JP6420728B2 - Mask processing system, mask processing method, user terminal, and server - Google Patents

Description

  The present invention relates to a mask processing system, a mask processing method, a user terminal, and a server for performing mask processing on user data.

  There is a technique for acquiring and storing an operation history on a terminal used by a user (for example, Patent Document 1 and Non-Patent Document 1).

  Various data are used on the user terminal. For example, browsing history data when browsing a Web page is also collected. The collected web browsing history data may include information that the user does not want to disclose. For example, a character string related to personal information may be included. There is a system that performs a masking process to replace a character string related to personal information with another character string on the data collected by these user terminals (for example, Patent Document 2).

  In addition, there is a system that collects data related to a user using a proxy server on a network instead of a user terminal (for example, Patent Document 3).

JP 2005-174138 A JP 2012-113606 A JP 2014-96117 A

Akinori Tanaka, Kaoru Uchiyama, “PC Operation History Collection System“ Memory Retriever ””, NTT Technical Journal 2010.07, P12-15

  When collecting user-related data on the server, it is also necessary to manage information related to character strings to be masked, such as user personal information, on the server and perform masking processing when the corresponding character strings are collected. Become.

  In this case, when managing information related to the character string to be masked for each user on the server, strict management and operation against information leakage and theft is required, but the possibility of theft and leakage is completely eliminated. It is difficult to eliminate them.

  Therefore, it is required to enable mask processing while arranging the character string to be masked for each user on the server, while preventing the personal information of the user from being easily identified.

  The present invention has been made in view of the above circumstances, and an object thereof is to provide a mask processing system, a mask processing method, a user terminal, and a server that can appropriately mask information to be masked.

  In order to achieve the above object, the mask processing system of the present invention converts a mask target character string related to a user into a coordinate value on a mask character string space, and generates region information including the coordinate value as mask target region information. A mask target region information generation unit that performs transmission, and a mask target region information transmission unit that transmits the mask target region information generated by the mask target region information generation unit to a server, and the user terminal transmitted from the user terminal. The mask target region information receiving unit that receives mask target region information, the mask target region information database that stores the mask target region information received by the mask target region information receiving unit, the user transmitted from the user terminal or proxy server User data receiving unit for receiving user data relating to the mask area Based on the distribution, including a server comprising a mask processing unit for performing mask processing of a character string included in the user data to the received.

  A mask processing method of the present invention is a mask processing method in a mask processing system including a user terminal and a server, and the mask target area information generation unit of the user terminal displays a mask target character string related to a user on a mask character string space. The area information including the coordinate value is generated as mask target area information, and the mask target area information transmission unit of the user terminal generates the mask target generated by the mask target area information generation unit. The area information is transmitted to the server, and the mask target area information receiving unit of the server receives the mask target area information transmitted from the user terminal, and the received mask target area information is stored in the mask target area information database. Storing the user data related to the user by the user data transmission unit of the user terminal or the proxy server. The server user data reception unit receives the user data transmitted from the user terminal, and the server mask processing unit receives the received user data based on the mask target area information. The character string included in is masked.

  The user terminal of the present invention converts a mask target character string related to a user into a coordinate value on a mask character string space, and generates a mask target region information generation unit that generates region information including the coordinate value as mask target region information; A mask target region information transmitting unit that transmits the mask target region information generated by the mask target region information generating unit to a server that stores the mask target region information in a mask target region information database; and user data of the user A user data transmission unit that transmits to the server a masking process of a character string included in the user data based on the mask target area information.

  The server of the present invention includes a mask target region information receiving unit that receives mask target region information including coordinate values on a mask character string space obtained by converting a mask target character string related to a user, transmitted from a user terminal, and the mask target A mask target area database that stores the mask target area information received by the area information receiving unit, a user data receiving unit that receives user data related to the user transmitted from the user terminal or proxy server, and the mask target area information And a mask processing unit that performs mask processing of the character string included in the received user data.

  The mask processing unit of the present invention converts a character string included in the received user data into a coordinate value on the mask character string space, and the converted coordinate value is included in the mask target area information. In such a case, the character string included in the user data may be masked.

  The server of the present invention further includes a mask target character string candidate selection unit that selects a mask target character string candidate included in the mask target region information received by the mask target region information reception unit, and the mask target region information database Stores the mask target character string candidate selected by the mask target character string candidate selection unit, and the mask processing unit matches the character string included in the received user data with the mask target character string candidate. In this case, the character string included in the user data can be masked.

  The mask target area information generation unit of the present invention converts a mask target character string related to a user into a hash value as a coordinate value on a mask character string space using a hash function, and sets a predetermined bit at the head of the hash value. The mask target area information can be generated.

  The mask target area information generation unit of the present invention converts a mask target character string related to a user into a coordinate value on the mask character string space, and the coordinate value and the number of characters of the mask target character string, or the mask target The mask target area information can be generated based on a probability that a character string overlaps with a character string related to another user.

  As described above, according to the mask processing system, the mask processing method, the user terminal, and the server of the present invention, in the user terminal, the mask target character string related to the user is converted into the coordinate value on the mask character string space, and The area information including coordinate values is generated as mask target area information, the generated mask target area information is transmitted to the server, the mask target area information transmitted from the user terminal is stored in the server, and the mask target area information is stored. Based on the above, it is possible to appropriately mask the information to be masked by performing the masking process on the character string included in the received user data.

It is a block diagram which shows the structure of the mask processing system which concerns on the 1st Embodiment of this invention. It is a figure which shows the outline | summary of the production | generation of the mask object area | region information in a user terminal, and registration of the mask object area | region information in a server. It is a flowchart which shows the content of the mask object area | region information generation process routine in the user terminal of the mask processing system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the content of the mask object area | region information registration processing routine in the server of the mask processing system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the content of the user data collection process routine in the user terminal of the mask processing system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the content of the mask processing routine in the server of the mask processing system which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the structure of the mask processing system which concerns on the 2nd Embodiment of this invention. It is an image figure showing the mask object character string candidate on mask character string space. It is an image figure showing the process in which the mask object character string candidate is selected. It is a block diagram which shows the outline | summary of a process of the mask processing system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows the content of the mask object area | region information registration process routine in the server of the mask processing system which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows the content of the mask processing routine in the server of the mask processing system which concerns on the 2nd Embodiment of this invention. It is an image figure showing the outline | summary of the update process of a dictionary database. It is an image figure showing the process which expands or reduces the size of a mask object area | region according to the number of mask object character string candidates contained in mask object area information. It is a block diagram which shows the structure of the mask processing system which concerns on the 3rd Embodiment of this invention. It is a block diagram which shows the outline | summary of a process of the mask processing system which concerns on the 4th Embodiment of this invention. It is a block diagram which shows the outline | summary of a process of the mask processing system at the time of applying the 4th Embodiment of this invention to 2nd Embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

<Outline of Embodiment of the Present Invention>
The embodiment of the present invention relates to a technique for converting data on a user into a character string on a server.

  In the embodiment of the present invention, the user's mask target character string is converted into a coordinate value on the mask character string space, and the area information including the coordinate value is placed on the server as the mask target area information and received by the server. When the character string included in the user data is included in the mask target area, the character string is masked.

  In the embodiment of the present invention, a case where operation information on a user terminal, history information of a web page browsed by a user with a web browser, and the like are handled as user data will be described as an example.

[First Embodiment]
<System configuration>
As shown in FIG. 1, the mask processing system 100 according to the first embodiment of the present invention includes a user terminal 10 and a server 30. The user terminal 10 and the server 30 are connected via a network 11 such as the Internet.

[User terminal 10]
The user terminal 10 includes a mask target area information output unit 12 and a user data output unit 22.

  The mask target region information output unit 12 includes a mask information registration unit 14, a mask character string space coordinate calculation unit 16, a mask target region information generation unit 18, and a mask target region information transmission unit 20.

  The mask information registration unit 14 receives a mask target character string related to the user input by an input unit (not shown). The mask target character string is a character string that the user wants to mask. The mask information registration unit 14 receives a mask target character string that is a character string that the user wants to mask, and registers it in a memory (not shown).

  For example, a character string related to the user's personal information can be used as a mask target character string, and includes a name (first name / last name), an address, a telephone number, a credit card number, and the like.

  The mask character string space coordinate calculation unit 16 converts the mask target character string registered in the memory (not shown) by the mask information registration unit 14 into a coordinate value in the mask character string space. Specifically, the mask character string space coordinate calculation unit 16 calculates the coordinate value on the mask character string space for each item (for example, name, telephone number, address, etc.) registered as the mask target character string. To do.

  In the present embodiment, the mask character string space coordinate calculation unit 16 uses the hash function to convert the mask target character string registered by the mask information registration unit 14 as a coordinate value in the mask character string space with a certain bit length. Convert to hash value.

  For example, when the mask target character string is the user's first name (last name), the mask character string space coordinate calculation unit 16 calculates the coordinate value of the user name (last name) in the mask character string space. When the user's full name is “Riken” and MD5 (Message Digest Algorithm 5) is used as a hash function, a 32-bit hash value (3c9680c6fdb15c559b7219e77a25c9d2) is obtained by processing by the mask character string space coordinate calculation unit 16. can get. The hash value obtained by the processing by the mask character string space coordinate calculation unit 16 is handled as a coordinate value in the mask character string space.

  The mask target area information generation unit 18 generates area information including the coordinate values calculated by the mask character string space coordinate calculation unit 16 as mask target area information.

  Specifically, when a hash value having a constant bit length calculated by the mask character string space coordinate calculation unit 16 is handled as the coordinate value, the mask target area information generation unit 18 starts from the calculated hash value from the top. A part having a specific number of bits is generated as mask target area information.

  For example, the mask target area information generation unit 18 can determine the mask target area information by using 8 bits from the top of the coordinate values. For example, when a 32-bit hash value (3c9680c6fdb15c559b7219e77a25c9d2) is obtained as a coordinate value, 8-bit (3c9680c6) from the beginning is mask target area information.

  It should be noted that the hash functions used as the hash value calculation algorithm need to be aligned between the user terminal 10 and the server 30, but the MD5, SHA-1 (Secure Hash Algorithm), or the like may be used.

  FIG. 2 is an image diagram showing an outline of processing of the mask character string space coordinate calculation unit 16 and the mask target region information generation unit 18. As shown in FIG. 2, the mask character string space coordinate calculation unit 16 converts the mask target character string into coordinate values on the mask character string space. Then, the mask target area information generation unit 18 generates mask target area information based on the coordinate values obtained by the processing of the mask character string space coordinate calculation unit 16.

  The mask target area information transmission unit 20 transmits the mask target area information generated by the mask target area information generation unit 18 to the server 30.

  The user data output unit 22 includes a user data collection unit 24 and a user data transmission unit 26.

  The user data collection unit 24 collects browsing history information and the like of the user's Web page as user data related to the user.

  The user data transmission unit 26 transmits the user data collected by the user data collection unit 24 to the server 30.

[Server 30]
The server 30 includes a mask target area data acquisition unit 32 and a user data acquisition unit 40. The server 30 performs a mask process on the character string included in the user data transmitted from the user terminal 10 based on the mask target area information transmitted from the user terminal 10.

  The mask target region data acquisition unit 32 includes a mask target region information reception unit 34, a mask target region information registration unit 36, and a mask target region information database 38.

  The mask target area information receiving unit 34 receives the mask target area information transmitted from the user terminal 10. As described above, the mask target area information includes coordinate values on the mask character string space obtained by converting the mask target character string related to the user.

  The mask target region information registration unit 36 registers the mask target region information received by the mask target region information receiving unit 34 in the mask target region information database 38 as shown in FIG.

  The mask target area information database 38 stores the mask target area information registered by the mask target area information registration unit 36. Mask target area information is registered for each user. The mask target area information database 38 stores mask target area information so that the target user can be identified. By making the target user identifiable with respect to the mask target area information, the mask target area information for the user can be applied to the user data transmitted from the user terminal.

  The user data acquisition unit 40 includes a user data reception unit 42, a mask processing unit 44, a post-mask processing user data storage unit 46, and a masked user data database 48.

  The user data receiving unit 42 receives user data transmitted from the user terminal 10.

  Based on the mask target area information stored in the mask target area information database 38, the mask processing section 44 performs a mask process on the character string included in the user data received by the user data receiving section 42.

  Specifically, the mask processing unit 44 converts a character string included in the received user data into coordinate values in the mask character string space. When the converted coordinate value is included in the mask target area information of the user stored in the mask target area information database 38, the mask processing unit 44 includes the converted coordinate value in the user data corresponding to the converted coordinate value. The character string to be masked is processed.

  For example, a case will be described in which user data is browsing history information of a user's Web page, and information such as the user's name is included in the browsing history information. An example of a specific mask target character string detection method will be described below.

  For example, the mask processing unit 44 performs morphological analysis on the received user data, and decomposes the user data into morphemes.

  Next, the mask processing unit 44 calculates a hash value using a hash function for the character string decomposed by the morphological analysis.

  Next, the mask processing unit 44 compares the calculated hash value with the mask target area information of the user registered in the mask target area information database 38, and detects a character string included in the mask target area information. .

  Specifically, the mask processing unit 44, when the head part of the hash value of the character string decomposed by morphological analysis matches the mask target area information registered in the mask target area information database 38, It is determined as a mask target character string.

  For example, if the morphological analysis result includes the user's first name (last name) “Rieken”, the hash value (3c9680c6fdb15c559b7219e77a25c9d2) is obtained as the coordinate value as described above. If the user name (surname) “Tetsuken” is a character string to be masked, (3c9680c6) is registered in the mask target area information database 38 as mask target area information corresponding to “Tken”.

  Therefore, since the head part (3c9680c6) of the hash value of “Rieken” decomposed by the morphological analysis matches the mask target area information (3c9680c6) registered in the mask target area information database 38, the mask processing unit 44 The character string is determined as a mask target character string.

  And the mask process part 44 performs the process which converts into the other character string as a mask process about the said character string determined to be a mask object character string.

  In addition, when the structure of the document information of the user data is known in advance, the location including the mask target character string may be selected using the structure information.

  The post-mask processing user data storage unit 46 stores the user data subjected to the mask processing by the mask processing unit 44 in the masked user data database 48.

  The masked user data database 48 stores user data subjected to mask processing.

<Operation of mask processing system>
The mask processing system 100 executes generation processing and registration processing of mask target area information, user data collection processing, and mask processing.
First, generation processing and registration processing of mask target area information will be described.

<Mask target area information generation processing routine>
When the mask target character string is input to the user terminal 10, the mask target area information generation processing routine shown in FIG. The mask target area information generation processing routine is executed every time a mask target character string is input.

  First, in step S100, the mask information registration unit 14 receives a mask target character string.

  In step S102, the mask information registration unit 14 registers the mask target character string received in step S100 in a memory (not shown).

  In step S104, the mask character string space coordinate calculation unit 16 converts the mask target character string registered in step S102 into coordinate values in the mask character string space.

  In step S106, the mask target area information generation unit 18 generates area information including the coordinate values converted in step S104 as mask target area information.

  In step S108, the mask target area information transmission unit 20 transmits the mask target area information generated in step S106 to the server 30 and ends the mask target area information generation processing routine.

<Mask target area information registration processing routine>
When the mask target area information is transmitted from the user terminal 10 and the server 30 receives the mask target area information, the mask target area information registration processing routine shown in FIG. The mask target area information registration processing routine is executed every time mask target area information is received.

  In step S <b> 200, the mask target area information receiving unit 34 receives the mask target area information transmitted from the user terminal 10.

  In step S202, the mask target region information registration unit 36 registers the mask target region information received in step S200 in the mask target region information database 38, and ends the mask target region information registration processing routine.

  Next, user data collection processing and mask processing will be described.

<User data collection processing routine>
When the user is performing, for example, Web browsing behavior using the user terminal 10, the user data collection processing routine shown in FIG.

  In step S300, the user data collection unit 24 collects browsing history information of the user's Web page as user data related to the user.

  In step S <b> 302, the user data transmission unit 26 transmits the user data collected in step S <b> 300 to the server 30.

<Mask processing routine>
When user data is transmitted from the user terminal 10 and the server 30 receives the user data, the server 30 executes a mask processing routine shown in FIG. The mask processing routine is executed every time user data is received.

  In step S <b> 400, the user data receiving unit 42 receives user data transmitted from the user terminal 10.

  In step S402, the mask processing unit 44 converts each character string included in the user data received in step S400 to a coordinate value in the mask character string space.

  In step S <b> 404, the mask processing unit 44 refers to the mask target area information stored in the mask target area information database 38.

  In step S406, the mask processing unit 44 selects a target character string from each of the character strings included in the user data received in step S400.

  In step S408, the mask processing unit 44 determines whether or not the coordinate value obtained in step S402 for the target character string selected in step S406 is included in the mask target area information referenced in step S404. Determine. If the coordinate value is included in the mask target area information referenced in step S404, the process proceeds to step S410. On the other hand, if the coordinate value is not included in the mask target area information referenced in step S404, the process proceeds to step S412.

  In step S410, the mask processing unit 44 performs mask processing on the target character string selected in step S406.

  In step S412, it is determined whether or not the processing in steps S406 to S410 has been executed for all character strings included in the user data received in step S400. If there is a character string that has not been subjected to the processing in steps S406 to S410, the process returns to step S406, and the character string is selected as a target character string. On the other hand, when the processes in steps S406 to S410 have been executed for all the character strings included in the user data received in step S400, the mask processing routine is terminated.

  As described above, according to the mask processing system 100 according to the first embodiment of the present invention, in the user terminal, the mask target character string related to the user is converted into the coordinate value in the mask character string space, and the coordinate The area information including the value is generated as mask target area information, the generated mask target area information is transmitted to the server, the server stores the mask target area information transmitted from the user terminal, and the mask target area information is stored in the mask target area information. Based on this, by masking the character string included in the received user data, it is possible to appropriately mask the information to be masked.

  On the server, not the user's own personal information character string but the mask target area information is stored and used for the masking process, so that it is difficult to specify the user's own personal information easily and in a safer state. Mask processing on the server is possible.

[Second Embodiment]
Next, a second embodiment of the present invention will be described with reference to FIG. In addition, about the part which becomes the structure similar to 1st Embodiment, the same code | symbol is attached | subjected and description is abbreviate | omitted.

  In the second embodiment, a mask target character string candidate included in the mask target region information is selected, and the character string included in the received user data is included in the user data when it matches the mask target character string candidate. This is different from the first embodiment in that a character string mask process is performed.

  In the first embodiment, the mask target area information is stored in the mask target area information database 38. However, if there are limited character string candidates included in the mask target area, instead of the mask target area, The candidate character strings of mask target character strings included in the area may be stored in the database. In the second embodiment, an example will be described in which a server selects a character string as a mask target candidate after receiving mask target area information.

<System configuration>
As shown in FIG. 7, the mask processing system 200 according to the second embodiment of the present invention includes a user terminal 10 and a server 230. The user terminal 10 and the server 230 are connected via a network 11 such as the Internet.

[Server 230]
The server 230 includes a mask target area data acquisition unit 232 and a user data acquisition unit 240. The server 230 performs a mask process on the character string included in the user data transmitted from the user terminal 10 based on the mask target area information transmitted from the user terminal 10.

  The mask target region data acquisition unit 232 includes a mask target region information reception unit 34, a dictionary database 233, a mask target character string candidate selection unit 234, a mask target character string candidate registration unit 236, and a mask target region information database 238. It has.

  The dictionary database 233 stores dictionary data representing each combination of a plurality of candidate character strings and coordinate values in the mask character string space that have been converted in advance for the candidate character strings.

  FIG. 8 shows an image diagram when the dictionary database 233 is generated. Hereinafter, a case where a candidate character string is assumed in advance will be described as an example. In the example shown in FIG. 8, a last name is assumed. However, in the case of a character string that is not specified as a last name, one character of each mask target character string is converted into a coordinate value in the mask character string space. Also good.

  For example, when it is assumed that a full name (first name and last name) is transmitted from the user terminal 10, a last name dictionary in which a plurality of last names are stored or a name dictionary in which a plurality of names are stored is used in advance. Alternatively, each character string included in the personal name dictionary is converted into a coordinate value in the mask character string space, and each combination of the candidate character string and the coordinate value of the candidate character string is stored in the dictionary database 233 as dictionary data. Keep it.

  In addition, as a candidate character string that can be stored in the dictionary database in advance, if you collect name, e-mail address information, etc. at the time of user recruitment, it is possible to generate a dictionary database based on these It is. Further, since the input pattern is limited for telephone numbers and card numbers, dictionary data can be created in advance.

  In addition, examples of candidate character strings that are difficult to store in the dictionary database in advance include character strings by free description. In this case, each character included in the mask target character string may be converted character by character into a specific character code, and the converted character code may be converted into a coordinate value in the mask character string space.

  For example, the coordinate value when the character code is converted into the mask character string space is calculated in advance. Then, on the user terminal 10, based on the character code, each character included in the mask target character string is converted into a coordinate value in the mask character string space one by one to generate mask target region information. The user terminal 10 transmits the generated mask target area information to the server 230, and the server 230 selects a mask target character string candidate included in the corresponding area based on the received mask target area information.

  The mask target character string candidate selecting unit 234 selects mask target character string candidates included in the mask target region information received by the mask target region information receiving unit 34. Specifically, the mask target character string candidate selection unit 234 selects, from the dictionary data stored in the dictionary database 233, candidate character strings having coordinate values included in the mask target area information as mask target character string candidates.

  FIG. 9 shows an image diagram of processing of the mask target character string candidate selection unit 234. As illustrated in FIG. 9, the mask target character string candidate selection unit 234 selects a candidate character string having a coordinate value included in the mask target region information as a mask target character string candidate.

  The mask target character string candidate registration unit 236 registers the mask target character string candidate selected by the mask target character string candidate selection unit 234 in the mask target region information database 238.

  In the mask target area information database 238, mask target character string candidates selected by the mask target character string candidate selection unit 234 are stored. In the mask target area information database 238, mask target character string candidates are stored so that the target user can be identified.

  The user data acquisition unit 240 includes a user data reception unit 42, a mask processing unit 244, a post-mask processing user data storage unit 46, and a masked user data database 48.

  When the character string included in the user data received by the user data receiving unit 42 matches the mask target character string candidate stored in the mask target region information database 238, the mask processing unit 244 Performs mask processing for character strings.

  FIG. 10 shows a conceptual diagram of the operation of the mask processing system 200 according to the second embodiment.

In the user terminal 10, as shown in FIG. 10A, the mask target character string is converted into a coordinate value in the mask character string space. At this time, as a conversion method, for example, a hash function is used. Then, as shown in FIG. 10B, an area including the converted coordinates is set as mask target area information. At this time, the area includes coordinates converted into the area. In addition, it is desirable that the area can include coordinates other than the converted coordinates.
Then, the user terminal 10 transmits mask target area information to the server 230.

  In the server 230, as shown in FIG. 10C, mask target character string candidates included in the mask target area information transmitted from the user terminal 10 are selected. Then, as shown in FIG. 10D, based on the selected mask target character string candidate, mask processing is performed when the corresponding character string exists in the user data.

<Operation of mask processing system>
The mask processing system 200 executes mask target region information generation processing and registration processing, user data collection processing, and mask processing.
First, generation processing and registration processing of mask target area information will be described.

<Mask target area information generation processing routine>
When a mask target character string is input to the user terminal 10, the mask target area information generation processing routine shown in FIG. The mask target area information generation processing routine is executed every time a mask target character string is input.

<Mask target area information registration processing routine>
When the mask target area information is transmitted to the server 230 and the server 230 receives the mask target area information, the server 230 executes a mask target area information registration process routine shown in FIG. The mask target area information registration processing routine is executed every time mask target area information is received.

  In step S <b> 200, the mask target area information receiving unit 34 receives the mask target area information transmitted from the user terminal 10.

  In step S500, the mask target character string candidate selection unit 234 selects a mask target character string candidate included in the mask target area information received in step S200 from the dictionary data stored in the dictionary database 233.

  In step S502, the mask target character string candidate registration unit 236 registers the mask target character string candidate selected in step S400 in the mask target region information database 238, and ends the mask target region information registration processing routine.

  Next, user data collection processing and mask processing will be described.

<User data collection processing routine>
When the user is performing, for example, Web browsing behavior using the user terminal 10, the user data collection processing routine shown in FIG.

<Mask processing routine>
When user data is transmitted to the server 230 and the server 230 receives the user data, the server 230 executes a mask processing routine shown in FIG. The mask processing routine is executed every time user data is received.

  In step S <b> 400, the user data receiving unit 42 receives user data transmitted from the user terminal 10.

  In step S604, the mask processing unit 244 refers to the mask target character string candidates stored in the mask target region information database 238.

  In step S406, the mask processing unit 244 selects a target character string from each of the character strings included in the user data received in step S400.

  In step S608, the mask processing unit 244 determines whether the target character string selected in step S406 matches the mask target character string candidate referenced in step S604. If the target character string matches the mask target character string candidate referenced in step S604, the process advances to step S610. On the other hand, if the target character string does not match the mask target character string candidate referenced in step S604, the process advances to step S412.

  In step S610, the mask processing unit 244 performs mask processing on the target character string selected in step S406.

  In step S412, it is determined whether or not the processes in steps S406 to S610 have been executed for all character strings included in the user data received in step S400. If there is a character string for which the processes in steps S406 to S610 are not performed, the process returns to step S406, and the character string is selected as a target character string. On the other hand, when the processes in steps S406 to S610 have been executed for all the character strings included in the user data received in step S400, the mask processing routine is terminated.

  In addition, about the other structure and effect | action of the mask processing system 200 which concern on 2nd Embodiment, since it is the same as that of 1st Embodiment, description is abbreviate | omitted.

  As described above, according to the mask processing system 200 according to the second embodiment of the present invention, in the user terminal, the mask target character string related to the user is converted into the coordinate value in the mask character string space, and the coordinate Region information including a value is generated as mask target region information, the generated mask target region information is transmitted to the server, and the mask target character string candidate included in the mask target region information transmitted from the user terminal is determined in the server. By selecting and masking the character string included in the received user data based on the mask target character string candidate, the mask target information can be appropriately masked.

  In the second embodiment, when the mask target character string is not stored in the dictionary database 233, the dictionary database 233 may be updated.

For example, the server 230 transmits the dictionary data stored in the dictionary database 233 to the user terminal 10, and the user terminal 10 receives the dictionary data. Then, the user terminal 10 determines whether or not the mask target character string registered by the mask information registration unit 14 is included in the received dictionary data. When the mask target character string is not included in the dictionary data, the server 230 combines the coordinate value of the mask target character string, the mask target character string, the peripheral character string, and the coordinate value of the peripheral character string. Send to. Note that only the mask target character string that did not exist in the dictionary data and the coordinate value of the mask target character string may be transmitted to the server 230. Further, the peripheral character string and the coordinate value of the peripheral character string are By transmitting together, it becomes difficult to select the mask target character string that is the character string that the user wants to mask from the data transmitted to the server 230, and the personal information of the user cannot be easily identified.
On the server 230 side, the mask target character string, the coordinate value of the mask target character string, the peripheral character string, and the coordinate value of the peripheral character string transmitted from the user terminal 10 are added to the dictionary database 233.

  FIG. 13 shows an image diagram of the update process of the dictionary database 233. For example, as shown in FIG. 13, when a new mask target character string “Tuken” is registered, the coordinate value of “Tuken”, the mask target character string “Tuken”, and the surrounding character string “ The combination of “Yamada”, “Suzuki”, “Sato” and the coordinate values of the surrounding character strings “Yamada”, “Suzuki”, “Sato” is transmitted to the server 230. On the server 230 side, the coordinate value of “Tuken” transmitted from the user terminal 10, “Tuken”, the surrounding character strings “Yamada”, “Suzuki”, “Sato”, and the surrounding character strings “Yamada”, “Suzuki” The coordinate value of “Sato” is added to the dictionary database 233. On the server 230 side, only the unregistered mask target character string and the coordinate value of the mask target character string may be added to the dictionary database 233.

  In the second embodiment, the mask target area information may be generated by enlarging / reducing the size of the mask target area according to the dictionary data stored in the dictionary database 233.

  For example, a case where the user terminal 10 receives dictionary data transmitted from the server 230 will be described. A certain value is given as an initial value of information relating to the size of the mask target area. Thereafter, the mask target area may be enlarged / reduced according to the number of data of the dictionary data included in the range of the mask target area set as the initial value, and the result may be stored as mask target area information.

  FIG. 14 shows an image diagram when the size of the mask target area is enlarged / reduced according to the dictionary data. As shown in FIG. 14A, the user's mask target character string “Rieken” is converted into a coordinate value in the mask character string space. Then, as shown in FIG. 14B, the vicinity of the coordinate value of the mask target character string “Rieken” is checked, and the size is enlarged / reduced from the mask target area having the initial value. Specifically, when the dictionary data included in a certain range from the coordinate value of the user's mask target character string is small (sparse), the area size of the mask target area is enlarged so as to exceed a certain number. Also, when there are many (dense) dictionary data included in a certain range from the coordinate value of the user's mask target character string, the area size of the mask target region is reduced and converted to include only a certain number.

[Third Embodiment]
<System configuration>
Next, a third embodiment will be described with reference to FIG. In addition, about the part which becomes the structure similar to 1st Embodiment, the same code is attached and description is abbreviate | omitted.

  The third embodiment is different from the first or second embodiment in that user data is collected by a proxy server.

  In the first or second embodiment, the case where user data collected on a user terminal is transmitted to a server has been described as an example. However, user data can be collected by a proxy server. In the third embodiment, a case where user data is collected by a proxy server will be described.

<System configuration>
As shown in FIG. 15, the mask processing system 300 according to the third embodiment of the present invention includes a user terminal 310, a proxy server 321, and a server 30. The user terminal 310, the proxy server 321 and the server 30 are connected via a network 11 such as the Internet. The network 11 includes an internal network and an external network.

[User terminal 310]
The user terminal 310 includes a mask target area information output unit 12. In the user terminal 310, for example, when the user browses the Web, the Web is accessed via the proxy server 321.

  The mask target area information output unit 12 transmits the mask target area information generated by the mask target area information generation unit 18 to the server 30 via the proxy server 321 as in the first embodiment. The mask target region information output unit 12 includes a mask information registration unit 14, a mask character string space coordinate calculation unit 16, a mask target region information generation unit 18, and a mask target region information transmission unit 20.

[Proxy server 321]
The proxy server 321 includes a user data output unit 322. For example, when the user terminal accesses the Web via the proxy server 321, the proxy server 321 collects the user's Web browsing operation information as user data, and transmits the collected user data to the server 30.

  The user data output unit 322 includes a user data collection unit 324 and a user data transmission unit 326.

  For example, when the user terminal 310 accesses the Web via the proxy server 321, the user data collection unit 324 collects Web page browsing history information and the like as user data.

  The user data transmission unit 326 transmits the user data collected by the user data collection unit 324 to the server 30.

  Note that other configurations and operations of the mask processing system according to the third embodiment are the same as those of the first embodiment, and thus the description thereof is omitted.

  As described above, according to the mask processing system 300 according to the third embodiment of the present invention, in the user terminal, the mask target character string related to the user is converted into the coordinate value in the mask character string space, and the coordinate Region information including a value is generated as mask target region information, the generated mask target region information is transmitted to the server, and the mask target character string candidate included in the mask target region information transmitted from the proxy server is determined at the server. By selecting and masking the character string included in the received user data based on the mask target character string candidate, the mask target information can be appropriately masked.

  Note that the third embodiment of the present invention may be applied to the second embodiment.

[Fourth Embodiment]
<System configuration>
Next, a fourth embodiment will be described. Since the configuration of the mask processing system according to the fourth embodiment is the same as that of the first embodiment, the same reference numerals are given and description thereof is omitted.

  The fourth embodiment is different from the first to third embodiments in that the mask character string space is defined as a multidimensional vector space.

  FIG. 16 shows an outline of processing in a mask character string space assuming a multidimensional vector.

  As shown in FIG. 16, in the fourth embodiment, not only the hash value is obtained by using a hash function, but also the number of character strings of the mask target character string and the same character string as the character string are determined by other users. However, it is handled as a multidimensional vector using the specified probability value. Specifically, as shown below, the number of character strings of the mask target character string, the user group duplication probability representing the probability that the mask target character string overlaps with the character strings related to other users, etc. Treat as part.

(Number of character strings of mask target character string, hash value, user group duplication probability ...) → (X, Y, Z, α, β,...)

  For example, the user group duplication probability may indicate a probability that a user having the same mask target character string exists for every 100 people in the user group. In particular, for surnames, if statistical data regarding the same surname / the number of the same name is obtained, the probability of the same surname and the same name may be indicated.

  For example, as shown below, there are many surnames in Japan, but some surnames account for the majority of the population. Therefore, in order to consider the possibility that the user's last name overlaps, the user group overlap probability may be used. By using a value such as a user group overlap probability as an element of a multidimensional vector, it is possible to consider the bias.

For Sato, Tanaka, Yamada, etc., the user group overlap probability: Takatsuken ... For, etc., the user group overlap probability: Low

  For example, in the case of the first embodiment, different mask character strings may have the same mask area information. At this time, even if the number of character strings is a character string different from two characters or three characters, there is a possibility that they are selected as the same mask region, which increases unnecessary masking processing. Therefore, by considering the number of character strings, it is possible to improve efficiency while reducing unnecessary masking processing by excluding those having a different number of character strings from the mask area.

  The mask target area information generation unit 18 in the user terminal 10 of the mask processing system 100 according to the fourth embodiment includes the coordinate value converted by the mask character string space coordinate calculation unit 16, the number of characters of the mask target character string, and Multi-dimensional that represents the coordinate value, the number of characters of the mask target character string, and the user group overlap probability of the mask target character string, based on the user group overlap probability that represents the probability that the mask target character string overlaps with the character string related to other users A vector is generated as mask target area information. In addition, what is necessary is just to use the user group duplication probability calculated | required previously for every mask object character string about a user group duplication probability.

  The mask processing unit 44 in the server 30 of the mask processing system 100 according to the fourth embodiment receives the user received by the user data receiving unit 42 based on the mask target area information stored in the mask target area information database 38. Performs mask processing for character strings included in data.

  Specifically, the mask processing unit 44 converts a character string included in the received user data into coordinate values in the mask character string space. The mask processing unit 44 stores a coordinate value of a character string included in user data, the number of characters of the character string, and a multidimensional vector representing the user group overlap probability of the character string in the mask target region information database 38. If it is included in the mask target area information of the user, the character string is masked.

  As described above, according to the mask processing system of the fourth embodiment of the present invention, the user terminal converts the mask target character string related to the user into the coordinate value on the mask character string space, and the coordinate value Based on the number of characters of the mask target character string and the user group overlap probability representing the probability that the mask target character string overlaps with the character string related to another user, and generates the mask target region information. The information is transmitted to the server, the server selects the mask target character string candidate included in the mask target area information transmitted from the user terminal, and the character string included in the received user data based on the mask target character string candidate By performing this masking process, it is possible to appropriately mask the information to be masked.

  In addition, you may apply the 4th Embodiment of this invention to the said 2nd-3rd embodiment. When the fourth embodiment is applied to the second embodiment, as shown in FIG. 17, a mask function is used to mask each of a plurality of mask target character string candidates prepared in advance. Converted into a hash value of a certain bit length as a coordinate value in the character string space, and based on the coordinate value, the number of characters in the mask target character string, and the user group duplication probability, the mask target character included in the mask target area information A column candidate may be selected.

  The present invention is not limited to the above-described embodiment, and various modifications and applications can be made without departing from the gist of the present invention.

  For example, the user data may be an operation log of a user's PC or the like instead of Web page browsing information. Further, the user data may be an internal electronic document or the like, and the character string related to confidential information may be the mask target character string. For example, assuming that a company name of a trading company is handled as a mask target character string, mask processing of a mask target character string in a confidential document may be performed.

  In the above-described embodiment, the case where the mask target character string is converted into the coordinate value on the mask character string space using the hash function has been described as an example. However, the present invention is not limited to this. The mask target character string may be converted into a coordinate value in the mask character string space. For example, the mask target character string may be converted into a coordinate value in the mask character string space by processing by character code conversion.

  In the fourth embodiment, the case where a coordinate value, the number of characters of the mask target character string, and a multi-dimensional vector representing the user group duplication probability of the mask target character string is generated as mask target region information is taken as an example. As described above, the multidimensional vector is not limited to this. The mask target area information may be generated based on at least one of the coordinate value, the number of characters of the mask target character string, and the user group overlap probability of the mask target character string.

  Moreover, although the above-mentioned user terminal and server have a computer system inside, if a computer system is using the WWW system, it shall also include a homepage provision environment (or display environment).

  In the present specification, the embodiment has been described in which the program is installed in advance. However, the program can be provided by being stored in a computer-readable recording medium.

10, 310 User terminal 11 Network 12 Mask target region information output unit 14 Mask information registration unit 16 Mask character string space coordinate calculation unit 18 Mask target region information generation unit 20 Mask target region information transmission unit 22, 322 User data output unit 24, 324 User data collection unit 26, 326 User data transmission unit 30, 230 Server 32, 232 Mask target region data acquisition unit 34 Mask target region information reception unit 36 Mask target region information registration unit 38, 238 Mask target region information database 40, 240 User data acquisition unit 42 User data reception unit 44, 244 Mask processing unit 46 User data storage unit 48 after mask processing Masked user data database 100, 200, 300 Mask processing system 233 Dictionary database 234 Mask target character string candidate Selecting unit 236 masked character string candidate registration unit 321 the proxy server

Claims (5)

A mask target area information generation unit that converts a mask target character string related to a user into coordinate values on a mask character string space, and generates area information including the coordinate values as mask target area information, and the mask target area information generation unit A user terminal including a mask target area information transmitting unit that transmits the mask target area information generated by
A mask target area information receiving unit that receives the mask target area information transmitted from the user terminal;
A mask target region information database for storing the mask target region information received by the mask target region information receiving unit;
A user data receiving unit for receiving user data related to the user transmitted from the user terminal or a proxy server; and
A character string included in the received user data is converted into a coordinate value on the mask character string space, and when the converted coordinate value is included in the mask target area information, the received user data A server including a mask processing unit that performs mask processing of the included character string;
Including mask processing system. The mask target area information generation unit converts a mask target character string related to a user into a hash value as a coordinate value on a mask character string space using a hash function, and converts a predetermined bit at the head of the hash value to the mask The mask processing system according to claim 1 , wherein the mask processing system is generated as target area information. The mask target area information generation unit converts a mask target character string related to a user into a coordinate value on the mask character string space, and the coordinate value, the number of characters of the mask target character string, or the mask target character string based on the probability of overlapping the character string for other users, the mask processing system according to claim 1 for generating the mask target area information. A mask processing method in a mask processing system including a user terminal and a server,
The mask target area information generation unit of the user terminal converts a mask target character string related to a user into a coordinate value on a mask character string space, and generates area information including the coordinate value as mask target area information,
The mask target area information transmission unit of the user terminal transmits the mask target area information generated by the mask target area information generation unit to a server,
A mask target area information receiving unit of the server receives the mask target area information transmitted from the user terminal, and stores the received mask target area information in a mask target area information database;
The user data transmission unit of the user terminal or proxy server transmits user data related to the user to the server,
A user data receiving unit of the server receives user data transmitted from the user terminal;
The mask processing unit of the server converts a character string included in the received user data into a coordinate value on the mask character string space, and the converted coordinate value is included in the mask target area information. A mask processing method for masking a character string included in the received user data. A mask target region information receiving unit that receives mask target region information including coordinate values on a mask character string space obtained by converting a mask target character string related to a user, transmitted from the user terminal;
A mask target region database for storing the mask target region information received by the mask target region information receiving unit;
A user data receiving unit for receiving user data related to the user transmitted from the user terminal or a proxy server; and
A character string included in the received user data is converted into a coordinate value on the mask character string space, and when the converted coordinate value is included in the mask target area information, the received user data A server that includes a mask processing unit that performs mask processing for the contained character strings.