JP3743783B1 - Personal information management system, personal information management server, and personal information management server program - Google Patents

Abstract

[PROBLEMS] To ensure that personal information distributed in a company or the like can be searched and managed in a manageable manner without obtaining human cooperation and without placing a special burden on the person in charge. We will ensure that we can respond to requests for disclosure and correction of personal information, and we will prevent the inadvertent leakage and leakage of personal information and unauthorized use of personal information.
A personal information management server includes an installation unit that installs a personal information search program in each client, and a collection unit that receives a result of a self-search executed by each client and stores the result in a database. And a personal information search means for each client 10 executing a personal information search program to identify and search a collection of personal information from the data in the storage unit, A transmission means for transmitting to the information search server 20 is provided.
[Selection] Figure 1

Description

  The present invention relates to a technique for searching and managing personal information that can identify a specific individual, and in particular, for example, personal information distributed and stored in a plurality of clients (such as personal computers) in a company. The present invention relates to a technology that can automatically search and put a server under management.

  In recent years, with an increase in awareness of protection of personal information, it has been desired to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information. In addition, along with the enforcement of the Personal Information Protection Law, a business operator handling personal information receives a request for disclosure or correction of personal information from each individual while preventing the leakage, leakage or unauthorized use of personal information. It is obliged to disclose and correct personal information.

  Here, the personal information is information that can identify a specific individual by itself or in combination, and includes, for example, a name, date of birth, contact information (address, address, telephone number) and the like. Customer information, business partner information, etc. stored and handled in various companies often fall under the category of personal information, and in the future, companies that handle a lot of such personal information will be obligated as above as a personal information handling business operator. Must be fulfilled.

  In order to fulfill the obligations described above, it is essential to centralize personal information by introducing a central management system for personal information. However, in reality, personal information such as customer information and business partner information is dispersed in a company's personal computer (hereinafter sometimes abbreviated as PC) and servers in each department. Often exists. More specifically, individual employees store their personal information (customer information, etc.) on their PCs for their own work, or a central database or a subset of personal information collected by each employee. It exists in various PCs.

  For this reason, when constructing the centralized management system or attempting to fulfill the above obligations in a distributed state, the administrator must first separate the personal information that is scattered within the company. It is necessary to identify what kind of personal information exists in the company, but at present, the personal information is identified by the manager instructing each employee to be a company-wide It will be carried out with the cooperation of the department.

For example, in Patent Document 1 below, in accordance with the enforcement of the Personal Information Protection Law, a technology for providing a personal information protection service that prevents personal information from being leaked or leaked or being used illegally is “processing of a personal information protection service business. Method and apparatus "have been proposed and disclosed. However, the following Patent Document 1 does not disclose any technique related to the identification of personal information as described above.
JP 2002-183367 A

However, when personal information is identified with human cooperation such as reporting from each employee, not only is it time-consuming, but it is difficult to reliably identify all personal information without omission. In particular, when personal information is increasingly distributed, it is extremely difficult to identify personal information.
In addition, if there is an omission in the identification of personal information, not only the above obligations can be fulfilled, but the status of the personal information cannot be managed, and there is a risk of inadvertent leakage or leakage of personal information or unauthorized use of personal information. is there.

Therefore, it is desirable to ensure that all personal information distributed in the company is searched and managed.
The present invention was devised in view of such circumstances, and is a collection of personal information that exists in a distributed manner, for example, within a company without obtaining human cooperation and without placing a special load on the person in charge. By ensuring that the body can be searched and managed, it will be possible to respond to requests for disclosure and correction of personal information, and inadvertent leakage / leakage of personal information and unauthorized use of personal information. The purpose is to reliably prevent this.

In order to achieve the above object, a personal information management system of the present invention is connected to a plurality of clients so as to be able to communicate with each other via a network, and manages personal information files in the plurality of clients. A personal information management server, and the personal information management server installs a personal information search program for causing each client to perform a personal search of personal information via the network, and via the network, The personal information search is configured to include a collection unit that receives a result of the self-search executed by each client and stores the result in a database, and each of the plurality of clients is installed from the personal information management server. By running the program, you can record each client Includes personal information searching means for searching to identify the personal information file from the data in section, and transmitting means for transmitting the results of the self-retrieval by said individual information retrieval means via said network to said individual information management server The personal information search means is configured to cause each client to implement a personal information search function for specifying and searching for a personal information file from the data in the storage unit of each client, and is included in the data For each data aggregate , the name, date of birth, address, residence, telephone number, e-mail address, etc. as characters or character strings included in the data aggregate and characters or character strings that appear characteristically in personal information Title, by matching to that according to at least one of the personal identification information, the characteristic character or the feature character string is the Counts the number of occurrences in over data collection, based on the regimen counting results, calculates the feature character or judgment value occurrence rate becomes higher increase of the characteristic character string, the judgment value exceeds a predetermined threshold value In this case, each client is operated so as to determine that the data aggregate is a personal information file .

The personal information management server of the present invention functions as a personal information management server in the personal information management system.

The personal information management server program of the present invention is a program that causes a computer to function as a personal information management server that manages personal information files in a plurality of clients connected to each other via a network.
Includes a personal information search program that allows each client to perform a personal search for personal information,
Installation means for installing the personal information search program on each client via the network; and
Via the network, the result of self-search performed by each client is received, and the computer is functioned as a collecting means for storing in a database,
The personal information retrieval program installed in each client by the installation means is:
Each client realizes a personal information search function for specifying and searching a personal information file from data in the storage unit of each client,
For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, A counting step of collating with at least one of an e-mail address, a title, and personal identification information, and counting the number of times the characteristic character or the characteristic character string appears in the data aggregate;
In the counting step, a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases,
When the determination value exceeds a predetermined threshold, the determination step of determining that the data aggregate is a personal information file is executed by the client.

  According to the present invention described above, for each data aggregate in the storage unit, whether or not the data aggregate is a collection of personal information is determined based on a determination value based on the number of appearances of characteristic characters and characteristic character strings. Since it is possible to automatically identify and search a collection of personal information, it exists in a distributed manner, for example, within a company, without human cooperation and without placing a special burden on the person in charge. A collection of personal information (a data collection that is highly likely to be a collection of personal information) can be reliably searched for and put into a state where it can be managed. Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

  At this time, the usage rate (usage load) of the arithmetic processing unit is monitored in each client (information processing apparatus with a personal information management function), and if the usage rate is equal to or less than a predetermined threshold, the personal information search means (search engine) is By starting, it is possible to identify a collection of personal information without imposing a load on the arithmetic processing unit.

  Each client (information processing apparatus with a personal information management function) monitors the data input / output operation for the storage unit, and activates personal information search means (search engine) when the input / output operation occurs, thereby storing the data in the client. When new data is input to the storage unit or when data is output from the storage unit in the client (for example, when outputting data to be attached to an e-mail, or when writing data to an external storage medium) In addition, since it is possible to determine whether the data aggregate included in the input / output data is a collection of personal information and to monitor the movement of the personal information aggregate, Leakage can be prevented more reliably.

  Furthermore, the data aggregate determined to be a collection of personal information is monitored, and if access to the data aggregate (for example, data change by renaming, copying, erasing, moving, etc.) occurs, that fact is indicated. By sending to the personal information management server, the access (operation / change history) to the data aggregate that is likely to be a collection of personal information is tracked and managed (tracked) by the personal information management server. Unauthorized use of personal information can be prevented more reliably.

  In addition, by managing each data aggregate according to the determination value calculated for each data aggregate, for example, if the determination value is large, be careful of the user (owner) of the data aggregate and the system administrator. It is possible to notify information / warning information and forcibly capture and collect the data aggregate from the client, and more reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information. can do.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of Personal Information Management System of this Embodiment FIG. 1 is a block diagram showing a functional configuration of a personal information management system as a first embodiment of the present invention. The personal information management system 1 shown in FIG. A plurality of clients (information processing apparatus with a personal information management function; a terminal device such as a personal computer) 10 and these clients 10 are connected to each other via a network (for example, a LAN (Local Area Network)) 30 so that they can communicate with each other. The personal information management server 20 that manages the personal information file in the client 10 is configured.

  In the present embodiment, the personal information file (collection of personal information) holds a predetermined number or more of records including personal information. As described above, the personal information includes a specific individual by a single unit or a combination. Information that can be identified includes, for example, name, date of birth, contact information (address, address, telephone number, e-mail address). In addition to these, personal information includes titles, basic resident register numbers, account numbers, credit card numbers, license numbers, passport numbers, and the like.

[1-1] Configuration of Client of this Embodiment FIG. 2 is a block diagram showing the functional configuration of each client 10 of this embodiment. The client 10 shown in FIG. 2 is a CPU (arithmetic processing unit) that executes various processes. ) 10a and a storage unit 10b capable of holding a data aggregate (file) of personal information and the like, a quarantine table 10c provided from the personal information management server 20, and a data aggregate held in the storage unit 10b (Data file) P mark table 10d that holds a P mark (privacy level mark; a level indicating the high possibility of being a personal information file and a level determined by a determination value described later). ing.

Here, the storage unit 10b is a hard disk built in the client 10, or a storage device connected to or external to the client 10, such as a flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, In addition to optical disks and magneto-optical disks, this is a storage device that uses recording media such as IC cards, ROM cartridges, and magnetic tapes.
Further, the quarantine table 10c and the P mark table 10d are held in a RAM (Random Access Memory), a hard disk or the like constituting the client 10.

  The CPU 10a functions as a personal information search means 11, a CPU usage rate monitoring means 12, an input / output monitoring means 13, an activation control means 14, an access monitoring means 15 and a transmission / reception means 16, and these functions are performed by the CPU 10a. As will be described later, this is realized by executing a personal information search program installed from the personal information management server 20.

  The personal information search means 11 operates as described later with reference to FIG. 6 by executing a personal information search program installed from the personal information management server 20, and a data file (stored in the storage unit 10b ( It functions as a text extraction engine that converts a target file) into a text file, and also functions as a search engine that specifies and searches a personal information file from data in the storage unit 10b using the quarantine table 10c. That is, the personal information search means 11 searches various files (data aggregates) existing in the storage unit 10b of the client 10 according to the condition (quarantine table 10c) instructed from the personal information management server 20, and the target file ( A file determined to be a personal information file) is written to a log (local cache database). The P mark determined based on the search result (determination value) obtained by the personal information search means 11 is registered in the P mark table 10d. Details of the function of the personal information search means 11 will be described later.

The CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a that executes various processes in the client 10, and the input / output monitoring unit 13 is a data input / output operation (I / O operation) in the storage unit 10b. Is to monitor.
The activation control unit 14 operates as described later with reference to FIGS. 7 and 8 by executing a personal information search program installed from the personal information management server 20, and is monitored by the CPU usage rate monitoring unit 12. The personal information search means 11 is activated when the usage rate of the CPU 10a is less than or equal to a predetermined threshold, while the operation of the personal information search means 11 is stopped when the usage rate exceeds the predetermined threshold. The personal information retrieval unit 11 is activated when the monitoring unit 13 detects the occurrence of an input / output operation. In other words, the activation control unit 14 basically activates the personal information search unit 11 with the lowest threshold and puts the personal information search unit 11 in an idle state (search hold) with the highest usage rate. 11 is operated like a screen saver.

  The access monitoring unit 15 monitors the data file (data file to which the P mark is assigned) determined to be a personal information file by the personal information search unit 11 and accesses (eg, rename, copy, delete) the data file. , Data change due to movement, etc.) is written as log information and transmitted to the personal information management server 20 by the transmission / reception means 16.

  The transmission / reception unit 16 transmits / receives various information to / from the personal information management server 20 via the network 30 and functions as a transmission unit that transmits the result of the self-search by the personal information search unit 11 to the personal information search server 20. To do. When the transmission / reception unit 16 functions as the transmission unit, a difference between the search result (link destination information of the personal information file, determination value, etc.) and the search result transmitted last time is obtained, and the difference is sent to the personal information management server 20. In addition to sending, the information to be sent is encrypted.

[1-2] Configuration of Personal Information Management Server of this Embodiment FIG. 3 is a block diagram showing the functional configuration of the personal information management server 20 of this embodiment. The personal information management server 20 shown in FIG. CPU 20a, a database (RDB: Relational DataBase) 20b for storing / saving log information and personal information files from each client 10, and various information including log information and personal information stored in the database 20b. The display unit 20c is configured to be displayed.

The CPU 20a functions as client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27. These functions are provided by the CPU 20a. This is realized by executing a personal information management server program.
The client information collecting means 21 collects client information (host information) from a plurality of clients 10 connected to be communicable via the network 30 when searching and managing personal information. The client 10 to be managed is recognized.

The installation unit 22 installs a personal information search program that causes each client 10 to perform a self-search of personal information via the network 30.
The collection unit 23 receives and collects the results of self-searches (link destination information and determination values of personal information files) executed by each client 10 via the network 30 and the transmission / reception unit 27, and stores them in the database 20b. Is.

  The management console 24 sets and manages search conditions (such as the quarantine table 10c, a predetermined threshold necessary for determining a personal information file and a P mark) to be instructed to each client 10. The quarantine table 10c is for designating a characteristic character or characteristic character string that is a character or character string that appears characteristically in personal information, and details thereof will be described later with reference to FIG.

  The personal information management means 25 manages personal information files in each client 10 based on the search results collected by the collection means 23 and stored in the database 20b. The personal information search means 11 of each client 10 uses the personal information search means 11 to manage personal information files. A data file (a data file to which a P mark is assigned) determined to be a file is a management target. As will be described later, the personal information management unit 25 notifies the user (holder) of the data file of the caution information / warning information according to the determination value (or P mark) of each data file. The data file is forcibly captured and collected from the client 10 storing the data file. Further, the personal information management means 25 has a function of searching the personal information file stored in each client 10 or the database 20b with various accuracy, and a function of causing the display control means 26 to display the search result on the display unit 20c. Have.

The display control means 26 controls the display state of the display unit 20c so that various types of information are displayed on the display unit 20c.
The transmission / reception means 27 transmits / receives various information to / from each client 10 via the network 30.

[2] Operation of Personal Information Management System of the Present Embodiment Next, the operation of the personal information management system 1 (client & server) of the present embodiment configured as described above will be described with reference to FIGS. To do.
First, a personal information file search method by the personal information search means 11 (personal information search program) of this embodiment will be described with reference to FIGS. 4 is a diagram showing an example of the quarantine table 10c of this embodiment, FIG. 5 is a diagram showing a specific example of the title header, and FIG. 6 is an operation of the personal information search means 11 in each client 10 of this embodiment. It is a flowchart for demonstrating.

In the personal information search means 11 of this embodiment, the appearance frequency of an address, a telephone number, an e-mail address, and a name is quantified and the personal information file is specified as follows.
More specifically, in the counting step executed by the personal information search means 11, first, a character or character string included in the data file and a characteristic character preset as a character / character string characteristically appearing in the personal information / Feature character string is collated and the number of times the characteristic character / feature character string appears in the data file is counted. However, in the present embodiment, when collation / recognition using character strings is performed, the load on the CPU 10a becomes extremely large. Therefore, collation / recognition for each character is performed. Therefore, one character character is set in the quarantine table 10c, as will be described later with reference to FIG. In addition, when the arithmetic processing capability of the CPU 10a is sufficiently high, collation / recognition by a character string may be performed.

  Then, characters extracted from the target file (text file) are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, The count value of the characteristic character is incremented by “1”. After counting the number of appearances of characteristic characters in all characters included in the target file in this way, the personal information file is identified based on the count result (determination of whether the target file is a personal information file) ).

Here, the characteristic characters preset in the quarantine table 10c will be specifically described.
In general personal information, an address is usually required. Therefore, as shown in FIG. 4, characters that characteristically appear at addresses in Japan are set and registered in the quarantine table 10c as characteristic characters. For example, the address information may include “city”, “road”, “fu”, “prefecture”, “city”, “ward”, “town”, “village”, “county”, etc. In the case of “Tokyo”, the characters “East” and “Kyo” appear in ordinary documents, but in the case of address information, they will appear in combination with “City”. It becomes possible to regard the number of appearances as the number of addresses. Similarly, “prefecture”, “prefecture”, and “road” are considered as address information, and “@” can be used as e-mail address information.

In the quarantine table 10c shown in FIG. 4, the following characteristic characters and points are set.
(1) “East”, “Kyo”, “Metro”, “Large”, “Osaka”, “Fu”, “North”, “Sea”, “Road” are set as address information (characters). The total of the count values of these characteristic characters is counted / calculated as the address point 1.
(2) As presumed address information (characteristics), prefecture names other than address point 1, that is, “mountain”, “form”, “god”, “na”, “river”, “saki”, “tama”, ..., "Fuku", "Oka", "Prefecture", etc. are set, and the total of the count values of these characteristic characters is counted and calculated as address point 2.
(3) “City”, “District”, “Town”, “Village” and “County” are set as address disregard information (characteristic characters), and the total of the count values of these characteristic characters is calculated as address point 3 Is done.

(4) “@” is set as the mail address deemed information (characteristic character), and the count value of “@” is used as the mail address point.
(5) “N” (numeric string with a predetermined number of digits consisting of numerals and hyphens) is set as the telephone number deemed information (characteristic character string), and the counted value is used as the telephone number point. More specifically, the phone number is a specific number string corresponding to the mobile phone area code or area code, such as “090-XXXX-XXXX”, “03-XXXX-XXXX”, “048-XXX-XXXX”. It consists of “090”, “03”, “048” followed by an 8-digit or 7-digit numeric string. When such a numeric string appears, the telephone number point is incremented by “1”. . At this time, the count-up is performed regardless of the presence or absence of a hyphen in the numeric string.

(6) As name disregard information (characters), for example, the characters “sa”, “wisteria”, “da”, “middle”, “high”, “bridge”, etc. included in the best 50 of last names in Japan. , “Mountain”, and “field” are set, and the sum of the count values of these characteristic characters is calculated as a name point.
(7) As the quarantine total points, the total value of each point of the items (1) to (6) described above is counted and calculated.
Here, in FIG. 4, a count value indicating the number of appearances of each characteristic character or each point (total value of the number of appearances) is written in “”, and can be counted up to, for example, about 10 million. It has become.

  Moreover, when calculating the appearance rate of each prefecture name based on the counting result (number of appearances) obtained using the quarantine table 10c as described above, handling in the case where duplicate characters exist will be described. For example, if “Tokyo” and “Kyoto Prefecture” are mixed in a text file, “Metropolitan” is duplicated. Therefore, the “Metropolitan” count is the same as the “Tokyo” count. It will be mixed. Since “Fu” in “Kyoto” overlaps with “Fu” in “Osaka”, first calculate the appearance rate of “Osaka” and subtract that appearance rate from the appearance rate of “Fu”. It is possible to predict the appearance rate of “fu”. The appearance rate of “Tokyo” can be obtained by subtracting the appearance rate of “Kyoto Prefecture” predicted in this manner from the appearance rate of “Miyako”. If the prefecture name and city name overlap (for example, Osaka City, Osaka Prefecture), the appearance rate of “Osaka” will double, but based on the Japanese address book published by the Ministry of Posts and Telecommunications. It is possible to estimate the actual appearance rate by calculating the duplication rate for each prefecture name and adjusting the appearance rate based on the calculated duplication rate.

  Furthermore, the handling when there is no state display will be described. In the data file, when the title header as shown in FIG. 5 is used for the prefecture name, or in the address display using the decree-designated city or the postal code, “city”, “road”, “prefecture”, “ The appearance rate of “prefecture” will be extremely reduced. Instead, since the name appearance rate such as the prefecture name becomes high, it is possible to specify that the data file is a personal information file including address information from the name appearance rate.

  In the quarantine table 10c described above, characters / character strings that appear characteristically in addresses, e-mail addresses, telephone numbers, and names are set as feature characters / character strings, but the present invention is not limited to these. Characters / character strings that appear characteristically in the date of birth, title, personal identification information (for example, Basic Resident Register Number, Account Number, Credit Card Number, License Number, Passport Number, etc.) It may be set as a character / characteristic character string.

  Then, in the calculation step executed by the personal information search means 11, a determination value indicating the degree to which the target file is a personal information file is calculated based on the counting result obtained using the quarantine table 10c described above. As the determination value, (a) the value of the quarantine total point (see item (7) above) of the quarantine table 10c may be used as it is, or (b) the larger the appearance rate of feature characters / feature character strings, the larger the value. The determination point may be calculated as the determination value, or (c) the appearance pattern of the characteristic character / characteristic character string in the target file is obtained based on the count result obtained for each characteristic character / characteristic character string. The degree of coincidence indicating the degree of coincidence between the appearance pattern and the characteristic appearance pattern preset as the appearance pattern of the characteristic character / characteristic character string may be calculated as the determination value, or (d) these three types Two or more of the determination values may be combined and a value calculated by substituting two or more determination values into a predetermined function may be used as the determination value.

  At this time, when there are characteristic characters / characteristic character strings related to plural types of information (for example, four types of address, e-mail address, telephone number, and name) in the target file, the target file relates to one type of information. The count result is weighted so that the determination value is larger than when a characteristic character / characteristic character string exists. In other words, when a data file includes a plurality of types of information that can identify an individual, the possibility that the data file is a personal information file includes only one type of information that can identify an individual. Therefore, weighting is performed so that the determination value (importance) for the data file becomes large. Further, weighting may be performed so that the determination value increases as the number of types of information increases. This makes it possible to specify the personal information file more reliably.

  When the determination value as described above is calculated, it is determined in the determination step executed by the personal information search means 11 based on the determination value whether the target file is a personal information file. For example, if the determination value exceeds a predetermined threshold, it is determined that the target file is a personal information file. When making such a determination, in this embodiment, a P mark (private level mark) corresponding to the size of the determination value is added to the target file, set and registered in the P mark table 10d, and ranked. Is doing. As described above, the P mark is a level indicating the high possibility that the target file is a personal information file. The larger the determination value, the higher the P mark is set.

  For example, when the determination value is 10 or more, it is determined that the target file is a personal information file. When the determination value is 10 or more and less than 100, “P1” is assigned as the P mark, and when the determination value is 100 or more and less than 1000, “P2” is assigned as the P mark. When it is 1000 or more and less than 10,000, “P3” is assigned as the P mark, and when the determination value is 10000 or more, “P4” is assigned as the P mark. The predetermined threshold for determining the personal information file and the reference value for determining the P mark are appropriately set by the management console 24 of the personal information management server 20. In addition, although the P mark is ranked into four “P1” to “P4” here, the number of ranks is not limited to this.

  As described above, the P mark (P mark table 10 d) assigned to the target file is transmitted to the personal information management server 20 via the transmission / reception unit 16 and the network 30, and is stored in the database 20 b by the collection unit 23. The data file to which the P mark is assigned is managed as a personal information file by the personal information management server 20 (personal information management means 25) as follows according to the rank of the P mark.

  For example, when the rank of the P mark is “P1”, the recommendation based on the warning information is not performed, but the fact that the data file of “P1” exists is recorded as a log. When the rank of the P mark is “P2”, notice information in a pop-up display is notified to alert the user of the data file. When the rank of the P mark is “P3”, the system administrator is notified by e-mail as warning information that there is a user storing the data file, and the return of the data file is instructed. To do. When the rank of the P mark is “P4”, the data file is forcibly captured and collected from the client 10. Even if the rank of the P mark is not “P4”, if the data file of “P3” is left for a predetermined number of days, the data file is forcibly captured and collected from the client 10.

A series of procedures for personal information search (personal information file specification) executed by the personal information search means 11 will be described with reference to the flowchart (steps S11 to S18) shown in FIG.
When constructing the personal information management system 1 of the present embodiment, first, a personal information management program is installed in a computer that should function as the personal information management server 20, and the computer executes the personal information management program. Thus, the personal information management server 20 functions (client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27). When the search / management of personal information is started, client information is collected from a plurality of clients 10 connected to be communicable via the network 30 by the client information collection unit 21, and personal information search / management targets are collected. The personal information search program is installed via the network 30 by the installation means 22 on the client 10 that is recognized as a personal information search / management target. When this personal information search program is executed by the CPU 10a of the client 10, the CPU 10a causes the personal information search means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, activation control means 14, access monitoring means 15 and transmission / reception means 16 to be transmitted. Serves as a function. When installing the personal information search program, the quarantine table 10c is also transmitted. The personal information search program is included in advance in the personal information management program.

  In the client 10, when the personal information retrieval unit 11 is activated at a timing described later with reference to FIGS. 7 and 8, the P mark table 10d and the storage unit 10b are referred to, and the P mark is not set in the storage unit 10b. The presence or absence of the data file is determined (step S11). When there is a data file with no P mark set (YES route in step S11), one data file with no P mark set is selected and read from the storage unit 10b as a target file (step S12). Is converted into a text file by the text extraction engine (step S13).

  Then, the characters extracted from the text file are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, and the characteristic characters are counted. The value is incremented by “1” (step S14; counting step). In this way, after counting the number of appearances of characteristic characters in all characters included in the target file, based on the count result, a determination value indicating the degree to which the target file is a personal information file (for example, the above item ( a) to (d)) is calculated (step S15; calculation step).

  Based on the determination value calculated in step S15, as described above, it is determined whether or not the target file is a personal information file and ranks the P mark (step S16; determination step). The personal information file determination result and the P mark ranking result are registered in the P mark table 10d, and also transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 30 (step S17). In the personal information management server 20, the data is stored in the database 20 b by the collection unit 23.

  Thereafter, it is determined again whether or not there is a data file in which the P mark is not set in the storage unit 10b (step S18). If there is another data file in which the P mark is not set (YES route in step S18), the process proceeds to step S12. Returning, the same processing as described above is executed. On the other hand, if there is no data file with no P mark set (NO route in step S18), the personal information search operation is terminated.

Next, the activation timing of the personal information search means 11 (personal information search program) will be described with reference to FIGS. Here, FIG. 7 and FIG. 8 are flowcharts for explaining the operation of the activation control unit 14 in each client 10 of the present embodiment.
The activation control means 14 of the present embodiment includes activation control based on the CPU usage rate according to the flowchart (steps S21 to S27) shown in FIG. 7, and input / output operation (I / O operation) according to the flowchart (steps S31 to S33) shown in FIG. ) Start control.

  In the activation control based on the CPU usage rate, the CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a (step S21), determines whether or not the usage rate is equal to or less than a predetermined threshold (step S22), and the usage rate is If it is equal to or less than the predetermined threshold value (YES route in step S22), the personal information search means 11 is activated (step S23). After the activation, it is determined whether or not the search is finished (step S24). If not finished (NO route of step S24), the process returns to step S21. If it is determined in step S24 that the search is completed (YES route), after the search result is notified (step S25), the process returns to step S21.

  If it is determined in step S22 that the usage rate is greater than the predetermined threshold (NO route), it is determined whether or not the personal information search means 11 is activated (step S26), and if not activated (NO in step S26). On the other hand, if it is activated (YES route in step S26), the search operation by the personal information search means 11 is interrupted (step S27), and then the process returns to step S21. In this way, the personal information search means 11 can be operated like a screen saver.

In the start control by the input / output operation, the input / output monitoring means 13 monitors the data input / output operation (I / O operation) in the storage unit 10b (step S31), and detects the occurrence of the input / output operation (step S31). YES route), the personal information search means 11 is immediately activated (step S32), and after the search result is notified (step S33), the process returns to step S31.
It should be noted that the activation control based on the two types of timings described above may be adopted and executed simultaneously in parallel, or only one of them may be adopted and executed.

  In each client 10, the access monitoring means 15 monitors the data file to which the P mark is given (the data file determined to be a personal information file by the personal information searching means 11), and accesses the data file. When (for example, data change by renaming, copying, erasing, moving, etc.) occurs, the fact is written out as log information and transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 30. In the personal information management server 20, the data is stored in the database 20b by the collecting means 23.

[3] Effects of the Personal Information Management System of the Present Embodiment As described above, according to the personal information management system 1 (client 10 and personal information management server 20) as an embodiment of the present invention, the storage unit of each client 10 For each data file in 10b, whether or not the data file is a personal information file is determined by a determination value based on the number of appearances of characteristic characters and characteristic character strings, and the personal information file is automatically identified and searched. For example, personal information files (data files that are highly likely to be personal information files) that exist in a distributed manner in a company or the like without human cooperation and without placing a special burden on the person in charge. ) Can be reliably searched and found and managed. Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

  At this time, the usage rate (usage load) of the CPU 10a is monitored in each client 10, and when the usage rate is equal to or lower than a predetermined threshold, the personal information search means (search engine) 11 is activated to apply a load to the CPU 10a. The personal information file can be identified without any problems.

  Each client 10 monitors the data input / output operation (I / O operation) with respect to the storage unit 10b, and activates the personal information search means (search engine) 11 when the input / output operation occurs, thereby storing the data in the client 10. When new data is input to the unit 10b or when data is output from the storage unit 10b in the client 10 (for example, not only when data is output from the storage unit 10b to attach data to an email, A data file included in the input / output data is a personal information file in the case of outputting from the storage unit 10b to write to an external recording medium such as a CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk). It is possible to monitor the movement of personal information files by determining whether or not there is personal information. It is possible to prevent the inadvertent outflow, leakage more reliably.

  Further, a data file determined to be a personal information file (a file given a P mark in this embodiment) is monitored, and access to the data file (for example, data change by renaming, copying, erasing, moving, etc.) If this occurs, the fact is transmitted to the personal information management server 20 as log information so that access (operation / change history) to the data file that is likely to be a personal information file can be accessed by the personal information management server 20. Tracking management (tracking) is performed, and unauthorized use of personal information can be prevented more reliably.

  In addition, by managing each data file according to the P mark given to each data file, for example, depending on the rank of the P mark (the size of the judgment value), the user of the data file or the system administrator It is possible to notify caution information / warning information and to forcibly capture and collect the data file from the client 10 (storage unit 10b). Use and the like can be prevented more reliably.

[4] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
For example, in the above-described embodiment, the case of searching / managing personal information has been described. However, the present invention also applies to the case of searching / managing confidential information (information with confidentiality obligation) in a company or the like. It can be applied to obtain the same operational effects as in the above-described embodiment, and can reliably prevent inadvertent outflow / leakage of confidential information and unauthorized use of confidential information. In that case, a character or character string that appears characteristically in the confidential information is set as the characteristic character or characteristic character string (keyword), and a characteristic character or characteristic character string in the confidential information is set as the characteristic appearance pattern. An appearance pattern will be set.

  Further, while the search by the personal information search means 11 of each client 10 (search for all data files stored in the storage unit 10b) is not completed, access to the data file in the storage unit 10b of the client 10 (for example, Data change by renaming, copying, erasing, moving, etc .; more specifically, output to an external recording medium, mail attachment, etc.) may be prohibited. In this case, until the data file that is determined to be a personal information file is confirmed and the data file that is highly likely to be a personal information file is placed under the management of the personal information management server 20, the storage unit of the client 10 Since access to the data file in 10b is prohibited, it becomes possible to prevent the leakage and leakage of personal information more reliably.

  Furthermore, the functions as the above-described personal information search means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, activation control means 14, access monitoring means 15 and transmission / reception means 16 in each client 10 (all or As described above, a part of the functions) is performed by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (personal information search program) installed from the personal information management server 20. Realized.

  In addition, the functions of the client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27 in the personal information management server 20 (each of the means) All or some of the functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (a program for a personal information management server) as described above.

  The personal information management server program including the personal information search program is provided in a form recorded on a computer-readable recording medium such as a flexible disk, CD-ROM, CD-R, CD-RW, or DVD. In this case, the computer reads the personal information management server program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The personal information search program and the application program as the personal information management server program are stored in the computer as described above on the personal information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the activation control means 14, Program codes for realizing the functions as the access monitoring means 15, transmission / reception means 16, client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26 and transmission / reception means 27. Contains. Also, some of the functions may be realized by the OS instead of the application program.

  Further, the recording medium in the present embodiment includes the above-mentioned flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk, IC card, ROM cartridge, magnetic tape, Various computer-readable media such as punch cards, computer internal storage devices (memory such as RAM and ROM), external storage devices, and printed materials on which codes such as bar codes are printed can also be used.

It is a block diagram which shows the function structure of the personal information management system as one Embodiment of this invention. It is a block diagram which shows the function structure of the client (information processing apparatus with a personal information management function) of this embodiment. It is a block diagram which shows the function structure of the personal information management server of this embodiment. It is a figure which shows the example of the quarantine table of this embodiment. It is a figure which shows the specific example of a title header. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the personal information search means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment.

Explanation of symbols

1 personal information management system 10 client (information processing device with personal information management function)
10a CPU (arithmetic processing unit)
10b Storage unit 10c Quarantine table 10d P mark table 11 Personal information search means (search engine, text extraction engine)
12 CPU usage rate monitoring means 13 Input / output monitoring means 14 Startup control means 15 Access monitoring means 16 Transmission / reception means (transmission means)
20 Personal information management server 20a CPU
20b database 20c display unit 21 client information collection unit 22 installation unit 23 collection unit 24 management console 25 personal information management unit 26 display control unit 27 transmission / reception unit 30 network (LAN)

Claims (18)

Multiple clients,
A personal information management server that is communicably connected to the plurality of clients via a network and manages personal information files in the plurality of clients;
The personal information management server
Installation means for installing a personal information search program for causing each client to perform a self-search of personal information via the network;
The network is configured to include a collection unit that receives the result of the self-search performed by each client via the network and stores the result in a database.
Each of the plurality of clients
A personal information search means for specifying and searching a personal information file from data in the storage unit of each client by executing the personal information search program installed from the personal information management server;
A transmission unit configured to transmit a result of self-search by the personal information search unit to the personal information management server via the network;
The personal information search means causes each client to implement a personal information search function for specifying and searching for a personal information file from data in the storage unit of each client,
For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, e-mail address, title, by matching to that according to at least one of the personal identification information, counts the number of times the feature character or the feature character string appears in the data collection,
Based on the counting result, a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases,
A personal information management system , wherein each client is operated to determine that the data aggregate is a personal information file when the determination value exceeds a predetermined threshold . Multiple clients,
  A personal information management server that is communicably connected to the plurality of clients via a network and manages personal information files in the plurality of clients;
  The personal information management server
  Installation means for installing a personal information search program for causing each client to perform a self-search of personal information via the network;
  The network is configured to include a collection unit that receives the result of the self-search performed by each client via the network and stores the result in a database.
  Each of the plurality of clients
  A personal information search means for specifying and searching a personal information file from data in the storage unit of each client by executing the personal information search program installed from the personal information management server;
  A transmission unit configured to transmit a result of self-search by the personal information search unit to the personal information management server via the network;
  The personal information search means causes each client to implement a personal information search function for specifying and searching for a personal information file from data in the storage unit of each client,
  For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, Collating with at least one of e-mail address, job title, and personal identification information, and counting the number of times the feature character or the feature character string appears in the data aggregate,
Based on the count result obtained for each feature character or each feature character string, an appearance pattern of the feature character or the feature character string in the data aggregate is obtained, and the obtained appearance pattern and the feature character or the A degree of coincidence indicating a degree of coincidence with a feature appearance pattern set in advance as a feature character string appearance pattern is calculated as a determination value,
  A personal information management system, wherein each client is operated to determine that the data aggregate is a personal information file when the degree of coincidence exceeds a predetermined threshold. Each of the plurality of clients
Usage rate monitoring means for monitoring the usage rate of the arithmetic processing unit that executes processing in each client;
When the usage rate monitored by the usage rate monitoring unit is less than or equal to a predetermined threshold, the personal information search unit is activated, and when the usage rate exceeds the predetermined threshold, the operation of the personal information search unit The personal information management system according to claim 1 or 2, further comprising activation control means for stopping the operation. Each of the plurality of clients
Input / output monitoring means for monitoring data input / output operations in the storage unit of each client;
Characterized in that it further includes a configuration and activation control means for activating the said individual information retrieval means upon detection of a generation of the input and output operations by said input power monitoring means, claims 1 to 3 The personal information management system according to any one of the above. When the characteristic information or the characteristic character string relating to a plurality of types of information is present in the data aggregate , the personal information search means may include the characteristic character or the characteristic character relating to one type of information in the data aggregate. than if the characteristic character string is present, as the determination value becomes large, in order to perform the weighting of the counting result, and wherein the operating the respective client, of claims 1 to 4 The personal information management system according to any one of the above. The personal information management server further comprises personal information management means for managing personal information files in the plurality of clients based on a search result received by the collecting means. personal information management system according to any one of claims 1 to claim 5. The personal information management means manages the data aggregate searched as a personal information file by the personal information search means,
Each of the plurality of clients monitors the data aggregate retrieved as the personal information file by the personal information retrieval means, and when access to the data aggregate occurs, the transmission means informs that fact. 7. The personal information management system according to claim 6 , further comprising access monitoring means for transmitting to the management server. The personal information according to claim 6 or 7 , wherein the personal information management means manages the data aggregate according to the determination value for each data aggregate included in the search result. Management system. 9. The personal information management unit according to claim 8 , wherein warning information is notified to a user of the data aggregate according to the determination value for each data aggregate included in the search result. Personal information management system. The personal information managing means forcibly recovers the data aggregate from the client storing the data aggregate in accordance with the determination value for each data aggregate included in the search result. wherein, according to claim 8 or Motomeko 9 personal information management system according. A personal information management server connected to a plurality of clients via a network so as to be able to communicate with each other and managing personal information files in the plurality of clients,
Installation means for installing a personal information search program for causing each client to perform a self-search of personal information via the network;
It comprises a collection means for receiving the result of the self-search performed by each client via the network and storing it in a database,
The personal information search means causes each client to implement a personal information search function for specifying and searching for a personal information file from data in the storage unit of each client,
For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, e-mail address, title, by matching to that according to at least one of the personal identification information, counts the number of times the feature character or the feature character string appears in the data collection,
Based on the counting result, a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases,
A personal information management server, which causes the client to execute so that the data aggregate is determined to be a personal information file when the determination value exceeds a predetermined threshold . A program that causes a computer to function as a personal information management server that manages personal information files in a plurality of clients connected to each other via a network,
Includes a personal information search program that allows each client to perform a personal search for personal information,
Installation means for installing the personal information search program on each client via the network; and
Via the network, the result of self-search performed by each client is received, and the computer is functioned as a collecting means for storing in a database,
The personal information retrieval program installed in each client by the installation means is:
Each client realizes a personal information search function for specifying and searching a personal information file from data in the storage unit of each client,
For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, A counting step of collating with at least one of an e-mail address, a title, and personal identification information, and counting the number of times the characteristic character or the characteristic character string appears in the data aggregate;
In the counting step, a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases,
A program for a personal information management server, which causes the client to execute a determination step of determining that the data aggregate is a personal information file when the determination value exceeds a predetermined threshold value . The personal information retrieval program is
In the calculating step, an appearance pattern of the feature character or the feature character string in the data set is obtained based on the count result obtained for each feature character or each feature character string, and the obtained appearance pattern A degree of coincidence indicating a degree of coincidence with a feature appearance pattern preset as an appearance pattern of the feature character or the feature character string is calculated as the determination value;
In the determination step, as the data collection when the degree of coincidence exceeds a predetermined threshold value is determined to be a personal information file, and wherein the operating the respective client, No placement claim 1 2 Symbol Program for personal information management server. In the calculation step, when the characteristic information or the characteristic character string related to a plurality of types of information exists in the data set, the personal information search program stores one type of information in the data set. 2. Each client is operated to perform weighting on the counting result so that the determination value is larger than the case where the characteristic character or the characteristic character string is present. 14. The personal information management server program according to claim 2 or claim 13 . The personal information retrieval program is
Usage rate monitoring means for monitoring the usage rate of the arithmetic processing unit that executes processing in each client, and
When the usage rate monitored by the usage rate monitoring unit is less than or equal to a predetermined threshold, the personal information search unit is activated, and when the usage rate exceeds the predetermined threshold, the operation of the personal information search unit The personal information management server program according to any one of claims 12 to 14 , wherein each client is caused to function as an activation control means for stopping the personal information. The personal information retrieval program is
Input / output monitoring means for monitoring data input / output operations in the storage unit of each client; and
As the start control means by said input power monitoring means activates the said individual information retrieval means upon detection of a generation of the input and output operations, characterized in that to function each client, any claim 12 to claim 14 or personal information management server for the program described in (1). The personal information retrieval program, a transmitting means for transmitting the search result of personal information file to said individual information management server, characterized in that to function each client, any one of claims 1 2 to claims 1 6 1 The personal information management server program described in the section. The personal information search program monitors the data aggregate determined to be a personal information file in the determination step, and if access to the data aggregate occurs, the personal information management is notified to that effect by the transmitting means. The personal information management server program according to claim 17 , wherein each client is caused to function as access monitoring means to be transmitted to the server.

Images