmitting device generates specific identification information by executing a predetermined concealment process on user identification information;
A first transmission step in which the transmission device transmits anonymous information including the specific identification information to the information collection device;
A holding step in which the information collection device holds the anonymous information transmitted from the specific transmission device of the plurality of transmission devices in a holding unit;
The information collection device receives a transmission information that is the anonymous information transmitted from a predetermined transmission device other than the specific transmission device among the plurality of transmission devices; and
The information collection device records the transmission information in the holding unit when the received transmission information is not unique as compared with the anonymous information held in the holding unit, and the transmission information is unique A reply step of returning a determination result indicating that the transmission information is unique to the predetermined transmission device as a transmission source of the transmission information;
When the predetermined transmission device receives the determination result from the information collection device, the predetermined concealment process is changed to another concealment process, and the other concealment process is executed on the identification information of the user. A change step to generate another specific identifying information;
A second transmission step of again transmitting anonymous information including the other specific identification information. The processing method according to claim 8,
In the changing step, when the predetermined transmission device receives the determination result indicating that the anonymous information is peculiar, the predetermined concealment process is changed to another concealment process, and the identification information of the user is changed. The processing method which performs said other concealment processing and produces | generates said another specific identification information. On the computer,
A concealment procedure for generating specific identification information by executing a predetermined concealment process on the user identification information;
A first transmission procedure for transmitting anonymous information including the specific identification information;
A reception procedure for receiving a determination result as to whether or not the transmitted anonymous information is unique;
Changing the predetermined concealment process to another concealment process based on the received determination result, and executing the other concealment process on the user identification information to generate another specific identification information Procedure and
A program for executing the second transmission procedure for transmitting again the anonymous information including the other specific identification information.