JP2018156315A - Terminal device, control method, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve safety when an application installed in a terminal device accesses user information stored in the terminal device.SOLUTION: A terminal device includes: a start period recording part for recording a period when an application is started for each application according to user's start operation; an inquiry part for selecting an application in which a degree of activation is less than a standard based on recorded data in the start period recording part and inquiring a user regarding agreement for access of the selected application to user data; and a control part for controlling access to the user data from the selected application, based on an inquiry result of the inquiry part.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a terminal device, a control method, and a computer program.

  In many services, a user who wants to use a service can apply for the desired service from his / her terminal device. In general, when a user wishes to use a service, a service application screen is transmitted from the service provider. The service application screen displays user information determined by the service provider and acquired in the service. It is required to agree to the privacy policy that defines the handling. Here, the user information is, for example, personal information such as name, date of birth, address, telephone number, location information, service usage history, or individual information that can identify an individual by combining a plurality of pieces of information, This refers to information related to individual behavior and privacy information that is not desired to be disclosed. The handling of user information is, for example, whether or not the acquired user information is provided by a third party and a storage period. The user is required to agree after understanding the contents.

  Regarding a technique for accessing personal data, a technique for determining whether or not to permit access to a user's resource based on the access policy of the user when access to the user's resource is detected is known. (For example, refer to Patent Document 1).

JP 2014-178727 A

  An improvement in safety when an application installed in a terminal device accesses user information stored in the terminal device is an issue.

  The present invention has been made in view of such circumstances, and its purpose is to improve safety when an application installed in a terminal device accesses user information stored in the terminal device. Is to plan.

According to one aspect of the present invention, a start time recording unit that records the start time of an application in response to a start operation of a user for each application, and an application with a start degree less than a reference is recorded in the start time recording unit An inquiry unit that inquires of the user about consent that the selected application accesses user data, and control that controls access to the user data from the selected application based on a query result of the inquiry unit A terminal device.
In one aspect of the present invention, the application whose activation degree is lower than a reference is an application whose predetermined period or more has elapsed since the last activation time, or an application whose activation number within the predetermined period is less than the predetermined number. It is a terminal device.
In one aspect of the present invention, the control unit selects an application of the same type based on information on the type of application, and among the selected applications of the same type, there is an application whose activation degree is higher than a reference. Whether or not there is an application whose activation degree is higher than the reference, and the application of the same type other than the application whose activation degree is higher than the reference is determined. A terminal device that restricts access to user data from an application.
In one aspect of the present invention, the application having a degree of activation higher than a reference is an application that is less than a predetermined period from the time of the last activation, or an application in which the number of activations within a predetermined period is a predetermined number or more. It is a terminal device.
One aspect of the present invention further includes an agreement recording unit that records whether or not a user has consented to a privacy policy of the application, and the control unit converts the application from an application other than an application whose activation degree is less than a reference to user data. It is a terminal device that controls access based on the recording data of the consent recording unit.
One aspect of the present invention further includes an inquiry recording unit that records an inquiry result of the inquiry unit for each application, and the inquiry unit converts the application with user consent recorded in the consent recording unit into user data. It is a terminal device that reflects a user's consent inquiry result on access to the consent recording unit based on the recording data of the inquiry recording unit.

  According to one aspect of the present invention, there is provided an activation time recording step in which the terminal device records, for each application, an application activation time according to a user's activation operation, and the terminal device includes an application with a degree of activation less than a reference. An inquiry step that selects based on the recording data of the activation time recording step, and inquires the user about the consent that the selected application accesses the user data; and the terminal device transmits the selected application to the user data. A control step of controlling access based on a query result of the query step.

  According to one aspect of the present invention, an activation time recording function that records, for each application, a time when an application is activated in response to a user's activation operation, and an application with a degree of activation less than a reference are stored in the activation time recording function. An inquiry function that selects based on the recorded data and inquires the user about consent to access the user data by the selected application, and accesses the user data from the selected application based on the inquiry result of the inquiry function A computer program for realizing a control function to be controlled.

  According to the present invention, it is possible to improve safety when an application installed in a terminal device accesses user information stored in the terminal device.

It is a figure which shows the structural example of the communication system which concerns on one Embodiment. It is a block diagram which shows the example of a rough function structure of the terminal device 10N which concerns on one Embodiment. It is a figure which shows the structural example of the starting time recording data which the starting time recording part 2010 which concerns on one Embodiment records. It is a figure which shows the structural example of the consent recording data which the consent recording part 2040 which concerns on one Embodiment records. It is a figure which shows the structural example of the inquiry recording data which the inquiry recording part 2050 which concerns on one Embodiment records. It is a flowchart which shows the example of the procedure of the control method which concerns on one Embodiment. It is a figure which shows the structural example of the consent recording data which the consent recording part 2040 which concerns on one Embodiment records. It is a figure which shows the structural example of the application classification data which concern on one Embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram illustrating a configuration example of a communication system according to an embodiment. 1, the communication system includes terminal devices 101, 102,..., 10N (N is an integer of N> 0), privacy protection device 100, service providing devices T01, T02,. M is an integer of M> 0). The privacy protection device 100 is connected to a communication network 20 such as a mobile communication network, and terminal devices 101, 102,..., 10N are connected to the communication network 20. The privacy protection device 100 is connected to a communication network 50 such as the Internet, and service providing devices T01, T02,..., T0M are connected to the communication network 50.

  Note that the communication network 20 and the communication network 50 may be the same network.

  The service providing device T0M is used by a service provider to provide various services to the terminal device 10N. Hereinafter, an arbitrary terminal device among the terminal devices 101, 102,..., 10N is referred to as a terminal device 10N. Of the service providing devices T01, T02,..., T0M, an arbitrary service providing device is referred to as a service providing device T0M.

  The terminal device 10N is used by a user who desires to use the service provided by the service providing device T0M for setting operation as to whether or not the user information of the user may be provided to the service provider, and for using the service.

  The privacy protection device 100 holds information (privacy policy agreement information) indicating whether or not the user of the terminal device 10N agrees with the privacy policy of the service provider of the service providing device T0M. The privacy protection device 100 executes information processing related to protection of the privacy of the user of the terminal device 10N based on the privacy policy agreement information. For example, the privacy protection device 100 may control communication between the service providing device T0M and the terminal device 10N based on the privacy policy agreement information.

  FIG. 2 is a block diagram illustrating a schematic functional configuration example of the terminal device 10N according to the present embodiment. In FIG. 2, the terminal device 10N includes an activation time recording unit 2010, an inquiry unit 2020, a control unit 2030, an agreement recording unit 2040, an inquiry recording unit 2050, a user data storage unit 2060, and M application apps1. ˜appM and an application type data storage unit 2070. Hereinafter, when the applications app1 to appM are not particularly distinguished, they are referred to as applications app.

  The terminal device 10N according to the present embodiment may be realized by dedicated hardware, or is configured by a CPU (Central Processing Unit) and a memory, and realizes the functions of each unit. The function may be realized by the CPU executing a computer program for doing so. For example, the terminal device 10N may be a mobile communication terminal device such as a smartphone or a tablet computer (tablet PC), or a stationary communication terminal device (for example, a stationary personal computer, a cable, It may be a set top box (STB) for television broadcasting or the like.

  The activation time recording unit 2010 records the time when the application app is activated for each application app in accordance with the activation operation of the user. FIG. 3 is a diagram illustrating a configuration example of the start time recording data recorded by the start time recording unit 2010 according to the present embodiment. In FIG. 3, the activation time recording data records the activation time of the application app in association with the identification information (application ID) of the application app. In the activation time record data, one or a plurality of activation times are recorded for one application app. For one application app, for example, the start time of a predetermined period (for example, the past one year) may be recorded in the start time record data. Alternatively, for one application app, for example, only the latest start time may be recorded in the start time record data.

  The inquiry unit 2020 selects an application app whose activation degree is lower than the reference based on the activation time recording data of the activation time recording unit 2010, and inquires the user about the consent that the selected application app accesses user data. Do. The application app whose activation degree is lower than the reference may be, for example, an application app for which a predetermined period (for example, three months) has elapsed since the last activation time. Alternatively, the application app whose activation degree is lower than a reference may be an application whose activation number within a predetermined period (for example, one month) is less than a predetermined number (for example, one), for example.

  The control unit 2030 controls the terminal device 10N. The control unit 2030 controls access to user data from the application app selected by the inquiry unit 2020 (application app whose activation degree is lower than the reference) based on the inquiry result of the inquiry unit 2020.

The consent recording unit 2040 records the presence / absence of the user's consent to the privacy policy of the application app. FIG. 4 is a diagram illustrating a configuration example of consent record data recorded by the consent recording unit 2040 according to the present embodiment. In FIG. 4, in the consent record data, “Yes” or “No” of the user's consent to the privacy policy of the application app is recorded in association with the application ID. The application app in which the consent of the user is recorded in the consent record data represents that the user of the terminal device 10N has agreed to the privacy policy of the application app. On the other hand, for the application app in which the absence of user consent is recorded in the consent record data, it represents that the user of the terminal device 10N does not agree with the privacy policy of the application app.
The control unit 2030 controls access to user data from an application app other than the application app whose activation degree is less than the reference based on the consent record data.

  The inquiry recording unit 2050 records the inquiry result of the inquiry unit 2020 for each application app. FIG. 5 is a diagram illustrating a configuration example of inquiry record data recorded by the inquiry recording unit 2050 according to the present embodiment. In FIG. 5, the inquiry record data includes “Yes” or “No” in the consent of the query result obtained by associating the user with the application ID in association with the application ID. To be recorded. The application app in which the presence of user consent is recorded in the inquiry record data indicates that the user of the terminal device 10N has agreed that the application app accesses user data. On the other hand, in the application record in which the absence of user consent is recorded in the inquiry record data, it represents that the user of the terminal device 10N does not agree that the application app accesses the user data.

  The inquiry unit 2020 may make an inquiry about the user's consent to access the user data from the application app in which the consent is recorded in the consent record data based on the inquiry record data. The inquiry unit 2020 may reflect the inquiry result in the consent record data.

  The user data storage unit 2060 stores user data. User data is data including user information. The user information is information on a user registered as a user in the terminal device 10N. Examples of user information include name, date of birth, address, telephone number, location information, service usage history, and the like. Examples of user information include information related to user behavior and privacy information that is not desired to be disclosed.

  The application app is an application installed in the terminal device. The application app is activated by a user's activation operation or is automatically activated.

  The application app may be an application that communicates with the service providing apparatus T0M. For example, the application app may be a service application provided by the service providing apparatus T0M. For example, the application app may be an application that accesses user data stored in the user data storage unit 2060 when the service providing apparatus T0M provides a service. For example, when the service providing device T0M provides a service, the application app accesses user data stored in the user data storage unit 2060 to acquire user information used for the service, and acquires the acquired user information. May be an application that transmits to the service providing apparatus T0M.

  For example, the application app may be an application that provides a service by itself. For example, the application app may be an application that accesses user data stored in the user data storage unit 2060 when the application app provides the service alone. For example, when the application app provides a service alone, the application app accesses user data stored in the user data storage unit 2060 to acquire user information used for the service, and acquires the acquired user information. It may be an application to be used.

  The application type data storage unit 2070 stores identification information (application type ID) for identifying the type of each application app.

  Next, a control method according to the present embodiment will be described with reference to FIG. FIG. 6 is a flowchart illustrating an example of the procedure of the control method according to the present embodiment.

(Step S11) The start time recording unit 2010 records the start time of the application app according to the start operation of the user in the start time record data for each application app. The application app is activated by a user's activation operation or is automatically activated. The activation time recording unit 2010 detects that the user has performed an operation (application activation operation) for activating the application app on the terminal device 10N. The application activation operation is registered in the activation time recording unit 2010 in advance. As the application activation operation, for example, when an icon for activating the application app is displayed on the display screen of the touch panel of the terminal device 10N, the user designates (touches) the icon.

  When the activation time recording unit 2010 detects an application activation operation, the activation time recording unit 2010 records the activation time of the application app in the activation time recording data in association with the application ID of the application app activated by the application activation operation. In the example of the start time record data in FIG. 3, the start time of the application app is the date when the application app is started. When the same application app is started a plurality of times on the same day, only one start date may be recorded in the start time record data, or a plurality of start dates may be recorded for the start count. You may record in starting time recording data. Note that the start time of the application app may include the date and time when the application app is started.

(Step S12) The inquiry unit 2020 determines whether or not the activation level of the application app is smaller than the activation level criterion based on the activation time record data. The activation degree criterion is set in advance in the terminal device 10N. The application app whose activation degree is lower than the activation degree reference may be, for example, an application app for which a predetermined period (for example, three months) or more has elapsed since the last activation time. Alternatively, the application app whose activation level is lower than the activation level criterion may be, for example, an application whose activation count within a predetermined period (for example, one month) is less than a predetermined count (for example, one).

  As a result of the determination in step S12, if the degree of activation of the application app is smaller than the activation degree criterion, the process proceeds to step S14, and if not, the process proceeds to step S13.

(Step S13) The control unit 2030 obtains user data from an application app (hereinafter referred to as a high frequency activation application app) other than an application app (hereinafter referred to as a low frequency activation application app) whose activation degree is lower than the activation degree reference. Control access to the file based on consent record data.

  When the consent presence / absence associated with the application ID of the high-frequency activation application app is “Yes” in the consent record data, the control unit 2030 stores the consent data in the user data storage unit 2060 from the high-frequency activation application app. Does not restrict access to existing user data. As a result, the high-frequency activation application app whose consent “present” is recorded in the consent record data can access the user data stored in the user data storage unit 2060 according to its own privacy policy.

  On the other hand, in the consent record data, when the consent presence / absence associated with the application ID of the high frequency activation application app is “No”, the control unit 2030 sends the high frequency activation application app to the user data storage unit 2060. Restrict access to stored user data. As the access restriction, for example, the user data stored in the user data storage unit 2060 may not be accessible from the frequently activated application app. The user data to be made inaccessible from the high-frequency activation application app may be all user data or some of the user data stored in the user data storage unit 2060. May be. For example, user data including user information related to user privacy among the user data stored in the user data storage unit 2060 may not be accessible from the high-frequency activation application app. As user information related to user privacy, for example, personal information such as name, date of birth, address, telephone number, location information, service usage history, such as personal information that can identify an individual by combining a plurality of pieces of information, , Privacy information that is information about personal behavior and information that does not want to be disclosed. As a result, the high-frequency activation application app whose consent “none” is recorded in the consent record data is restricted from accessing the user data stored in the user data storage unit 2060 even in accordance with its own privacy policy. .

  After step S13, the process of FIG.

(Step S14) The inquiry unit 2020 inquires of the user about consent that the low-frequency activation application app accesses user data. For example, the inquiry unit 2020 displays an agreement inquiry message on the display screen of the terminal device 10N that allows the user to select whether the low-frequency activation application app agrees to access the user information or not. The user can select to agree or disagree with the consent inquiry message.
In the above example, the inquiry unit 2020 displays the consent inquiry message on the display screen of the terminal device 10N. However, the present invention is not limited to this. For example, the terminal device 10N may display a warning message on the display screen, and may display a screen on which the presence or absence of consent can be selected by the user's arbitrary selection.
In addition, a message that recommends changing to a setting that allows the provision of user information may be displayed on the display screen for a service frequently used by the user at a relatively short interval (more than the standard use frequency). .

(Step S15) The inquiry recording unit 2050 records the inquiry result of the inquiry unit 2020 in the inquiry record data for each low-frequency activation application app. For example, the inquiry unit 2020 records the consent “present” in the inquiry record data in association with the application ID of the selected low-frequency activation application app that agrees with the consent inquiry message. On the other hand, the inquiry unit 2020 records the agreement “none” in the inquiry record data in association with the application ID of the selected low-frequency activation application app that does not agree with the consent inquiry message.

(Step S16) The control unit 2030 controls access to the user data from the low-frequency activation application app based on the inquiry record data.

  When the consent presence / absence associated with the application ID of the low-frequency activation application app is “Yes” in the inquiry record data, the control unit 2030 stores the agreement data in the user data storage unit 2060 from the low-frequency activation application app. Does not restrict access to existing user data. Thus, the low-frequency activation application app whose consent “present” is recorded in the inquiry record data can access the user data stored in the user data storage unit 2060 in accordance with its own privacy policy.

  On the other hand, in the inquiry record data, when the consent presence / absence associated with the application ID of the low-frequency activation application app is “no”, the control unit 2030 sends the low-frequency activation application app to the user data storage unit 2060. Restrict access to stored user data. As the access restriction, for example, the user data stored in the user data storage unit 2060 may not be accessible from the infrequently activated application app. The user data to be made inaccessible from the low-frequency activation application app may be all user data stored in the user data storage unit 2060 or a part of the user data. May be. For example, user data including user information related to user privacy among user data stored in the user data storage unit 2060 may not be accessible from the low-frequency activation application app. User information related to the user's privacy is the same as in the case of the high-frequency activation application app described above. As a result, the low-frequency activation application app whose consent “none” is recorded in the inquiry record data is restricted from accessing user data stored in the user data storage unit 2060 even in accordance with its own privacy policy. .

(Step S <b> 17) The inquiry unit 2020 displays the inquiry result of the user's consent for accessing the user data from the low-frequency activation application app in which the user's consent “Yes” is recorded in the consent record data in the inquiry record data. Based on the consent record data. The inquiry unit 2020 searches the inquiry record data for the application ID of the low-frequency activation application app in which the consent of the user is recorded in the consent record data. The inquiry unit 2020 extracts, from the application IDs discovered as a result of the search, an application ID in which the consent “none” is recorded in the inquiry record data. The inquiry unit 2020 changes the record of the consent record data from the agreement “Yes” to the agreement “No” for the extracted application ID.

  For example, the application app having the application ID “appid2” with the consent “present” illustrated in the consent record data illustrated in FIG. 4 has the last start time “May 2016” as illustrated in the start time record data illustrated in FIG. It is the low-frequency activation application app that has passed a predetermined period (three months as an example here) from “10 days” (as an example here, today is March 5, 2017). The inquiry unit 2020 obtains an answer from the user that the user does not agree as a result of inquiring the user about the low-frequency activation application app “appid2” accessing user data. As a result, the inquiry unit 2020 records the agreement “none” in association with the application ID “appid2” as illustrated in the inquiry record data of FIG. 5 based on the inquiry result “I do not agree”. Then, the inquiry unit 2020 indicates whether or not there is consent of the consent record data for the application ID “appid2” from FIG. Changed to “No” consent after renewal. As a result, the inquiry result of the inquiry unit 2020 is reflected in the record of the consent record data.

  After step S17, the process of FIG.

  According to the present embodiment, it is determined whether or not the application app is a low-frequency startup application app, and the low-frequency startup application app as a result of the determination makes an inquiry about consent to the user to access user data. Access to the user data from the frequency activation application app is controlled based on the inquiry result. The low-frequency activation application app is an application app that is used less frequently by the user. For this reason, conventionally, even if the user's intention has changed after the user has agreed to access the user data at the time of installation of the infrequently activated application app or at the first activation, there is no opportunity to confirm the presence or absence of consent. There was a case.

However, according to the present embodiment, the access to the user data from the infrequently activated application app is controlled based on the result of the inquiry to the user regarding the infrequently activated application app accessing the user data. Accordingly, it is possible to improve the safety when the application app installed in the terminal device 10N accesses the user information included in the user data.
As a modification of step S12 described above, when the application app is activated, the inquiry unit 2020 records the activation degree after the determination of the previous activation degree of the application app as the activation time record. It may be calculated based on the data, and it may be determined whether the calculated degree of activation is less than the activation degree criterion. In this case, the time when the degree of activation is determined in association with the application ID is also recorded in the activation time recording data. In this way, it is possible to confirm the user's consent for the application app that has not been activated for a relatively long period of time, and to reflect the latest intention of the user's consent in the access control.

[Modification of control method]
A modification of the control method according to the present embodiment will be described with reference to FIG. FIG. 8 is a diagram showing a configuration example of application type data according to the present embodiment. The application type data is stored in the application type data storage unit 2070. In FIG. 8, in the application type data, the application type ID of the application app and the presence / absence of access restriction of the same type application are recorded in association with the application ID of the application app.

  The control unit 2030 extracts the application ID of the same application type ID from the application type data. Based on the activation time record data, the control unit 2030 determines whether or not there is an application app whose activation degree is greater than the activation degree criterion among the application applications having the same application type ID. If there is an application app whose activation degree is higher than the activation degree criterion as a result of the determination, the control unit 2030 associates with the application ID of the application app whose activation degree is greater than the activation degree criterion in the application type data. Application of the same application type ID other than the application app whose activation degree is higher than the activation degree reference (hereinafter referred to as a non-high frequency activation application app). The access restriction “present” of the same type application is recorded in association with the ID. The control unit 2030 restricts access to the user data from the non-high-frequency activation application app based on whether or not there is an access restriction of the same kind application in the application type data.

  As the access restriction, for example, the user data stored in the user data storage unit 2060 may not be accessible from the non-high frequency activation application app. The user data to be made inaccessible from the non-high frequency activation application app may be all user data among user data stored in the user data storage unit 2060, or a part of user data. There may be. For example, user data including user information related to user privacy among user data stored in the user data storage unit 2060 may not be accessible from the non-high frequency activation application app. User information related to the user's privacy is the same as in the case of the high-frequency activation application app described above. As a result, among the plurality of applications having the same application type ID, the non-high frequency activation application app is restricted from accessing the user data stored in the user data storage unit 2060 even if it conforms to its own privacy policy. .

  Whether there is an application app whose degree of activation is lower than the activation degree criterion is the activation degree criterion (second activation degree criterion) when determining whether there is an application app whose activation degree is higher than the activation degree criterion It may be the same as the activation degree criterion (first activation degree criterion) when determining whether or not, or may be different. The second activation degree criterion is set in advance in the terminal device 10N. The application app whose activation degree is higher than the second activation degree criterion may be, for example, an application app whose progress is less than a predetermined period (for example, one month) from the last activation time. Alternatively, the application app whose degree of activation is greater than the activation degree reference may be an application whose number of activations within a predetermined period (for example, one month) is equal to or greater than a predetermined number (for example, five).

  According to this modification, when there is an application app having a degree of activation greater than the second activation degree reference among a plurality of applications of the same type, the non-high frequency activation application app of the same type is used. Restrict access to user data. Thereby, the access to the user information from the same type of application app can be reduced while maintaining the convenience of the user for the certain type of application app. This has the effect of improving safety when an application installed in the terminal device accesses user information stored in the terminal device.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to this embodiment, The design change etc. of the range which does not deviate from the summary of this invention are included.

Note that a computer program for realizing the functions of each device described above may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read into a computer system and executed. Here, the “computer system” may include an OS and hardware such as peripheral devices.
“Computer-readable recording medium” refers to a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a DVD (Digital Versatile Disc), and a built-in computer system. A storage device such as a hard disk.

Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 20 ... Communication network, 50 ... Communication network, 101-10N ... Terminal device, T01-T0M ... Service providing device, 100 ... Privacy protection device, 2010 ... Startup time recording part, 2020 ... Inquiry part, 2030 ... Control part, 2040 ... Consent recording unit, 2050 ... inquiry recording unit, 2060 ... user data storage unit, app1 to appM ... application, 2070 ... application type data storage unit

Claims (8)

A start time recording unit that records the start time of each application according to the user's start operation;
An inquiry unit that selects an application with a degree of activation less than a reference based on the recording data of the activation time recording unit, and inquires the user about the consent that the selected application accesses user data; and
A control unit that controls access to user data from the selected application based on a query result of the query unit;
A terminal device comprising: The application with the degree of activation less than the reference is an application that has passed a predetermined period or more from the time of the last activation, or an application whose activation number within a predetermined period is less than the predetermined number of times,
The terminal device according to claim 1. The control unit selects the same type of application based on the information on the type of application, and determines whether or not there is an application with a degree of activation greater than a reference among the plurality of selected applications of the same type. If there is an application that is determined based on the recording data of the recording unit and the activation degree is higher than the reference, access to the user data from the same type of application other than the application that has the activation degree higher than the reference Limit,
The terminal device according to claim 1. The application whose degree of activation is higher than the reference is an application that is less than a predetermined period from the time of the last activation, or an application that has a predetermined number of activations within a predetermined period.
The terminal device according to claim 3. It further includes an agreement recording unit that records the presence or absence of user consent to the privacy policy of the application,
The control unit controls access to user data from an application other than an application whose activation degree is less than a reference based on the recording data of the consent recording unit;
The terminal device according to claim 1. A query recording unit that records the query result of the query unit for each application;
The inquiry unit obtains a user consent inquiry result for accessing user data from an application in which the user consent is recorded in the consent recording unit, based on the recorded data of the inquiry recording unit. Reflected in the department,
The terminal device according to claim 5. A start time recording step in which the terminal device records the start time of the application in response to the user's start operation for each application;
An inquiry step in which the terminal device selects an application having a degree of activation less than a reference based on the recording data of the activation time recording step, and inquires the user for consent that the selected application accesses user data; ,
A control step in which the terminal device controls access to user data from the selected application based on a query result of the query step;
Control method. On the computer,
A start time recording function for recording the start time of the application for each application according to the start operation of the user;
An inquiry function that selects an application with a degree of activation less than a reference based on the recording data of the activation time recording function, and inquires the user about consent that the selected application accesses user data; and
A control function for controlling access to user data from the selected application based on a query result of the query function;
Computer program for realizing.

Images