JP2021051694A - Program, information processing apparatus, and information processing method - Google Patents

Abstract

To provide a program, or the like, for visualizing transfer of user data.SOLUTION: A program causes a computer to implement: a history collection function which collects history information representing at least one of provision and reception of user data on a user to/from the outside, from a terminal used by the user; a transfer recording function which records the provision or reception of the user data as transfer record of the user data, on the basis of the collected history information; and an output information generation function which generates data transfer output information for outputting the transfer record.SELECTED DRAWING: Figure 1

Description

The present invention relates to a program, an information processing device, and an information processing method.

In recent years, there is a service that visualizes the movement status of funds such as income and expenses by using so-called accounting software or a household account book application, and supports the management of the funds. In providing such services, in addition to manually recording the transfer status of funds by the user, the transfer status of funds is automatically recorded in cooperation with the bank account system or credit card system owned by the user. be able to. In Patent Document 1 below, web detail data provided by a financial institution or credit company is automatically acquired, web detail data is identified for each transaction, and the transaction occurrence date, business partner, transaction amount, etc. of each identified transaction are described. An accounting processing device that displays the status of the transfer of funds as a journal processing screen or journal data is disclosed.

Japanese Unexamined Patent Publication No. 2017-16696

Similar to the funds owned by the user, there is an opportunity to provide or receive data related to the user (hereinafter referred to as "user data") such as personal data of the user and information on browsing history of the Internet. is increasing. On the other hand, there is a problem that the transfer of these user data is not visualized as described above.

Therefore, an object of the present invention is to provide a program, an information processing device, and an information processing method for visualizing the transfer of user data in order to solve the above problems.

The program according to one aspect of the present invention collects historical information indicating at least one of the history of providing user data related to the user to the outside and the history of receiving the user data from the terminal used by the user. A collection function, a transfer record function that records the provision or receipt of user data as a transfer record of user data for each user based on the collected history information, and a data transfer output information for outputting the transfer record are generated. The output information generation function to be performed is realized.

The information processing device according to one aspect of the present invention collects history information indicating at least one history of provision of user data related to the user to the outside and reception from the outside from a terminal used by the user. A transfer recording unit that records the provision or receipt of user data as a transfer record of user data based on the collected history information, and an output information generation unit that generates data transfer output information for outputting the transfer record. And.

In the information processing method according to one aspect of the present invention, a computer collects historical information indicating at least one history of provision of user data related to the user to the outside and reception from the outside from a terminal used by the user. Including a step of recording the provision or receipt of user data as a transfer record of user data based on the collected history information, and a step of generating data transfer output information for outputting the transfer record. ..

According to the above aspect, the program can collect historical information regarding the provision and receipt of user data from the terminal used by the user, and record the transfer record of the user data based on the collected historical information. .. Further, according to the above aspect, the program can output the transfer record.

According to the present invention, it is possible to provide a program, an information processing device, and an information processing method for visualizing the transfer of user data.

It is a figure for demonstrating the system configuration example of the data management system which concerns on this Embodiment. It is a figure for demonstrating an example of the outline of the data management system which concerns on this Embodiment. It is a figure which shows an example of the functional structure of the management server which concerns on this embodiment. It is a figure which shows an example of the functional structure of the terminal which concerns on this embodiment. It is a table which shows the example of the user data which concerns on this embodiment. It is a table which shows the example of the transfer record of the user data which concerns on this embodiment. It is a figure which shows the screen example in the data management system which concerns on this embodiment. It is a figure which shows the screen example in the data management system which concerns on this embodiment. It is a figure which shows the operation example of the data management system which concerns on this embodiment. It is a figure which shows an example of the hardware configuration of the management server and the terminal which concerns on embodiment.

A preferred embodiment of the present invention (hereinafter referred to as “the present embodiment”) will be described with reference to the accompanying drawings. In each figure, those having the same reference numerals have the same or similar configurations.

In the present invention, the "part", "means", "device", and "system" do not simply mean physical means, but the "part", "means", "device", and "system" are used. It also includes the case where the function to be possessed is realized by software. Further, even if the functions of one "part", "means", "device", or "system" are realized by two or more physical means or devices, two or more "parts" or "means", The functions of "device" and "system" may be realized by one physical means or device.

Further, the program of the present embodiment can be installed or loaded on a computer by downloading through various storage media such as an optical disk such as a CD-ROM, a magnetic disk, or a semiconductor memory, or via a communication network or the like. it can.

In the present embodiment, the use of user data includes provision of user data to the outside, receipt from the outside, and user or external consent to these.

<1. System configuration>
A system configuration example of the data management system 1 according to the present embodiment will be described with reference to FIG.

The data management system 1 provides the user with data related to the user (hereinafter referred to as "user data"), and receives the data from the outside, and the usage status of the user data including the usage at the providing destination. It is a system for management. As shown in FIG. 1, the data management system 1 includes a management server 100 and a first terminal 200a and a second terminal 200b used by the user. The first terminal 200a and the second terminal 200b are collectively referred to as "terminal 200" when there is no particular need to distinguish them.

The "user data" corresponds to various data related to the user. The user data may be information that can identify a specific individual, such as the user's personal information (for example, the user's name, telephone number, or date of birth), or for use by the user. It may be a data file such as a TXT file that is received from the outside and processed by the terminal 200. Details of the user data will be described later with reference to FIG.

The management server 100 is a server device capable of communicating with the terminal 200, the first external server 300, and the second external server 400 via the network N. The management server 100 is also an aspect of the information processing device. The management server 100 realizes a server function that manages information related to the use of user data by executing a predetermined program, and controls a process of providing or receiving such information to the outside. Although only one management server 100 is shown in FIG. 1 for the sake of simplicity, a plurality of management servers 100 may be provided. The management server 100 does not provide hardware, an OS, or the like dedicated to the data management system 1 (for example, an on-premises type server configuration), and uses a cloud server for SaaS (Software as a Service) and Paas (Platform as a Service). , IaaS (Infrastructure as a Service) may be used as appropriate. The first external server 300 and the second external server 400 are collectively referred to as an "external server" when there is no particular need to distinguish them.

The terminal 200 is a terminal used by the user. The terminal 200 is a smartphone, laptop terminal, or the like capable of inputting from the user to the management function of the usage status of the user data provided by the management server 100, outputting to the user from the management function, and communicating with the management server 100 or the like. It is a terminal device of. The terminal 200 is also an aspect of the information processing device. By executing a predetermined program, the terminal 200 connects to the management server 100 to send and receive information on the usage status of user data, displays such information on the screen to the user, and manages the above. Accepts user instructions for functions. Here, the "predetermined program" may be, for example, an application program dedicated to the data management system 1 installed in the terminal 200, or a Web browser provided as standard in the terminal 200 such as a general-purpose mobile terminal. It may be present or a combination thereof. In addition, the terminal 200 may transmit and receive user data by connecting to the first external server 300 in order to provide or receive user data by executing a predetermined program.

The network N is composed of a wireless network and a wired network. Examples of networks include mobile phone networks, PHS (Personal Handy-phone System) networks, wireless LAN (Local Area Network), 3G (3rd Generation), LTE (Long Term Evolution), 4G (4th Generation), and 5G (4th Generation). There are networks compliant with 5th Generation), WiMax (registered trademark), infrared communication, Bluetooth (registered trademark), wired LAN, telephone line, power line network, IEEE1394, and the like.

The first external server 300 is a server device in an external system to which user data is provided. The first external server 300 cooperates with the management server 100 via the network N to provide the management server 100 with information on the use of user data in the external system. Here, the "usage information" is information indicating the usage status of the user data. The usage information includes, for example, user data identification information for identifying the user data to be used, the purpose of use, the situation according to the purpose of use (for example, "in use", "suspension of use", or "discard"), and use. It may include information showing the past usage history for each purpose.

The second external server 400 is a server device used by an external business operator that provides services related to the use of user data. The second external server 400 receives usage information and the like from the management server 100 in cooperation with the management server 100 via the network N, and also transmits the service information to the management server 100.

"Service information" is information indicating services provided by an external business operator. The service information includes, for example, business identification information for identifying a business operator outside the provider, a service ID for identifying each service, a service name of each service, and address information of a website introducing each service ( For example, a URL or the like, a data file containing an introduction of each service (for example, a brochure PDF file introducing the service, etc.) may be included. The service provided by the external business operator may include, for example, a service related to the use of user data. In addition, the services provided by external businesses are, specifically, insurance services and risk management services for risks related to the use of user data, and advisory services for the use of user data, but the purpose is not limited to this. ..

<2. Overview>
An example of the outline of the data management system 1 will be described with reference to FIG. In the example of FIG. 2, the user U who uses the first terminal 200a will be described with an example of supporting the management of the usage status of the user data related to the user U, but the purpose is not limited to this. In this example, (A) visualization of user data usage status, (B) collection and evaluation of user data usage status, and advisory to users, and (C) provision of user data usage status to external businesses. The outline of the data management system 1 will be described by dividing it into three scenes of mediation of service provision of the external business operator to user U.

First, the scene of (A) above will be described. (A1) As shown in FIG. 2, the first terminal 200a collects historical information of user data regarding the user U stored in the first terminal 200a. Here, the "history information" is information indicating the history of at least one of the provision of user data to the outside and the receipt from the outside. The history information may be, for example, a transmission / reception log of user data between the first terminal 200a and the first external server 300. The transmission / reception log of user data includes, for example, a transmission log of location information of the first terminal 200a to the first external server 300, a transmission log of cookie information of the first terminal 200a to the first external server 300, and reception of various data files. Logs, etc. (A2) The first terminal 200a transmits the collected history information to the management server 100.

(A3) When the management server 100 receives the history information collected from the first terminal 200a, the management server 100 records the provision or receipt of the user data of the user U as a transfer record of the user data based on the history information. Details of the transfer record of user data will be described later with reference to FIG. The management server 100 generates data transfer output information for outputting a transfer record of user data.

(A4) The management server 100 transmits the generated data transfer output information to the first terminal 200a. (A5) When the first terminal 200a receives the data transfer output information from the management server 100, the first terminal 200a outputs the data transfer list screen A2 based on the data transfer output information. The "data transfer list screen" is a screen for displaying a list of user data transfer records of user U. The data transfer list screen A2 is, for example, a screen as shown in FIG. 8 described later.

According to the above configuration, the data management system 1 can record the transfer of user data to the user U and output the record on the first terminal 200a. That is, according to the above configuration, the data management system 1 can visualize the transfer of user data to the user U.

Next, the scene of (B) above will be described. (B1) The management server 100 collects usage information from the first external server 300 to which the user data is provided. Here, the "usage information" is information indicating the usage status of the user data. Details of usage information will be described later. The management server 100 extracts risks related to the use of user data based on the collected usage information. The management server 100 analyzes at least one of the extracted risk trends and characteristics.

(B2) The management server 100 evaluates the usage status of user data based on at least one of the risk trends and characteristics analyzed in (B1) above. The management server 100 generates advice information for the user U based on the evaluation. Here, the "advice information" is information for outputting advice for improving the evaluation of the usage status of the user data to the user. Details of the advice information will be described later. In addition, the management server 100 generates setting recommendation information based on the evaluation of the usage status of the user data for the user. Here, the "setting recommendation information" is information that is recommended to the user U and indicates settings related to the use of user data. Details of the setting recommendation information will be described later.

(B3) The management server 100 transmits the generated advice information and setting recommendation information to the first terminal 200a. (B4) When the first terminal 200a receives the advice information and the setting recommendation information, the first terminal 200a gives advice for improving the evaluation of the usage status of the user data and recommends the setting regarding the use of the user data based on the advice information. Output on the screen etc. Further, the first terminal 200a may change the setting of the first terminal 200a regarding the use of user data based on the setting recommendation information.

According to the above configuration, the data management system 1 can collect a wide range of user data usage status for the user U and analyze the risks existing in the usage of the user data. Further, the data management system 1 can evaluate the usage status of the user data based on the analyzed risk, and can provide the user U with advice and recommendations for improving the evaluation.

Next, the scene of (C) above will be described. (C1) The management server 100 provides at least one of the collected usage information and the evaluation information indicating the evaluation of the usage status to the second external server 400 used by the external business operator. In this example, the external business operator is an insurance company, and the company provides insurance services against security risks in user data. Further, the management server 100 refers to the service information indicating the above insurance service stored in the second external server 400 to which the usage information or the like is provided.

(C2) The management server 100 provides the referenced service information to the user U according to at least one of the usage status of the user data and the evaluation of the usage status based on the usage information and the evaluation information. Therefore, it is transmitted to the first terminal 200a. (C3) When the first terminal 200a receives the service information, the first terminal 200a outputs the above-mentioned insurance service provided by an external business operator on a screen or the like based on the service information.

According to the above configuration, the data management system 1 can mediate the service provided by the external business operator to the user U according to the usage status of the user data and the like.

<3. Management server function configuration>
The functional configuration of the management server 100 according to the present embodiment will be described with reference to FIG. As shown in FIG. 3, the management server 100 includes a control unit 110, a storage unit 130, and a communication unit 140.

The control unit 110 includes a transfer recording unit 111 and an output information generation unit 112. Further, the control unit 110 is, for example, a usage information collection unit 113, a risk extraction unit 114, a risk analysis unit 115, a usage evaluation unit 116, an advice generation unit 117, a recommendation generation unit 118, a usage information provision unit 119, or a service information provision. The unit 120 may be provided.

The transfer recording unit 111 records the provision or receipt of user data as a transfer record of user data based on the history information collected by the history collection unit 211 of the terminal 200 described later. The transfer recording unit 111 may record the provision or receipt of user data for each user. Here, an example of user data will be described with reference to FIG. Further, an example of the transfer record of user data will be described with reference to FIG.

As shown in FIG. 5, the user data is various data related to the user. The user data includes, for example, information associated with an individual user (classified as "user personal information"), information associated with a terminal 200 used by the user (classified as "terminal information"), and information related to transactions performed by the user. It can be classified into various files (classified as "transaction information"), various files processed by the terminal 200 for use by the user (classified as "various files"), etc., but the purpose is not limited to this.

As the user personal information, for example, user data such as a user's name, date of birth, gender, address, telephone number, personal number, and ID / password information of an account owned by the user can be considered. Further, as the terminal information, for example, the location information of the terminal 200, the Web history information such as the Web browsing history and the Cookie information, and the user data such as the device information such as the IP address of the terminal 200 and the information of the installed application are used. Conceivable. As the transaction information, for example, user data such as a product name paid and settled on an EC site and payment history information such as a payment amount can be considered. As various files, for example, user data such as a TXT file, a CSV file, and a file indicating a public key (for example, id_rsa.pub) saved in the terminal 200 for use by the user can be considered.

As shown in FIG. 6, the transfer record of user data is, for example, user identification information for identifying each user (referred to as "user ID" in this example), transfer for identifying the transfer of each user data. Identification information (in this example, "transfer ID"), date and time of data transfer, classification of "provide" or "receipt", and destination identification information for identifying the data transfer destination (in this example, "Destination"), user data identification information for identifying each user data (in this example, "user data ID"), classification of user data (for example, "classification" shown in FIG. 5) , Type of user data (for example, "user data" shown in FIG. 5), outline of user data, user data storage information indicating a storage location of user data to be exchanged (for example, to a storage location of user data in the terminal 200). Path, etc.), including the file name of the file related to user data. Of course, it is not necessary that all of this information is included in the user data transfer record, and information other than these may be included, depending on the management of the user data usage status using the user data transfer record, etc. It may be set appropriately.

The output information generation unit 112 generates data transfer output information. Here, the "data transfer output information" is information for outputting the transfer record. The data transfer output information may be, for example, information for outputting a list of user data transfer records related to the user for each user. Specifically, the data transfer output information may be information for outputting the data transfer list screen A2 as shown in FIG. 8 described later. According to such a configuration, the output information generation unit 112 can visualize the exchange of user data. Further, according to such a configuration, the output information generation unit 112 can also display the transfer record of the user data in a list, so that the transfer record of the user data can be output as the details of the transfer of the user data. ..

For example, the output information generation unit 112 may associate the user data transfer record with consent information indicating the user's consent to the transfer of the user data. Here, the "consent information" is information indicating the user's consent to the provision to the outside and the use of the user data at the provision destination. The consent information may include, for example, the subject consent. The target agreement is, for example, whether or not the user data can be provided to the outside, whether or not it can be used externally, or the purpose of use when the provision and use of the user data to the outside is "possible" (for example, the first item). Provision / disclosure to three parties, etc.) may be included.

The output information generation unit 112 may generate risk output information, for example. Here, the "risk output information" is information for outputting the risk extracted by the risk extraction unit 114 in association with the transfer record of user data. The risk output information may be, for example, text information for displaying that the risk has been extracted in the data transfer display area a31 of the user data of the data transfer list screen A2 as shown in FIG. Further, the risk output information may be information for outputting the risk display button a311 for transitioning to the screen for displaying the details of the extracted risk. According to such a configuration, the output information generation unit 112 can visualize the risk related to the use of the user data in association with the transfer of the corresponding user data.

The output information generation unit 112 may generate usage evaluation output information, for example. Here, the "use evaluation output information" is information for outputting the evaluation by the use evaluation unit 116, which will be described later, in association with the transfer record of user data. The usage evaluation output information outputs, for example, the usage status display button a312 for transitioning to the screen for displaying the usage status and the evaluation of the usage status in the data transfer display area a31 of the user data of the data transfer list screen A2 as shown in FIG. It may be information for doing so. According to such a configuration, the output information generation unit 112 can visualize the evaluation of the usage status of the user data in association with the transfer of the corresponding user data.

The usage information collecting unit 113 collects usage information from at least one of the terminal 200, the user data providing destination, and other external devices. The user data may be provided to, for example, the first external server 300. The other external device may be, for example, a server device of an external system other than the first external server 300. The mode of collecting usage information in the usage information collecting unit 113 may be any mode, for example, a data file indicating usage information may be received from a user data providing destination or the like, or a user data providing destination or the like. A data file indicating usage information may be acquired by remotely accessing the user data, or an API implemented by a user data provider or the like may be instructed to refer to the usage information, and as a result, the usage information may be acquired.

The usage information may be, for example, a history (for example, a transmission log or the like) indicating the status of provision of user data to a third party on the first external server 300. The usage information may include, for example, consent information when the first external server 300 provides user data to a third party. Further, the usage information may be the owner of the first external server 300, the location, or the like. Further, the usage information may include trouble information indicating troubles related to the first external server 300 or its owner. The usage information collecting unit 113 may collect such trouble information from information published on the Internet (for example, information posted on SNS (Social Networking Service)).

The risk extraction unit 114 extracts risks related to the use of user data based on the usage information collected by the usage information collection unit 113.

The risk extraction unit 114 collates the usage information with the pattern information, for example, with respect to the risk pattern information indicating the usage pattern of the user data, which is a factor of the risk manifested in the predetermined period stored by the storage unit 130 or the like. May be good. As a result of the collation, the risk extraction unit 114 may extract the use of user data that at least partially matches the usage pattern indicated by the pattern information as a risk.

The risk extraction unit 114 may, for example, extract the use of user data exceeding the set standard as a risk based on a preset standard for extracting the risk. The criteria for this extraction may correspond to, for example, the risk acceptance criteria as defined in ISO / IEC27001. That is, the risk extraction unit 114 may extract the use of user data exceeding this risk acceptance criterion as a risk. In addition, the risk extraction unit 114 may identify at least one of threats and vulnerabilities related to the use of user data, and extract the identified threats or vulnerabilities as risks.

As another example, the risk extraction unit 114 may use a method of classifying the usage status of user data according to the presence or absence of risk and the risk level by a classification model constructed by inputting usage information. The risk extraction unit 114 may, for example, construct a classification model by inputting the feature amount of the usage situation. Specifically, the risk extraction unit 114 first uses the usage status of the user data included in the usage information as an explanatory variable, and has "risk" or "no risk", or "risk levels 1 to N (N is specified). Set it as a numerical value, and if it is within N and above a predetermined value, it is considered as a risk because it is out of the permissible range.) ” The risk extraction unit 114 combines the extracted feature quantities into learning data. Next, the risk extraction unit 114 constructs a classification model that defines a classification class by learning by machine learning (for example, a learning technique such as SVM (Support Vector Machine)) using the learning data. The risk extraction unit 114 stores the constructed classification model in the storage unit 130. Next, the risk extraction unit 114 uses a classification model in which the usage information collected by the usage information collection unit 113 is stored in the storage unit 130 based on the feature amount of the usage status of the user data included in the usage information. It is classified into a classification class such as "with risk" or "without risk", or "risk level 1 to N". Further, although the example of supervised learning has been described above, as another example, the risk extraction unit 114 uses a classification model constructed by inputting usage information and using principal component analysis and clustering as unsupervised learning. , It is also conceivable to use a method of classifying the usage status of user data according to the presence or absence of risk and the risk level.

The risk analysis unit 115 analyzes at least one of the risk trends and characteristics extracted by the risk extraction unit 114. The risk analysis unit 115 may calculate, for example, the magnitude of risk (risk intensity) or the frequency of occurrence of risk as a characteristic of risk. Specifically, as a quantitative evaluation, the risk analysis unit 115 determines the risk in proportion to the magnitude of the loss amount, based on the information indicating the association between the risk manifested in a predetermined period and the loss amount due to the risk. The size of the risk (for example, large / medium / small, etc.) may be calculated, and the frequency of risk occurrence (for example, high / low, etc.) may be calculated based on the number of actual cases. In addition, the risk analysis unit 115 may determine the degree of threat and vulnerability that are the extracted risks, and calculate the magnitude of risk according to the determined degree of threat and vulnerability. For example, the degree of threat and vulnerability may be determined in N stages of levels 1 to N, and the larger the value of this level, the higher the degree of threat and vulnerability. In addition, the risk analysis unit 115 may classify the extracted risks into a predetermined classification as a risk tendency, and calculate the transition of the number of extracted risks in a predetermined period for each classification.

As another example, the risk analysis unit 115 classifies the extracted risks according to the characteristics of the risks (for example, the magnitude of the risk, the frequency of occurrence, etc.) by the classification model constructed by inputting the extracted risks. It is also possible to use the method.

The usage evaluation unit 116 evaluates the usage status of user data based on at least one of the risk trends and characteristics analyzed by the risk analysis unit 115. The usage status of the user data may include not only the mode of how the user data is used, but also the influence and effect of the use, the merits and demerits of the use, and the like. The usage evaluation unit 116 may generate evaluation information indicating an evaluation of the usage status of user data based on the evaluation result. The usage evaluation unit 116 may determine the evaluation of the usage status of the user data according to the magnitude of the extracted risk, for example. For example, when the risk is not extracted, the utilization evaluation unit 116 raises the evaluation to "good", and when the risk is extracted but the magnitude of the risk is "medium" or "small", the evaluation is set to "good". If the evaluation is "standard", the risk is extracted, and the magnitude of the risk is "large", the evaluation may be assumed to be low and "improvement required". Further, the utilization evaluation unit 116 may use, for example, the frequency of occurrence of the risk in addition to or in place of the magnitude of the risk. Further, the usage evaluation unit 116 may evaluate, for example, the consent status for the provision of user data.

As another example, the usage evaluation unit 116 classifies the evaluation of the usage status by a predetermined range by a classification model constructed by inputting the characteristics of the risks analyzed by the risk analysis unit 115, similarly to the risk extraction unit 114. It is also possible to use the method.

The advice generation unit 117 generates advice information based on the evaluation by the usage evaluation unit 116. Here, the "advice information" is information for outputting advice for improving the evaluation of the usage status of the user data to the user. For example, when the evaluation of the usage status of the user data by the usage evaluation unit 116 is "improvement required", the advice information includes "the tendency and characteristics of the risk on which the evaluation is based" and "of this user data. Improvements in the use of user data such as "A large risk regarding the use of user data has been extracted at the first external server 300 to which it is provided. Please refrain from providing user data to the first external server 300." It may be a message indicating that it is necessary. In generating the advice information of the advice generation unit 117, a template of the message stored in the storage unit 130 in advance may be selected, or at least a part of the message may be dynamically assembled and generated.

According to the above configuration, the advice generation unit 117 can support the user to improve the usage status of the user data.

The recommendation generation unit 118 generates setting recommendation information based on the evaluation by the utilization evaluation unit 116. Here, the "setting recommendation information" is information that is recommended to the user and indicates the setting related to the use of the user data. The setting recommendation information provides, for example, the Web browsing history stored in the terminal 200 to the first external server 300, and when the magnitude of the risk related to the provision of the Web browsing history is "large", the Web browser of the terminal 200 It may be a content to change the setting so that the storage setting of the browsing history is deleted at the end of browsing, or a message recommending to change the setting.

According to the above configuration, the recommendation generation unit 118 recommends that the user change the setting for improving the usage status of the user data as a specific measure for improving the usage status of the user data. it can.

The usage information providing unit 119 provides the second external server 400 with at least one of the usage information collected by the usage information collecting unit 113 and the evaluation information indicating the evaluation of the usage status. The usage information providing unit 119 may provide any usage information, for example, a data file indicating the usage information may be transmitted to the second external server 400, or the usage information or the like may be indicated. A website may be distributed, or an API for referencing usage information or the like to a second external server 400 may be implemented. According to such a configuration, the usage information providing unit 119 can provide information on the usage status of the user data and the evaluation of the usage status to the external business operator.

The service information providing unit 120 refers to the storage function for storing the service information, and based on at least one of the usage information and the evaluation information, according to at least one of the usage status and the evaluation of the usage status. Provide service information to the user. The "memory function for storing service information" referred to here may be, for example, a storage unit 130 described later, or a storage function provided in a second external server 400 to which usage information or the like is provided. .. When the service information providing unit 120 refers to the storage function provided in the second external server 400, the service information providing unit 120 may use the API implemented by the second external server 400 for the reference, or may use the API implemented by the second external server 400 for the reference, or the service information providing unit 120 may use the API implemented for the reference. You may access it. According to such a configuration, the service information providing unit 120 can provide the user with information about the service according to the usage status of the user data and the evaluation of the usage status.

The storage unit 130 stores various information related to the management of the usage status of user data. The storage unit 130 may store, for example, history information, data transfer output information, risk output information, usage evaluation output information, advice information, setting recommendation information, risk pattern information, and the like. The storage unit 130 may store each information by using a database management system (DBMS), or may store each information by using a file system. When using the DBMS, a table may be provided for each of the above information, and each information may be managed by associating the tables with each other.

The communication unit 140 transmits and receives various information to and from the terminal 200, the first external server 300, the second external server 400, and other devices of the external system via the network N. The communication unit 140 receives, for example, history information, usage information, etc. from the terminal 200, reception of usage information, etc. from the first external server 300, and the received usage information, etc., via the network N. It may be sent to the external server 400.

<4. Terminal function configuration>
The functional configuration of the terminal 200 according to the present embodiment will be described with reference to FIG. As shown in FIG. 4, the terminal 200 includes a control unit 210, a storage unit 230, and a communication unit 240.

The control unit 210 includes a history collection unit 211. Further, the control unit 210 may include, for example, an output information generation unit 212 or a setting change unit 213.

The history collection unit 211 collects history information about a user who uses the terminal 200 from the terminal 200. The mode of collecting the history information in the history collecting unit 211 may be any mode, and for example, a preset file or all files in the preset folder may be duplicated in a predetermined folder. The history collecting unit 211 transmits the collected history information via the communication unit 240 described later.

The output information generation unit 212 generates various output information for output to the screen of the terminal 200 or the like, similarly to the output information generation unit 112 of the management server 100. The output information generation unit 212 may generate all or a part of the information generated by the output information generation unit 112 of the management server 100, for example.

The setting change unit 213 changes the setting of the terminal 200 regarding the use of user data based on the setting recommendation information. According to the above configuration, the setting changing unit 213 can automatically change the setting to the recommended setting for the user to improve the usage status of the user data. That is, according to the above configuration, the setting changing unit 213 can reduce the trouble of changing the setting regarding the use of the user data of the user.

The storage unit 230 stores various information related to collection of history information and output such as usage status of user data. The storage unit 230 may store, for example, history information, data transfer output information, risk output information, usage evaluation output information, advice information, setting recommendation information, and the like. The storage unit 230 may use a database management system (DBMS) to store each piece of information, or may use a file system to store each piece of information. When using the DBMS, a table may be provided for each of the above information, and each information may be managed by associating the tables with each other.

The communication unit 240 transmits and receives various information to and from the management server 100, the first external server 300, other devices of the external system, and the like via the network N. The communication unit 240 receives various output information, advice information, and the like from the management server 100 via the network N, and transmits history information, consent information, and the like to the management server 100, for example.

<5. Screen example>
A screen example of the data management system 1 will be described with reference to FIGS. 7 and 8. FIG. 7 is a schematic diagram showing an example of a management screen (hereinafter, simply referred to as “management screen”) for using user data displayed on the screen of the terminal 200. FIG. 8 is a schematic diagram showing an example of a data transfer list screen displayed on the screen of the terminal 200.

As shown in FIG. 7, the management screen A1 displays a list of functions provided by the data management system 1 for managing the use of user data for each logged-in user. The management screen A1 includes a transfer list display button a11 for displaying the data transfer list screen A2, a usage status display button a12 for displaying a usage status evaluation screen (not shown), and an advice / setting recommendation screen (not shown). ), The advice display button a13 for displaying the usage setting screen (not shown), the usage setting display button a14 for displaying the usage setting screen (not shown), and the consent management display button a15 for displaying the consent management screen (not shown). , A service display button a16 for displaying a service screen (not shown), and a program setting display button a2 for displaying a program setting screen (not shown).

The usage status evaluation screen is a screen that displays an evaluation of the usage status of user data. In addition, the usage status evaluation screen displays, for example, an evaluation of the status of provision of user data to the outside, the status of receipt from the outside, and the status of consenting to these. The usage status evaluation screen may display, for example, a risk tendency or characteristic regarding the use of user data based on the risk output information.

The advice / setting recommendation screen is a screen for displaying advice information and setting recommendation information regarding the use of user data.

The usage setting screen is a screen for changing settings related to the use of user data. The usage setting screen may, for example, manually accept a user to specify a change in settings related to the use of user data. Further, the usage setting screen may accept, for example, a specification for enabling or disabling the function of automatically changing to the recommended setting based on the setting recommendation information.

The consent management screen is a screen for displaying consent information regarding the use of user data. On the consent management screen, for example, consent to the use of user data may be displayed in a list with a flag indicating whether or not it is valid at the time of display. Also,

The service screen is a screen for displaying service information related to the use of user data.

The program setting screen is a screen for changing the settings of the application program dedicated to the data management system 1 installed in the terminal 200.

As shown in FIG. 8, the data transfer list screen A2 includes a data transfer list display area a3 that displays a list of user data transfer records. The data transfer list display area a3 includes a data transfer display area a31 that displays a transfer record of each user data. The data transfer display area a31 is a text display of the transfer record of the target user data, a risk display button a311 that displays the fact that a risk has been extracted in the transfer of the target user data and displays the details of the risk, and the transfer. It includes a usage status display button a312 for displaying the usage status of the user data and an evaluation of the usage status, and a consent information display button a313 for displaying consent information for giving and receiving user data. Further, the data transfer display area may display the invalidation risk display button a32 which is so-called grayed out and invalidates the operation when the risk is not extracted in the transfer of the corresponding user data. In addition, the data transfer display area may display an alert display for notifying the urgency of the risk analyzed as requiring urgent improvement based on the characteristics of the analyzed risk as the notification badge a33 of the risk display button. Good. The risk display button a311 is one aspect of the risk output information. Further, the usage status display button a312 is one aspect of the usage evaluation output information.

<6. Operation example>
An operation example of the data management system 1 will be described with reference to FIG. FIG. 9 is a flow diagram showing a flow of processing in the data management system 1 from collecting history information from the terminal 200 to generating output information for outputting data transfer records and the like based on the history information. is there. The order of processing shown below is an example, and may be changed as appropriate.

As shown in FIG. 9, the history collection unit 211 of the terminal 200 collects history information from the terminal 200 (S10). The communication unit 240 of the terminal 200 transmits the collected history information to the management server 100. When the communication unit 140 of the management server 100 receives the collected history information from the terminal 200, the transfer recording unit 111 of the management server 100 provides or receives the user data based on the collected history information. It is recorded as a transfer record of (S11).

The usage information collecting unit 113 of the management server 100 collects usage information from at least one of the terminal 200, the first external server 300 to which the user data is provided, and other external devices (S12). The risk extraction unit 114 extracts risks related to the use of user data based on the usage information collected by the usage information collection unit 113 (S13). When the risk is extracted by the risk extraction unit 114 (Yes in S14), the risk analysis unit 115 analyzes at least one of the extracted risk trends and characteristics (S15). The usage evaluation unit 116 evaluates the usage status of user data based on at least one of the risk trends and characteristics analyzed by the risk analysis unit 115 (S16).

The output information generation unit 112 generates data transfer output information, risk output information, and usage evaluation output information (S17).

<7. Hardware configuration>
An example of the hardware configuration in the case where the management server 100 and the terminal 200 described above are realized by the computer 800 will be described with reference to FIG. The function of each device can be realized by dividing it into a plurality of devices.

As shown in FIG. 10, the computer 800 includes a processor 801 and a memory 803, a storage device 805, an input I / F unit 807, a data I / F unit 809, a communication I / F unit 811 and a display device. Includes 813.

The processor 801 controls various processes in the computer 800 by executing a program stored in the memory 803. For example, each functional unit or the like included in the control unit 110 of the management server 100 can be realized as a program that is temporarily stored in the memory 803 and then mainly operates on the processor 801.

The memory 803 is, for example, a storage medium such as a RAM (Random Access Memory). The memory 803 temporarily stores the program code of the program executed by the processor 801 and the data required when the program is executed.

The storage device 805 is a non-volatile storage medium such as a hard disk drive (HDD) or a flash memory. The storage device 805 stores an operating system and various programs for realizing each of the above configurations. In addition, the storage device 805 can also store a table for registering user data transfer records, usage information, and the like, and a DB for managing the table. Such programs and data are referred to by the processor 801 by being loaded into the memory 803 as needed.

The input I / F unit 807 is a device for receiving input from the user. Specific examples of the input I / F unit 807 include a keyboard, a mouse, a touch panel, various sensors, a wearable device, and the like. The input I / F unit 807 may be connected to the computer 800 via an interface such as USB (Universal Serial Bus).

The data I / F unit 809 is a device for inputting data from the outside of the computer 800. Specific examples of the data I / F unit 809 include a drive device for reading data stored in various storage media. It is also conceivable that the data I / F unit 809 is provided outside the computer 800. In that case, the data I / F unit 809 is connected to the computer 800 via an interface such as USB.

The communication I / F unit 811 is a device for performing data communication via the Internet N by wire or wirelessly with an external device of the computer 800. It is also conceivable that the communication I / F unit 811 is provided outside the computer 800. In that case, the communication I / F unit 811 is connected to the computer 800 via an interface such as USB.

The display device 813 is a device for displaying various information. Specific examples of the display device 813 include a liquid crystal display, an organic EL (Electro-Luminescence) display, a display of a wearable device, and the like. The display device 813 may be provided outside the computer 800. In that case, the display device 813 is connected to the computer 800 via, for example, a display cable or the like. Further, when the touch panel is adopted as the input I / F unit 807, the display device 813 can be integrally configured with the input I / F unit 807.

It should be noted that the above-described embodiment is an example for explaining the present invention, and the present invention is not intended to be limited only to the embodiment. Further, the present invention can be modified in various ways as long as it does not deviate from the gist thereof. Further, those skilled in the art can adopt an embodiment in which each element described below is replaced with an equal one, and such an embodiment is also included in the scope of the present invention.

Further, the components included in the management server 100 and the terminal 200 described in the above embodiment are such that the program stored in the storage device 805 is executed by the processor 801 and the defined processing is performed with other hardware. It shall be realized in collaboration. In other words, these components are assumed to be software or firmware and corresponding hardware, and in both concepts, "function", "means", "part", "processing circuit", It is also described as "unit" or "module", and can be read as "unit" or "module".

[Modification example]
Although the present invention has been described based on the above-described embodiment, the following cases are also included in the present invention.

(1) The terminal 200 may include at least a part of each configuration in the management server 100 according to the above embodiment. For example, the functions of the transfer recording unit 111 and the output information generation unit 112 of the management server 100 may be implemented in the dedicated application program of the data management system 1 installed by the terminal 200. According to such a configuration, it is possible to realize from the collection of history information to the transfer recording and output of user data only with the terminal 200.

(2) In the above embodiment, the setting changing unit 213 has described an example of changing the setting of the terminal 200 based on the setting recommendation information, but the present invention is not limited to this, and if the user has a setting related to the transfer of user data, the setting is not limited to this. Any setting will do. For example, the setting changing unit according to the present invention may change the setting related to the user of the user data stored in the first external server 300 to which the user data is provided.

(3) Although not shown in the above embodiment, the terminal used by the user and the external device to which the user data is exchanged may be a so-called IoT device. That is, the present invention can also be used when IoT devices exchange user data and conclude smart contracts via a network. For example, when a user uses an IoT device and uses the IoT device as a user data provider, according to the present invention, the usage status of the user data in the IoT device is evaluated, and the user data in the IoT device is evaluated. It is possible to extract and analyze risks related to usage.

1 ... Data management system, 100 ... Management server, 110 ... Control unit, 111 ... Transfer recording unit, 112 ... Output information generation unit, 113 ... Usage information collection unit, 114 ... Risk extraction unit, 115 ... Risk analysis unit, 116 ... Usage evaluation unit 117 ... Advice generation unit, 118 ... Recommendation generation unit, 119 ... Usage information provision unit, 120 ... Service information provision unit, 130 ... Storage unit, 140 ... Communication unit, 200, 200a, 200b ... Terminal, 210 ... Control unit, 211 ... History collection unit, 212 ... Output information generation unit, 213 ... Setting change unit, 230 ... Storage unit, 240 ... Communication unit, 800 ... Computer, 801 ... Processor, 803 ... Memory, 805 ... Storage device, 807 ... Input I / F section, 809 ... Data I / F section, 811 ... Communication I / F section, 813 ... Display device.

Claims (10)

On the computer
A history collection function that collects history information indicating the history of at least one of the provision of user data related to the user to the outside and the receipt from the outside from the terminal used by the user.
A transfer recording function that records the provision or receipt of the user data as a transfer record of the user data based on the collected history information.
Realize an output information generation function that generates data transfer output information for outputting the transfer record.
program. A usage collection function that collects usage information indicating the usage status of the user data from at least one of the terminal, the user data provider, and other external devices.
Further provided with a risk extraction function for extracting risks related to the use of the user data based on the collected usage information.
The output information generation function generates risk output information for outputting the extracted risk in association with the transfer record.
The program according to claim 1. A risk analysis function that analyzes at least one of the extracted risk trends and characteristics,
Further provided with a usage evaluation function for evaluating the usage status of the user data based on at least one of the analyzed trends and characteristics of the risk.
The output information generation function generates usage evaluation output information for outputting the evaluation by the usage evaluation function in association with the transfer record.
The program according to claim 2. It further includes an advice generation function for generating advice information for outputting advice for improving the evaluation to the user based on the evaluation by the utilization evaluation function.
The program according to claim 3. Based on the evaluation by the usage evaluation function, it further includes a recommendation generation function that generates setting recommendation information indicating settings related to the use of the user data, which is recommended to the user.
The program according to claim 3. Further provided with a setting change function for changing the setting related to the use of the user data based on the setting recommendation information.
The program according to claim 5. Further provided with a usage information providing function of providing at least one of the collected usage information and the evaluation information indicating the evaluation of the usage status to an information processing device used by an external business operator.
The program according to any one of claims 2 to 6. With reference to a storage function for storing service information indicating a service provided by the external business operator, the usage status and the evaluation of the usage status are performed based on at least one of the usage information and the evaluation information. Further provided with a service information providing function of providing the service information to the user according to at least one of them.
The program according to claim 7. A history collection unit that collects history information indicating the history of at least one of the provision of user data related to the user to the outside and the receipt from the outside from the terminal used by the user.
A transfer recording unit that records the provision or receipt of the user data as a transfer record of the user data based on the collected history information.
An output information generation unit for generating data transfer output information for outputting the transfer record is provided.
Information processing device. The computer
A step of collecting history information indicating the history of at least one of provision of user data related to the user to the outside and receipt from the outside from the terminal used by the user, and
A step of recording the provision or receipt of the user data as a transfer record of the user data based on the collected historical information.
Including a step of generating data transfer output information for outputting the transfer record, and the like.
Information processing method.

Images