JP3840647B1 - Personal information management system, personal information management server, and program for personal information management server - Google Patents

Abstract

The present invention reliably searches for personal information that exists in a distributed manner, and reliably prevents inadvertent leakage or leakage of personal information or unauthorized use of personal information.
When a personal information file exists in the client, the personal information management server attempts to go out of the installation space through the IC tag reader when the client is determined to have the personal information file. In this case, an alarm is issued via the alarm device 60, and the position of the client 10 is managed when the client 10 who has obtained permission goes out of the installation space. Here, the position information acquisition unit 10f receives the power supply from the secondary battery 10g during a period in which the client 10 is not in an operable state, acquires the position information, and the IC 10e tag responds to a read request from the IC tag reader 50. In response, position information is transmitted.
[Selection] Figure 1

Description

  The present invention relates to a technique for searching and managing personal information that can identify a specific individual, and in particular, for example, personal information distributed and stored in a plurality of clients (such as personal computers) in a company. The present invention relates to a technology that automatically searches and makes it possible to place the client under the control of a server.

  In recent years, with an increase in awareness of protection of personal information, it has been desired to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information. In addition, along with the enforcement of the Personal Information Protection Law, a business operator handling personal information receives a request for disclosure or correction of personal information from each individual while preventing the leakage, leakage or unauthorized use of personal information. It is obliged to disclose and correct personal information.

  Here, the personal information is information that can identify a specific individual by itself or in combination, and includes, for example, a name, date of birth, contact information (address, address, telephone number) and the like. Customer information, business partner information, etc. stored and handled in various companies often fall under the category of personal information, and in the future, companies that handle a lot of such personal information will be obligated as above as a personal information handling business operator. Must be fulfilled.

  In order to fulfill the obligations described above, it is essential to centralize personal information by introducing a central management system for personal information. However, in reality, personal information such as customer information and business partner information is dispersed in a company's personal computer (hereinafter sometimes abbreviated as PC) and servers in each department. Often exists. More specifically, individual employees store their personal information (customer information, etc.) on their PCs for their own work, or a central database or a subset of personal information collected by each employee. It exists in various PCs.

  For this reason, when constructing the centralized management system or attempting to fulfill the above obligations in a distributed state, the administrator must first separate the personal information that is scattered within the company. It is necessary to identify what kind of personal information exists in the company, but at present, the personal information is identified by the manager instructing each employee to be a company-wide It will be carried out with the cooperation of the department.

For example, in Patent Document 1 below, in accordance with the enforcement of the Personal Information Protection Law, a technology for providing a personal information protection service that prevents personal information from being leaked or leaked or being used illegally is “processing of a personal information protection service business. Method and apparatus "have been proposed and disclosed. However, the following Patent Document 1 does not disclose any technique related to the identification of personal information as described above.
JP 2002-183367 A

  However, when personal information is identified with human cooperation such as reporting from each employee, not only is it time-consuming, but it is difficult to reliably identify all personal information without omission. In particular, when personal information is increasingly distributed, it is extremely difficult to identify personal information.

  In addition, if there is an omission in the identification of personal information, not only the above obligations can be fulfilled, but the status of the personal information cannot be managed, and there is a risk of inadvertent leakage or leakage of personal information or unauthorized use of personal information. is there.

Therefore, it is desirable to ensure that all personal information distributed in the company is searched and managed.
It is also strongly desired to place a personal computer having personal information in a state where it can be managed appropriately.

  The present invention was devised in view of such a situation, and without obtaining human cooperation and applying a special load to the person in charge, for example, personal information files existing in a distributed manner within a company or the like. By ensuring that it can be searched and managed, it is possible to respond to requests for disclosure and correction of personal information, and to ensure that personal information is not inadvertently leaked or leaked, or that personal information is illegally used. The purpose is to prevent.

That is, the present invention for solving the above problems is as described below.
(1) The invention described in claim 1 is connected to a plurality of clients each having an IC tag attached thereto, and the plurality of clients so as to be able to communicate with each other via a network. The personal information management server to be managed, the IC tag writer that writes to the IC tag based on the instruction from the personal information management server, and the personal information management server are configured to be communicable and arranged in the installation space of the client The personal information management system includes an IC tag reader, and the personal information management server installs a personal information search program that causes each client to perform a self-search of personal information via the network. And executed on each client via the network Collecting means for receiving a result of self-search and storing it in a database, each of the plurality of clients executing the personal information search program installed from the personal information management server Personal information retrieval means for identifying and retrieving a personal information file from the data in the storage unit of each client, and transmitting the result of self-search by the personal information retrieval means to the personal information management server via the network A transmission unit, an IC tag for identifying each client, a secondary battery that can be charged by a built-in power generation device, and a position information acquisition unit that receives power supply from the secondary battery and acquires position information. The personal information search means is the data in the storage unit of each client. Each client implements a personal information search function for specifying and searching a personal information file, and for each data set included in the data, a character or character string included in the data set and personal information Characteristically appearing characters or character strings are collated with at least one of name, date of birth, address, residence, telephone number, e-mail address, title, personal identification information, and Counting the number of times the character or the characteristic character string appears in the data aggregate, and calculating a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases based on the counting result, Each client is operated so as to determine that the data aggregate is a personal information file when the value exceeds a predetermined threshold, When the personal information search means determines that the data aggregate is a personal information file, the determination result is recorded in the IC tag by the IC tag writer via the personal information management server, and the position information The obtaining means obtains position information by receiving power supply from the secondary battery during a period in which the client is not in an operable state, and the IC tag is provided in the IC tag even in a period in which the client is not in an operable state. The personal information management system is characterized in that the position information is transmitted in response to a read request from a tag reader.

  (2) The invention described in claim 2 is connected to a plurality of clients each having an IC tag attached thereto, and the plurality of clients so as to be able to communicate with each other via a network. The personal information management server to be managed, the IC tag writer that writes to the IC tag based on the instruction from the personal information management server, and the personal information management server are configured to be communicable and arranged in the installation space of the client The personal information management system includes an IC tag reader, and the personal information management server installs a personal information search program that causes each client to perform a self-search of personal information via the network. And executed on each client via the network Collecting means for receiving a result of self-search and storing it in a database, each of the plurality of clients executing the personal information search program installed from the personal information management server Personal information retrieval means for identifying and retrieving a personal information file from the data in the storage unit of each client, and transmitting the result of self-search by the personal information retrieval means to the personal information management server via the network A transmission unit, an IC tag for identifying each client, a secondary battery that can be charged by a built-in power generation device, and a position information acquisition unit that receives power supply from the secondary battery and acquires position information. The personal information search means is the data in the storage unit of each client. Each client implements a personal information search function for specifying and searching a personal information file, and for each data set included in the data, a character or character string included in the data set and personal information Characteristically appearing characters or character strings are collated with at least one of name, date of birth, address, residence, telephone number, e-mail address, title, personal identification information, and Count the number of times the character or the characteristic character string appears in the data aggregate, and based on the count result obtained for each characteristic character or each characteristic character string, the characteristic character or the characteristic in the data aggregate Obtaining the appearance pattern of the character string, as the found appearance pattern and the feature character or the feature character string appearance pattern A degree of coincidence indicating a degree of coincidence with a preset feature appearance pattern is calculated as a determination value. When the degree of coincidence exceeds a predetermined threshold, each data aggregate is determined to be a personal information file. If the personal information search means determines that the data aggregate is a personal information file, the determination result is sent by the IC tag writer via the personal information management server. The position information acquisition means is recorded on a tag, and the position information acquisition means receives the power supply from the secondary battery during a period when the client is not in an operable state, acquires the position information, and the IC tag is in an operable state of the client. The position information is transmitted in response to a read request from the IC tag reader even if there is no period. It is a non.

  (3) The invention according to claim 3, wherein the personal information management server is configured such that when the client determined to have a personal information file attempts to go out of the installation space through the IC tag reader, 3. The personal information management system according to claim 1, wherein the personal information management system is configured to acquire position information from an IC tag and issue an alarm.

  (4) In the invention according to claim 4, the personal information management server is the client that is determined to have a personal information file, and the client who has obtained permission to take out passes through the IC tag reader and installs the installation space. The personal information management according to any one of claims 1 to 3, wherein, when going out, the position information from the IC tag is acquired and the alarm is not issued. System.

  (5) In the invention according to claim 5, the personal information management server is configured such that when the client determined to have a personal information file passes through the vicinity of the IC tag reader even in the installation space, the IC The personal information management system according to claim 1 or 2, wherein position information from a tag is acquired.

  (6) In the invention according to claim 6, each of the plurality of clients is monitored by a usage rate monitoring unit that monitors a usage rate of an arithmetic processing unit that executes processing in each client, and the usage rate monitoring unit. Activation control means for activating the personal information search means when the usage rate is less than or equal to a predetermined threshold, and for stopping the operation of the personal information search means when the usage rate exceeds a predetermined threshold. The personal information management system according to claim 1, further comprising: a personal information management system according to claim 1.

  (7) In the invention according to claim 7, each of the plurality of clients monitors an input / output operation of data in the storage unit of each client, and the input / output operation is performed by the input / output monitoring unit. The personal information according to any one of claims 1 to 6, further comprising activation control means for activating the personal information search means when the occurrence of occurrence of the personal information is detected. It is a management system.

  (8) In the invention according to claim 8, when the personal information search means includes the characteristic character or the characteristic character string related to a plurality of types of information in the data aggregate, Each client is operated to weight the counting result so that the determination value is larger than when the characteristic character or the characteristic character string related to one type of information exists. The personal information management system according to claim 1, wherein the personal information management system is a personal information management system.

  (9) The invention according to claim 9 further comprises personal information management means for managing the personal information files in the plurality of clients based on the search result received by the collection means. The personal information management system according to claim 1, wherein the personal information management system is configured.

  (10) In the invention according to claim 10, the personal information management means manages a data aggregate searched as a personal information file by the personal information search means, and each of the plurality of clients is configured to receive the personal information. It further comprises an access monitoring means for monitoring the data aggregate retrieved as a personal information file by the retrieval means, and causing the transmission means to transmit the fact to the personal information management server when access to the data aggregate occurs. The personal information management system according to claim 9, wherein the personal information management system is configured as follows.

  (11) The invention according to claim 11 is characterized in that the personal information managing means manages the data aggregate according to the judgment value for each data aggregate included in the search result. A personal information management system according to claim 9 or claim 10.

  (12) In the invention according to claim 12, the personal information management means notifies the user of the data aggregate of warning information according to the judgment value for each data aggregate included in the search result. The personal information management system according to claim 11.

  (13) In the invention according to claim 13, the personal information management means stores the data aggregate according to the judgment value for each data aggregate included in the search result. 13. The personal information management system according to claim 11 or 12, wherein the personal information management system is forcibly collected from a client.

(14) The invention according to claim 14 includes an IC tag, a secondary battery that can be charged by the built-in power generation device, and a position information acquisition unit that receives power supply from the secondary battery and acquires position information. A plurality of clients having a function in which position information acquisition means receives power supply from a secondary battery and acquires position information during a period when the client is not in an operable state, and an IC tag reader disposed in the installation space of the client And a personal information management server that is connected to an IC tag writer so as to be able to communicate with each other via a network, and manages personal information files in the plurality of clients, and allows each client to self-search personal information via the network. Installation means for installing a personal information search program for executing the network and the network And collecting means for receiving the result of the self-search executed by each client and storing it in a database, and the personal information search program stores personal information from the data in the storage unit of each client. Each client implements a personal information search function for specifying and searching for a file. For each data set included in the data, a character or character string included in the data set and personal information are characteristic. As a character or a character string appearing in the above, a character, a date of birth, an address, an address, a telephone number, an e-mail address, a job title, or a personal identification information is collated with the characteristic character or Count the number of times the characteristic character string appears in the data aggregate, and based on the counting result, Calculates a determination value that increases as the appearance rate of the characteristic character string increases, and causes the client to determine that the data aggregate is a personal information file when the determination value exceeds a predetermined threshold. If it is determined that the data aggregate is a personal information file, the IC tag writer is instructed to write the determination result to the IC tag, and the determination is made that the personal information file is included. The personal information management server is characterized in that, when a client passes near the IC tag reader, position information from the IC tag is acquired via the IC tag reader.

  (15) The invention according to claim 15 includes an IC tag, a secondary battery that can be charged by a built-in power generation device, and a position information acquisition unit that receives power supply from the secondary battery and acquires position information. A plurality of clients having a function in which the position information acquisition means receives power supply from the secondary battery and acquires position information during a period in which the client is not operable, and an IC tag reader disposed in the installation space of the client And a program that allows a computer to function as a personal information management server that is connected to an IC tag writer and communicates with each other via a network and manages personal information files in the plurality of clients. Including a personal information search program for executing search, and via the network The computer functions as an installation unit that installs the personal information search program in each client, and a collection unit that receives the results of the self-search performed by each client via the network and stores them in a database. The personal information search program installed in each client by the installation means realizes each client a personal information search function for specifying and searching a personal information file from data in the storage unit of each client For each data aggregate included in the data, a character, character string included in the data aggregate, and a character or character string that appears characteristically in personal information, such as name, date of birth, address, residence , Phone number, e-mail address, role A counting step of collating with at least one of personal identification information and counting the number of times the characteristic character or the characteristic character string appears in the data aggregate, and in the counting step, the characteristic character Alternatively, a determination value that increases as the appearance rate of the characteristic character string increases and a determination step that determines that the data aggregate is a personal information file when the determination value exceeds a predetermined threshold are given to the client. If it is determined that the data aggregate is a personal information file, the IC tag writer is determined to have a personal information file that gives an instruction to write the determination result to the IC tag. When the client passes in the vicinity of the IC tag reader, the IC tag reader passes through the IC tag reader. A personal information management server program for acquiring position information.

According to the present invention described above, for each data aggregate in the storage unit, whether or not the data aggregate is a personal information file is determined based on a determination value based on the number of appearances of characteristic characters and characteristic character strings. Since the information file can be automatically identified and searched, personal information files (for example, distributed in a company, etc.) are obtained without human cooperation and without placing a special load on the person in charge. It is possible to reliably search and identify and manage a data collection (which is highly likely to be a personal information file). Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

  Here, when it is determined by the personal information search means that the data aggregate is a personal information file, the determination result is recorded on the IC tag by the IC tag writer via the personal information management server. Management of attached clients becomes easy.

  Further, even when the client is not in an operable state, the IC tag is not in an operable state by receiving the power supply from the secondary battery and the positional information acquiring means acquiring the positional information. Even during the period, it becomes possible to transmit position information in response to a read request from the IC tag reader, and management of the position of the client becomes easier.

  Here, in the personal information management system described above, when a client determined to have a personal information file tries to go out of the installation space through the IC tag reader, the alarm device issues an alarm. Prepared take-out and illegal take-out are prevented in advance.

  Here, in the personal information management system described above, if a client that has been determined to have a personal information file and has obtained permission to take out passes through the IC tag reader and goes out of the installation space, an alarm is issued. However, by collecting and tracking location information from the client, unauthorized use of personal information can be more reliably prevented.

  Here, the personal information management server acquires the position information from the IC tag when the client determined to have the personal information file passes through the vicinity of the IC tag reader even in the installation space. Regular location management becomes easy.

  Here, the usage rate (usage load) of the arithmetic processing unit is monitored in each client, and when the usage rate is equal to or less than a predetermined threshold, the personal information search means (search engine) is started to load the arithmetic processing unit. It is possible to identify personal information files without spending time.

  Here, the data input / output operation for each storage unit is monitored in each client, and new data is input to the storage unit in the client by starting the personal information search means (search engine) when the input / output operation occurs. Data included in input / output data when data is output from the storage unit in the client (for example, when outputting data to be attached to an e-mail, or when writing data to an external storage medium) Since it can be determined whether the aggregate is a personal information file and the movement of the personal information file can be monitored, it is possible to more reliably prevent inadvertent leakage and leakage of personal information.

  Here, when the personal information search means includes characteristic characters or characteristic character strings related to a plurality of types of information in the data aggregate, the characteristic characters or characteristic characters related to one type of information in the data aggregate. By operating each client to weight the counting results so that the determination value becomes larger than when there is a column, it is possible to manage personal information with certainty.

  Here, the personal information management server further includes personal information management means for managing personal information files in a plurality of clients based on the search results received by the collecting means, thereby enabling more reliable personal information management. Become.

  Here, the data aggregate determined to be a personal information file is monitored, and if access to the data aggregate (for example, data change by renaming, copying, erasing, moving, etc.) occurs, that fact is indicated to the individual. By transmitting to the information management server, access (operation / change history) to a data aggregate that is likely to be a personal information file is tracked and managed by the personal information management server. Unauthorized use can be prevented more reliably.

  Here, by managing each data aggregate in accordance with the determination value calculated for each data aggregate, for example, if the determination value is large, the user (owner) or system administrator of the data aggregate It is possible to notify caution information / warning information and forcibly capture and collect the data aggregate from the client, and more reliably prevent inadvertent leakage / leakage of personal information or unauthorized use of personal information. Can be prevented.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of personal information management system of this embodiment:
FIG. 1A is a block diagram showing the overall functional configuration of a personal information management system as a first embodiment of the present invention. The personal information management system 1 shown in FIG. Information management function-equipped information processing device (terminal device such as a personal computer) 10 and these clients 10 are connected to each other via a network [for example, a LAN (Local Area Network)] 30 so as to be able to communicate with each other. And a personal information management server 20 for managing information files.

  Further, an IC tag writer 40 that is connected to the network 30 and writes to the IC tag is provided in the vicinity of the client 10. Further, an IC tag reader 50 connected to the network 30 and an alarm device 60 connected to the network 30 are provided in the vicinity of the gate 100 provided at the entrance / exit of the installation space 2 where the client 10 is installed. The alarm device 60 may be built in the IC tag reader 50.

  In addition, the IC tag reader 50 has a plurality of positions inside and outside the installation space 2 where the client 10 is installed, for example, a passage, other rooms (not only in the same building, but also including start points and sales offices in various places). It is more preferable that the doors are arranged at various locations such as stairs, elevator / escalator doorways, building doorways, and site doorways.

  Further, in the present embodiment, the installation space 2 of the client 10 is a place determined that the client 10 having the personal information file should exist, and is a specific room, a specific floor, a specific building, a specific It means one of the premises in a facility such as a factory or laboratory.

  In the present embodiment, the personal information file (personal information file) holds a predetermined number or more of records including personal information. As described above, the personal information includes a specific individual by a single unit or a combination. Information that can be identified includes, for example, name, date of birth, contact information (address, address, telephone number, e-mail address). In addition to these, personal information includes titles, basic resident register numbers, account numbers, credit card numbers, license numbers, passport numbers, and the like.

[1-1] Configuration of the client of this embodiment:
FIG. 1B is a block diagram showing a functional configuration of each client 10 according to the present embodiment. The client 10 shown in FIG. 1B includes a CPU (arithmetic processing unit) 10a that executes various processes, and an individual. A storage unit 10b that can hold a data aggregate (file) of information and the like, a quarantine table 10c provided from the personal information management server 20, and a data aggregate (data file) held in the storage unit 10b. A P mark table 10d holding a P mark (privacy level mark; a level indicating the high possibility of being a personal information file, and a level determined by a determination value described later), and for managing individual clients 10 IC tag 10e, location information acquisition means 10f for acquiring location information of each client via GPS or network, and built-in power generation A solar power generation unit 10h that is a kind of device, a secondary battery 10g that can be charged via at least one of a power supply unit and a solar power generation unit 10h, an operation unit 17 such as a key input unit and a pointing device, and characters And a display unit 18 that displays an image and a power supply unit 19 that supplies power to each unit of the client 10.

  The secondary power unit 10g may be not only a rechargeable battery such as a lithium battery, a nickel cadmium battery, or a nickel metal hydride battery, but also a large-capacity capacitor. In addition to the solar power generation unit 10h, various power generation devices that generate power using vibration, rotational force, magnetic field, temperature difference, fuel, and the like as sources can be used as the built-in power generation device.

  In charging the secondary battery 10g, various known charge control circuits (not shown) can be used. The charge control circuit can be reduced in size and incorporated in the secondary battery 10g.

  When the client 10 is in an operating state, power is supplied from the power supply unit 19 to each unit. At this time, the secondary battery 10g is also charged from the power supply unit 19. In addition, when the client 10 is not in the operating state, the power generated by the solar power generation unit 10h is charged by being supplied to the secondary battery 10g. Then, using the charged secondary battery 10g as a power source, when the client 10 is not in an operating state, the position information acquisition unit 10f is operated to acquire the position information of the client 10.

  Here, the storage unit 10b is a hard disk built in the client 10, or a storage device connected to or external to the client 10, such as a flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, In addition to optical disks and magneto-optical disks, this is a storage device that uses recording media such as IC cards, ROM cartridges, and magnetic tapes.

Further, the quarantine table 10c and the P mark table 10d are held in a RAM (Random Access Memory), a hard disk or the like constituting the client 10.
The CPU 10a functions as a personal information search means 11, a CPU usage rate monitoring means 12, an input / output monitoring means 13, an activation control means 14, an access monitoring means 15 and a transmission / reception means 16, and these functions are performed by the CPU 10a. As will be described later, this is realized by executing a personal information search program installed from the personal information management server 20.

The personal information search means 11 operates as described later with reference to FIG. 6 by executing a personal information search program installed from the personal information management server 20, and a data file (stored in the storage unit 10b ( It functions as a text extraction engine that converts a target file) into a text file, and also functions as a search engine that specifies and searches a personal information file from data in the storage unit 10b using the quarantine table 10c. That is, the personal information search means 11 searches various files (data aggregates) existing in the storage unit 10b of the client 10 according to the condition (quarantine table 10c) instructed from the personal information management server 20, and the target file ( A file determined to be a personal information file) is written to a log (local cache database). The P mark determined based on the search result (determination value) obtained by the personal information search means 11 is registered in the P mark table 10d. Details of the function of the personal information search means 11 will be described later.

  The CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a that executes various processes in the client 10, and the input / output monitoring unit 13 is a data input / output operation (I / O operation) in the storage unit 10b. Is to monitor.

  The activation control unit 14 operates as described later with reference to FIGS. 7 and 8 by executing a personal information search program installed from the personal information management server 20, and is monitored by the CPU usage rate monitoring unit 12. The personal information search means 11 is activated when the usage rate of the CPU 10a is less than or equal to a predetermined threshold, while the operation of the personal information search means 11 is stopped when the usage rate exceeds the predetermined threshold. The personal information retrieval unit 11 is activated when the monitoring unit 13 detects the occurrence of an input / output operation. In other words, the activation control unit 14 basically activates the personal information search unit 11 with the lowest threshold and puts the personal information search unit 11 in an idle state (search hold) with the highest usage rate. 11 is operated like a screen saver.

  The access monitoring unit 15 monitors the data file (data file to which the P mark is assigned) determined to be a personal information file by the personal information search unit 11 and accesses (eg, rename, copy, delete) the data file. , Data change due to movement, etc.) is written as log information and transmitted to the personal information management server 20 by the transmission / reception means 16.

  The transmission / reception unit 16 transmits / receives various information to / from the personal information management server 20 via the network 30 and transmits the result of self-search by the personal information search unit 11 and the acquired position information to the personal information search unit. It functions as a transmission means. When the transmission / reception unit 16 functions as the transmission unit, a difference between the search result (link destination information of the personal information file, determination value, etc.) and the search result transmitted last time is obtained, and the difference is sent to the personal information management server 20. In addition to sending, the information to be sent is encrypted.

  An example of the external configuration of the client 10 is shown in FIG. Here, the client 10 has a general personal computer configuration as shown in FIG.

  In a non-use state, as shown in FIG. 2B, the solar power generation unit 10g is arranged in a part of the casing, and is configured to be able to generate power with room light or the like. Further, a GPS receiver is arranged as a part of the casing as the position information acquisition means 10f. It is assumed that the IC tag 10e is arranged at a position that cannot be seen in this figure.

  Here, the solar power generation unit 10g may be arranged at another position. Also, other types of different built-in power generation devices may be used. The GPS receiver as the position information acquisition unit 10f may be either a unit integrated with the casing of the client 10 or a pluggable type.

[1-2] Configuration of personal information management server of this embodiment:
FIG. 3 is a block diagram showing a functional configuration of the personal information management server 20 of the present embodiment. The personal information management server 20 shown in FIG. 3 includes a CPU 20a that executes various processes, log information from each client 10, and personal information. Database that stores and saves information files (RDB: Re
relational data base) 20b and a display unit 20c for displaying various information including log information and personal information stored in the database 20b.

  The CPU 20a functions as client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27. These functions are provided by the CPU 20a. This is realized by executing a personal information management server program.

  The client information collecting means 21 collects client information (host information) from a plurality of clients 10 connected to be communicable via the network 30 when searching and managing personal information. The client 10 to be managed is recognized.

The installation unit 22 installs a personal information search program that causes each client 10 to perform a self-search of personal information via the network 30.
The collection unit 23 receives and collects the results of self-searches (link destination information and determination values of personal information files) executed by each client 10 via the network 30 and the transmission / reception unit 27, and stores them in the database 20b. Is.

  The management console 24 sets and manages search conditions (such as the quarantine table 10c, a predetermined threshold necessary for determining a personal information file and a P mark) to be instructed to each client 10. The quarantine table 10c is for designating a characteristic character or characteristic character string that is a character or character string that appears characteristically in personal information, and details thereof will be described later with reference to FIG.

  In addition, the management console 24 controls to issue an alarm via the alarm device 60 when each client 10 determined to have a personal information file attempts to go out of the installation space 2 through the IC tag reader 50. When the client 10 who has obtained permission to take out passes the IC tag reader 50 and goes out of the installation space, control is performed to collect position information from the client 10 and track and manage it.

  The personal information management means 25 manages personal information files in each client 10 based on the search results collected by the collection means 23 and stored in the database 20b. The personal information search means 11 of each client 10 uses the personal information search means 11 to manage personal information files. A data file (a data file to which a P mark is assigned) determined to be a file is a management target. As will be described later, the personal information management unit 25 notifies the user (holder) of the data file of the caution information / warning information according to the determination value (or P mark) of each data file. The data file is forcibly captured and collected from the client 10 storing the data file. Further, the personal information management means 25 has a function of searching the personal information file stored in each client 10 or the database 20b with various accuracy, and a function of causing the display control means 26 to display the search result on the display unit 20c. Have.

  The display control means 26 controls the display state of the display unit 20c so that various types of information are displayed on the display unit 20c. The transmission / reception means 27 transmits / receives various information to / from each client 10 via the network 30.

[2] Operation of the personal information management system of this embodiment:
[2-1] Basic operation:
Next, the operation of the personal information management system 1 (client & server) of the present embodiment configured as described above will be described with reference to FIGS.

  First, a personal information file search method by the personal information search means 11 (personal information search program) of this embodiment will be described with reference to FIGS. 4 is a diagram showing an example of the quarantine table 10c of this embodiment, FIG. 5 is a diagram showing a specific example of the title header, and FIG. 6 is an operation of the personal information search means 11 in each client 10 of this embodiment. It is a flowchart for demonstrating.

In the personal information search means 11 of this embodiment, the appearance frequency of an address, a telephone number, an e-mail address, and a name is quantified and the personal information file is specified as follows.
More specifically, in the counting step executed by the personal information search means 11, first, a character or character string included in the data file and a characteristic character preset as a character / character string characteristically appearing in the personal information / Feature character string is collated and the number of times the characteristic character / feature character string appears in the data file is counted. However, in the present embodiment, when collation / recognition using character strings is performed, the load on the CPU 10a becomes extremely large. Therefore, collation / recognition for each character is performed. Therefore, one character character is set in the quarantine table 10c, as will be described later with reference to FIG. In addition, when the arithmetic processing capability of the CPU 10a is sufficiently high, collation / recognition by a character string may be performed.

  Then, characters extracted from the target file (text file) are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, Count up the count value of feature characters by “1”. After counting the number of appearances of characteristic characters in all characters included in the target file in this way, the personal information file is identified based on the count result (determination of whether the target file is a personal information file) ).

Here, the characteristic characters preset in the quarantine table 10c will be specifically described.
In general personal information, an address is usually required. Therefore, as shown in FIG. 4, characters that characteristically appear at addresses in Japan are set and registered in the quarantine table 10c as characteristic characters. For example, the address information may include “city”, “road”, “fu”, “prefecture”, “city”, “ward”, “town”, “village”, “county”, etc. In the case of “Tokyo”, the characters “East” and “Kyo” appear in ordinary documents, but in the case of address information, they will appear in combination with “City”. It becomes possible to regard the number of appearances as the number of addresses. Similarly, “prefecture”, “prefecture”, and “road” are considered as address information, and “@” can be used as e-mail address information.

In the quarantine table 10c shown in FIG. 4, the following characteristic characters and points are set.
(1) Address information (characters) as “East”, “Kyo”, “Miyako”, “Large”, “Osaka”,
“Fu”, “North”, “Sea”, “Road” are set, and the total of the count values of these characteristic characters is counted and calculated as address point 1.

(2) As presumed address information (characteristics), prefecture names other than address point 1, that is, “mountain”, “form”, “god”, “na”, “river”, “saki”, “tama”, ..., "Fuku", "Oka", "Prefecture", etc. are set, and the total of the count values of these characteristic characters is counted and calculated as address point 2.

(3) “City”, “District”, “Town”, “Village” and “County” are set as address disregard information (characteristic characters), and the total of the count values of these characteristic characters is calculated as address point 3 Is done.
(4) “@” is set as the mail address deemed information (characteristic character), and the count value of “@” is used as the mail address point.

(5) “N” (numeric string with a predetermined number of digits consisting of numerals and hyphens) is set as the telephone number deemed information (characteristic character string), and the counted value is used as the telephone number point. More specifically, the phone number is a specific number string corresponding to the mobile phone area code or area code, such as “090-XXXX-XXXX”, “03-XXXX-XXXX”, “048-XXX-XXXX”. It consists of “090”, “03”, “048” followed by an 8-digit or 7-digit numeric string. When such a numeric string appears, the telephone number point is incremented by “1”. . At this time, the count-up is performed regardless of the presence or absence of a hyphen in the numeric string.

(6) As name disregard information (characters), for example, the 50 best surnames in Japan
The characters “sa”, “wisteria”, “field”, “middle”, “high”, “bridge”,..., “Mountain”, “field” are set, and the sum of the count values of these characteristic characters Is calculated as a name point.

(7) As the quarantine total points, the total value of each point of the items (1) to (6) described above is counted and calculated.
Here, in FIG. 4, a count value indicating the number of appearances of each characteristic character or each point (total value of the number of appearances) is written in “”, and can be counted up to, for example, about 10 million. It has become.

  Moreover, when calculating the appearance rate of each prefecture name based on the counting result (number of appearances) obtained using the quarantine table 10c as described above, handling in the case where duplicate characters exist will be described. For example, if “Tokyo” and “Kyoto Prefecture” are mixed in a text file, “Metropolitan” is duplicated. Therefore, the “Metropolitan” count is the same as the “Tokyo” count. It will be mixed. Since “Fu” in “Kyoto” overlaps with “Fu” in “Osaka”, first calculate the appearance rate of “Osaka” and subtract that appearance rate from the appearance rate of “Fu”. It is possible to predict the appearance rate of “fu”. By subtracting the appearance rate of “Kyoto Prefecture” predicted in this way from the appearance rate of “Metropolitan”, the appearance rate of “Tokyo” can be obtained. If the prefecture name and city name overlap (for example, Osaka City, Osaka Prefecture), the appearance rate of “Osaka” will double, but based on the Japanese address book published by the Ministry of Posts and Telecommunications. It is possible to estimate the actual appearance rate by calculating the duplication rate for each prefecture name and adjusting the appearance rate based on the calculated duplication rate.

  Furthermore, the handling when there is no state display will be described. In the data file, when the title header as shown in FIG. 5 is used for the prefecture name, or in the address display using the decree-designated city or the postal code, “city”, “road”, “prefecture”, “ The appearance rate of “prefecture” will be extremely reduced. Instead, since the name appearance rate such as the prefecture name becomes high, it is possible to specify that the data file is a personal information file including address information from the name appearance rate.

  In the quarantine table 10c described above, characters / character strings that appear characteristically in addresses, e-mail addresses, telephone numbers, and names are set as feature characters / character strings, but the present invention is not limited to these. Characters / character strings that appear characteristically in the date of birth, title, personal identification information (for example, Basic Resident Register Number, Account Number, Credit Card Number, License Number, Passport Number, etc.) It may be set as a character / characteristic character string.

Then, in the calculation step executed by the personal information search means 11, a determination value indicating the degree to which the target file is a personal information file is calculated based on the counting result obtained using the quarantine table 10c described above. As the judgment value,
(a) The value of the quarantine total point (see item (7) above) in the quarantine table 10c may be used as it is,
(b) A determination point that increases as the appearance rate of the characteristic character / characteristic character string increases may be calculated as the determination value.
(c) Based on the count result obtained for each characteristic character / characteristic character string, the characteristic character / characteristic character string appearance pattern in the target file is obtained, and the obtained appearance pattern and the characteristic character / characteristic character string appearance pattern are obtained. A degree of coincidence indicating a degree of coincidence with a preset feature appearance pattern may be calculated as the determination value,
(d) Two or more of these three kinds of determination values may be combined, and a value calculated by substituting two or more determination values into a predetermined function may be used as the determination value.

  At this time, when there are characteristic characters / characteristic character strings related to plural types of information (for example, four types of address, e-mail address, telephone number, and name) in the target file, the target file relates to one type of information. The count result is weighted so that the determination value is larger than when a characteristic character / characteristic character string exists. In other words, when a data file includes a plurality of types of information that can identify an individual, the possibility that the data file is a personal information file includes only one type of information that can identify an individual. Therefore, weighting is performed so that the determination value (importance) for the data file becomes large. Further, weighting may be performed so that the determination value increases as the number of types of information increases. This makes it possible to specify the personal information file more reliably.

  When the determination value as described above is calculated, it is determined in the determination step executed by the personal information search means 11 based on the determination value whether the target file is a personal information file. For example, if the determination value exceeds a predetermined threshold, it is determined that the target file is a personal information file. When making such a determination, in this embodiment, a P mark (private level mark) corresponding to the size of the determination value is added to the target file, set and registered in the P mark table 10d, and ranked. Is doing. As described above, the P mark is a level indicating the high possibility that the target file is a personal information file. The larger the determination value, the higher the P mark is set.

  For example, when the determination value is 10 or more, it is determined that the target file is a personal information file. When the determination value is 10 or more and less than 100, “P1” is assigned as the P mark, and when the determination value is 100 or more and less than 1000, “P2” is assigned as the P mark. When it is 1000 or more and less than 10,000, “P3” is assigned as the P mark, and when the determination value is 10000 or more, “P4” is assigned as the P mark. The predetermined threshold for determining the personal information file and the reference value for determining the P mark are appropriately set by the management console 24 of the personal information management server 20. In addition, although the P mark is ranked into four “P1” to “P4” here, the number of ranks is not limited to this.

  As described above, the P mark (P mark table 10 d) assigned to the target file is transmitted to the personal information management server 20 via the transmission / reception unit 16 and the network 30, and is stored in the database 20 b by the collection unit 23. The data file to which the P mark is assigned is managed as a personal information file by the personal information management server 20 (personal information management means 25) as follows according to the rank of the P mark.

For example, when the rank of the P mark is “P1”, the recommendation based on the warning information is not performed, but the fact that the data file of “P1” exists is recorded as a log. When the rank of the P mark is “P2”, notice information in a pop-up display is notified to alert the user of the data file. When the rank of the P mark is “P3”, the system administrator is notified by e-mail as warning information that there is a user storing the data file, and the return of the data file is instructed. To do. When the rank of the P mark is “P4”, the data file is forcibly captured and collected from the client 10. Even if the rank of the P mark is not “P4”, if the data file of “P3” is left for a predetermined number of days, the data file is forcibly captured and collected from the client 10.

  A series of procedures for personal information search (personal information file specification) executed by the personal information search means 11 will be described with reference to the flowchart (steps S11 to S18) shown in FIG.

  When constructing the personal information management system 1 of the present embodiment, first, a personal information management program is installed in a computer that should function as the personal information management server 20, and the computer executes the personal information management program. Thus, the personal information management server 20 functions (client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27). When the search / management of personal information is started, client information is collected from a plurality of clients 10 connected to be communicable via the network 30 by the client information collection unit 21, and personal information search / management targets are collected. The personal information search program is installed via the network 30 by the installation means 22 on the client 10 that is recognized as a personal information search / management target. When this personal information search program is executed by the CPU 10a of the client 10, the CPU 10a causes the personal information search means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, activation control means 14, access monitoring means 15 and transmission / reception means 16 to be transmitted. Serves as a function. When installing the personal information search program, the quarantine table 10c is also transmitted. The personal information search program is included in advance in the personal information management program.

  In the client 10, when the personal information retrieval unit 11 is activated at a timing described later with reference to FIGS. 7 and 8, the P mark table 10d and the storage unit 10b are referred to, and the P mark is not set in the storage unit 10b. The presence or absence of the data file is determined (step S11). When there is a data file with no P mark set (YES route in step S11), one data file with no P mark set is selected and read from the storage unit 10b as a target file (step S12). Is converted into a text file by the text extraction engine (step S13).

  Then, the characters extracted from the text file are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, and the characteristic characters are counted. The value is incremented by “1” (step S14; counting step). In this way, after counting the number of appearances of characteristic characters in all characters included in the target file, based on the count result, a determination value indicating the degree to which the target file is a personal information file (for example, the above item ( a) to (d)) is calculated (step S15; calculation step).

  Based on the determination value calculated in step S15, as described above, it is determined whether or not the target file is a personal information file and ranks the P mark (step S16; determination step). The personal information file determination result and the P mark ranking result are registered in the P mark table 10d, and also transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 30 (step S17). In the personal information management server 20, the data is stored in the database 20 b by the collection unit 23.

  Thereafter, it is determined again whether or not there is a data file in which the P mark is not set in the storage unit 10b (step S18). Returning, the same processing as described above is executed. On the other hand, if there is no data file with no P mark set (NO route in step S18), the personal information search operation is terminated.

  Next, the activation timing of the personal information search means 11 (personal information search program) will be described with reference to FIGS. Here, FIG. 7 and FIG. 8 are flowcharts for explaining the operation of the activation control unit 14 in each client 10 of the present embodiment.

  The activation control means 14 of the present embodiment includes activation control based on the CPU usage rate according to the flowchart (steps S21 to S27) shown in FIG. 7, and input / output operation (I / O operation) according to the flowchart (steps S31 to S33) shown in FIG. ) Start control.

  In the activation control based on the CPU usage rate, the CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a (step S21), determines whether or not the usage rate is equal to or less than a predetermined threshold (step S22), and the usage rate is If it is equal to or less than the predetermined threshold value (YES route in step S22), the personal information search means 11 is activated (step S23). After the activation, it is determined whether or not the search is finished (step S24). If not finished (NO route of step S24), the process returns to step S21. If it is determined in step S24 that the search is completed (YES route), after the search result is notified (step S25), the process returns to step S21.

  If it is determined in step S22 that the usage rate is greater than the predetermined threshold (NO route), it is determined whether or not the personal information search means 11 is activated (step S26), and if not activated (NO in step S26). On the other hand, if it is activated (YES route in step S26), the search operation by the personal information search means 11 is interrupted (step S27), and then the process returns to step S21. In this way, the personal information search means 11 can be operated like a screen saver.

  In the start control by the input / output operation, the input / output monitoring means 13 monitors the data input / output operation (I / O operation) in the storage unit 10b (step S31), and detects the occurrence of the input / output operation (step S31). YES route), the personal information search means 11 is immediately activated (step S32), and after the search result is notified (step S33), the process returns to step S31.

It should be noted that the activation control based on the two types of timings described above may be adopted and executed simultaneously in parallel, or only one of them may be adopted and executed.
In each client 10, the access monitoring means 15 monitors the data file to which the P mark is given (the data file determined to be a personal information file by the personal information searching means 11), and accesses the data file. When (for example, data change by renaming, copying, erasing, moving, etc.) occurs, the fact is written out as log information and transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 30. In the personal information management server 20, the data is stored in the database 20b by the collecting means 23.

In addition, when a data file determined to be a personal information file by the personal information search unit 11 exists in the client 10, each client is assigned to the IC tag 10 e based on an instruction from the personal information management server 20. A unique ID for identifying 10 and a flag indicating that the personal information file exists are written by the IC tag writer 40 using a signal of a predetermined radio frequency (for example, 13.56 MHz). For example, if there is a data file determined to be a personal information file, the corresponding flag is changed from “0” to “1”.

  Further, the permission to take out the personal information file is also written by the IC tag writer 40 by a signal of a predetermined radio frequency. For example, when the initial value “0” indicating prohibition of taking out the personal information file is obtained, the corresponding flag is changed from “0” to “1”.

[2-2] Operation when taking personal information file:
Next, with reference to FIG. 9, the personal information management server 20 will be described with regard to the client 10 when it is determined that the personal information management server 20 has a personal information file without permission and location tracking management after the client 10 is taken out.

  As already described, each client 10 is provided with an IC tag 10e. Whether or not the IC tag 10e provided in each client 10 includes at least a unique ID for identifying each client 10 and a data file (personal information file) to which a P mark is attached. The flag is written by the IC tag writer 40.

  Further, the client 10 uses the secondary battery 10g as a power source, and the position information acquisition unit 10f acquires, stores, and updates the position information of the client 10 even when the client 10 is not in use. The IC tag reader 50 has a function of transmitting position information in response to a read request from the IC tag 10e.

  Here, FIG. 9 is a flowchart regarding take-out management of the client 10 in the personal information management server 20, and FIG. 10 is a flowchart regarding charging control of the secondary battery 10g of the client 10 and position information acquisition control of the position information acquisition means 10f. is there.

  In the present embodiment, the management console 24 of the personal information management server 20 controls take-out management of each client 10 shown in the flowchart of FIG. Here, the take-out management means the management of the movement status of the client 10, the alarm when the client 10 is taken out without permission, and the position tracking management after the take-out of the client 10 that has received permission.

  First, the personal information management server 20 causes the IC tag reader 50 to read the IC tag 10e, or each client 10 accesses the personal information management server 20 so that each client 10 stays in the installation space 2. The global IP address is monitored.

  That is, the personal information management server 20 monitors the reading result of the IC tag reader 50 as to whether any of the clients 10 passes through the IC tag reader 50 in the vicinity of the gate 100 or other IC tag readers (not shown). (Step S41 in FIG. 9).

  The personal information management server 20 monitors the reading result of the IC tag reader 50. If there is a client 10 that has passed through any of the IC tag readers 50 (YES in step S41 in FIG. 9), the personal information management server 20 passes through the IC tag reader 50. Whether or not the personal information file exists in the client 10 is read, a flag relating to the presence of the personal information file recorded in the IC tag 10e is read to check whether the value is “1” (step S42 in FIG. 9).

Alternatively, the personal information management server 20 that receives the notification from the IC tag reader 50 via the network 30 may check whether or not the personal information file exists in the client 10 by referring to the database 20b. Good.

  When none of the clients 10 passes through the vicinity of the IC tag reader 50 (NO in step S41 in FIG. 9), or when no personal information file exists in the client 10 that has passed through the IC tag reader 50 (in step S42 in FIG. 9). NO), the personal information management server 20 continues to monitor the reading result of the IC tag reader 50.

  When any client 10 passes the IC tag reader 50 (YES in step S41 in FIG. 9), and the personal information management server 20 has a personal information file in the client 10 that has passed the IC tag reader 50 ( In step S42 in FIG. 9, a flag relating to the permission of taking out the personal information file recorded in the IC tag 10e is read and whether the value is “1” as to whether the taking-out permission of the personal information file is obtained. Confirmation (step S43 in FIG. 9).

  Alternatively, the personal information management server 20 that receives the notification from the IC tag reader 50 via the network 30 confirms whether or not the client 10 has permission to take out a personal information file by referring to the database 20b. It may be.

  One of the clients 10 is about to pass near the IC tag reader 50 (YES in step S41 in FIG. 9), and the personal information file exists in the client 10 that has passed the IC tag reader 50 (YES in step S42 in FIG. 9). ) If the client 10 that has passed the IC tag reader 50 is not allowed to take out (NO in step S43 in FIG. 9), and the IC tag reader 50 that has passed is disposed at the gate 100 (step 9 in FIG. 9). The personal information management server 20 gives an instruction to issue an alarm to the alarm device 60 (step S45 in FIG. 9).

  The alarm is not only the alarm device 60 issuing a warning (the generation of warning sound or warning light in the alarm device 60) according to an instruction from the personal information management server 20, but also the personal information management server 20 to the network administrator. Notification, display of warning messages on the personal information management server 20 and other terminal devices, output of warning messages in an acoustic system connected to the personal information management server 20, notification to security guards, and the like .

  That is, according to the present embodiment, when the client 10 determined to have the personal information file tries to go out of the installation space through the gate 100 where the IC tag reader 50 is installed, the alarm device 60 issues an alarm. This will prevent inadvertent take-out and illegal take-out.

  Also, any client 10 is about to pass near the IC tag reader 50 (YES in step S41 in FIG. 9), and the personal information file exists in the client 10 that has passed the IC tag reader 50 due to the flag of the IC tag 10e. If the client 10 that has passed the IC tag reader 50 is allowed to take out (YES in step S43 in FIG. 9), or the client 10 that has passed the IC tag reader 50 is allowed to take out. Is not given (YES in step S43 in FIG. 9), but if the passed IC tag reader 50 is not placed on the gate 100 (NO in step S44 in FIG. 9), the personal information management server 20 IC tag 10e and IC tag without issuing various alarms To collect location information sent from the client 10 via chromatography da 50 executes the tracking management (FIG. 9 step S46). In this case, the network administrator may be notified without generating a warning sound or warning light.

  That is, the client 10 includes position information acquisition means 10 f for acquiring position information, and the position information acquired by the GPS receiver and the global IP address acquired via the network are transmitted via the network 30 to the personal information management server 20. Send regularly to. Alternatively, each client 10 transmits position information to the personal information management server 20 in response to an inquiry from the personal information management server 20.

  That is, according to the present embodiment, when the client 10 that has been determined to have the personal information file and obtained permission to take out passes through the IC tag reader 50 and goes out of the installation space 2, Although the alarm is not issued, the personal information management server 20 collects the location information from the client 10 and tracks and manages it, so that unauthorized use of the personal information can be prevented more reliably.

  Since the client 10 passing near the IC tag reader 50 is in a portable state, the power is normally turned off. In the present embodiment, even if the client 10 is not in use (NO in step S51 in FIG. 10), power is generated by the solar power generation unit 10h (step S52 in FIG. 10). Even when the client 10 is not in use, the secondary battery 10g is charged by the power generation of the solar power generation unit 10h (step S53 in FIG. 10). Alternatively, when the client 10 is in use (YES in step S51 in FIG. 10), the secondary battery 10g is charged (step S53 in FIG. 10).

  In such a situation, even if the client 10 is in use or not in use, if the secondary battery 10g has a predetermined remaining charge (YES in step S54 in FIG. 10), position information acquisition is performed. The means 10f acquires the position information (step S55 in FIG. 10), and the acquired position information is stored in the position information acquisition means 10f or a storage unit (not shown) in the IC tag 10e (in FIG. 10). Step S56). In this case, when new position information is acquired, it is updated by overwriting.

  That is, even when the client 10 is not in an operating state using the charged secondary battery 10g as a power source, the position information acquisition unit 10f is operated to acquire the position information of the client 10.

  Therefore, even if the client 10 is not in use, the IC tag 10e can transmit the position information of the client 10 in response to a read request from the IC tag reader 50, and manage the position of the client 10 ( (Location tracking management) is further facilitated.

  Moreover, in the above-mentioned alarm at the time of take-out, it is possible to issue alarms having different levels depending on the rank of the P mark. Further, as shown in FIG. 11, the gate 100, the IC tag reader 50, and the alarm device 60 in the installation space 2 are connected to the entrance / exit of the installation floor 3 (gate 100 ′, IC tag reader 50 ′, alarm device 60 ′), A plurality of doorways (gate 100 ″, IC tag reader 50 ″, alarm device 60 ″) and the like can be provided, and alarms with different stepwise levels can be issued.

  In addition, a plurality of stages of IC tag readers 50 (50 ′, 50 ″) are provided as described above, and the IC tag 10e transmits the position information of the client 10 in response to a read request from the IC tag reader 50, so It is also possible to manage the location tracking of the client 10 at the point.

In the tracking of the client 10 based on the position information described above, tracking may be performed at different levels depending on the rank of the P mark. For example, it is also desirable to obtain more detailed position information or obtain position information at a finer timing for the client 10 having a higher rank. In this case, it is desirable to provide a plurality of IC tag readers 50 at each position in the installation space, not only near the gate.

[3] Effects of the personal information management system of this embodiment:
Thus, according to the personal information management system 1 (client 10 and personal information management server 20) as an embodiment of the present invention, a characteristic character and a characteristic character string are stored for each data file in the storage unit 10b of each client 10. It is determined whether or not the data file is a personal information file based on the judgment value based on the number of appearances of the personal information file, and the personal information file can be automatically identified and searched without obtaining human cooperation. In addition, without placing a special load on the person in charge, for example, it is possible to reliably search and identify and manage personal information files (data files that are likely to be personal information files) that exist in a distributed manner within a company or the like. Can be put. Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

  Here, when the personal information search means 11 determines that the data aggregate is a personal information file, the determination result is recorded in the IC tag 10e by the IC tag writer 40 via the personal information management server 20. The management of the client 10 with the IC tag attached is facilitated.

  Further, even during a period in which the client 10 is not in an operable state, the IC tag 10e is received by the client 10 by receiving the power supply from the secondary battery 10g and the position information acquiring unit 10f acquiring the position information. Even in a period in which it is not in an operable state, it becomes possible to transmit position information in response to a read request from the IC tag reader 50, and the management of the position of the client 10 is further facilitated.

  Here, in the above personal information management system, when the client 10 determined to have a personal information file tries to go out of the installation space 2 through the IC tag reader 50, the alarm device 60 issues an alarm. This prevents inadvertent take-out and illegal take-out.

  Here, in the above personal information management system, when the client 10 that has been determined to have a personal information file and obtained permission to take out passes through the IC tag reader 50 and goes out of the installation space 2. Although no alarm is issued, by collecting and tracking location information from the client 10, unauthorized use of personal information can be more reliably prevented.

  Here, the personal information management server 20 acquires position information from the IC tag 10e when the client 10 determined to have a personal information file passes through the vicinity of the IC tag reader 50 even in the installation space 2. This facilitates periodic location management of the client 10.

  At this time, the usage rate (usage load) of the CPU 10a is monitored in each client 10, and when the usage rate is equal to or lower than a predetermined threshold, the personal information search means (search engine) 11 is activated to apply a load to the CPU 10a. The personal information file can be identified without any problems.

Each client 10 monitors the data input / output operation (I / O operation) with respect to the storage unit 10b, and activates the personal information search means (search engine) 11 when the input / output operation occurs, thereby storing the data in the client 10. When new data is input to the unit 10b or when data is output from the storage unit 10b in the client 10 (for example, not only when data is output from the storage unit 10b to attach data to an email, A data file included in the input / output data is a personal information file in the case of outputting from the storage unit 10b to write to an external recording medium such as a CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk). It is possible to monitor the movement of personal information files by determining whether or not there is personal information. It is possible to prevent the inadvertent outflow, leakage more reliably.

  Further, a data file determined to be a personal information file (a file given a P mark in this embodiment) is monitored, and access to the data file (for example, data change by renaming, copying, erasing, moving, etc.) If this occurs, the fact is transmitted to the personal information management server 20 as log information so that access (operation / change history) to the data file that is likely to be a personal information file can be accessed by the personal information management server 20. Tracking management (tracking) is performed, and unauthorized use of personal information can be prevented more reliably.

  In addition, by managing each data file according to the P mark given to each data file, for example, depending on the rank of the P mark (the size of the judgment value), the user of the data file or the system administrator It is possible to notify caution information / warning information, and forcibly capture and collect the data file from the client 10 (storage unit 10b). Unauthorized use can be prevented more reliably.

  Further, it becomes possible to forcibly capture and collect data files from the client 10 (storage unit 10b) according to the location information of each client 10, and inadvertent leakage or leakage of personal information or personal information. It is possible to more reliably prevent unauthorized use of.

[4] Other variations:
The present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the spirit of the present invention.

  For example, in the above-described embodiment, the case of searching / managing personal information has been described. However, the present invention also applies to the case of searching / managing confidential information (information with confidentiality obligation) in a company or the like. It can be applied to obtain the same operational effects as in the above-described embodiment, and can reliably prevent inadvertent outflow / leakage of confidential information and unauthorized use of confidential information. In that case, a character or character string that appears characteristically in the confidential information is set as the characteristic character or characteristic character string (keyword), and a characteristic character or characteristic character string in the confidential information is set as the characteristic appearance pattern. An appearance pattern will be set.

  Further, while the search by the personal information search means 11 of each client 10 (search for all data files stored in the storage unit 10b) is not completed, access to the data file in the storage unit 10b of the client 10 (for example, Data change by renaming, copying, erasing, moving, etc .; more specifically, output to an external recording medium, mail attachment, etc.) may be prohibited. In this case, until the data file that is determined to be a personal information file is confirmed and the data file that is highly likely to be a personal information file is placed under the management of the personal information management server 20, the storage unit of the client 10 Since access to the data file in 10b is prohibited, it becomes possible to prevent the leakage and leakage of personal information more reliably.

  Furthermore, the functions as the above-described personal information search means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, activation control means 14, access monitoring means 15 and transmission / reception means 16 in each client 10 (all or As described above, a part of the functions) is performed by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (personal information search program) installed from the personal information management server 20. Realized.

  In addition, the functions of the client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27 in the personal information management server 20 (each of the means) All or some of the functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (a program for a personal information management server) as described above.

  The personal information management server program including the personal information search program is provided in a form recorded on a computer-readable recording medium such as a flexible disk, CD-ROM, CD-R, CD-RW, or DVD. In this case, the computer reads the personal information management server program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The personal information search program and the application program as the personal information management server program are stored in the computer as described above on the personal information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the activation control means 14, Program codes for realizing the functions as the access monitoring means 15, transmission / reception means 16, client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26 and transmission / reception means 27. Contains. Also, some of the functions may be realized by the OS instead of the application program.

  Further, the recording medium in the present embodiment includes the above-mentioned flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk, IC card, ROM cartridge, magnetic tape, Various computer-readable media such as punch cards, computer internal storage devices (memory such as RAM and ROM), external storage devices, and printed materials on which codes such as bar codes are printed can also be used.

Note that Supplementary Notes 1 to 11 described below are also included in one aspect of the embodiment of the present invention.
(Appendix 1)
Even in a period when the client is not in an operable state, the position information from the IC tag reader near the gate is acquired and the position tracking management of the client is performed.
A personal information management system server characterized by the above.

(Appendix 2)
Even during a period when the client is not in an operable state, it acquires position information from each IC tag reader and performs client position tracking management.
A personal information management system server characterized by the above.

(Appendix 3)
The personal information management server acquires location information from the IC tag when the client determined to have a personal information file attempts to go out of the installation space through the IC tag reader, ,
The server for a personal information management system according to Supplementary Note 1 or Supplementary Note 2, wherein

(Appendix 4)
The personal information management server is the client that is determined to have a personal information file, and a client who has obtained permission to take out passes the IC tag reader and goes out of the installation space. The server for a personal information management system according to any one of appendix 1 to appendix 3, wherein the server acquires position information from an IC tag and does not issue the alarm.

(Appendix 5)
The personal information management server acquires position information from the IC tag when the client determined to have a personal information file passes through the vicinity of the IC tag reader even in the installation space.
The server for a personal information management system according to Supplementary Note 1 or Supplementary Note 2, wherein

(Appendix 6)
Depending on the client location information, the personal information file is forcibly collected or deleted from the client.
The server for personal information management systems according to appendix 1 to appendix 5, characterized in that.

(Appendix 7)
Even in a period when the client is not in an operable state, the position information from the IC tag reader near the gate is acquired and the position tracking management of the client is performed.
A server program for a personal information management system.

(Appendix 8)
Even during a period when the client is not in an operable state, it acquires position information from each IC tag reader and performs client position tracking management.
A server program for a personal information management system.

(Appendix 9)
The personal information management server acquires location information from the IC tag when the client determined to have a personal information file attempts to go out of the installation space through the IC tag reader, ,
9. A server program for a personal information management system according to appendix 7 or appendix 8.

(Appendix 10)
The personal information management server is the client that is determined to have a personal information file, and a client who has obtained permission to take out passes the IC tag reader and goes out of the installation space. The server program for a personal information management system according to any one of appendix 7 to appendix 9, wherein position information is acquired from an IC tag and the alarm is not issued.

(Appendix 11)
The personal information management server acquires position information from the IC tag when the client determined to have a personal information file passes through the vicinity of the IC tag reader even in the installation space.
The server program for a personal information management system according to appendix 7 or appendix 2 characterized by the above.

(Appendix 12)
Depending on the client location information, the personal information file is forcibly collected or deleted from the client.
A server program for a personal information management system according to appendix 7 to appendix 11, characterized by the above.

It is a block diagram which shows the function structure of the personal information management system as one Embodiment of this invention. It is a block diagram which shows the external appearance structure of the client used by one Embodiment of this invention. It is a block diagram which shows the function structure of the personal information management server of this embodiment. It is a figure which shows the example of the quarantine table of this embodiment. It is a figure which shows the specific example of a title header. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the personal information search means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment. It is a flowchart which shows operation | movement of the personal information management system as one Embodiment of this invention. It is a flowchart which shows operation | movement of the personal information management system as one Embodiment of this invention. It is a block diagram which shows the function structure of the personal information management system as one Embodiment of this invention.

Explanation of symbols

1 personal information management system 10 client (information processing device with personal information management function)
10a CPU (arithmetic processing unit)
10b Storage unit 10c Quarantine table 10d P mark table 10e IC tag 10f Location information acquisition unit 10g Secondary battery 10h Solar power generation unit 11 Personal information search unit (search engine, text extraction engine)
12 CPU usage rate monitoring means 13 Input / output monitoring means 14 Startup control means 15 Access monitoring means 16 Transmission / reception means (transmission means)
17 Operation Unit 18 Display Unit 19 Power Supply Unit 20 Personal Information Management Server 20a CPU
20b database 20c display unit 21 client information collection unit 22 installation unit 23 collection unit 24 management console 25 personal information management unit 26 display control unit 27 transmission / reception unit 30 network (LAN)
40 IC tag writer 50 IC tag reader 60 Alarm device 100 Gate

Claims (15)

A plurality of clients each having an IC tag attached thereto, a personal information management server connected to the plurality of clients via a network so as to be able to communicate with each other, and managing personal information files in the plurality of clients; Personal information comprising: an IC tag writer for writing to the IC tag based on an instruction from the server; and an IC tag reader configured to communicate with the personal information management server and disposed in the installation space of the client A management system,
The personal information management server installs a personal information search program for causing each client to execute self-search for personal information via the network, and performs self-search performed by each client via the network. Collecting means for receiving the results and storing them in a database,
Each of the plurality of clients executes a personal information search program installed from the personal information management server to identify and search a personal information file from data in the storage unit of each client. Charging means by means, a transmission means for transmitting the result of self-search by the personal information search means to the personal information management server via the network, an IC tag for identifying individual clients, and a built-in power generator A secondary battery, and position information acquisition means for acquiring position information by receiving power supply from the secondary battery,
The personal information search means is for causing each client to realize a personal information search function for specifying and searching for a personal information file from data in the storage unit of each client, and a data aggregate included in the data Each name, date of birth, address, residence, telephone number, e-mail address, title, personal identification as a character or character string that appears characteristically in the data or character string and personal information included in the data aggregate Collating with at least one of the information, counting the number of times the feature character or the feature character string appears in the data aggregate, and based on the counting result, the feature character or the feature A determination value that increases as the appearance rate of the character string increases is calculated, and if the determination value exceeds a predetermined threshold, the data aggregate is an individual Is intended to operate each client to determine that the broadcast file,
When the personal information search means determines that the data aggregate is a personal information file, the determination result is recorded on the IC tag by the IC tag writer via the personal information management server,
The position information acquisition means receives the power supply from the secondary battery during a period when the client is not in an operable state, acquires position information,
The IC tag transmits the position information in response to a read request from the IC tag reader even when the client is not in an operable state.
A personal information management system characterized by that. A plurality of clients each having an IC tag attached thereto, a personal information management server connected to the plurality of clients via a network so as to be able to communicate with each other, and managing personal information files in the plurality of clients; Personal information comprising: an IC tag writer for writing to the IC tag based on an instruction from the server; and an IC tag reader configured to be able to communicate with the personal information management server and disposed in the installation space of the client A management system,
The personal information management server installs a personal information search program for causing each client to execute self-search for personal information via the network, and performs self-search performed by each client via the network. Collecting means for receiving the results and storing them in a database,
Each of the plurality of clients executes a personal information search program installed from the personal information management server to identify and search a personal information file from data in the storage unit of each client. Charging means by means, a transmission means for transmitting the result of self-search by the personal information search means to the personal information management server via the network, an IC tag for identifying individual clients, and a built-in power generator A secondary battery, and position information acquisition means for acquiring position information by receiving power supply from the secondary battery,
The personal information search means is for causing each client to realize a personal information search function for specifying and searching for a personal information file from data in the storage unit of each client, and a data aggregate included in the data Each name, date of birth, address, residence, telephone number, e-mail address, title, personal identification as a character or character string that appears characteristically in the data or character string and personal information included in the data aggregate The number of times that the characteristic character or the characteristic character string appears in the data aggregate is compared with information related to at least one of the information, and is obtained for each characteristic character or each characteristic character string. Based on the counting result, an appearance pattern of the characteristic character or the characteristic character string in the data aggregate is obtained, and A degree of coincidence indicating a degree of coincidence between the appearance pattern and a feature appearance pattern preset as an appearance pattern of the characteristic character or the characteristic character string is calculated as a determination value, and the degree of coincidence exceeds a predetermined threshold Each client is operated so as to determine that the data aggregate is a personal information file,
When the personal information search means determines that the data aggregate is a personal information file, the determination result is recorded on the IC tag by the IC tag writer via the personal information management server,
The position information acquisition means receives the power supply from the secondary battery during a period when the client is not in an operable state, acquires position information,
The IC tag transmits the position information in response to a read request from the IC tag reader even when the client is not in an operable state.
A personal information management system characterized by that. The personal information management server acquires location information from the IC tag when the client determined to have a personal information file attempts to go out of the installation space through the IC tag reader, ,
The personal information management system according to claim 1 or claim 2, characterized by that.   The personal information management server is the client that is determined to have a personal information file, and a client who has obtained permission to take out passes the IC tag reader and goes out of the installation space. The personal information management system according to any one of claims 1 to 3, wherein position information from an IC tag is acquired and the alarm is not issued. The personal information management server acquires position information from the IC tag when the client determined to have a personal information file passes through the vicinity of the IC tag reader even in the installation space.
The personal information management system according to claim 1 or claim 2, characterized by that. Each of the plurality of clients
Usage rate monitoring means for monitoring the usage rate of the arithmetic processing unit that executes processing in each client;
The personal information search unit is activated when the usage rate monitored by the usage rate monitoring unit is equal to or less than a predetermined threshold value, and the personal information search unit operates when the usage rate exceeds the predetermined threshold value. And a start control means for stopping
The personal information management system according to claim 1, wherein the personal information management system is a personal information management system. Each of the plurality of clients
Input / output monitoring means for monitoring data input / output operations in the storage unit of each client;
A start control means for starting the personal information search means when the input / output monitoring means detects the occurrence of the input / output operation;
The personal information management system according to claim 1, wherein the personal information management system is a personal information management system. When the characteristic information or the characteristic character string related to a plurality of types of information is present in the data aggregate, the personal information search means may include the characteristic character or the characteristic character related to one type of information in the data aggregate. Each client is operated so as to weight the counting result so that the determination value is larger than the case where the characteristic character string exists.
The personal information management system according to claim 1, wherein the personal information management system is a personal information management system. The personal information management server further comprises personal information management means for managing personal information files in the plurality of clients based on the search results received by the collection means;
The personal information management system according to claim 1, wherein the personal information management system is a personal information management system. The personal information management means manages the data aggregate searched as a personal information file by the personal information search means,
Each of the plurality of clients monitors the data aggregate retrieved as a personal information file by the personal information retrieval means, and when access to the data aggregate occurs, the transmission means informs that fact. It further comprises access monitoring means for sending to the management server,
The personal information management system according to claim 9. The personal information managing means manages the data aggregate according to the determination value for each data aggregate included in the search result;
The personal information management system according to claim 9 or 10, characterized in that The personal information management means notifies warning information to a user of the data aggregate according to the determination value for each data aggregate included in the search result.
12. The personal information management system according to claim 11. The personal information management means forcibly collects the data aggregate from a client storing the data aggregate according to the determination value for each data aggregate included in the search result.
13. The personal information management system according to claim 11 or 12, wherein the personal information management system is a personal information management system. Position information in a period when the client is not in an operable state by including a secondary battery that can be charged by an IC tag and a built-in power generation device, and position information acquisition means that receives power supply from the secondary battery and acquires position information. A plurality of clients having a function of acquiring position information by receiving power from a secondary battery, and an IC tag reader and IC tag writer arranged in the client installation space communicate with each other via a network. A personal information management server that is connected to manage the personal information files in the plurality of clients,
Installation means for installing a personal information search program that causes each client to perform self-search of personal information via the network;
A collection means for receiving the result of the self-search performed by each client via the network and storing the result in a database;
The personal information search program causes each client to realize a personal information search function for specifying and searching a personal information file from data in the storage unit of each client, and a data aggregate included in the data Each name, date of birth, address, residence, telephone number, e-mail address, title, personal identification as a character or character string that appears characteristically in the data or character string and personal information included in the data aggregate Collating with at least one of the information, counting the number of times the feature character or the feature character string appears in the data aggregate, and based on the counting result, the feature character or the feature A determination value that increases as the appearance rate of the character string increases is calculated, and when the determination value exceeds a predetermined threshold, the data set There are those to be executed by the client to determine that the personal information file,
If it is determined that the data aggregate is a personal information file, an instruction is given to the IC tag writer to write the determination result to the IC tag writer.
When the client determined to have a personal information file passes through the vicinity of the IC tag reader, acquires position information from the IC tag via the IC tag reader;
A personal information management server characterized by that. Position information in a period when the client is not in an operable state by including a secondary battery that can be charged by an IC tag and a built-in power generation device, and position information acquisition means that receives power supply from the secondary battery and acquires position information. A plurality of clients having a function of acquiring position information by receiving power from a secondary battery, and an IC tag reader and IC tag writer arranged in the client installation space communicate with each other via a network. A program that allows a computer to function as a personal information management server that is connected to each other and manages personal information files in the plurality of clients,
Each client includes a personal information search program for executing a self-search of personal information, and installation means for installing the personal information search program on each client via the network, and each network via the network Receiving the results of the self-search performed on the client and making the computer function as a collecting means for storing in the database,
The personal information retrieval program installed in each client by the installation means causes each client to implement a personal information retrieval function for identifying and retrieving a personal information file from data in the storage unit of each client. And
For each data aggregate included in the data, characters, character strings included in the data aggregate, and characters or character strings that appear characteristically in personal information, such as name, date of birth, address, residence, telephone number, A counting step of collating with at least one of an e-mail address, title, and personal identification information, and counting the number of times the feature character or the feature character string appears in the data aggregate; and the counting step In the determination step, a determination value that increases as the appearance rate of the characteristic character or the characteristic character string increases is determined, and the data aggregate is a personal information file when the determination value exceeds a predetermined threshold value. Is executed by the client,
When it is determined that the data aggregate is a personal information file, an instruction to write the determination result to the IC tag is given to an IC tag writer.
When the client determined to have a personal information file passes through the vicinity of the IC tag reader, acquires position information from the IC tag via the IC tag reader;
A personal information management server program characterized by the above.

Images