JP2020129311A - Data distribution control device, data distribution control method, and data distribution control program - Google Patents

Abstract

To promote data distribution.SOLUTION: An intermediary company (data distribution control device 101) receives data collection consideration from a data utilizing company 1001. The data collection consideration is a consideration paid for data provided by the data utilization company 1001. The intermediary company pays, based on the data collection consideration from the data utilization company 1001, a data intermediary fee, a data provision fee (individual), and a data provision fee (company). The data intermediary fee is a fee for data intermediation paid to the intermediary company. The data provision fee (individual) is a fee for data provision paid to each of individuals 1002, 1003, 1004 who is a data subject. The data provision fee (company) is a fee for data provision paid to each of data provision companies 1005, 1006. Thus, data distribution is promoted by giving an incentive to a data intermediary, an individual (data subject) and a data provider (holder).SELECTED DRAWING: Figure 10

Description

The present invention relates to a data distribution control device, a data distribution control method, and a data distribution control program.

In recent years, a mechanism in which an individual controls his/her own data (for example, shopping history, medical data, etc.) has been studied. For example, in EU (European Union), there is EU General Data Protection Regulation (GDPR) that defines rules for protection of individuals regarding processing of personal data and free circulation of personal data.

As a prior art, for example, a system for extracting patient information from a medical fee billing system of a hospital, a clinic, a dispensing pharmacy, etc. on an Internet Web site and registering it as a database is established. There are those that perform registration operations.

JP, 2003-337864, A JP, 2017-084134, A JP, 2003-016306, A JP, 2016-192218, A

However, the conventional technique has a problem that the data distribution of personal data is not promoted. For example, under the GDPR, companies that hold personal data are obliged to provide personal data at the request of the person, but there is no incentive for data provision, which leads to data utilization. The current situation is not.

In one aspect, the present invention aims to promote data distribution.

In one embodiment, the first personal data corresponding to the provision request is referred to in response to the personal data provision request by referring to the storage unit that stores the metadata of the personal data and the information of the holder of the personal data. Of the first personal data based on the consent confirmation unit that inquires of the data subject of whether to consent to the data provision, and the storage unit based on the consent of the data subject to the inquiry. A request unit that requests the holder to provide the first personal data, and a setting unit that sets a consideration for the provision of the first personal data to the holder of the first personal data. A data distribution control device having the same is provided.

According to one aspect of the present invention, it is possible to promote data distribution.

FIG. 1 is an explanatory diagram illustrating an example of a data distribution control method according to an embodiment. FIG. 2 is an explanatory diagram showing a system configuration example of the data distribution control system 200. FIG. 3 is a block diagram showing a hardware configuration example of the data distribution control device 101. FIG. 4 is an explanatory diagram showing an example of the stored contents of the user information DB 220. FIG. 5 is an explanatory diagram showing an example of the stored contents of the company information DB 230. FIG. 6 is an explanatory diagram showing an example of the stored contents of the registration information DB 240. FIG. 7 is a block diagram showing a functional configuration example of the data distribution control device 101. FIG. 8 is an explanatory diagram showing a specific example of the data collection request. FIG. 9A is an explanatory diagram (part 1) showing an example of the consent confirmation screen. FIG. 9B is an explanatory diagram (part 2) showing an example of the consent confirmation screen. FIG. 10 is an explanatory diagram showing an example of the flow of consideration for providing data. FIG. 11 is a sequence diagram showing an operation example of the data distribution control system 200. FIG. 12 is an explanatory diagram showing an operation example of the data distribution control system 200 at the time of data registration. FIG. 13 is an explanatory diagram showing an operation example of the data distribution control system 200 at the time of utilizing data. FIG. 14 is an explanatory diagram showing an example of the stored contents of the consideration setting table 1400. FIG. 15 is a flowchart (part 1) showing an example of the data distribution control processing procedure of the data distribution control device 101. FIG. 16 is a flowchart (No. 2) showing an example of the data distribution control processing procedure of the data distribution control device 101.

Embodiments of a data distribution control device, a data distribution control method, and a data distribution control program according to the present invention will be described in detail below with reference to the drawings.

(Embodiment)
FIG. 1 is an explanatory diagram illustrating an example of a data distribution control method according to an embodiment. In FIG. 1, a data distribution control device 101 is a computer that supports the distribution of personal data. Here, the personal data is information relating to an individual, and is, for example, shopping history, medical data, meal data, exercise data, position information, environmental information, or the like.

Personal data is often collected and held by the company providing the service. For example, the shopping history is collected and held by a company that operates an EC (Electronic Commerce) site. In addition, medical data (medical care data, inspection data, etc.) is collected and held by a medical institution performing medical treatment. Further, the exercise data is collected and held by the company that operates the gym.

Personal data can be acquired from a person who currently has it or transferred to another person at the request of the data subject. A data subject is an entity that exercises the right to protect personal data. For example, the data subject is an individual (the person) who has the right to transfer its own personal data from the current holder to another person (so-called data portability right). The data subject may be an administrator (for example, a representative of a company or family) who manages personal data of a plurality of persons.

Therefore, the personal data can be transferred from the current holder to another person and used, with the consent of the data subject. However, when a person (company) who wants to utilize data requests each person (data subject) to individually transfer the data, it takes time and effort. In addition, a person (company) who currently owns the personal data is required to transfer the personal data to a person (company) who wants to utilize the data.

For example, in the EU General Data Protection Regulation (GDPR), provision (transfer) of personal data is obligatory to a data provider (who currently has it), but the timing, format, provision format, etc. are stipulated. Absent. In addition, since the data provider has no incentive, it is the current situation that the data provider does not utilize the data.

It is possible to solve the problem of having to individually request data transfer to each person by using a service that manages personal data of a plurality of people on behalf of an information bank. Here, the information bank is a mechanism that holds various personal data and sells the information to those who want to utilize the data.

For example, the data subject (individual) of each personal data transfers the personal data held by the data providing company to the information bank based on its own data portability right. In response to a request for providing personal data, the information bank obtains consent for the data subject of the personal data and pays the consideration, and receives the consideration for providing the data from the data utilizing company. However, in this data distribution form, the data providing company still has no incentive to provide the data, and the data distribution is not promoted.

It is also conceivable to provide a mechanism called a data broker that directly matches the data utilization company and the data providing company by omitting the procedure for confirming the consent of the individual. However, without personal consent management regarding data provision, it is difficult to provide detailed data, and there is a risk of illegal transactions of personal data.

Therefore, in the present embodiment, in response to a request for providing personal data, a consent confirmation is performed for the data subject of the personal data, and based on the consent of the data subject, the holder of the personal data is requested to provide the data. A data distribution control method for promoting data distribution by paying for data provision will be described. Hereinafter, a processing example of the data distribution control device 101 will be described.

(1) The data distribution control device 101 receives a request for providing personal data. Here, the personal data provision request is a request for data provision, and includes, for example, the data type of the personal data desired to be used. The data type classifies personal data, and includes, for example, shopping history, medical data, exercise data, and the like.

In the example of FIG. 1, it is assumed that a data providing request 120 from the data utilizing company 102 is accepted. The data utilization company 102 is a company that desires to use personal data. The data provision request 120 requests the provision of personal data of the data type “shopping history”.

(2) The data distribution control device 101 refers to the storage unit 110 in response to the received personal data provision request, and refers to the data subject of the first personal data, which is personal data corresponding to the provision request, Inquire whether you agree to the data provision. Here, the storage unit 110 stores the metadata of the personal data and the information of the holder of the personal data.

The metadata of personal data is ancillary information that represents the attributes and characteristics of personal data. The metadata includes, for example, information on the data subject of personal data and the data type of personal data. The information on the data subject is information that identifies the subject exercising the right relating to protection of personal data, and includes, for example, an ID and name of the individual.

The personal data holder information is information that identifies the person who holds the personal data, and includes, for example, the ID and name of the company that holds the personal data. The first personal data is any personal data among the personal data corresponding to the provision request. The personal data corresponding to the provision request is the personal data for which the data provision is requested, and is specified, for example, from the data type included in the provision request.

Specifically, for example, the data distribution control device 101 refers to the storage unit 110 and identifies the first personal data of the data type “shopping history” included in the received data provision request 120. Then, the data distribution control device 101 inquires of the data subject of the specified first personal data whether or not to agree to the data provision.

The inquiry as to whether or not to consent to the data provision is made by using, for example, an electronic mail or a short message transmitted to the address of the data subject.

In the example of FIG. 1, it is assumed that the data subject 103 is inquired as to whether or not to consent to the data provision, and as a result, the consent of the data subject 103 is obtained. The data subject 103 is an individual who has the right to transfer personal data of its own data type “shopping history” from the current holder to another person.

(3) Based on the consent of the data subject to the inquiry, the data distribution control device 101 refers to the storage unit 110 and requests the holder of the first personal data to provide the first personal data. Here, the holder of the first personal data is, for example, the company that collected the first personal data.

Specifically, for example, when the consent of the data subject 103 is obtained, the data distribution control device 101 refers to the storage unit 110 and identifies the holder of the first personal data of the data type “shopping history”. Identify. Then, the data distribution control device 101 requests the holder of the specified first personal data to provide the first personal data.

The request for providing the first personal data is made using, for example, an electronic mail or a short message transmitted to the address of the holder.

In the example of FIG. 1, it is assumed that the data providing company 104 is requested to provide the personal data of the data type “shopping history” of the data subject 103. The data providing company 104 is a holder who holds the personal data of the data type “shopping history” of the data subject 103.

(4) The data distribution control device 101 sets the consideration for the provision of the first personal data to the holder of the first personal data. Here, the consideration for the provision of the first personal data is given to the holder as a reward for providing the first personal data, and is, for example, money, virtual currency, or points.

The consideration for the provision of the first personal data may be determined in advance, or may be calculated based on the consideration from the data providing destination (for example, the data utilizing company 102). The consideration from the data provider is the consideration paid for the data provided by the data provider.

In the example of FIG. 1, the consideration 130 for the provision of personal data of the data type “shopping history” of the data subject 103 is set in the data providing company 104. The personal data of the data type “shopping history” of the data subject 103 provided by the data providing company 104 is sent to the data utilizing company 102 via the data distribution control device 101.

As described above, according to the data distribution control device 101, it is possible to confirm the consent of the data provision to the data subject of the personal data requested to be provided. Further, according to the data distribution control device 101, when the consent of the data subject is obtained, the owner of the personal data is requested to provide the personal data, and the price for the provision of the personal data is set. You can

As a result, it is possible to request the holder of personal data (for example, a company) to provide the data after obtaining the consent of the data subject (for example, an individual). Further, it is possible to promote the data distribution by giving an incentive for providing the data to the holder of the personal data. In the example of FIG. 1, after obtaining the consent of the data subject 103, it is possible to request the data providing company 104, which is the holder of the personal data, to provide the data. In addition, the data providing company 104 can be provided with an incentive (a consideration 130) for providing data.

(Example of system configuration of data distribution control system 200)
Next, a system configuration example of the data distribution control system 200 including the data distribution control device 101 shown in FIG. 1 will be described. The data distribution control system 200 is applied to, for example, a computer system that exchanges personal data between companies via an intermediary company.

FIG. 2 is an explanatory diagram showing a system configuration example of the data distribution control system 200. In FIG. 2, the data distribution control system 200 includes a data distribution control device 101, terminals T1 to Tn (n: a natural number of 2 or more), and corporate servers S1 to Sm (m: a natural number of 2 or more). In the data distribution control system 200, the data distribution control device 101, the terminals T1 to Tn, and the corporate servers S1 to Sm are connected via a wired or wireless network 210. The network 210 is, for example, a LAN (Local Area Network), a WAN (Wide Area Network), or the Internet.

The data distribution control device 101 has a user information DB (Database) 220, a company information DB 230, and a registration information DB 240, and supports the distribution of personal data. The data distribution control device 101 is, for example, a server operated by an intermediary company. The storage contents of the various DBs 220, 230, 240 will be described later with reference to FIGS.

The terminals T1 to Tn are computers used by a user who is a data subject of personal data. The data subject is, for example, an individual who has the right to transfer his/her own personal data from the current holder (data providing company) to another person (data utilizing company). The terminals T1 to Tn are, for example, smartphones, tablet PCs (Personal Computers), and the like.

In the following description, any of the terminals T1 to Tn may be referred to as "terminal Ti" (i=1, 2,..., N).

The company servers S1 to Sm are computers used by companies that are holders of personal data or users of personal data. The companies that are the holders of personal data are, for example, medical institutions that collect medical data and gyms that collect exercise data. A company that is a user of personal data is, for example, a company that conducts research and development using personal data.

In the following description, a company that is a user of personal data may be referred to as a “data utilizing company”, and a company that is a holder of personal data may be referred to as a “data providing company”. In addition, among the enterprise servers S1 to Sm, the server of the data utilizing enterprise is referred to as “the enterprise server Sj of the data utilizing enterprise” (j=1, 2,..., M), and the server of the data providing enterprise is referred to as the “data providing enterprise”. Enterprise server Sk” in some cases (k≠j, k=1, 2,..., M). Although not shown, the company server Sk of the data providing company has a personal data DB. The personal data DB is, for example, a database that stores personal data collected by a data providing company in association with metadata of the personal data.

(Example of hardware configuration of data distribution control device 101)
FIG. 3 is a block diagram showing a hardware configuration example of the data distribution control device 101. In FIG. 3, a data distribution control device 101 includes a CPU (Central Processing Unit) 301, a memory 302, a disk drive 303, a disk 304, a communication I/F (Interface) 305, and a portable recording medium I/F 306. And a portable recording medium 307. Further, each component is connected by a bus 300.

Here, the CPU 301 controls the entire data distribution control device 101. The CPU 301 may have a plurality of cores. The memory 302 includes, for example, a ROM (Read Only Memory), a RAM (Random Access Memory), and a flash ROM. Specifically, for example, the flash ROM stores an OS (Operating System) program, the ROM stores an application program, and the RAM is used as a work area of the CPU 301. The program stored in the memory 302 is loaded into the CPU 301 to cause the CPU 301 to execute the coded processing.

The disk drive 303 controls the reading/writing of the data with respect to the disk 304 according to control of CPU301. The disk 304 stores the data written under the control of the disk drive 303. Examples of the disk 304 include a magnetic disk and an optical disk.

The communication I/F 305 is connected to the network 210 through a communication line and is connected to external computers (for example, the terminals T1 to Tn and the corporate servers S1 to Sm shown in FIG. 2) via the network 210. The communication I/F 305 administers an interface between the network 210 and the inside of the apparatus, and controls the input/output of data from/to an external computer. For the communication I/F 305, for example, a modem or a LAN adapter can be adopted.

The portable recording medium I/F 306 controls reading/writing of data with respect to the portable recording medium 307 under the control of the CPU 301. The portable recording medium 307 stores the data written under the control of the portable recording medium I/F 306. Examples of the portable recording medium 307 include a CD (Compact Disc)-ROM, a DVD (Digital Versatile Disk), and a USB (Universal Serial Bus) memory.

Note that the data distribution control device 101 may include, for example, an SSD (Solid State Drive), an input device, a display, and the like, in addition to the above-described components. In addition, the data distribution control device 101 may not include, for example, the disk drive 303, the disk 304, the portable recording medium I/F 306, and the portable recording medium 307 among the above-described components. Further, the terminals T1 to Tn and the corporate servers S1 to Sm shown in FIG. 2 can also be realized by the same hardware configuration as the data distribution control device 101. However, the terminals T1 to Tn have an input device, a display, and the like in addition to the above-described components.

(Memory contents of various DBs 220, 230, 240)
Next, the storage contents of the various databases 220, 230, 240 included in the data distribution control device 101 will be described. The various DBs 220, 230, 240 are realized by a storage device such as the memory 302 and the disk 304 of the data distribution control device 101 shown in FIG. 3, for example.

FIG. 4 is an explanatory diagram showing an example of the stored contents of the user information DB 220. In FIG. 4, the user information DB 220 has fields for user ID, name, sex, age, address, address, and account information, and by setting information in each field, user information (for example, user information 400-1 , 400-2) is stored as a record.

Here, the user ID is an identifier that uniquely identifies the user. The user is, for example, an individual who is a data subject of personal data. The name is the name of the user. Gender is the gender of the user. The age is the age of the user. The address is the user's address. The address is the user's address. The address is, for example, a mail address or an IP (Internet Protocol) address. The account information is information on the account of the financial institution that the user has. The account information includes, for example, information such as financial institution name, holder, account number and the like.

For example, the user information 400-1 includes the name “Fujitaro” of the user with the user ID “UID1”, the gender “male”, the age “35”, the address “1-2 of □□ city in XX prefecture”, and the address “abc@”. "xyz.ne.jp" and account information "...".

FIG. 5 is an explanatory diagram showing an example of the stored contents of the company information DB 230. In FIG. 5, the company information DB 230 has fields for a company ID, a company name, an address, and account information, and by setting information in each field, company information (for example, company information 500-1, 500-2). Is recorded as a record.

Here, the company ID is an identifier that uniquely identifies the company. The company is, for example, a data utilizing company or a data providing company. The company name is the name of the company. The address is a company address (for example, a mail address or an IP address). The account information is information about an account of a financial institution owned by a company.

For example, the company information 500-1 indicates the company name “Hospital A”, the address “xyz@abc.ne.jp”, and the account information “...” Of the company with the company ID “CID1”.

FIG. 6 is an explanatory diagram showing an example of the stored contents of the registration information DB 240. In FIG. 6, the registration information DB 240 has fields of user ID, sex, age, data type, and holding company, and by setting information in each field, registration information (for example, registration information 600-1 to 600-). 6) is stored as a record.

Here, the user ID is an identifier that uniquely identifies the user who is the data subject of the personal data. Gender is the gender of the user. The age is the age of the user. The user ID, sex, age, and data type correspond to the metadata of personal data. The data type is a data type for classifying personal data. The holding company is information (for example, company ID, company name) of the company that holds the personal data.

For example, the registration information 600-1 indicates the user ID “UID1”, gender “male”, age “35”, data type “examination data”, and holding company “hospital A”. The registration information does not have to include gender and age. Further, the registration information may include a consent condition and a consent history. The consent conditions and consent history will be described later. The storage unit 110 illustrated in FIG. 1 corresponds to, for example, the registration information DB 240.

(Example of functional configuration of data distribution control device 101)
FIG. 7 is a block diagram showing a functional configuration example of the data distribution control device 101. 7, the data distribution control device 101 includes a reception unit 701, a registration unit 702, a first identification unit 703, a consent confirmation unit 704, a second identification unit 705, a request unit 706, and a transfer control. A unit 707, a setting unit 708, and a storage unit 710 are included. Specifically, for example, the receiving unit 701 to the setting unit 708 cause the CPU 301 to execute a program stored in a storage device such as the memory 302, the disk 304, the portable recording medium 307 illustrated in FIG. 3, or The communication I/F 305 realizes that function. The processing result of each functional unit is stored in a storage device such as the memory 302 or the disk 304, for example. The storage unit 710 is realized by a storage device such as the memory 302 and the disk 304, for example. For example, the storage unit 710 stores various DBs 220, 230, 240 as shown in FIGS.

The reception unit 701 receives the metadata of the personal data and the information of the holder of the personal data. Specifically, for example, the reception unit 701 receives the registration request information from the terminal Ti, which is the data subject of the personal data, so that the metadata of the personal data included in the received registration request information and the retention of the personal data. The information of other persons.

Here, the registration request information requests registration of metadata of personal data and information of the holder of the personal data. The registration request information includes, for example, user ID, gender, age, data type, and holding company information (see FIG. 6). The user ID, sex, age and data type correspond to the metadata of personal data. The holding company corresponds to the information of the holder of the personal data.

The registration unit 702 registers the received metadata of the personal data and the information of the holder of the personal data in the storage unit 710. Specifically, for example, the registration unit 702 registers the user ID, gender, age, data type, and owned company information included in the received registration request information in the registration information DB 240 illustrated in FIG. 6.

Further, the reception unit 701 receives a request for providing personal data. Specifically, for example, the reception unit 701 receives the data collection request by receiving the data collection request from the company server Sj of the data utilizing company. Here, the data collection request is for requesting data provision.

The data collection request includes, for example, information on the data utilizing company, desired data type, desired number of uses, purpose of use, and the like. The information of the data utilizing company is, for example, the company ID or the company name of the data utilizing company. The desired data type is a data type of personal data desired to be used. The desired data type may be a combination of a plurality of data types. The desired number of uses is the number of personal data (for example, the number of people) desired to use. The purpose of use is to use personal data.

Further, the data collection request may include provision conditions such as time, format, and provision form. The provision conditions indicate when, in which format, and in which form data is desired to be provided. Examples of the format include a CSV (Comma-Separated Value) format and an XML (eXtensible Markup Language) format. Examples of the providing form include online file providing, stream providing, and the like. Offline provision using a CD, DVD, etc. may be designated as the provision form.

Further, the data collection request may include conditions such as the sex, age, and living area of the person (individual) who is the data subject of the personal data. Further, the data collection request may include information (for example, the amount of money) that specifies the consideration paid by the data utilizing company for the data provision. However, the consideration for data provision may be determined by the data distribution control device 101.

Here, a specific example of the data collection request will be described with reference to FIG.

FIG. 8 is an explanatory diagram showing a specific example of the data collection request. In FIG. 8, the data collection request 800 includes a user ID, a user, a purpose, and a data type desired to be used. Here, the user ID indicates the company ID of the data utilizing company. The user indicates the name of the data utilization company. The purpose indicates the purpose of using the personal data. The data type desired to be used indicates the data type of personal data desired to be used.

Specifically, the data collection request 800 is a request for providing personal data from the user “pharmaceutical company X” with the user ID “CID99”, and the purpose “research purpose” and the desired data type “inspection data, exercise”. Data". The personal data of the data type “test data” is information including test data such as a clinical test performed in a hospital or the like. The personal data of the data type “exercise data” is information including exercise data such as a body fat percentage, a heart rate, and the number of steps measured in a gym or the like.

Returning to the description of FIG. 7, the first identifying unit 703 identifies the data subject of the first personal data corresponding to the provision request by referring to the storage unit 710 in response to the received personal data provision request. .. Here, the storage unit 710 stores the information of the holder of the personal data in association with the metadata of the personal data.

Specifically, for example, the first identifying unit 703 refers to the registration information DB 240 and searches for registration information corresponding to the desired data type included in the received data collection request. Then, the first identifying unit 703 identifies the data subject of the first personal data corresponding to the data collection request from the user ID included in the retrieved registration information.

Thereby, the data subject of the first personal data corresponding to the data collection request, that is, the personal data desired by the data utilizing company can be specified.

-In case of desired inspection data type "inspection data" For example, the desired inspection data type included in the data collection request is "inspection data". In this case, the first identifying unit 703 refers to the registration information DB 240 to obtain registration information (for example, registration information 600-1, 600-3, 600-4) corresponding to the desired inspection data type “inspection data”. Search for. Then, the first identifying unit 703 identifies the data subject of the first personal data from the user ID included in the retrieved registration information.

-In case of desired data type "inspection data, exercise data" For example, the desired data type included in the data collection request is a combination of "inspection data" and "exercise data" (see, for example, FIG. 8). In this case, the first identifying unit 703 refers to the registration information DB 240 to obtain registration information (for example, registration information 600-1, 600-3, 600-4) corresponding to the desired inspection data type “inspection data”. Search for.

In addition, the first identifying unit 703 refers to the registration information DB 240 and searches for registration information (for example, registration information 600-2, 600-5, 600-6) corresponding to the desired data type “exercise data”. To do. Then, the first identifying unit 703 determines the first from the user IDs included in both the registration information corresponding to the retrieved desired data type “inspection data” and the registered information corresponding to the desired data type “exercise data”. The data subject of the personal data of is specified.

For example, the registration information 600-1, 600-3, 600-4 corresponding to the desired data type "inspection data" is searched, and the registration information 600-2, 600-5 corresponding to the desired data type "exercise data" is searched. , 600-6 are retrieved. In this case, the user IDs included in both the registration information 600-1, 600-3, 600-4 and the registration information 600-2, 600-5, 600-6 are "UID1, UID3". Therefore, the first identifying unit 703 identifies the data subject of the first personal data from the user ID “UID1”. Further, the first identifying unit 703 identifies the data subject of the first personal data from the user ID “UID3”.

The data collection request may include conditions such as gender, age, and living area of the person (individual) who is the data subject of the personal data. In this case, the first specifying unit 703 may narrow down the registration information to be searched based on conditions such as sex, age, and living area. The living area is specified from the address of the user information. For example, when the condition of gender “male” is included, the first identifying unit 703 may exclude the registration information of gender “female” from the search target.

The consent confirmation unit 704 inquires of the specified data subject whether or not to consent to the data provision. Further, the consent confirmation unit 704 acquires an inquiry result as to whether or not to consent to the data provision. Here, agreeing to the provision of data means agreeing to provide the personal data of oneself to another person different from the current holder.

Specifically, for example, the consent confirmation unit 704 refers to the user information DB 220 shown in FIG. 4 and identifies the user information corresponding to the identified user ID of the data subject. Next, the consent confirmation unit 704 transmits a consent confirmation request to the data-based terminal Ti based on the specified address of the user information. The consent confirmation request is information for requesting confirmation of consent regarding the data provision. Then, the consent confirmation unit 704 receives the consent confirmation result from the data-based terminal Ti. The consent confirmation result is information indicating an inquiry result as to whether or not to consent to the data provision.

Here, the consent confirmation request may include, for example, the data type of the first personal data corresponding to the data collection request. As a result, the user, who is the data subject, can determine whether or not to agree to the data provision, after grasping what kind of information the personal data requested for provision is.

Further, the consent confirmation request may include information (for example, the company name of the data providing company) that can identify the holder of the first personal data. As a result, the user who is the data subject can determine whether or not to consent to the data provision, after grasping the person (data provider company) who currently possesses the personal data requested to be provided. ..

Further, the consent confirmation request may include information (for example, the company name of the data utilizing company) that can identify the request source of the data collection request. As a result, the user, who is the data subject, can determine whether or not to consent to the data provision, after grasping the person (data utilization company) to whom the personal data is provided.

Further, the consent confirmation request may include information capable of specifying the purpose of use of the first personal data. As a result, the user, who is the data subject, can determine whether or not to consent to the data provision, after understanding what purpose personal data is used for.

In addition, in the data-based terminal Ti that is the request destination of the consent confirmation, when the consent confirmation request from the data distribution control device 101 is received, the consent confirmation screen is displayed. The consent confirmation screen is an operation screen for selecting whether or not to consent to the data provision. A screen example of the consent confirmation screen will be described later with reference to FIGS. 9A and 9B.

The second identification unit 705 identifies the holder of the first personal data by referring to the storage unit 710 based on the consent of the data subject to the inquiry about whether to agree to the data provision. Here, the holder of the first personal data is, for example, a data providing company that has collected the first personal data.

Specifically, for example, when the consent of the data subject is obtained, the second specifying unit 705 refers to the registration information DB 240 and corresponds to the combination of the user ID of the data subject and the desired data type of use. Search for registration information. Then, the second identifying unit 705 identifies the holder of the first personal data from the companies holding the retrieved registration information.

For example, the data-based user ID is “UID1”, and the desired data type is a combination of “examination data” and “exercise data”. In this case, the second specifying unit 705 refers to the registration information DB 240 and searches the registration information 600-1 corresponding to the combination of the user ID “UID1” and the desired data type “inspection data”. Further, the second identifying unit 705 refers to the registration information DB 240 and searches the registration information 600-2 corresponding to the combination of the user ID “UID1” and the desired use data type “exercise data”.

As a result, the data providing company that holds the personal data of the data type “inspection data” of the data subject of the user ID “UID1” can be specified from the holding company “Hospital A” of the registration information 600-1. Further, from the holding company “sports gym C” of the registration information 600-2, the data providing company holding the personal data of the data type “exercise data” of the data subject of the user ID “UID1” can be specified.

The request unit 706 requests the holder of the specified first personal data to provide the first personal data. Further, the requesting unit 706 may specify a condition for providing the first personal data when making a request for providing the first personal data. As the provision condition, for example, a provision time, a format, a provision form, etc. are designated.

Specifically, for example, the request unit 706 refers to the company information DB 230 shown in FIG. 5 and specifies the company information corresponding to the specified company name of the data providing company (holder). Next, the request unit 706 transmits a data provision request to the enterprise server Sk of the data providing enterprise based on the specified address of the enterprise information.

Here, the data provision request is information for requesting data provision. This request for providing data corresponds to a request for exercising the right to transfer personal data from the current holder to another person (for example, data portability right). The data provision request includes, for example, the user ID of the data subject of the personal data and the data type of the personal data. That is, the request unit 706 requests the data providing company to provide the first personal data by designating the user ID and the data type.

In addition, the data provision request may include personal data provision conditions. Specifically, for example, the request unit 706 transmits a data provision request including provision conditions such as a provision time, a format, and a provision form included in the data collection request from the data utilizing company to the corporate server Sk of the data providing company. You may decide to do it.

When the company server Sk of the data providing company receives the data providing request from the data distribution control device 101, it corresponds to the combination of the user ID and the data type included in the received data providing request from the personal data DB (not shown). Acquire the first personal data. Then, the company server Sk of the data providing company transmits the acquired first personal data to the data distribution control device 101.

That is, the company server Sk of the data providing company provides the first personal data according to the right to transfer the personal data (data portability right). Accordingly, the data distribution control device 101 can acquire the first personal data from the data providing company.

Further, the data provision request may include provision conditions such as provision time, format, and provision form. In this case, the company server Sk of the data providing company may transmit the first personal data so that the providing condition included in the data providing request is satisfied.

For example, when the provision condition includes the provision period “within 3 days”, the company server Sk of the data providing company transmits the first personal data within 3 days after receiving the data provision request. When the format “CSV” is included as the providing condition, the company server Sk of the data providing company converts the first personal data into the CSV format and transmits it. When the provision form “file” is included as the provision condition, the company server Sk of the data providing company stream-distributes the first personal data.

The process executed in response to the data providing request in the company server Sk of the data providing company can be realized by, for example, an API (Application Programming Interface).

The transfer control unit 707 transfers the first personal data provided by the holder in response to the first personal data providing request to the data providing destination. Here, the data providing destination is a request source of the personal data providing request, and is, for example, a data utilizing company specified from the data collecting request.

Specifically, for example, the transfer control unit 707 refers to the company information DB 230 and specifies the company information corresponding to the company ID of the data utilizing company included in the data collection request. Next, the requesting unit 706 transmits the first personal data to the company server Sj of the data utilizing company based on the specified address of the company information.

As a result, it is possible to provide the personal data requested by the data utilization company. In the above description, the conversion of the personal data into the format specified as the condition for providing the personal data is performed in the enterprise server Sk of the data providing enterprise. However, for example, it is performed in the data distribution control device 101. Good.

The setting unit 708 sets the consideration for the provision of the first personal data to the holder of the first personal data. Here, the consideration for the provision of the first personal data is, for example, money, virtual currency, points, or the like. The consideration for the provision of the first personal data is calculated based on the consideration from the data providing destination (data utilization company), for example.

Specifically, for example, the setting unit 708 distributes the consideration from the data utilizing company according to a predetermined distribution rule, so that the consideration of the data provider (holder) for the provision of the first personal data ( Calculate the data provision fee). Then, the setting unit 708 sets the calculated consideration (data provision fee) to the data provider (holder).

Further, the setting unit 708 calculates the consideration (data providing fee) of the data subject (individual) for providing the first personal data by allocating the consideration from the data utilizing company according to a predetermined distribution rule. You may decide. In this case, the setting unit 708 sets the calculated consideration (data providing fee) to the data subject (individual). However, the consideration of the data subject may be predetermined.

Further, the setting unit 708 calculates the consideration of the data intermediary (data intermediation fee) for the intermediation of the first personal data by allocating the consideration from the data utilizing company according to a predetermined distribution rule. May be. In this case, the setting unit 708 sets the calculated consideration (data brokerage fee) in the data broker. The data intermediary is, for example, an intermediary company that operates the data distribution control device 101. However, the consideration of the data intermediary may be predetermined.

An example of setting various consideration will be described later with reference to FIG. In addition, the consideration set for the data provider (holder), the data subject (individual), the data intermediary, etc. is, for example, at a predetermined timing (for example, the end of the month) by a predetermined method (for example, direct debit), Paid to each person. The accounts of the data provider (holder) and the data subject (individual) can be specified, for example, from account information of company information (see FIG. 5) or user information (see FIG. 4).

Further, the registration information in the registration information DB 240 may include a consent condition and a consent history. The consent condition is a condition for confirming consent, and is specified by the data type, for example. As an example, assume that the consent condition is set to “exclude shopping history”. In this case, if the desired data type is other than “shopping history”, the consent confirmation unit 704 inquires of the data subject whether or not to consent to the data provision. On the other hand, if the desired data type is “shopping history”, the consent confirmation unit 704 determines not to consent to the data provision without confirming the consent. This makes it possible to omit confirmation of consent to the data subject.

In addition, the consent history indicates the result of past consent confirmation performed on the data subject. When the registration information includes a consent history, the consent confirmation unit 704 may determine whether to consent to the data provision based on the consent history. As a result, it is possible to omit the consent confirmation already performed for the data subject. The consent history may be reset periodically (for example, every year). Further, the consent history may be recorded in association with the data providing destination, for example.

(Screen example of consent confirmation screen)
Next, a screen example of the consent confirmation screen displayed on the terminal Ti of the user who is the data subject will be described with reference to FIGS. 9A and 9B. Here, the desired data type included in the data collection request is a combination of “examination data” and “exercise data” (see FIG. 8).

FIG. 9A is an explanatory diagram (part 1) showing an example of the consent confirmation screen. In FIG. 9A, a consent confirmation screen 901 is an operation screen for inquiring of the user having the user ID “UID1” whether or not to consent to the data provision. The consent confirmation screen 901 includes information on the user, purpose, and usage data item. The user indicates the name of the data utilization company. The purpose indicates the purpose of using the personal data. The usage data item indicates the data type (personal use desired data type) of personal data that the user desires to use.

According to the consent confirmation screen 901, the user who is the data subject can find out who currently holds the personal data requested to be provided from the use data item “test data: hospital A, exercise data: gym C”. It is possible to judge whether or not to consent to the data provision, after grasping whether the information is of any kind. Whether the user agrees to the data provision after understanding the purpose of the personal data provider from the user "pharmaceutical company X" and the purpose "research use" It is possible to judge whether or not.

When the button B1 is selected on the consent confirmation screen 901, the inquiry result indicating that the user has consented to the data provision is transmitted from the terminal Ti to the data distribution control device 101. Further, when the button B2 is selected on the consent confirmation screen 901, an inquiry result indicating that the user does not agree to the data provision is transmitted from the terminal Ti to the data distribution control device 101.

FIG. 9B is an explanatory diagram (part 2) showing an example of the consent confirmation screen. In FIG. 9B, the consent confirmation screen 902 is an operation screen for inquiring of the user having the user ID “UID3” whether or not to consent to the data provision. The consent confirmation screen 902 includes information on the user, purpose, and usage data item.

According to the consent confirmation screen 902, the user, who is the data subject, shows how the user who is currently providing the personal data requested to be provided from the usage data item “test data: hospital B, exercise data: sports gym C”. It is possible to judge whether or not to consent to the data provision, after grasping whether the information is of any kind. Whether the user agrees to the data provision after understanding the purpose of the personal data provider from the user "pharmaceutical company X" and the purpose "research use" It is possible to judge whether or not.

When the button B1 is selected on the consent confirmation screen 902, the inquiry result indicating that the user has consented to the data provision is transmitted from the terminal Ti to the data distribution control device 101. Further, when the button B2 is selected on the consent confirmation screen 902, the inquiry result indicating that the user does not agree to the data provision is transmitted from the terminal Ti to the data distribution control device 101.

(Flow of consideration for providing data)
Next, with reference to FIG. 10, a flow of consideration for providing data in the data distribution control system 200 will be described.

FIG. 10 is an explanatory diagram showing an example of the flow of consideration for providing data. In FIG. 10, the intermediary company (data distribution control device 101) receives the data collection consideration from the data utilizing company 1001 (company server Sj). The data collection consideration is a consideration for data provision paid from the data utilizing company 1001.

The intermediary company (data distribution control device 101) pays the data intermediary fee, the data providing fee (units), and the data providing fee (company) based on the data collection consideration from the data utilizing enterprise 1001. The data mediation fee is a consideration for data mediation paid to the mediation company (data distribution control device 101).

The data providing fee (individual) is a consideration for the data providing paid to each individual (terminal Ti) who is the data subject. In the example of FIG. 10, the individuals are individuals 1002, 1003, and 1004. The data providing fee (company) is a consideration for the data providing paid to each data providing company (company server Sk). In the example of FIG. 10, the data providing companies are data providing companies 1005 and 1006.

In this way, the data collection consideration from the data utilizing company 1001 is distributed to the intermediary company (data distribution control device 101), each individual 1002, 1003, 1004 and each data providing company 1005, 1006, and each action (data Payment, data brokerage). Thus, it is possible to give an incentive to the data intermediary, the individual (the data subject), and the data provider (the holder) to promote the data distribution.

An individual who is a data subject can earn a providing fee with peace of mind by registering metadata (registration information) of personal data in an intermediary company. Further, the data providing company, which is the holder, can earn the providing fee by providing the data while responding to the exercise request of the data portability right and the like. Since the identity verification related to the data provision is performed by the intermediary company (data distribution control device 101), the data provision company does not need to have the identity verification function.

The intermediary company can earn a data intermediary fee by confirming the identity of the data provider or by intermediating the data. Data-utilizing companies can collect personal data more easily than asking individual individuals. In addition, since consent management regarding data provision is appropriately performed, it is possible to obtain detailed data that each individual has consented to.

(Example of operation of data distribution control system 200)
Next, an operation example of the data distribution control system 200 will be described with reference to FIG.

FIG. 11 is a sequence diagram showing an operation example of the data distribution control system 200. In FIG. 11, first, the data distribution control device 101 of the intermediary company receives a data collection request (see, for example, FIG. 8) from the server Sj of the data utilizing company (step S1101).

Next, the data distribution control device 101 of the intermediary company refers to the registration information DB 240 to identify the data subject of the personal data corresponding to the data collection request (step S1102). In the following description, the data subject of the personal data corresponding to the data collection request may be referred to as “target user”.

Then, the data distribution control device 101 of the intermediary company inquires whether or not to consent to the data provision by transmitting a consent confirmation request to the specified target user terminal Ti (step S1103). Here, it is assumed that the consent of the target user is obtained.
In this case, the data distribution control device 101 of the intermediary company receives, from the target user's terminal Ti, the consent confirmation result indicating that the user has agreed to the data provision (step S1104).

Next, the data distribution control device 101 of the intermediary company transmits a data provision request to the server Sk of the data provision company (step S1105). When the server Sk of the data providing company receives the data providing request, it sends the personal data corresponding to the data providing request to the data distribution control device 101 of the intermediary company (step S1106).

When the data providing request includes the providing condition, the server Sk of the data providing company provides the data according to the providing condition in step S1106. For example, when the format is specified as the providing condition, the server Sk of the data providing company performs the conversion process of the personal data into the specified format. The processing of step S1106 may be realized by either real-time processing or batch processing, for example.

The processes of steps S1103 to S1106 are repeatedly performed, for example, a plurality of times (for the desired number of uses included in the data collection request). Then, the data distribution control device 101 of the brokerage company transmits the personal data transmitted from the server Sk of the data providing company to the company server Sj of the data utilizing company (step S1107).

As described above, in the data distribution control system 200, the data distribution control device 101 of the intermediary company collects personal data from the data providing company and provides it to the data utilizing company while confirming the consent to the individual (data subject). be able to.

-Operation example at the time of data registration Next, a specific operation example of the data distribution control system 200 will be described by taking an example of utilizing healthcare information such as medical data and exercise data. First, an operation example of the data distribution control system 200 during data registration will be described with reference to FIG.

FIG. 12 is an explanatory diagram showing an operation example of the data distribution control system 200 at the time of data registration. In FIG. 12, when the intermediary company (data distribution control device 101) receives registration request information from each individual (terminal Ti) who is the data subject, the registration information DB 240 stores information such as the user ID included in the received registration request information. Register with.

In the example of FIG. 12, the user ID, gender, age, data type, and holding company information included in the registration request information received from each individual with the user ID “UID1, UID2, UID3, UID4” are stored in the registration information DB 240. It is set in each field. As a result, new registration information (for example, the registration information 600-1 to 600-6 shown in FIG. 6) is registered as a record in the registration information DB 240.

As a result, it is possible to register, in the intermediary company, information that allows an individual to identify what kind of information an individual has. In addition, since the intermediary company (data distribution control device 101) does not have to hold the personal data itself as registration information, the storage usage amount can be suppressed.

-Operation example during data utilization Next, an operation example during data utilization of the data distribution control system 200 will be described with reference to FIG.

FIG. 13 is an explanatory diagram showing an operation example of the data distribution control system 200 at the time of utilizing data. Here, it is assumed that the data collection request 800 (use desired data type: inspection data, exercise data) shown in FIG. 8 is received from the data utilizing company “pharmaceutical company X”.

In this case, the data distribution control device 101 identifies the data subject of the personal data corresponding to the data collection request 800 by referring to the registration information DB 240. Here, it is assumed that the individual with the user ID “UID1, UID3” is specified as the data subject of the personal data.

In this case, the data distribution control device 101 determines whether or not to consent to the data provision to the individual having the user IDs “UID1 and UID3”, for example, by the consent confirmation screens 901 and 902 shown in FIGS. 9A and 9B. Make inquiries. Here, it is assumed that the consent of each individual (data subject) of the user IDs "UID1, UID3" is obtained.

In this case, the data distribution control device 101 identifies the holder of each personal data corresponding to the data collection request 800 by referring to the registration information DB 240. Here, it is assumed that the data providing company "Hospital A" is specified as the holder of the personal data of "user ID: UID1, desired data type: inspection data". Further, it is assumed that the data providing company “Sports Gym C” is specified as the holder of the personal data of “User ID: UID1, desired data type: exercise data”. Further, it is assumed that the data providing company “Hospital B” is specified as the holder of the personal data of “user ID: UID3, desired data type: examination data”. Further, it is assumed that the data providing company "Sports Gym C" is specified as the holder of the personal data of "User ID: UID3, desired data type: exercise data".

In this case, the data distribution control device 101 requests the data providing company “Hospital A” to provide personal data of “user ID: UID1 and desired data type: inspection data”. Further, the data distribution control device 101 requests the data providing company “Hospital B” to provide personal data of “user ID: UID3, desired use data type: inspection data”. Further, the data distribution control device 101, for the data providing company "Sports Gym C", personal data of "user ID: UID1, desired data type: exercise data", and "user ID: UID3, desired data for use". Request to provide personal data of "type: exercise data".

Personal data provided to the data distribution control device 101 from each data providing company order “Hospital A”, “Hospital B”, and “Sports Gym C” is provided from the data distribution control device 101 to the data utilization company “Pharmaceutical company X”. To be done. As a result, the data utilizing company “pharmaceutical company X” can obtain the consented healthcare information of each individual more easily than requesting the individual.

(Setting example of various consideration)
Next, an example of setting various types of consideration will be described with reference to FIG. First, the storage contents of the consideration setting table 1400 used by the data distribution control device 101 will be described. The consideration setting table 1400 is realized by a storage device such as the memory 302 and the disk 304.

FIG. 14 is an explanatory diagram showing an example of the stored contents of the consideration setting table 1400. In FIG. 14, the consideration setting table 1400 has fields of request ID, date, user, data collection consideration, data intermediation fee, individual, data providing fee (unit), data providing company, data providing fee (company). The value setting information (for example, the value setting information 1401) is stored by setting the information in each field.

Here, the request ID is an identifier that uniquely identifies the data collection request. The date is the date and time when the data collection request is accepted. The user indicates the company ID and company name of the data utilizing company that is the request source of the data collection request. The data collection consideration indicates the consideration paid for the data provided by the data utilizing company. The data intermediary fee indicates a consideration for intermediary of personal data paid to the data intermediary.

The individual indicates the user ID of the data subject who has consented to the data provision. For example, if the desired number of uses included in the data collection request is “100”, 100 user IDs are set. The data provision fee (individual) indicates a consideration for the data provision paid to the data subject (individual). The data providing company indicates the company ID of the data providing company (holder) who provided the data. The data providing fee (company) indicates a consideration for the data providing paid to the data providing company.

Here, it is assumed that the data utilization company “CID99 (pharmaceutical company X)” receives a data collection request with a request ID “RID1”. In addition, the data collection consideration is set to "10,000 yen", and the data collection consideration is distributed according to the distribution rule of "intermediary company: 30%", "individual whole: 40%", and "data providing whole company: 30%". Imagine a case.

In this case, first, the setting unit 708 calculates a consideration to be distributed to each intermediary company, all individuals, and all data providing companies based on the data collection consideration “10,000 yen”. The consideration for the intermediary company is "3,000 yen". The consideration for the individual as a whole will be "4,000 yen". The consideration for the entire data providing company is "3,000 yen".

Next, the setting unit 708 calculates the consideration for each individual based on the consideration “4,000 yen” for the entire individual. Here, it is assumed that the number of individuals (desired number of users) who are data subjects is “100”, and the consideration of all the individuals is equally divided to each person. In this case, the individual consideration is “40 yen”. Note that, in the example of FIG. 13, the number of individuals who are the data subjects (desired number of uses) is “2 persons”.

Next, the setting unit 708 calculates the consideration for each data providing company based on the consideration “3,000 yen” for the entire data providing company. Here, it is assumed that the number of data-providing companies is “10”, and the consideration of the entire data-providing company is equally divided among the companies. In this case, the consideration for the data providing company is "300 yen". Note that in the example of FIG. 13, the number of companies that are data providing companies is “3 companies”.

Then, the setting unit 708 sets the calculated consideration of the intermediary company “3,000 yen” as the data agency fee of the consideration setting table 1400. Further, the setting unit 708 associates the calculated individual consideration “40 yen” with the individual user ID and sets the data provision fee (pieces) in the consideration setting table 1400. Further, the setting unit 708 sets the calculated consideration “300 yen” of the data providing company in association with the company ID of the data providing company as the data providing fee (company) of the consideration setting table 1400.

As a result, consideration setting information 1401 is registered in the consideration setting table 1400. It should be noted that the actual payment of various consideration is made based on the consideration setting information 1401 at a predetermined timing (for example, the end of the month) by a predetermined method (for example, account transfer).

Further, in the above description, a case has been described in which the consideration of the entire individual is equally divided among the individuals, but the present invention is not limited to this. For example, the setting unit 708 may increase the distribution ratio at the time of distributing the consideration of all the individuals as the number of personal data provided is relatively large.

Further, in the above description, the case where the consideration of the entire data providing company is equally divided among the companies has been described, but the present invention is not limited to this. For example, the setting unit 708 may increase the distribution ratio at the time of distributing the consideration of the entire data providing company, as the number of companies providing the data is relatively large.

(Data distribution control processing procedure of the data distribution control device 101)
Next, a data distribution control processing procedure of the data distribution control device 101 will be described.

15 and 16 are flowcharts showing an example of the data distribution control processing procedure of the data distribution control device 101. In the flowchart of FIG. 15, first, the data distribution control device 101 determines whether or not a data collection request has been received from the company server Sj of the data utilizing company (step S1501).

Here, the data distribution control device 101 waits for the reception of the data collection request (step S1501: No), and when the data collection request is received (step S1501: Yes), the number p of p is “p=0. (Step S1502). Next, the data distribution control device 101 refers to the registration information DB 240 and identifies the target user who is the data subject of the personal data corresponding to the data collection request (step S1503).

Then, the data distribution control device 101 selects an unselected unselected target user from the identified target users (step S1504). Next, the data distribution control device 101 refers to the user information DB 220 and sends a consent confirmation request to the terminal Ti of the selected target user (step S1505).

Then, the data distribution control device 101 determines whether or not the consent of the selected target user has been obtained in response to the transmitted consent confirmation request (step S1506). Here, if the consent is not obtained (step S1506: No), the data distribution control device 101 proceeds to step S1601 shown in FIG.

On the other hand, when the consent is obtained (step S1506: Yes), the data distribution control device 101 refers to the registration information DB 240 and refers to the holder of the personal data corresponding to the data collection request among the personal data of the target user. A certain data providing company is specified (step S1507). Specifically, for example, the data distribution control device 101 refers to the registration information DB 240 and searches for registration information corresponding to the combination of the user ID of the target user and the desired data type of use. Then, the data distribution control device 101 identifies the data providing company from the companies holding the retrieved registration information.

Next, the data distribution control device 101 transmits a data provision request to the specified server Sk of the data providing company (step S1508). The data provision request includes the user ID of the target user and the desired data type of use. Then, the data distribution control device 101 determines whether or not the personal data corresponding to the transmitted data providing request has been received from the server Sk of the data providing company (step S1509).

Here, the data distribution control device 101 waits to receive the personal data corresponding to the data provision request (step S1509: No). Then, when the data distribution control device 101 receives the personal data corresponding to the data provision request (step S1509: Yes), it increments p of the number p (step S1510) and moves to step S1601 shown in FIG. ..

In the flowchart of FIG. 16, first, the data distribution control device 101 determines whether or not the number p is equal to or larger than the desired number N of uses included in the received data collection request (step S1601). Here, when the number p is less than the desired number N of use (step S1601: No), the data distribution control device 101 determines whether or not there is an unselected target user among the target users identified in step S1503 (step). S1602).

If there is an unselected target user (step S1602: YES), the data distribution control device 101 returns to step S1504. On the other hand, when there is no unselected target user (step S1602: No), the data distribution control device 101 executes an error process (step S1603), and ends the series of processes according to this flowchart.

The error process is a process executed when the data utilizing company cannot collect the personal data that the data utilizing company desires to use. What kind of processing is performed as the error processing can be arbitrarily set in advance. For example, in the error processing, the data utilization company is notified that the personal data cannot be collected, and the data utilization company is not provided with the personal data.

If the number p is equal to or larger than the desired number N of use in step S1601 (step S1601: Yes), the data distribution control device 101 uses the data set including all the personal data received in step S1509 as the data utilization company. It is transmitted to the server Sj (step S1604).

Next, the data distribution control device 101 calculates the consideration of the individual (data subject), the data providing company (holder), and the intermediary company based on the data collection consideration included in the received data collection request (step S1605). .. Then, the data distribution control device 101 sets the calculated consideration for each of the individual, the data providing company, and the intermediary company (step S1606), and ends the series of processes according to this flowchart.

As a result, it is possible to provide the data utilizing company with personal data that the data utilizing company desires to use. In addition, it is possible to pay an individual (data subject) and a data provider (holder) for the data provision.

The consent confirmation request to the target user may be executed in parallel for a plurality of target users (for example, (Np) target users). In this case, for example, the processes of steps S1505 to S1510 are executed in parallel for each target user.

The number p may be incremented when the target user's consent is obtained in step S1506. In this case, the data providing request to the server Sk of the data providing company may be collectively executed when the number p becomes equal to or more than the desired use number N.

As described above, according to the data distribution control device 101 according to the embodiment, the storage unit 710 that stores the metadata of the personal data and the information of the holder of the personal data in response to the personal data providing request. With reference to this, it is possible to make an inquiry to the data subject of the first personal data corresponding to the provision request as to whether or not to consent to the data provision. Further, according to the data distribution control device 101, based on the consent of the data subject to the inquiry, the storage unit 710 is referred to and the holder of the first personal data is requested to provide the first personal data. be able to. Then, according to the data distribution control device 101, the consideration for the provision of the first personal data can be set to the holder of the first personal data.

As a result, it is possible to confirm the consent for the data provision to the data subject (for example, an individual who holds the personal data) of the personal data requested to be provided (for example, the personal data desired by the data utilizing company). it can. In addition, it is possible to promote the data distribution by giving an incentive for providing data to a holder of personal data (for example, a data providing company).

Further, according to the data distribution control device 101, it is possible to inquire whether or not to consent to the data provision by transmitting a consent confirmation request including the data type of the first personal data to the data subject. it can.

This makes it possible to provide information that can identify the type of personal data requested to be provided when confirming the consent to provide the data. Therefore, the user who is the data subject can determine whether or not to agree to the data provision, after grasping what kind of information the personal data requested for provision is.

Further, according to the data distribution control device 101, whether or not to consent to the data provision is transmitted by transmitting the consent confirmation request including the information capable of identifying the holder of the first personal data to the data subject. You can make inquiries.

This makes it possible to provide information that can identify the current holder of the personal data requested to be provided when confirming the consent to the data provision. For this reason, the user who is the data subject can determine whether or not to consent to the data provision, after grasping the person (data provider company) who currently possesses the personal data requested to be provided. ..

Further, according to the data distribution control device 101, the data subject is inquired as to whether or not to consent to the data provision by transmitting a consent confirmation request including information capable of specifying the request source of the provision request. be able to.

This makes it possible to provide information that can identify the destination of personal data when confirming consent for data provision. Therefore, the user who is the data subject can determine whether or not to consent to the data provision, after grasping the person (data utilization company) to whom the personal data is provided.

Further, according to the data distribution control device 101, whether or not to consent to the data provision is transmitted by transmitting a consent confirmation request including information capable of specifying the purpose of use of the first personal data to the data subject. You can make inquiries.

This makes it possible to provide information that can identify the purpose of use of personal data when confirming the consent to the data provision. Therefore, the user who is the data subject can determine whether or not to consent to the data provision, after understanding what purpose personal data is used for.

Further, according to the data distribution control device 101, the consideration for the provision of the first personal data can be set to the data subject of the first personal data.

As a result, the data subject of the personal data (for example, an individual who holds the personal data) can be given an incentive to provide the data to promote the data distribution.

Further, according to the data distribution control device 101, the consideration for mediating the first personal data can be set to the data mediator.

As a result, an incentive for data mediation can be given to a data mediator (for example, a mediation company that operates the data distribution control device 101) to promote data distribution.

Further, according to the data distribution control device 101, the metadata of the personal data and the information of the holder of the personal data are received, and the metadata of the received personal data and the information of the holder of the personal data are registered in the storage unit 710. can do.

Thereby, it is possible to newly register the metadata (registration information) of new personal data collected by the data providing company or the like.

Further, according to the data distribution control device 101, as the data subject of the first personal data corresponding to the provision request, the data subject of the personal data of the data type included in the provision request can be specified. As a result, the data type of the personal data can be specified and the provision request can be made.

From these things, according to the data distribution control system 200 and the data distribution control device 101, in providing data in response to a data collection request from a data utilizing company, an individual (data subject), a data providing company (holder) Also, incentives can be given to intermediary companies to promote data distribution.

Specifically, if an individual (data subject) registers the metadata of his/her personal data in an intermediary company, he/she can control the information and obtain a usage fee. Further, since the consent management is centralized in the data distribution control device 101, it is possible to perform consent processing in the same format (for example, a smartphone application) for an individual (data subject). Further, it is possible to confirm who provided what kind of information from the past consent history.

The intermediary company (data distribution control device 101) can obtain a data intermediation fee by confirming the identity of the data provider or by data intermediation, without owning the personal data itself. Further, the intermediary company can also provide a template of terms of use (privacy policy) to a data utilizing company and a data providing company, for example. Further, the intermediary company can analyze popular or demanded data from the usage log of the data distribution control system 200, and can price the data or form a market price.

Data-utilizing companies can collect personal data more easily than asking individual individuals. In addition, since consent management for data provision is appropriately performed, data utilization companies can obtain detailed big data that each individual has consented to. Further, since the data utilizing company does not have to create the mechanism for confirming the identity and the user agreement UI (User Interface) by itself, entry cost and operation cost can be reduced.

A data providing company can obtain a data providing fee by providing data while responding to an exercise request such as a data portability right. Further, since the data providing company does not have to create the mechanism for confirming the identity and the user agreement UI by itself, entry cost and operation cost can be reduced.

The data distribution control method described in the present embodiment can be realized by executing a prepared program on a computer such as a personal computer or a workstation. The data distribution control program is recorded in a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, a DVD, or a USB memory, and is executed by being read from the recording medium by the computer. The data distribution control program may be distributed via a network such as the Internet.

Regarding the above-described embodiment, the following additional notes are further disclosed.

(Supplementary Note 1) Data of the first personal data corresponding to the request for providing the personal data is referred to by referring to the storage unit that stores the metadata of the personal data and the information of the holder of the personal data. A consent confirmation unit that inquires of the main body about whether to consent to the data provision,
A requesting unit that, based on the consent of the data subject to the inquiry, refers to the storage unit and requests the holder of the first personal data to provide the first personal data.
A setting unit for setting a consideration for the provision of the first personal data to the holder of the first personal data;
A data distribution control device comprising:

(Appendix 2) The consent confirmation unit
The inquiry about whether or not to consent to the data provision is inquired by transmitting a consent confirmation request including the data type of the first personal data to the data subject. Data distribution control device.

(Appendix 3) The consent confirmation unit
The data subject is inquired as to whether or not to consent to the data provision, by transmitting a consent confirmation request including information capable of identifying the holder of the first personal data. The data distribution control device according to attachment 1 or 2.

(Appendix 4) The consent confirmation unit
Supplementary note 1 characterized in that the data subject is inquired as to whether or not to consent to the data provision by transmitting a consent confirmation request including information capable of specifying the request source of the provision request. 3. The data distribution control device according to any one of 3.

(Appendix 5) The consent confirmation unit
The data subject is inquired as to whether or not to consent to the data provision by transmitting a consent confirmation request including information capable of specifying the purpose of use of the first personal data. The data distribution control device according to any one of appendices 1 to 4.

(Supplementary note 6) The setting unit
Furthermore, the data distribution control device according to any one of appendices 1 to 5, wherein a consideration for the provision of the first personal data is set in the data subject.

(Supplementary Note 7) The setting unit
Further, the data distribution control device according to any one of appendices 1 to 6, wherein a value for the first mediation of the personal data is set to a data mediator.

(Supplementary note 8) The data subject is a person who has the right to transfer the first personal data from the holder of the first personal data to another person. The data distribution control device as described in any one.

(Supplementary Note 9) A reception unit that receives metadata of personal data and information of the holder of the personal data,
A registration unit that registers the metadata of the personal data and the information of the holder of the personal data received by the reception unit in the storage unit,
The data distribution control device according to any one of appendices 1 to 8, further comprising:

(Supplementary Note 10) The metadata includes a data type of personal data,
The data distribution control device according to any one of appendices 1 to 9, wherein the first personal data is specified by a data type included in the provision request.

(Supplementary Note 11) Data of the first personal data corresponding to the provision request with reference to the storage unit that stores the metadata of the personal data and the information of the holder of the personal data in response to the personal data provision request. Inquiries about whether to agree with the data provision to the main body,
Based on the consent of the data subject to the inquiry, the storage unit is referred to, and the holder of the first personal data is requested to provide the first personal data,
Setting a consideration for the provision of the first personal data to the holder of the first personal data,
A data distribution control method characterized in that a computer executes the processing.

(Supplementary Note 12) In response to a request for providing personal data, data of the first personal data corresponding to the request for providing is referred to by referring to the storage unit that stores the metadata of the personal data and the information of the holder of the personal data Inquiries about whether to agree with the data provision to the main body,
Based on the consent of the data subject to the inquiry, the storage unit is referred to, and the holder of the first personal data is requested to provide the first personal data,
Setting a consideration for the provision of the first personal data to the holder of the first personal data,
A data distribution control program for causing a computer to execute a process.

101 data distribution control device 102,1001 data utilization company 103 data subject 104,1005,1006 data providing company 110,710 storage section 120 data provision request 130 consideration 200 data distribution control system 210 network 220 user information DB
230 Corporate Information DB
240 Registration information DB
300 Bus 301 CPU
302 memory 303 disk drive 304 disk 305 communication I/F
306 Portable recording medium I/F
307 portable recording medium 701 reception unit 702 registration unit 703 first identification unit 704 consent confirmation unit 705 second identification unit 706 request unit 707 transfer control unit 708 setting unit 800 data collection request 901, 902 consent confirmation screen 1400 consideration setting table

Claims (10)

In response to the request for providing the personal data, the storage unit for storing the metadata of the personal data and the information about the holder of the personal data is referred to and the data subject of the first personal data corresponding to the request for providing the personal data is referred to. , A consent confirmation unit that inquires whether to agree to the data provision,
A requesting unit that, based on the consent of the data subject to the inquiry, refers to the storage unit and requests the holder of the first personal data to provide the first personal data.
A setting unit for setting a consideration for the provision of the first personal data to the holder of the first personal data;
A data distribution control device comprising: The consent confirmation unit,
The inquiry as to whether or not to consent to the data provision is inquired by transmitting a consent confirmation request including the data type of the first personal data to the data subject. Data distribution control device. The consent confirmation unit,
The data subject is inquired as to whether or not to consent to the data provision, by transmitting a consent confirmation request including information capable of identifying the holder of the first personal data. The data distribution control device according to claim 1. The consent confirmation unit,
The inquiry about whether or not to consent to the data provision is inquired by transmitting a consent confirmation request including information capable of identifying the request source of the provision request to the data subject. The data distribution control device according to any one of 1 to 3. The consent confirmation unit,
The data subject is inquired as to whether or not to consent to the data provision by transmitting a consent confirmation request including information capable of specifying the purpose of use of the first personal data. The data distribution control device according to claim 1. The setting unit,
The data distribution control device according to any one of claims 1 to 5, further comprising: setting a consideration for the provision of the first personal data in the data subject. The setting unit,
The data distribution control device according to any one of claims 1 to 6, further comprising: setting a consideration for mediating the first personal data to a data mediator. 8. The data subject is a person who has a right to transfer the first personal data from the holder of the first personal data to another person. Data distribution control device described in. In response to the request for providing the personal data, the storage unit for storing the metadata of the personal data and the information about the holder of the personal data is referred to and the data subject of the first personal data corresponding to the request for providing the personal data is referred to. , Inquires about whether to agree to the data provision,
Based on the consent of the data subject to the inquiry, the storage unit is referred to, and the holder of the first personal data is requested to provide the first personal data,
Setting a consideration for the provision of the first personal data to the holder of the first personal data,
A data distribution control method characterized in that a computer executes the processing. In response to the request for providing the personal data, the storage unit for storing the metadata of the personal data and the information about the holder of the personal data is referred to and the data subject of the first personal data corresponding to the request for providing the personal data is referred to. , Inquires about whether to agree to the data provision,
Based on the consent of the data subject to the inquiry, the storage unit is referred to, and the holder of the first personal data is requested to provide the first personal data,
Setting a consideration for the provision of the first personal data to the holder of the first personal data,
A data distribution control program for causing a computer to execute a process.

Images