JP2015111356A - Disclosure degree control device, disclosure degree control method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it possible to satisfy an allowable disclosure degree specified by a user and securely transmit data corresponding to a data element required by a service provider.SOLUTION: A disclosure degree control device 10 includes: a data receiver 20 for receiving sensor data from a sensor system apparatus 12 for observing the state of a user; a user request administrator 24 for receiving a user request including a plurality of elements in relation to disclosure of sensor data and an allowable value related to each element; a servicer request administrator 26 for receiving a service request specifying at least any one of a plurality of elements from a service provider (servicer 16); a data processor 32 for converting sensor data so that elements other than those specified by the servicer request fall in an allowable range; and a data transmitter 34 for transmitting data converted by the data processor 32.

Description

  The present invention relates to a disclosure level control device, a disclosure level control method, and a program for controlling disclosure of sensor data transmitted to the outside.

  Conventionally, a service provider can provide a service to a user by disclosing data (hereinafter referred to as sensor data) such as a value or a signal output from a device such as a sensor related to the individual's behavior. It is considered. When a user wants to receive a service from a service provider, the user transmits sensor data to a transmission destination (hereinafter referred to as a service provider) outside the user's own network (such as a local area network (LAN)). To do. The service provider provides a service to the user using the sensor data.

Conventionally, the following method is used to transmit sensor data from a user to a service provider.
(1) The user sets whether to disclose each sensor data. A method in which a service provider receives only data of a device that the user is permitted to disclose and uses the data to provide a service to the user.
(2) A disclosure control system is installed on the network between the service provider and the device. The disclosure control system decides the data satisfying both and the conversion processing method before starting the data transmission after the data allowable disclosure level specified by the user and the data request of the service provider are input, and the data conversion based on the data And transmit (see, for example, Non-Patent Document 2).

Tomohiro Yamada et al., “Examination of System Architecture that Enables Use of Collective Life Logs”, IEICE Technical Report, LOIS 2009-8, No. 109, Vol. 39, pp. 113-118, (May 2009). Keisuke Tsunoda et al., “Study of a method for controlling the degree of disclosure of sensor data to optimize the needs of data providers and users”, IEICE technical report, IN2012-170, No.112, Vol.464, pp. 95-100, (Mar. 2013).

  However, the conventional techniques have the following problems.

  In the technology described in Non-Patent Document 2, in disclosing user privacy data, there are four elements (the importance of the data type, the data observation interval, the number of data to be transmitted at one time, the freshness of the data (the observation time and Calculate the score (allowable disclosure) weighted by the difference in the current time)), and adjust the importance, observation interval, number of data, and freshness so that the score does not exceed the value specified by the user Sending data to the service provider.

  Therefore, if the score (allowable disclosure level) does not exceed the value specified by the user, any combination of importance, observation interval, number of data, and freshness may be used, so the data provided to the service provider The content was not uniquely determined. For example, even for data of the same type and the same observation interval, one data with high freshness and a large number of data with low freshness may have the same score value. In such a case, in which combination the adjusted data is transmitted to the service provider becomes accidental each time data is transmitted. Therefore, in the conventional disclosure level adjustment method, the service provider may not be able to obtain data having a value satisfying the requirement for a specific element among the four elements, and the quality of the received data is constant. There was a problem that it was not secured.

  The present invention has been made paying attention to the above-mentioned circumstances, and the purpose of the present invention is to satisfy the conditions of the allowable disclosure specified by the user and reliably transmit the data according to the data element requested by the service provider. Disclosure degree control apparatus, disclosure degree control method and program are provided.

  In order to solve the above problems, the present invention takes the following measures.

  According to a first aspect of the present invention, there is provided data receiving means for receiving sensor data from a sensor system device for observing a user's state, a plurality of elements relating to disclosure of the sensor data, and a tolerance value for each element. A first request receiving means for receiving one request, a second request receiving means for receiving a second request designating at least one of the plurality of elements from the service provider, and designation by the second request Data processing means for converting the sensor data so as to fall within the allowable value range, and transmission means for transmitting the data converted by the data processing means for elements other than the elements to be processed.

  According to the present invention, a disclosure level control device, a disclosure level control method, and a program that satisfy the conditions of an allowable disclosure level specified by a user and can reliably transmit data according to a data element requested by a service provider. Can be provided.

The block diagram which shows the structure of the disclosure degree control apparatus in this embodiment. The figure which shows an example of the user request | requirement in this embodiment. The figure which shows an example of the servicer request | requirement in this embodiment. The figure which shows an example of the apparatus information in this embodiment. The flowchart which shows operation | movement when the servicer in this embodiment designates a transmission interval as a request element by a servicer request | requirement. The flowchart which shows operation | movement when the servicer in this embodiment designates observation time precision as a request | requirement element by a servicer request | requirement. The flowchart which shows operation | movement when the servicer in this embodiment designates observation time precision as a request | requirement element by a servicer request | requirement. The flowchart which shows operation | movement when the servicer in this embodiment designates observation value precision as a request | requirement element by a servicer request | requirement. The figure for demonstrating the data conversion in this embodiment. The figure which shows an example of the servicer request | requirement in this embodiment. The figure which shows an example of the user request | requirement in this embodiment. The figure which shows an example of the apparatus information in this embodiment. The figure which shows an example of the sensor data in this embodiment. The figure which shows an example of the data after the data conversion in this embodiment. The figure which shows an example of the sensor data in this embodiment. The figure which shows an example of the data after the data conversion in this embodiment.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram illustrating a configuration of a disclosure degree control apparatus 10 according to the present embodiment. As shown in FIG. 1, the disclosure degree control apparatus 10 according to the present embodiment includes a data reception unit 20, a database 22, a user request management unit 24, a servicer request management unit 26, a device information management unit 28, a data determination unit 30, and data processing. A unit 32 and a data transmission unit 34. The disclosure degree control device 10 includes an electronic device such as a computer, and includes a storage medium such as a memory and a hard disk device, a processor (CPU (Central Processing Unit)) that executes various programs stored in the memory, a keyboard, It has various input devices such as a mouse, an output device such as a display, and a communication device that controls communication with external electronic devices and various networks. The disclosure level control device 10 can implement the functional units shown in FIG. 1 by executing a basic program (OS (Operating System) or the like) or a disclosure level control program by a processor. The disclosure degree control device 10 in the present embodiment sequentially receives sensor data from various sensor system devices 12 for observing the state (behavior) of the user 14 by operating each function unit. Among the sensor data, it is possible to determine the data according to the data element that satisfies the condition of the allowable disclosure level designated by the user 14 and requested by the service provider (hereinafter referred to as “servicer 16”) and provide it to the servicer 16.

  The data receiving unit 20 receives sensor data from the sensor system device 12 owned by the user 14, and based on the network address included in the sensor data and the device information managed by the device information management unit 28, the sensor data Identify the type. In addition to various sensors such as a temperature sensor and an illuminance sensor, the sensor system device 12 includes an information device such as a smartphone, a position information sensor provided in the device, and the like. The sensor data includes not only detection data output from various sensors, but also device communication data output from information devices. The data receiving unit 20 creates a table for each type of sensor system device 12 and sensor data that transmitted the sensor data, and stores the sensor data and the time stamp included therein in the database 22. In the case of sensor data to which a time stamp is not attached, the data receiving unit 20 assigns a time stamp indicating the current time to the sensor data and stores it in the database 22.

  The database 22 accumulates sensor data received by the data receiving unit 20 and outputs the accumulated data in response to requests from the data determining unit 30 and the data processing unit 32.

  The user request management unit 24 has an interface (for example, GUI (Graphical User Interface)) for the user 14 to input a request to the disclosure degree control apparatus 10, and a request (data user) regarding data disclosure from the user 14 through this interface. Request) is received and stored. The user request related to data disclosure is for defining the data allowable disclosure level when sensor data is transmitted from the disclosure level control device 10 to the servicer 16, for example, the elements possessed by the sensor data and the allowable upper limit for each element. Specified by value. FIG. 2 shows an example of a user request. For example, as shown in FIG. 2, in the user request, an allowable upper limit value (10 minutes, 5 minutes, 0.0001) is specified for each of a plurality of elements (transmission interval, observation time accuracy, observation value accuracy).

The transmission interval indicates a time interval for transmitting data from the disclosure level control device 10 to the servicer 16. The observation time accuracy corresponds to the data observation interval, and is a transmission interval per data. In one data transmission from the disclosure level control device 10 to the servicer 16, the number of transmitted data is as follows. Calculated.
Observation time accuracy = (transmission interval) / (number of data transmitted at one time)
The observation value accuracy refers to the resolution of the observation value (for example, illuminance, GPS (Global Positioning System) coordinates, etc.) included in each sensor data. For example, when the temperature data output from the temperature sensor indicates the observed value in units of 25 ° C., 26 ° C., 27 ° C., etc., the observed value accuracy is 1.0 [° C.]. The observation value accuracy differs depending on the type of the sensor system device 12 (sensor data). The disclosure level control device 10 according to the present embodiment can change the accuracy of data transmitted from the disclosure level control device 10 to the servicer 16 by defining the data allowable disclosure level based on the observation value accuracy. Therefore, the accuracy of sensor data received from the user 14 (sensor system device 12) with high accuracy can be reduced and transmitted to the servicer 16, and the privacy of the user 14 can be avoided. Note that the elements (transmission interval, observation time accuracy, observation value accuracy) possessed by the sensor data shown in FIG. 2 are merely examples, and an arbitrary upper limit value can be specified by defining an arbitrary field (element) as necessary. Anyway.

  The servicer request management unit 26 has an interface (for example, GUI) for the servicer 16 to input a request to the disclosure level control device 10, and receives a sensor data acquisition request (hereinafter, “servicer request”) from each servicer 16. The servicer request received from each servicer 16 is stored. For example, as shown in FIG. 3, the servicer request is an arbitrary one of unique servicer IDs individually assigned to a plurality of servicers 16 and (data type, transmission interval, observation time accuracy, observation value accuracy). It is expressed in the form of a field of a request element for an element. Note that an arbitrary field may be defined and added to the servicer request if necessary.

  The device information management unit 28 has an interface (for example, GUI) for the user 14 or the servicer 16 to input device information to the disclosure degree control device 10 and inputs device information related to the sensor system device 12 owned by the user. The information is acquired from the network using the setting information automatic acquisition means such as UPnP (Universal Plug and Play). The input information is held inside this means. For example, as shown in FIG. 4, the device information is composed of data of each field of a unique device ID, a network address of the sensor device 12, a device name, and a sensor data type assigned to each of the plurality of sensor devices 12. Is done. For example, in FIG. 4, the sensor system device 12 having the device ID “02” is an “illuminance sensor” to which the network address “192.168.1.3” is assigned, and transmits “illuminance” data as sensor data. Indicates to do. Note that the device information may be added with data by defining fields other than those shown in FIG. 4 if necessary.

  The data determination unit 30 acquires the sensor data stored in the database 22 and stores the device information held by the device information management unit 28, the user request held by the user request management unit 24, and the servicer request management unit 26. Data to be transmitted to each servicer 16 is determined based on the service request. The elements that determine the data are, for example, numerical values of three elements of data transmission interval, observation time accuracy, and observation value accuracy.

  The data processing unit 32 converts the data to satisfy the elements of the data to be transmitted determined by the data determining unit 30 and transmits the converted data to the data transmitting unit 34.

  The data transmission unit 34 transmits the converted data from the data processing unit 32 to the servicer 16 corresponding to the transmission destination (for example, the information device used by the servicer 16).

Next, an outline of the operation of the disclosure level control apparatus 10 in the present embodiment will be described.
First, the disclosure degree control apparatus 10 inputs device information through the device information management unit 28 by an operation of an arbitrary target (for example, the user 14). Then, the disclosure degree control apparatus 10 receives sensor data from the sensor system device 12 (external device) through the data receiving unit 20. The data receiving unit 20 identifies the type of sensor data based on the network address included in the received sensor data and the device information held in the device information management unit 28, and the sensor system device 12 that has transmitted the sensor data. A table is created for each type of sensor data, and sensor data and a time stamp included therein are stored in the database 22. In the case of data without a time stamp, the data receiving unit 20 adds a time stamp indicating the current time to the sensor data and accumulates it in the database 22.

  Subsequent operations differ depending on elements (transmission interval, observation time accuracy, observation value accuracy) specified by the servicer request received from the servicer 16. Hereinafter, the operation according to each element specified by the servicer request will be individually described with reference to the flowcharts shown in FIGS. 5, 6A, 6B, and 7.

  In the flowcharts of FIGS. 5, 6A, 6B, and 7 described below, the “operation stop” from the user 14 or the servicer 16 can be received by interruption in all processes. When receiving the “operation stop”, the disclosure degree control device 10 stops the processing shown in the flowchart, and notifies the user 14 and the servicer 16 that the operation has been stopped, the user request management unit 24 and the servicer request. This is done through the management unit 26 interface.

First, an operation when the servicer 16 designates a transmission interval as a request element by a servicer request will be described with reference to the flowchart shown in FIG.
In this case, the servicer request management unit 26 acquires a servicer ID, a request data type i ^S , and a request transmission interval I ^S _i as a servicer request from the servicer 16 (step S1-1). For example, this corresponds to a service request (data type “temperature”, transmission interval “15 minutes”) corresponding to the servicer ID “01” shown in FIG. The servicer request management unit 26 holds the service request received from the servicer 16.

On the other hand, the user request management unit 24 receives, as a user request from the user 14, an upper limit value (I ^U _i , t ^U _i , r ^U _i) for each of a transmission interval that allows data transmission, an observation time accuracy, and an observation value accuracy. ) Is acquired and held (step S1-2). Hereinafter, the disclosure degree control apparatus 10 transmits to the servicer 16 out of the sensor data stored in the database 22 based on the servicer request held in the servicer request management unit 26 and the user request held by the user request management unit 24. The data to be processed is determined and data conversion processing described below is performed, and then transmitted to the servicer 16.

Next, the data determination unit 30 acquires request information (servicer request, user request) from the servicer request management unit 26 and the user request management unit 24 (step S1-3), and then configures transmission data (data type). (i ^S , I ^S _i , t ^U _i , r ^U _i ) are substituted for i, transmission interval I _i , observation time accuracy t _i , observation value accuracy r _i ), respectively (step S1-4).

Subsequently, an initial value 0 is set for the elapsed time Et for determination of the transmission interval (step S1-5), and after waiting for the length of the transmission interval I _i using the elapsed time Et (step S1-6, S1-7), the data determination unit 30 acquires the device information from the device information management unit 28, and has the requested data type i ^S determined from the device information to which the time stamp from Et = 0 to the current time is given. Sensor data is acquired from the database 22 (step S1-8).

The data processing unit 32, to the sensor data acquired by the data determining section 30 performs conversion of the data based on the observed value precision r _i (step S1-9), among the converted data, the observed values are different from each other counts the number _{n i} of the data (step S1-10). Note that specific data conversion by the data processing unit 32 will be described later.

The data processing unit 32 determines whether or not I _i ≧ t _i × n _i holds for the converted data.

In the case of not satisfied (NO in step S1-11), the data processing unit 32, the observed value accuracy _{r i} as large as the smallest unit of (step S1-12), again executes the processing of S1-9 To do.

Here, the minimum unit of the observed value accuracy r _i is determined from the significant number of the data stored in the database 22 (for example, if the observed value is 25.05, the minimum unit is set to 0.01). . The data processing unit 32, to increase the observed value accuracy r _i By performing the conversion of data, can reduce the accuracy of the observation value of the sensor data after conversion. In this case, as a result of data conversion for a plurality of sensor data, and increase the data value after the data conversion is the same, it will have fewer n _i of data observations are different from each other.

On the other hand, when I _i ≧ t _i × n _i is established (YES in step S1-11), the data processing unit 32 sets the time stamp of the converted data from “Et = 0 to the current time”. At the same time, a servicer ID indicating the destination servicer 16 is assigned (step S1-13), and the data is transmitted to the data transmission unit 34 (step S1-14).

  The data transmitting unit 34 transmits the converted data to the servicer 16 indicated by the servicer ID based on the servicer ID given to the converted data by the data processing unit 32 (step S1-15).

  As described above, when the request of the servicer 16 is a transmission interval, the disclosure degree control apparatus 10 according to the present embodiment performs data so that the observation accuracy becomes coarse so as to satisfy an element allowed by the user 14 within the transmission interval. And data is transmitted to the servicer 16.

  Next, the operation when the servicer 16 designates the observation time accuracy as a request element by a servicer request will be described with reference to the flowcharts shown in FIGS. 6A and 6B.

First, the servicer request management unit 26 acquires a servicer ID, a request data type i ^S , and a request observation time accuracy t ^S _i (step S2-1). For example, it corresponds to a service request (data type “illuminance”, observation time accuracy “5 minutes”) corresponding to the servicer ID “02” shown in FIG. The servicer request management unit 26 holds the service request received from the servicer 16.

On the other hand, the user request management unit 24 receives, as a user request from the user 14, an upper limit value (I ^U _i , t ^U _i , r ^U _i) for each of a transmission interval that allows data transmission, an observation time accuracy, and an observation value accuracy. ) Is acquired and held (step S2-2). Hereinafter, the disclosure degree control apparatus 10 transmits to the servicer 16 out of the sensor data stored in the database 22 based on the servicer request held in the servicer request management unit 26 and the user request held by the user request management unit 24. The data to be processed is determined and data conversion processing described below is performed, and then transmitted to the servicer 16.

Next, the data determination unit 30 acquires request information (servicer request, user request) from the servicer request management unit 26 and the user request management unit 24 (step S2-3), and then configures transmission data (data type). (i ^S , I ^U _i , t ^S _i , r ^U _i ) are assigned to i, transmission interval I _i , observation time accuracy t _i , and observation value accuracy r _i ), respectively (step S2-4).

Subsequently, an initial value 0 is set for the elapsed time Et1 for determining the transmission interval and the elapsed time Et2 for determining the observation time (step S2-5), and the observation correction time accuracy t _i is set using the elapsed time Et2. (Steps S2-6, S2-7), the data determination unit 30 acquires device information from the device information management unit 28, and is given a time stamp from Et2 = 0 to the current time. Then, the sensor data of the requested data type i ^S determined from the device information is acquired from the database 22 (step S2-8).

The data processing unit 32, to the sensor data acquired by the data determining section 30 performs conversion of the data based on the observed value precision r _i (step S2-9), among the converted data, the observed values are different from each other counts the number _{n i} of the data (step S2-10). Note that specific data conversion by the data processing unit 32 will be described later.

The data processing unit 32 determines whether or not n _i = 1 holds for the converted data, that is, whether or not data that can be regarded as one observation value is generated according to the observation time accuracy.

In the case of not satisfied (NO in step S2-11), the data processing unit 32, the observed value accuracy _{r i} as large as the smallest unit of (step S2-12), again executes the processing of S2-9 To do.

Here, the minimum unit of the observed value accuracy r _i is determined based on significant digits of the data stored in the database 22. The data processing unit 32, to increase the observed value accuracy r _i By performing the conversion of data, can reduce the accuracy of the observation value of the sensor data after conversion. In this case, as a result of data conversion for a plurality of sensor data, and increase the data value after the data conversion is the same, it will have fewer n _i of data observations are different from each other.

On the other hand, when n _i = 1 is satisfied (YES in step S2-11), the data processing unit 32 rewrites the time stamp of the converted data from “Et2 = 0 to the current time”, At the same time, a servicer ID indicating the destination servicer 16 is assigned (step S2-13).

Subsequently, the data processing unit 32 determines whether or not the elapsed time Et1 = I _i , that is, whether or not the current time is the data transmission time. If the condition is not satisfied (NO in step S2-14), the data processing unit 32 stores the converted data in the data determining unit 30 in step S2-13 (step S2-15), and sets Et2 = 0. Then (step S2-16), the process returns to S2-6.

  On the other hand, if the condition is satisfied (YES in step S2-14), the data processing unit 32 transmits all the converted data held by the data determination unit 30 to the data transmission unit 34 and then holds it by the data determination unit 30. All the converted data is deleted (step S2-17).

  The data transmission unit 34 transmits the converted data to the servicer 16 indicated by the servicer ID based on the servicer ID given to the converted data by the data processing unit 32 (step S2-18).

  As described above, when the request of the servicer 16 is the observation time accuracy, the disclosure degree control apparatus 10 according to the present embodiment has a coarse observation value accuracy so as to satisfy an element allowed by the user 14 within the observation time accuracy. The data is converted so that the data is transmitted to the servicer 16.

  Next, the operation when the servicer 16 designates the observation value accuracy as a request element by a servicer request will be described with reference to the flowchart shown in FIG.

First, the servicer request management unit 26 acquires a servicer ID, a requested data type i ^S , and a required observation value accuracy r ^S _i as a servicer request from the servicer 16 (step S3-1). For example, this corresponds to a service request (data type “location information”, observation accuracy “0.005”) corresponding to the servicer ID “03” shown in FIG. The servicer request management unit 26 holds the service request received from the servicer 16.

On the other hand, the user request management unit 24 receives, as a user request from the user 14, an upper limit value (I ^U _i , t ^U _i , r ^U _i) for each of a transmission interval that allows data transmission, an observation time accuracy, and an observation value accuracy. ) Is acquired and held (step S3-2). Hereinafter, the disclosure degree control apparatus 10 transmits to the servicer 16 out of the sensor data stored in the database 22 based on the servicer request held in the servicer request management unit 26 and the user request held by the user request management unit 24. The data to be processed is determined and data conversion processing described below is performed, and then transmitted to the servicer 16.

Next, the data determination unit 30 acquires request information (servicer request, user request) from the servicer request management unit 26 and the user request management unit 24 (step S3-3), and then configures transmission data (data type). (i ^S , I ^U _i , t ^U _i , r ^S _i ) are assigned to i, transmission interval I _i , observation time accuracy t _i , and observation value accuracy r _i ), respectively (step S3-4).

Subsequently, after setting an initial value 0 to the elapsed time Et for determination of the transmission interval (step S3-5), the data determination unit 30 acquires device information from the device information management unit 28 as needed, and Et = The sensor data of the requested data type i ^S determined from the device information, to which the time stamp from 0 to the current time is given, is acquired from the database 22 (steps S3-6 and S3-7).

Next, the data processing unit 32 substitutes the elapsed time Et for the transmission interval I _i (step S3-8), and then based on the observation value accuracy r _i for the sensor data acquired by the data determination unit 30. It performs conversion of the data (step S3-9), among the converted data, and counts the number _{n i} of data observations are different from each other (step S3-10). Note that specific data conversion by the data processing unit 32 will be described later.

The data processing unit 32 determines whether or not I _i ≧ t _i × n _i holds for the converted data.

  Here, when it is not established (NO in step S3-11), the data processing unit 32 executes the process of S3-6 again.

Here, the minimum unit of the observed value accuracy r _i is determined based on significant digits of the data stored in the database 22. The data processing unit 32, to increase the observed value accuracy r _i By performing the conversion of data, can reduce the accuracy of the observation value of the sensor data after conversion. In this case, as a result of data conversion for a plurality of sensor data, and increase the data value after the data conversion is the same, it will have fewer n _i of data observations are different from each other.

On the other hand, if I _i ≧ t _i × n _i is satisfied (YES in step S3-11), the data processing unit 32 sets the time stamp of the converted data from “Et = 0 to the current time”. At the same time, a servicer ID indicating the destination servicer 16 is assigned (step S3-12), and the data is transmitted to the data transmission unit 34 (step S3-13).

  The data transmission unit 34 transmits the converted data to the servicer 16 indicated by the servicer ID based on the servicer ID assigned to the converted data by the data processing unit 32 (step S3-14).

  As described above, when the request of the servicer 16 is the observation value accuracy, the disclosure degree control device 10 according to the present embodiment adjusts the data transmission interval so as to satisfy the elements allowed by the user 14 within the observation value accuracy. Then, the data is converted and the data is transmitted to the servicer 16.

Next, data conversion processing (steps S1-9, S2-9, S3-9) by the data processing unit 32 described above will be described.
In the disclosure degree control device 10 of the present embodiment, the data processing unit 32 converts the observation value by changing the observation value accuracy r _i .

FIG. 8 shows an example of data conversion. FIG. 8A shows an example of sensor data received during the observation period 0: 01-0: 10. As shown in FIG. 8A, there are 10 observed values, and the number of different data _ni is 10. Currently, the observed value accuracy r _i = 0.1, but in order to reduce the number n _i of data, a case is assumed where the observed value accuracy r _i = 2.0. That is, all the observed values are converted so as to be the nearest multiples of 2. As a result, as shown in FIG. 8B, the ten pieces of sensor data become 24 or 26, respectively. Therefore, by collecting the data of the same observed value (24 or 26), the number of data n _i = 2 can be obtained as shown in FIG. 8C.

Next, a case where there is a plurality of requests from the servicer 16 and conflicts with a user request from the user 14 will be described.
For example, the user request from the user 14 is the content shown in FIG. 2, and the servicer request from the servicer 16 is the content of the servicer ID = 04 shown in FIG. 9 (data type “location information”, transmission interval “15 minutes”, It is assumed that the observation value accuracy is “0.0001” and the highest priority element is “transmission interval”).

This servicer 16 uses the location information with an accuracy of 0.0001 every 15 minutes (the location can be estimated with an accuracy of about 50 m ² ), and provides a service that pushes and distributes regional information according to the location to the user 14. Assume a case. When inputting a servicer request, the servicer 16 inputs one element having the highest priority among a plurality of elements (for example, transmission interval, observation accuracy). In this case, it is assumed that “transmission interval” is input with the highest priority.

In this case, the disclosure degree control apparatus 10 operates according to the flowchart shown in FIG. 5 because the “transmission interval” element is designated as the highest priority in the servicer request. That is, the disclosure degree control apparatus 10 starts the processing of the flowchart shown in FIG. 5 from time 0:00, and acquires the above settings in steps S1-1 to S1-3, so that (data type i, transmission interval) (Position information, 15 minutes, 5 minutes, 0.0001) is set as I _i , observation time accuracy t _i , and observation value accuracy r _i ).

Assume that the sensor data acquired in step S1-8 after waiting until time 0:15 in step S1-7 is the data shown in FIG. 12, for example. When this data is transmitted as it is, the observation time accuracy t _i = 1 (minutes), and the user's request t _i = 5 (minutes) is not satisfied (steps S1-9 to S1-11). For this reason, the disclosure degree control apparatus 10 adjusts the observation value accuracy r _i (step S1-12) and sets the observation value accuracy r _i = 0.000822 as shown in FIG. _{As i} = 3, data satisfying the user request can be obtained.

The data step S1-14, when transmitting along the S1-15, observed value accuracy _{r i} of the data is larger than the observed value accuracy _{r i} the servicer 16 is requested. Therefore, the disclosed degree control device 10, with respect to servicer 16, in addition to the transformed data and a time stamp, and sends data representing the observed value accuracy r _i at the same time, notifies that the observations accuracy is lowered. At the same time, for the user 14, the request from the servicer 16 through the interface of the user request management unit 24 has the observed value accuracy r _i = 0.0001, but actually the observed value accuracy r _i = It is notified that 0.000822 is the limit and the request of the servicer 16 is not satisfied. As a result, if the user 14 wants to receive more services from the servicer 16, the user request can be relaxed.

Next, a case where a user request is set for each servicer will be described.
When the user determines that more data may be disclosed to the specific servicer 16, the user request can be specified by specifying the specific servicer 16. For example, as illustrated in FIG. 10, the disclosure degree control apparatus 10 inputs a user request to which a servicer ID indicating a specific servicer 16 (user request application destination) is added by the user request management unit 24. The user request management unit 24 holds the service request to which the servicer ID is added. In this case, the disclosure level control apparatus 10 sends a user request corresponding to the servicer ID acquired in step S1-1 in FIG. 5, step S2-1 in FIG. 6A, and step S3-1 in FIG. 7 to step S1 in FIG. -3, step S2-3 in FIG. 6A, and step S3-3 in FIG. 7, respectively, and the following operations similar to those described above are executed.

Next, a case where qualitative data is handled will be described.
As described above, qualitative data may be used instead of quantitative numerical data for the observed value. In this case, for example, the sensor system device 12 that observes the temperature analyzes the observed sensor data (temperature), and outputs qualitative user information about the user 14 to the disclosure degree control device 10 as the analysis result. Shall. For example, the qualitative user information includes “under study”, “drinking”, “resting”, “sleeping (conscious)”, “sleeping (unconscious)”, and the like.

  Here, when the user request has the contents shown in FIG. 2 and the servicer request is the servicer ID = 01 (data type “temperature”, transmission interval “15 minutes”) shown in FIG. As shown in FIG. 14, qualitative user information output from the sensor system device 12 is received. FIG. 14 shows user information (Status) received every minute from time 0:01 to 0:15.

The disclosure level control device 10 cannot define the observed value accuracy r _i as an absolute value, but this concept can be obtained by setting conceptual system data indicating the conceptual system of words in a system (for example, the device information management unit 28) in advance. Observed values can be abstracted using systematic data. For example, as shown in FIG. 11, as system information corresponding to the device ID “01” (indicating the sensor system device 12 for observing the temperature) as the device information, for example, “Waking up = {During studying, eating and drinking, "During break, going out, sleeping""is defined, and" sleeping = {sleeping (conscious), sleeping (unconscious)} "is defined.

The data processing unit 32 refers to the conceptual system data of the device information, converts the sensor data (user information Status) received from the sensor system device 12 shown in FIG. 14 into the data shown in FIG. it is possible to reduce the number of data n _i. That is, the data processing unit 32 obtains the conceptual system data in step S1-8 in FIG. 5 and uses it in the data conversion in step S1-9 to search for a conceptual system that is one level higher than the user information. Can be converted (superiorized). For example, the user information “under study” can be converted to “being up” of the higher-level concept system. When the conceptual system data is not recorded in the system in advance, the disclosure degree control device 10 can store a concept dictionary (semantic dictionary) from an external device or a network (such as the Web) through the external communication function of the device information management unit 28. Data may be acquired and used in the same manner as the conceptual system data shown in FIG. As a result, the disclosure degree control device 10 can transmit data that satisfies the user request and the servicer request simultaneously to the servicer 16.

  In this way, in the disclosure level control device 10 according to the present embodiment, when sensor data indicating the state of the user 14 or the like is transmitted to the service provider (servicer 16), the user and the service provider each time data is transmitted. Calculates the allowable disclosure level of data based on the requested data element, and if the data allowable disclosure upper limit specified by the user is not satisfied, the data element other than the element specified by the service provider is preferentially operated. Then, by keeping the data elements within the data allowable disclosure range, it is possible to mediate the data disclosure requests of the user and the service provider. The servicer 16 can reliably acquire the data of the requested element while satisfying the condition of the user request by designating at least one element of the plurality of data elements in the servicer request.

  In addition, the disclosure degree control apparatus 10 according to the present embodiment increases the number and types of sensor system devices 12, thereby changing the tendency of sensor data, the transmission interval, and the like, exceeding the user's allowable data disclosure degree. Even in this case, the data can be dynamically converted and transmitted so as to reflect this and not exceed the allowable disclosure level. As a result, the user 14 can receive a service utilizing sensor data using data satisfying both the data permissible disclosure level and the servicer request specified by the user 14 without worrying about time and effort.

  The methods described in the above-described embodiments are disclosed as a disclosure level control program that can be executed by a computer, such as a magnetic disk (flexible disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), and a semiconductor memory (ROM). , RAM, flash memory, etc.), etc., or can be transmitted and distributed via a communication medium. The program stored on the medium side also includes a setting program that configures in the computer software means (including not only the execution program but also a table and data structure) that is executed by the computer. A computer that implements the present apparatus reads the program recorded on the recording medium, constructs software means by a setting program in some cases, and executes the above-described processing by controlling the operation by the software means. The recording medium referred to in this specification is not limited to distribution, but includes a storage medium such as a magnetic disk or a semiconductor memory provided in a computer or a device connected via a network.

  Further, the present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

  DESCRIPTION OF SYMBOLS 10 ... Disclosure degree control device, 12 ... Sensor system device, 14 ... User, 16 ... Servicer, 20 ... Data receiving unit, 22 ... Database, 24 ... User request management unit, 26 ... Servicer request management unit, 28 ... Device information management 30, data determination unit, 32, data processing unit, 34, data transmission unit.

Claims (4)

Data receiving means for receiving sensor data from a sensor system device for observing a user's condition;
First request receiving means for receiving a first request including a plurality of elements relating to the disclosure of the sensor data and an allowable value for each element;
Second request receiving means for receiving a second request designating at least one of the plurality of elements from the service provider;
Data processing means for converting the sensor data so as to fall within the allowable range for elements other than the elements specified by the second request;
A disclosure level control apparatus comprising: a transmission unit that transmits data converted by the data processing unit.   The disclosure level control apparatus according to claim 1, wherein at least one of the plurality of elements includes an observation value accuracy of the sensor data. A data receiving step for receiving sensor data from a sensor system device for observing a user's condition;
Receiving a first request including a plurality of elements relating to the disclosure of the sensor data and an allowable value for each element;
A second request receiving step of receiving a second request designating at least one of the plurality of elements from the service provider;
A data processing step of converting the sensor data so that it falls within the allowable range for elements other than the elements specified by the second request;
A disclosure level control method comprising: a transmission unit that transmits data converted by the data processing unit.   The program which makes the computer with which the said disclosure degree control apparatus performs the process which each means with which the disclosure degree control apparatus of Claim 1 comprises is performed.

Images