JP5533291B2 - Privacy protection device, privacy protection method and program - Google Patents

Description

  The present invention relates to a privacy protection device, a privacy protection method, and a program. More specifically, the present invention relates to a privacy protection device, a privacy protection method, and a program thereof that are devices for managing information that should protect privacy.

  Management of personal information has become an important issue today. As a background to this, an environment where personal information and life log information, which is a record of actions, is registered and released on multiple Internet sites, and an unspecified number of people can refer to the information, has become popular as a social network. ing. For this reason, there are cases where a lot of information about individuals exists on the Internet.

  In Patent Document 1, when providing personal information to the user, the personal information provider is allowed to flexibly control how to use the personal information, and in particular, the information is passed in a form that can identify an individual. In addition, a personal information management device that allows only statistical use of personal information is disclosed. The technology described in Patent Document 1 divides personal information related to a personal information provider who wants to provide personal information to others into partial personal information that cannot be associated with a specific individual alone and does not make sense. In addition, the information is registered in the personal information management center, and the relationship between them is held only by the terminal of the personal information provider, so that the personal information management center cannot grasp the privacy of the personal information provider. Personal information users are provided with a set of partial personal information identifiers registered in the personal information management center and personal information acquisition permission conditions, and personal information is provided only when the acquisition permission conditions are met. In this way, the personal information is not leaked.

  Patent Document 2 discloses a personal information registrant and a referrer, an apparatus for managing personal information, and a personal information management method for managing personal information without placing a burden on the operator. In the personal information management method of Patent Document 2, the personal information management server receives from the registrant's terminal in advance a reference person to whom the registrant permits acquisition of personal information and stores it in the entry table. When there is an inquiry from, a registrant who is permitted to acquire personal information is identified by referring to an entry table, and only the personal information is transmitted.

  Patent Document 3 discloses an information management system capable of easily confirming to which information reference individual information is disclosed. The information management system described in Patent Literature 3 determines, based on the confidentiality of the information, the disclosure possible range that is a set of information referers who may disclose the information, and Based on the usefulness of the information, a disclosure recommendation range that is a set of information referers who should refer to the information is determined. Then, a protective treatment effective range that is a set of information referees who can refer to information on which the protective treatment has been performed is determined, a disclosure possible range, a recommended disclosure range, and a protective treatment effective range are compared. In addition, by determining a part belonging to only one range, it is possible to easily confirm to which information reference person each information is disclosed.

  Patent Document 4 discloses an attribute combination security device that can flexibly perform attribute combination security in a relational database. The apparatus combines attribute security means for setting the security of each attribute and a plurality of attribute combinations in a database representing a plurality of attributes in a tabular format, and searches the value of the combined data to analyze the combined data. Attribute combination transition analysis means, and attribute combination security means for setting security for a plurality of attribute combinations based on the analysis result of the combination data.

JP 2001-265771 A JP 2002-366551 A JP 2005-141568 A Japanese Patent Application Laid-Open No. 07-253989

  In the invention of Patent Document 1, when it is intended to publish personal information restricted to a plurality of Internet sites such as a social network, the information being published is approved by the referenced person himself / herself. Since it is information, provision of the information is permitted, but there is a possibility that the identification of individuals is narrowed down to a range not desired by combining the information permitted to be disclosed.

  Since the inventions of Patent Documents 2 and 3 only limit the disclosure range of individual referers and information, by integrating a plurality of personal information and life log information, the person who referred to the information wants to make it public It is not possible to prevent the identification of individuals from being narrowed to the extent that they do not think.

  Since the invention of Patent Document 4 determines whether or not to disclose information with a probability that an accurate value of an attribute is estimated by a combination of attributes, the intention of whether or not to disclose the information may not be accurately reflected. There is sex.

  The present invention has been made in view of the circumstances as described above. A plurality of personal information and life log information related to the referenced person referred to by the referrer are integrated, and the individual is considered not to be disclosed by the referred person. The purpose is to prevent the identification of

In order to achieve the above object, a privacy protection device according to the first aspect of the present invention provides:
Public information acquisition means for acquiring public information permitted to be disclosed by the referenced person;
Public information storage means for storing the public information;
Refusal information acquisition means for acquiring refusal information indicating a combination of the public information that the referenceee rejects publishing;
Refusal information storage means for storing the refusal information;
A disclosure request acquisition means for acquiring a disclosure request indicating the public information requested by a referrer;
Reference information storage means for associating the identification information for identifying the referr who made the disclosure request with the public information and storing it as reference information when the disclosure request is acquired;
Determination means for determining whether or not a combination of the public information included in the reference information and the public information indicated by the disclosure request is included in the rejection information;
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control means for reading out from the public information storage means and transmitting it to the referrer;
It is characterized by providing.

In order to achieve the above object, the privacy protection method according to the second aspect of the present invention includes:
A privacy protection method performed by a privacy protection device that controls the disclosure of personal information on a network,
A public information acquisition step in which the privacy protection device acquires the public information permitted to be disclosed by the referenced person;
A refusal information acquisition step in which the privacy protection device acquires refusal information indicating a combination of the public information that the referenced person refuses to disclose;
A disclosure request acquisition step in which the privacy protection device acquires a disclosure request indicating the public information that a referrer requests disclosure;
Upon acquiring the disclosure request, reference information in association with the public information identification information identifying the reference who performed the disclosure request, the privacy protection device is stored in the reference information storage unit as reference information A memory step;
Wherein said public information which the reference information storage means is included in said reference information stored, the combination of the public information indicated by the disclosure request, whether rejection information storage means included in the rejection information to be stored A determination step that the privacy protection device determines;
When it is determined that it is included in the refusal information, the privacy protection device prohibits transmission of the public information indicated by the disclosure request to the reference, and when it is determined that it is not included in the refusal information, the disclosure request Information disclosure control step of reading out the public information indicated by the public information storage means, and transmitting the privacy protection device to the reference,
It is characterized by providing.

A program according to the third aspect of the present invention is stored in a computer.
A public information acquisition step for acquiring public information permitted to be disclosed by the referenced person;
A refusal information acquisition step of acquiring refusal information indicating a combination of the public information that the referenced person rejects publishing;
A disclosure request acquisition step of acquiring a disclosure request indicating the public information that a referrer is requesting disclosure;
A reference information storage step of associating identification information for identifying the referr who has made the disclosure request with the public information and storing the information as reference information in the reference information storage unit when the disclosure request is acquired;
It is determined whether the combination of the public information included in the reference information stored in the reference information storage unit and the public information indicated by the disclosure request is included in the rejection information stored in the rejection information storage unit. A determination step to:
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control step of reading out from the public information storage means and transmitting to the referrer;
Is executed.

  According to the present invention, by integrating a plurality of personal information and life log information related to a referenced person referred to by a reference person, it is possible to prevent the reference person from developing into information that the reference person does not want to disclose.

It is a block diagram which shows the structural example of the privacy protection system which concerns on Embodiment 1 of this invention. 6 is a diagram illustrating an example of tag information in the first embodiment. FIG. 6 is a diagram illustrating an example of rejection information in the first embodiment. FIG. 5 is a diagram illustrating an example of reference information in Embodiment 1. FIG. 5 is a diagram illustrating an example of reference information update in Embodiment 1. FIG. 6 is a flowchart illustrating an example of privacy protection operation according to the first embodiment. 10 is a flowchart illustrating an example of an operation for privacy protection according to the second embodiment. It is a block diagram which shows an example of the hardware constitutions of the privacy protection apparatus which concerns on this invention.

  In the present invention, the public information is information that is permitted to be disclosed by the referee, and is referred to a plurality of websites (for example, SNS, blog, etc.) managed by the server to which the privacy protection device of the present invention is applied. Information entered by the person. Tag information is information that directly represents the content of public information, and is composed of tags such as a page ID of a web page on which the public information is described, a date of information, and a person tag indicating the type of the public information. The Rejected information indicates a combination of public information tags that the referenced person refuses to publish, and a refused tag that indicates the type of information that the referenced person refuses to publish in the referenced person ID that identifies the referenced person Etc. are associated. That is, the referenced person permits the disclosure of each piece of public information included in the rejection information, but refuses to refer to the same person in combination.

  The disclosure request is the disclosure of the public information described in the web page that is transmitted to the privacy protection device 1 when the reference person browses one web page of the plurality of websites. It is a required signal. The reference information is information that associates a tag of public information described on a web page browsed by a referrer with a referrer ID that identifies the referrer, and is a so-called reference history.

  EMBODIMENT OF THE INVENTION Below, the form for inventing is demonstrated in detail with reference to drawings. In the drawings, the same or corresponding parts are denoted by the same reference numerals. The present invention targets a plurality of websites logically managed by the same server. For example, there is a portal site having a plurality of websites that handle information related to various individuals, such as an SNS, a blog, a photo album, a calendar, and an address book.

(Embodiment 1)
FIG. 1 is a block diagram showing a configuration example of a privacy protection system according to Embodiment 1 of the present invention. The privacy protection system 100 includes a privacy protection device 1, a referred person terminal 6, and a reference person terminal 7. The privacy protection device 1 includes a public information acquisition unit 11, an information disclosure control unit 12, a public information storage unit 13, a tag information acquisition unit 14, a tag information storage unit 15, a rejection information acquisition unit 16, a rejection information storage unit 17, and a disclosure request. An acquisition unit 18, a reference information storage unit 19, and an information disclosure unit 20 are provided.

  The public information acquisition unit 11 acquires the public information input by the reference person to the reference person terminal 6 via the network 8. In addition, when the privacy protection apparatus 1 has previously stored public information permitted to be disclosed by the referred person in the public information storage unit 13, the public information acquisition unit 11 may not be included. For example, when the privacy protection device 1 is applied later to a server having a plurality of web pages, a storage unit that stores public information provided in the server is used as the public information storage unit 13.

  The information disclosure control unit 12 includes a public information acquisition unit 11, a public information storage unit 13, a tag information acquisition unit 14, a tag information storage unit 15, a rejection information acquisition unit 16, a rejection information storage unit 17, a disclosure request acquisition unit 18, and a reference. The information storage unit 19 and the information disclosure unit 20 are connected. The information disclosure control unit 12 stores the public information acquired by the public information acquisition unit 11 in the public information storage unit 13 and stores the tag information acquired by the tag information acquisition unit 14 in the tag information storage unit 15. In addition, the information disclosure control unit 12 stores the rejection information acquired by the rejection information acquisition unit 16 in the rejection information storage unit 17.

  Then, the information disclosure control unit 12 controls whether to disclose the public information indicated by the disclosure request based on the disclosure request acquired by the disclosure request acquisition unit 18 and the reference information stored in the reference information storage unit 19. When the information is disclosed, the information disclosure unit 20 transmits the public information to the reference terminal 7.

  The public information storage unit 13 stores public information associated with information for identifying a referenced person who has permitted publication.

  The tag information acquisition unit 14 acquires tag information composed of tags given to the public information by a referee who has permitted the disclosure of the public information. The referenced person may add a tag to the public information stored in the public information storage unit 13 or may add a tag when inputting the public information.

  The tag information storage unit 15 stores the tag information acquired by the tag information acquisition unit 14.

  The refusal information acquisition unit 16 does not want to be referred to by the same person entered by the reference person whose public information is stored in the public information storage unit 13 with a refusal tag and person ID of the same degree of abstraction as the person tag. Reject information that is a combination of public information tags is acquired.

  The refusal information storage unit 17 stores the refusal information acquired by the refusal information acquisition unit 16 in association with a referenced person ID that identifies the referred person.

  The disclosure request acquisition unit 18 acquires a disclosure request for public information described on a web page that a referee intends to browse.

  The reference information storage unit 19 associates the tag information associated with the public information referred to by the referrer in the past with the referrer ID for identifying the referrer and the referenced user ID for identifying the referee. Remember as.

  The information disclosure unit 20 transmits the public information received from the information disclosure control unit 12 to the reference terminal 7 via the network 8.

  The referee terminal 6 accepts input of public information, tag assignment, and rejection information input by the referee. The referee uses the referee terminal 6 to input each information by accessing a web page managed by the server having the privacy protection device 1. The referee terminal 6 transmits each piece of information input by the referee to the privacy protection device 1 via the network 8.

  The referrer terminal 7 receives an input of a disclosure request by a referrer. The referee uses the referrer terminal 7 to access a web page managed by the server having the privacy protection device 1. Thereby, the referrer terminal 7 transmits a disclosure request for public information described in the web page to the privacy protection device 1 via the network 8. The referrer terminal 7 displays the public information received from the privacy protection device 1 via the network 8. Actually, instead of displaying only the public information, the information on the entire web page including the public information transmitted by the information disclosure unit 20 is received and the web page is displayed.

  Note that the tag information storage unit 15 may store various tags representing personal information and life logs in advance. When the referenced person inputs the tag information or the refusal information, the information disclosure control unit 12 causes the information disclosure unit 20 to transmit a web page that presents these tags to the referenced person. It is good also as selecting and inputting the applicable thing from the inside.

  The tag information storage unit 15 may store tag conversion information in which various tags representing personal information and life logs are associated with predetermined keywords, file names, extensions, and the like. For example, a tag “address” is associated with the keyword “Tokyo”. Address information such as a friend's name and address may be used as a keyword. In addition, a tag represented by “YYYY / MM / DD” is associated with a tag “information time” and a keyword represented by “00:00:00” is associated with a tag “information time”. On the other hand, for example, when the extension is jpg or gif, the tag “image” is associated. Furthermore, if the file name includes a person name “(person name) .jpg”, the person of (person name) may be identified and associated with a tag “face photo”. In this case, the tag information acquisition unit 14 extracts a keyword or the like included in the public information acquired by the public information acquisition unit 11, and acquires a tag corresponding to the keyword or the like based on the tag conversion information. The information disclosure control unit 12 generates tag information based on the tag acquired by the tag information acquisition unit 14 and stores the tag information in the tag information storage unit 15.

  FIG. 2 is a diagram illustrating an example of tag information in the first embodiment. First, it is assumed that the referred person P1 describes his / her diary on the web page W1 through the referred person terminal 6. In the diary, it is assumed that the place visited when the referee P1 went on a trip with the friend P2 on February 13, 2010. In addition, it is assumed that the person to be referred P1 described the photograph when traveling on February 13, 2010 through the referenceee terminal 6 on another web page W2. Furthermore, it is assumed that the referee P1 describes the contents when he went out with P3 on February 15, 2010 through the referee terminal 6 as a diary on the web page W3.

  The public information storage unit 13 stores the diary and photos described above. The referee gives a tag to the public information through the referee terminal 6. The referee terminal 6 generates tag information based on the tag given by the referee and transmits the tag information to the privacy protection device 1. The tag information acquisition unit 14 acquires this tag information from the referenced user terminal 6 via the network 8. The information disclosure control unit 12 stores the tag information in the tag information storage unit 15. The tag information in the example of FIG. 2 includes a page ID for identifying a published page, a date and time of the information described, a person ID of a person related to the information described, and what kind of person It consists of a person tag indicating whether information is disclosed.

  The tag information in the example of FIG. 2 includes, for example, “2010/2/13 10:00:00 to 22: 00: 00: 00” on the web page with page ID “W1”. Public information of “name”, “existing location”, “purchased product”, and public information of “name” regarding the person with the person ID “P2” of “2010/2/13 10: 00: 22: 00 to 22:00” It is shown that and are described. In addition, the web page with the page ID “W2” includes a “face” relating to the person with the person ID “P1” with “2010/2/13 11:00:00 to 13: 00: 00: 00” and the person with the person ID “P2”. It shows that the public information of “Photo” is described. Furthermore, in the web page with the page ID “W3”, “2010/2/15 00: 00: 00-23: 59: 59” public information on the “name” and “hobby” regarding the person with the person ID “P1” And “2010/2/15 00:00:00 to 23:59:59” public information on the “face photo” relating to the person with the person ID “P3” is described.

  FIG. 3 is a diagram illustrating an example of rejection information in the first embodiment. When a person referred to refers to information disclosed by himself / herself to an unspecified reference person, the person to be referred to inputs information to be referred to by the person ID and the rejection tag to the person to be referred to terminal 6. The referenced person terminal 6 associates the person ID and the refusal tag input by the referenced person with the referenced person ID, and transmits it to the privacy protection device 1 as refusal information. The refusal information acquisition part 16 acquires this refusal information via the network 8 from the reference person terminal 6, and the refusal information storage part 17 memorize | stores the refusal information which the refusal information acquisition part 16 acquired for every referenceee. .

  The refusal information includes a person ID indicating a target person who does not want to be known and a refusal tag indicating a type of information which the person does not want to be known in combination. In the example of FIG. 3, the referred person P1 is a combination of “name”, “address”, and “face photo” of a person “P1” (person), and a combination of “name”, “age”, and “place of origin”. Refusing to be referenced. Further, the referred person P1 refuses to refer to the combination of “name” and “face photo” of the person “P2” and the combination of “name” and “age”. Further, the referred person P1 refuses to refer to the combination of the “name”, “address”, and “hobby” of the person “P3” and the combination of “name”, “sex”, and “age”.

  On the other hand, when the referrer S1 tries to browse the web page W1, the referrer terminal 7 transmits a disclosure request for requesting the public information of the web page W1 to the privacy protection device 1. When the disclosure request acquisition unit 18 acquires the disclosure request, the information disclosure control unit 12 first makes an inquiry to the tag information storage unit 15 and receives tag information corresponding to the web page W1. As shown in FIG. 2, since information on P1 and P2 is described in the web page W1, the information disclosure control unit 12 reads the reference information of the reference person S1 from the reference information storage part 19, and the reference person S1 receives the reference information. It is determined whether or not there is reference information referred to for the reference person P1 and the referred person P2.

  FIG. 4 is a diagram illustrating an example of reference information in the first embodiment. The reference information storage unit 19 includes a reference ID for identifying a reference person, a referenced person ID indicating which person's information is referred to, and a person tag indicating what information is referred to. Reference information is stored. In the example of FIG. 4, the referrer S1 has the “name” and “age” of the referee P4, the “name”, “age”, and “address” of the referee P5, and the “name” of the referee P6. ”,“ Face photo ”,“ address ”, and“ sex ”,“ age ”of the referred person P7 are referred to in the past. When the referrer has never referred to the information related to the referred person in the past, the reference information storage unit 19 indicates that there is no information referred to in the past in response to the inquiry from the information disclosure control unit 12 return it.

  FIG. 5 is a diagram illustrating an example of updating reference information in the first embodiment. For example, when the disclosure request acquisition unit 18 acquires a disclosure request for the web page W1 by the referrer S1, the information disclosure control unit 12 first inquires the tag information storage unit 15 and receives tag information corresponding to the web page W1. As shown in FIG. 2, since information on P1 and P2 is described in the web page W1, the information disclosure control unit 12 reads the reference information of the reference person S1 from the reference information storage part 19, and the reference person S1 receives the reference information. It is determined whether or not there is reference information referred to for the reference person P1 and the referred person P2.

  As shown in FIG. 4, when there is no reference information that the referrer S1 has referred to the referee P1 and the referee P2, the information disclosure control unit 12 reads the public information of the web page W1 from the public information storage unit 13. The information disclosure unit 20 transmits the information to the referrer terminal 7. At this time, as shown in FIG. 5, the information disclosure control unit 12 refers to the reference information storage unit 19 for the information referred to by the referrer S1 through the web page W1, the referred person ID “P1”, the person tag “name”, “location” ”,“ Purchased product ”, the referred person ID“ P2 ”, and the person tag“ name ”, and the reference information of the reference person S1 is updated.

  On the other hand, for example, when the disclosure request acquisition unit 18 acquires a disclosure request for the web page W2 by the referrer S1, the information disclosure control unit 12 first makes an inquiry to the tag information storage unit 15 and tag information corresponding to the web page W2 Receive. As shown in FIG. 2, since the information regarding P1 and P2 is described in the web page W2, the information disclosure control unit 12 reads the reference information of the reference person S1 from the reference information storage part 19, and the reference person S1 It is determined whether there is reference information referred to the referenced person P1 and the referenced person P2.

  As shown in FIG. 5, when there is reference information that the reference person S1 refers to the reference person P1 and the reference person P2, the information disclosure control unit 12 reads the reference person P1 and the reference person P2 from the rejection information storage unit 17. Receive inquiries about rejection information. For example, as shown in FIG. 3, refusal information of the reference person P1 and the reference person P2 of the reference person P1 includes a combination of “name”, “address”, and “face photo” of P1, and “name” of P1. , “Age” and “Hometown”, P2 “Name” and “Face Photo”, and P2 “Name” and “Age”.

  The information disclosure control unit 12 uses a combination of the public information of P1 and P2 obtained by the referrer S1 browsing the web page W2 and the public information of P1 and P2 in the past reference information as a combination of these rejection information. It is determined whether or not. Here, since it is a combination of “name” and “face photo” which are the rejection information of P2, the information disclosure control unit 12 rejects the disclosure of the web page W2. At this time, the information disclosure control unit 12 may generate an output screen that displays that the publication is rejected, and cause the information disclosure unit 20 to transmit the output screen to the referrer terminal 7.

  FIG. 6 is a flowchart showing an example of the privacy protection operation according to the first embodiment. First, the referred person inputs public information to be disclosed on the website to the referred person terminal 6. The referee terminal 6 transmits this public information to the privacy protection device 1 via the network 8. The public information acquisition unit 11 receives the public information (step S11), and the information disclosure control unit 12 stores the public information in the public information storage unit 13 in association with the referred person ID.

  In addition, the referred person gives a tag to the public information input by himself / herself. The referee terminal 6 transmits tag information to the privacy protection device 1 via the network 8. The tag information acquisition unit 14 receives the tag information (step S12), and the information disclosure control unit 12 stores the tag information in the tag information storage unit 15. Further, the referenced person inputs the rejection information to the referenced person terminal 6. The referee terminal 6 transmits this rejection information to the privacy protection device 1 via the network 8. The rejection information acquisition unit 16 receives the rejection information (step S13), and the information disclosure control unit 12 stores the rejection information in the rejection information storage unit 17 in association with the referred person ID.

  Next, the referrer inputs a website to be referred to the referrer terminal 7. The referrer terminal 7 transmits a disclosure request for the public information described in this website to the privacy protection device 1 via the network 8. The disclosure request acquisition unit 18 receives the disclosure request (step S14), and the information disclosure control unit 12 inquires of the tag information storage unit 15 and reads the tag information corresponding to the web page (step S15). Then, the information disclosure control unit 12 identifies the target person of the public information described in the web page based on the tag information, and determines whether there is reference information that the reference person referred to in the past for the target person. (Step S16).

  When there is no reference information (step S16; NO), the information disclosure control unit 12 reads the public information from the public information storage unit 13, causes the information disclosure unit 20 to transmit the reference information to the reference terminal 7, and discloses the information to the reference person. (Step S20). Then, the information disclosure control unit 12 associates the person ID and the person tag corresponding to the public information referred to by the referrer with the referrer ID, and stores them in the reference information storage unit 19 as reference information (step S21). The process is terminated.

  On the other hand, when there is reference information (step S16; YES), the information disclosure control unit 12 reads the reference information from the reference information storage unit 19 (step S17), and receives the rejection information of the target person from the rejection information storage unit 17. Read (step S18). The information disclosure control unit 12 determines whether or not the combination of the past reference information of the referrer and the public information that the referrer newly requests for disclosure is included in the rejection information of the target person ( Step S19). If it is included in the refusal information (step S19; YES), the process is terminated. When the information is not included in the refusal information (step S19; NO), the information disclosure control unit 12 reads the public information from the public information storage unit 13 and causes the information disclosure unit 20 to transmit the information to the referer terminal 7 so that the referrer can read it. Release (step S20). Then, the information disclosure control unit 12 associates the person ID and person tag corresponding to the public information referred to by the referrer this time with the referrer ID, and additionally stores the referrer reference information to update the reference information. (Step S21), and the process is terminated.

(Embodiment 2)
Similar to the privacy protection system 100, the privacy protection system according to the second embodiment includes the privacy protection device 1, the referred person terminal 6, and the reference person terminal 7. In addition to the function of the information disclosure control unit 12 of the privacy protection device 1 according to the second embodiment, the information disclosure control unit 12 of the privacy protection device 1 according to the second embodiment includes the public information acquired by the public information acquisition unit 11, It is determined whether or not the combination with the public information stored in the public information storage unit 13 is included in the rejection information stored in the rejection information storage unit 17. When the information disclosure control unit 12 determines that the information is included in the refusal information, the information disclosure control unit 12 generates a warning screen and / or a warning sound and causes the information disclosure unit 20 to transmit the warning screen and / or the warning sound. The referee terminal 6 outputs the warning screen and / or warning sound received from the information disclosure unit 20.

  FIG. 7 is a flowchart showing an example of the privacy protection operation according to the second embodiment. This process starts with public information stored in advance in the public information storage unit 13 and rejection information stored in the rejection information storage unit 17. First, the referred person inputs public information to be newly published on the website into the referred person terminal 6. The referee terminal 6 transmits this public information to the privacy protection device 1 via the network 8. The public information acquisition unit 11 receives public information and tag information newly input by the referred person (step S21). The information disclosure control unit 12 reads the tag information of the referenced person stored in the tag information storage unit 15 (step S22). Further, the information disclosure control unit 12 reads the refusal information of the referenced person stored in the refusal information storage unit 17 (step S23). Then, the information disclosure control unit 12 determines whether or not the combination of the tag information received by the public information acquisition unit 11 and the read tag information is included in the read combination of rejection information (step S24). When included in the combination of refusal information (step S24; YES), the information disclosure control unit 12 generates a warning screen and / or a warning voice and causes the information disclosure unit 20 to transmit the warning screen and / or warning sound to the referenced person terminal 6, thereby A warning is notified to the referrer (step S25), and the process is terminated. When not included in the combination of refusal information (step S24; NO), the public information newly input by the referred person is additionally stored in the public information storage unit 13 (step S26).

  Next, the referrer inputs a website to be referred to the referrer terminal 7. The referrer terminal 7 transmits a disclosure request for this website to the privacy protection device 1 via the network 8. The disclosure request acquisition unit 18 receives the disclosure request (step S27), and the information disclosure control unit 12 inquires of the tag information storage unit 15 and reads the tag information corresponding to the web page (step S28). Then, the information disclosure control unit 12 determines whether or not there is reference information referred to by the referer in the past for the target person of the public information described in the web page (step S29).

  When there is no reference information (step S29; NO), the information disclosure control unit 12 reads the public information from the public information storage unit 13, causes the information disclosure unit 20 to transmit it to the reference terminal 7 and discloses it to the reference person. (Step S33). Then, the information disclosure control unit 12 associates the public information referred to by the referrer with the ID for identifying the referrer and stores it in the reference information storage unit 19 as reference information (step S34), and ends the process. To do.

  On the other hand, when there is reference information (step S29; YES), the information disclosure control unit 12 reads the reference information from the reference information storage unit 19 (step S30), and further describes it on the web page from the rejection information storage unit. The rejection information of the subject person of the public information being read is read (step S31). The information disclosure control unit 12 is configured such that a combination of past reference information of a referrer and public information that the referrer newly requests for disclosure is refusal information of a target person of the public information described in the web page. (Step S32). If it is included in the refusal information (step S32; YES), the process is terminated. When the information is not included in the refusal information (step S32; NO), the information disclosure control unit 12 reads the public information from the public information storage unit 13 and causes the information disclosure unit 20 to transmit the information to the referer terminal 7 so that the referrer can read it. Disclosed (step S33). Then, the information disclosure control unit 12 updates the reference information by additionally storing the public information referred to by the reference this time in the reference information of the reference (step S34), and ends the process.

  FIG. 8 is a block diagram showing an example of a hardware configuration of the privacy protection apparatus according to the present invention. As shown in FIG. 8, the privacy protection device 1 includes a control unit 61, a main storage unit 62, an external storage unit 63, an operation unit 64, a display unit 65, and a transmission / reception unit 66. The main storage unit 62, the external storage unit 63, the operation unit 64, the display unit 65, and the transmission / reception unit 66 are all connected to the control unit 61 via the internal bus 60.

  The control unit 61 includes a CPU (Central Processing Unit) and the like, and executes processing related to privacy protection according to a control program 70 stored in the external storage unit 63. The control unit 61 functions as the information disclosure control unit 12.

  The main storage unit 62 is composed of a RAM (Random-Access Memory) or the like, loads a control program 70 stored in the external storage unit 63, and is used as a work area of the control unit 61.

  The external storage unit 63 includes a non-volatile memory such as a flash memory, a hard disk, a DVD-RAM (Digital Versatile Disc Random-Access Memory), a DVD-RW (Digital Versatile Disc ReWritable), and the above processing is performed by the control unit 61. A control program 70 to be executed is stored in advance, and data stored in the control program 70 is supplied to the control unit 61 in accordance with an instruction from the control unit 61, and the data supplied from the control unit 61 is stored. The public information storage unit 13, the tag information storage unit 15, the rejection information storage unit 17, and the reference information storage unit 19 are configured in the external storage unit 63.

  The operation unit 64 includes a pointing device such as a keyboard and a mouse, and an interface device that connects the keyboard and the pointing device to the internal bus 60. When setting various tags representing personal information or life log in advance, or when inputting information that associates various tags representing personal information or life log with a predetermined keyword, file name, extension, etc. An instruction is supplied to the control unit 61 via the unit 64.

  The display unit 65 is composed of a CRT (Cathode Ray Tube) or LCD (Liquid Crystal Display) or the like. When various tags representing personal information and a life log are set in advance, a predetermined keyword, a file name, an extension, etc. When inputting information associated with various tags representing personal information and life log, an operation screen is displayed. The display unit 25 may display the search result.

  The transmission / reception unit 66 includes a network termination device or a wireless communication device connected to the network, and a serial interface or a LAN (Local Area Network) interface connected thereto. When the privacy protection device 1 and the referenced terminal 6 and the reference terminal 7 are connected to the network, the transmission / reception unit 66 connects to the network via the network. The public information acquisition unit 11, tag information acquisition unit 14, rejection information acquisition unit 16, disclosure request acquisition unit 18, and information disclosure unit 20 are configured in a transmission / reception unit 66.

  In addition, the hardware configuration and the flowchart described above are merely examples, and can be arbitrarily changed and modified.

  A central part that performs control processing including the control unit 61, the main storage unit 62, the external storage unit 63, the operation unit 64, the internal bus 60, and the like uses a normal computer system, not a dedicated system. It is feasible. For example, a computer program for executing the above operation is stored and distributed in a computer-readable recording medium (flexible disk, CD-ROM, DVD-ROM, etc.), and the computer program is installed in the computer. Thus, the privacy protection device 1 that executes the above-described processing may be configured. Alternatively, the privacy protection device 1 may be configured by storing the computer program in a storage device included in a server device on a communication network such as the Internet and downloading it by a normal computer system.

  Further, when the function of the privacy protection device 1 is realized by sharing of an OS (operating system) and an application program, or by cooperation between the OS and the application program, only the application program portion is stored in a recording medium or a storage device. May be.

  It is also possible to superimpose a computer program on a carrier wave and distribute it via a communication network. For example, the computer program may be posted on a bulletin board (BBS: Bulletin Board System) on a communication network, and the computer program may be distributed via the network. The computer program may be started and executed in the same manner as other application programs under the control of the OS, so that the above-described processing may be executed.

  A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
Public information acquisition means for acquiring public information permitted to be disclosed by the referenced person;
Public information storage means for storing the public information;
Refusal information acquisition means for acquiring refusal information indicating a combination of the public information that the referenceee rejects publishing;
Refusal information storage means for storing the refusal information;
A disclosure request acquisition means for acquiring a disclosure request indicating the public information requested by a referrer;
Reference information storage means for associating the identification information for identifying the referr who made the disclosure request with the public information and storing it as reference information when the disclosure request is acquired;
Determination means for determining whether or not a combination of the public information included in the reference information and the public information indicated by the disclosure request is included in the rejection information;
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control means for reading out from the public information storage means and transmitting it to the referrer;
A privacy protection device comprising:

(Appendix 2)
Tag information acquisition means for acquiring tag information composed of tags indicating the contents of the public information, which is given to the public information by the referenced person;
Tag information storage means for storing the tag information,
The rejection information is a combination of the tags,
Based on the tag information stored in the tag information storage unit, the determination unit includes a tag attached to the public information included in the reference information and a tag attached to the public information indicated by the disclosure request. The privacy protection apparatus according to appendix 1, wherein it is determined whether or not a combination is included in the rejection information.

(Appendix 3)
Extraction means for extracting keywords included in the public information;
A granting unit for giving a tag to the public information corresponding to the keyword and indicating a content of the public information;
Tag information storage means for storing the tag information,
The rejection information is a combination of the tags,
Based on the tag information stored in the tag information storage unit, the determination unit includes a tag attached to the public information included in the reference information and a tag attached to the public information indicated by the disclosure request. The privacy protection apparatus according to appendix 1, wherein it is determined whether or not a combination is included in the rejection information.

(Appendix 4)
It is determined whether the combination of the public information acquired by the public information acquisition unit and the public information stored by the public information storage unit is included in the rejection information. The privacy protection device according to any one of supplementary notes 1 to 3, further comprising notification means for notifying the user.

(Appendix 5)
A privacy protection method performed by a privacy protection device that controls the disclosure of personal information on a network,
A public information acquisition step for acquiring public information permitted to be disclosed by the referenced person;
A refusal information acquisition step of acquiring refusal information indicating a combination of the public information that the referenced person rejects publishing;
A disclosure request acquisition step of acquiring a disclosure request indicating the public information that a referrer is requesting disclosure;
A reference information storage step of associating identification information for identifying the referr who has made the disclosure request with the public information and storing the information as reference information in the reference information storage unit when the disclosure request is acquired;
It is determined whether the combination of the public information included in the reference information stored in the reference information storage unit and the public information indicated by the disclosure request is included in the rejection information stored in the rejection information storage unit. A determination step to:
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control step of reading out from the public information storage means and transmitting to the referrer;
A privacy protection method comprising:

(Appendix 6)
A tag information obtaining step of obtaining tag information composed of tags indicating the contents of the public information, which is given to the public information by the referenced person,
The rejection information is a combination of the tags,
The determination step includes a tag attached to the public information included in the reference information and the disclosure indicated by the disclosure request based on tag information stored in association with the public information by the tag information storage unit. The privacy protection method according to appendix 5, wherein it is determined whether or not a combination with a tag attached to information is included in the rejection information.

(Appendix 7)
An extraction step of extracting keywords included in the public information;
Generating a tag information corresponding to the keyword and indicating a tag indicating the content of the public information in correspondence with the public information; and
The rejection information is a combination of the tags,
The determination step includes a tag attached to the public information included in the reference information and the disclosure indicated by the disclosure request based on tag information stored in association with the public information by the tag information storage unit. The privacy protection method according to appendix 5, wherein it is determined whether or not a combination with a tag attached to information is included in the rejection information.

(Appendix 8)
It is determined whether or not a combination of the public information acquired in the public information acquisition step and the public information stored in the public information storage is included in the refusal information. The privacy protection method according to any one of appendices 5 to 7, further comprising a notifying step for notifying.

(Appendix 9)
On the computer,
A public information acquisition step for acquiring public information permitted to be disclosed by the referenced person;
A refusal information acquisition step of acquiring refusal information indicating a combination of the public information that the referenced person rejects publishing;
A disclosure request acquisition step of acquiring a disclosure request indicating the public information that a referrer is requesting disclosure;
A reference information storage step of associating identification information for identifying the referr who has made the disclosure request with the public information and storing the information as reference information in the reference information storage unit when the disclosure request is acquired;
It is determined whether the combination of the public information included in the reference information stored in the reference information storage unit and the public information indicated by the disclosure request is included in the rejection information stored in the rejection information storage unit. A determination step to:
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control step of reading out from the public information storage means and transmitting to the referrer;
A program characterized by having executed.

DESCRIPTION OF SYMBOLS 1 Privacy protection apparatus 6 Referee terminal 7 Referrer terminal 8 Network 11 Public information acquisition part 12 Information disclosure control part 13 Public information storage part 14 Tag information acquisition part 15 Tag information storage part 16 Rejection information acquisition part 17 Rejection information storage part 18 Disclosure Request Acquisition Unit 19 Reference Information Storage Unit 20 Information Disclosure Unit 70 Control Program 61 Control Unit 62 Main Storage Unit 63 External Storage Unit 64 Operation Unit 65 Display Unit 66 Transmitting / Receiving Unit 100 Privacy Protection System

Claims (9)

Public information acquisition means for acquiring public information permitted to be disclosed by the referenced person;
Public information storage means for storing the public information;
Refusal information acquisition means for acquiring refusal information indicating a combination of the public information that the referenceee rejects publishing;
Refusal information storage means for storing the refusal information;
A disclosure request acquisition means for acquiring a disclosure request indicating the public information requested by a referrer;
Reference information storage means for associating the identification information for identifying the referr who made the disclosure request with the public information and storing it as reference information when the disclosure request is acquired;
Determination means for determining whether or not a combination of the public information included in the reference information and the public information indicated by the disclosure request is included in the rejection information;
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control means for reading out from the public information storage means and transmitting it to the referrer;
A privacy protection device comprising: Tag information acquisition means for acquiring tag information composed of tags indicating the contents of the public information, which is given to the public information by the referenced person;
Tag information storage means for storing the tag information,
The rejection information is a combination of the tags,
Based on the tag information stored in the tag information storage unit, the determination unit includes a tag attached to the public information included in the reference information and a tag attached to the public information indicated by the disclosure request. The privacy protection device according to claim 1, wherein it is determined whether or not a combination is included in the rejection information. Extraction means for extracting keywords included in the public information;
A granting unit for giving a tag to the public information corresponding to the keyword and indicating a content of the public information;
Tag information storage means for storing the tag information,
The rejection information is a combination of the tags,
Based on the tag information stored in the tag information storage unit, the determination unit includes a tag attached to the public information included in the reference information and a tag attached to the public information indicated by the disclosure request. The privacy protection device according to claim 1, wherein it is determined whether or not a combination is included in the rejection information.   It is determined whether the combination of the public information acquired by the public information acquisition unit and the public information stored by the public information storage unit is included in the rejection information. The privacy protection device according to any one of claims 1 to 3, further comprising notification means for notifying the user. A privacy protection method performed by a privacy protection device that controls the disclosure of personal information on a network,
A public information acquisition step in which the privacy protection device acquires the public information permitted to be disclosed by the referenced person;
A refusal information acquisition step in which the privacy protection device acquires refusal information indicating a combination of the public information that the referenced person refuses to disclose;
A disclosure request acquisition step in which the privacy protection device acquires a disclosure request indicating the public information that a referrer requests disclosure;
Upon acquiring the disclosure request, reference information in association with the public information identification information identifying the reference who performed the disclosure request, the privacy protection device is stored in the reference information storage unit as reference information A memory step;
Wherein said public information which the reference information storage means is included in said reference information stored, the combination of the public information indicated by the disclosure request, whether rejection information storage means included in the rejection information to be stored A determination step that the privacy protection device determines;
When it is determined that it is included in the refusal information, the privacy protection device prohibits transmission of the public information indicated by the disclosure request to the reference, and when it is determined that it is not included in the refusal information, the disclosure request Information disclosure control step of reading out the public information indicated by the public information storage means, and transmitting the privacy protection device to the reference,
A privacy protection method comprising: The privacy protection device further includes a tag information acquisition step in which the privacy protection device acquires tag information composed of tags indicating the contents of the public information, which the referenceee gives to the public information,
The rejection information is a combination of the tags,
The determination step includes a tag attached to the public information included in the reference information and the disclosure indicated by the disclosure request based on tag information stored in association with the public information by the tag information storage unit. 6. The privacy protection method according to claim 5, wherein it is determined whether or not a combination with a tag attached to information is included in the rejection information. An extraction step in which the privacy protection device extracts keywords included in the public information;
The privacy protection device further generating a tag information corresponding to the keyword and indicating a tag indicating the content of the public information in association with the public information, and
The rejection information is a combination of the tags,
The determination step includes a tag attached to the public information included in the reference information and the disclosure indicated by the disclosure request based on tag information stored in association with the public information by the tag information storage unit. 6. The privacy protection method according to claim 5, wherein it is determined whether or not a combination with a tag attached to information is included in the rejection information. It is determined whether or not a combination of the public information acquired in the public information acquisition step and the public information stored in the public information storage means is included in the rejection information. The privacy protection method according to claim 5, further comprising a notifying step for notifying the privacy protection device . On the computer,
A public information acquisition step for acquiring public information permitted to be disclosed by the referenced person;
A refusal information acquisition step of acquiring refusal information indicating a combination of the public information that the referenced person rejects publishing;
A disclosure request acquisition step of acquiring a disclosure request indicating the public information that a referrer is requesting disclosure;
A reference information storage step of associating identification information for identifying the referr who has made the disclosure request with the public information and storing the information as reference information in the reference information storage unit when the disclosure request is acquired;
It is determined whether the combination of the public information included in the reference information stored in the reference information storage unit and the public information indicated by the disclosure request is included in the rejection information stored in the rejection information storage unit. A determination step to:
When it is determined that the information is included in the refusal information, transmission of the public information indicated by the disclosure request to the reference is prohibited, and when it is determined that the information is not included in the refusal information, the public information indicated by the disclosure request Information disclosure control step of reading out from the public information storage means and transmitting to the referrer;
A program characterized by having executed.

Images