JP6670263B2 - Information processing apparatus, information processing method, and program - Google Patents

Description

  An embodiment of the present invention relates to an information processing device, an information processing method, and a program.

  In many services, service applicants can apply for the desired service from their own terminal device. Generally, when a user desires to use a service, a service application screen is transmitted from the service provider, and the service application screen includes user information acquired by the service provider and determined by the service provider. It is required to consent to the privacy policy and terms of use (hereinafter referred to as the privacy policy, etc.) that stipulate the handling. Here, the user information is, for example, personal information such as a name, a date of birth, an address, a telephone number, position information, and a service use history that can identify an individual by itself or by combining a plurality of information, Refers to information on personal behavior and privacy information that is not desired to be disclosed. The handling of the user information is, for example, whether or not the acquired user information is provided by a third party and a storage period. The user is required to understand the contents and agree.

  Regarding the technology for accessing personal data, there is known a technology that, when detecting access to a resource of a user, determines whether to permit access to the resource of the user based on the access policy of the user. (For example, see Patent Document 1).

JP 2014-178727 A

  In many cases, disclosure of a privacy policy or the like from a service provider to a user and a procedure for consent thereof can be performed using a GUI (Graphical User Interface). Then, for example, the user is required to judge whether or not to give consent after confirming the type of user information requested to be provided and the handling thereof in the GUI. Each time the user applies for the use of a new service, the user must determine whether or not to agree to the privacy policy or the like of the service. In addition, the diversification and complexity of services and the sophistication of terminal devices have been increasing, and the types of user information that service providers have requested to provide have been increasing. Increasing.

  SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problem, and has as its object to facilitate setting of provision of user information when user information is requested by a service provider.

(1) One embodiment of the present invention is an information processing apparatus that manages information about provision of information about a plurality of users to a provider of a service used by the plurality of users, and includes identification information of the plurality of users; For each of the plurality of users, identification information of type information of a plurality of pieces of user information related to the user, and for each of the pieces of type information of the plurality of pieces of user information, setting information relating to provision of the type information of the user information to a third party. And a setting unit for setting the setting information for each of the type information of the plurality of user information stored in the storage unit, wherein the storage unit Each of the type information is stored in accordance with a hierarchical structure, and the setting unit is configured to store the type information of the plurality of pieces of user information in accordance with the setting information of the type information of the user information of the upper layer. The setting information of the type information of a plurality of lower layer user information is changed with respect to the type information of the lower layer user information, and the upper level is changed according to each setting information of the type information of the plurality of lower layer user information. An information processing apparatus for changing setting information of type information of user information of a hierarchy.
(2) In one aspect of the present invention, in the information processing device according to (1), the setting unit includes, among the type information of the plurality of pieces of user information, type information of the user information of the upper hierarchy; In a state where all the setting information of the type information of the plurality of lower layer user information is the first information with respect to the type information of the upper layer user information, the setting information of the type information of the upper layer user information is The information processing apparatus changes the setting information of the type information of the plurality of pieces of user information of the lower hierarchy to the second information when the information is changed to the second information.
(3) In one aspect of the present invention, in the information processing device according to (2), the setting unit includes, among the type information of the plurality of pieces of user information, type information of the user information of the upper hierarchy, In the state where all the setting information of the type information of a plurality of user information that is a lower layer with respect to the type information of the user information of the upper layer is the first information, any one of the plurality of user information of the lower layer is set. An information processing apparatus that, when changing information to the second information, also changes the setting information of the type information of the upper layer user information to the second information with respect to the type information of the lower layer user information.
(4) According to an aspect of the present invention, in the information processing device according to any one of (1) to (3), the setting unit may include, in the type information of the plurality of pieces of user information, the lower hierarchy An information processing apparatus configured to set the setting information of the type information of the user information of the upper layer to the second information when all the setting information of the type information of the plurality of pieces of user information is the second information.
(5) According to an aspect of the present invention, in the information processing device according to any one of (1) to (4), the setting unit may include, in the type information of the plurality of pieces of user information, the lower hierarchy An information processing apparatus configured to set the setting information of the type information of the user information of the upper layer to the first information when all the setting information of the type information of the plurality of pieces of user information is the first information.
(6) In one embodiment of the present invention, in the information processing device according to any one of (1) to (5), the storage unit stores each type information of the plurality of pieces of user information in an upper layer Is an information processing apparatus that stores the user information according to a hierarchical structure that becomes the type information of the user information of the lower hierarchy by embodying the type information of the user information.
(7) One embodiment of the present invention relates to an information processing method executed by an information processing apparatus that manages information related to provision of information on a plurality of users to a service provider used by the plurality of users. Identification information of the user, identification information of type information of a plurality of user information relating to the user for each of the plurality of users, and third party of identification information of the user information for each of the identification information of the plurality of user information Storing the setting information relating to the provision to the user in accordance with a hierarchical structure, and setting the setting information for each of the plurality of pieces of user information identification information stored by the storing step; and Among the identification information of the user information, the identification information of the user information of the upper layer according to the setting information of the identification information of the user information of the upper layer On the other hand, the setting information of the identification information of the plurality of user information of the lower hierarchy is changed, and the identification information of the user information of the upper hierarchy is set according to each setting information of the identification information of the plurality of user information of the lower hierarchy. And a step of changing information.
(8) One embodiment of the present invention provides, in a computer of an information processing apparatus, identification information of a plurality of users, identification information of type information of a plurality of user information related to the user for each of the plurality of users, Storing, for each piece of user information identification information, setting information relating to provision of the user information identification information to a third party in accordance with a hierarchical structure, and storing the plurality of pieces of user information stored by the storing step Setting the setting information for each of the pieces of identification information, and, among the pieces of identification information of the plurality of pieces of user information, the identification information of the upper layer user information according to the setting information of the identification information of the upper layer user information. On the other hand, the setting information of the identification information of the plurality of lower layer user information is changed, and the setting information of each of the identification information of the plurality of lower layer user information is changed. Is a program for executing a step of changing the setting information of the identification information of the user information of the upper layer according to the information.

  ADVANTAGE OF THE INVENTION According to embodiment of this invention, when user information is requested from a service provider, the setting regarding provision of user information can be made easy.

1 is a diagram illustrating an example of a communication system to which a privacy protection device according to an embodiment is applied. It is a functional block diagram of a privacy protection device concerning an embodiment. It is a figure showing an example of a prior setting registration screen. It is a figure showing an example of the detailed information registration screen (the 1). It is a figure showing an example of the detailed information registration screen (the 2). It is a figure showing an example of the detailed information registration screen (the 3). It is a figure showing an example of the detailed information registration screen (the 4). It is a figure showing an example of the hierarchy (the 1) of user information. It is a figure showing an example of the hierarchy (the 2) of user information. It is a figure showing an example of a prior setting table. It is a figure showing an example of a privacy policy agreement inquiry screen. It is a figure showing an example of a privacy policy detailed information agreement inquiry screen (the 1). It is a figure showing an example of a privacy policy detailed information agreement inquiry screen (the 2). It is a figure showing an example of a privacy policy detailed information agreement inquiry screen (the 3). It is a figure showing an example of a privacy policy detailed information agreement inquiry screen (the 4). It is a functional block diagram of a terminal unit concerning an embodiment. It is a figure showing an example of operation of a communication system concerning an embodiment. It is a figure showing an example of operation of a communication system concerning an embodiment. It is a figure showing an example of operation of a communication system concerning an embodiment. It is a figure showing an example of operation of a communication system concerning an embodiment.

<Embodiment>
<Communication system configuration>
FIG. 1 is a diagram illustrating an example of a communication system to which a privacy protection device according to an embodiment is applied.
The communication system includes terminal devices 101, 102,..., 10N (N is an integer of N> 0), a privacy protection device 100, and service providing devices T01, T02,. > 0 integer). The privacy protection device 100 is connected to a communication network 20 such as a mobile communication network, and terminal devices 101, 102,..., 10N (N is an integer greater than 0) are connected to the communication network 20. . The privacy protection device 100 is connected to a communication network 50 such as the Internet, and service providing devices T01, T02,..., T0M are connected to the communication network 50.

The service providing device T0M is used by a service provider to provide various services to the terminal device 10N. Hereinafter, any of the terminal devices 101, 102,..., 10N is referred to as a terminal device 10N. Further, among the service providing apparatuses T01, T02,..., T0M, an arbitrary service providing apparatus is described as a service providing apparatus T0M.
The terminal device 10N is used by a user who wishes to use the service provided by the service providing device T0M for setting operation as to whether the user information of the user may be provided to the service provider or for using the service. By operating the terminal device 10N, the user can register a basic handling rule of user information in the privacy protection device 100 as a preset setting. The registration of the pre-setting is performed on a pre-setting registration screen provided by the privacy protection device 100. On the pre-setting registration screen, the user sets whether to provide the service information to the service provider for each type of user information.
Each of the plurality of pieces of user information forms a hierarchical structure. The details of the user information in the upper layer are detailed and embodied as the lower layer user information, and the information obtained by summarizing and abstracting the lower layer user information is the user information in the upper layer. The registration of the lower layer user information is performed on a detailed information registration screen provided by the privacy protection device 100. On the detailed information registration screen, the user sets whether or not to provide to the service provider for each type of lower layer user information.
Specifically, the user refers to the pre-setting registration screen or the detailed information registration screen, and clicks on the corresponding check box for the type of user information considered to be provided to the service provider. By doing so, information indicating the operation is transmitted from the terminal device 10N to the privacy protection device 100. When receiving the information indicating the operation transmitted by the terminal device 10N, the privacy protection device 100 creates a pre-setting registration screen or a detailed information registration screen in which a check mark is displayed based on the received information indicating the operation. Then, the created pre-setting registration screen or detailed information registration screen is transmitted to the terminal device 10N. The terminal device 10N displays the pre-setting registration screen and the detailed information registration screen transmitted by the privacy protection device 100.
On the other hand, the user refers to the pre-registration registration screen or the detailed information registration screen, and clicks on the check mark displayed on the corresponding check box for the type of user information that is not considered to be provided to the service provider. Is performed, information indicating the operation is transmitted from the terminal device 10N to the privacy protection device 100. When the privacy protection device 100 receives the information indicating the operation transmitted by the terminal device 10N, based on the information indicating the received operation, the privacy protection device 100 deletes the check mark displayed in the check box, and displays detailed information. A registration screen is created, and the created pre-setting registration screen and detailed information registration screen are transmitted to the terminal device 10N. The terminal device 10N displays the pre-setting registration screen and the detailed information registration screen transmitted by the privacy protection device 100.

  In the privacy protection device 100, information for identifying the user who has performed the setting operation (hereinafter, referred to as “user ID”), information for identifying the type of user information (hereinafter, referred to as “user information identification information”), and The contents of the settings (setting information) are linked and managed as pre-setting information. When the user newly requests the use of the service, a service use start application including information for identifying the service (hereinafter referred to as “service ID”) and the user ID is sent from the terminal device 10N to the privacy protection device 100. Sent to Upon receiving the service use start application, the privacy protection device 100 transmits a transmission request such as a privacy policy determined by the service provider to the service providing device T0M that provides the service. The service providing apparatus T0M that has received the transmission request such as the privacy policy transmits to the privacy protection apparatus 100 information identifying the type of user information requested by the service provider together with the privacy policy of the service provider (hereinafter referred to as “requested user information identification”). Information ").

  The privacy protection device 100 extracts setting information corresponding to the user information identification information included in the received requested user information identification information from the pre-setting information, and reflects the setting information on the privacy policy agreement inquiry screen. The privacy policy agreement inquiry screen also includes the privacy policy of the service provider received from the service providing apparatus T0M. The privacy protection device 100 transmits the created privacy policy agreement inquiry screen to the terminal device 10N used by the user who has requested the use of the service. By reflecting the pre-set information on the privacy policy consent inquiry screen, the user does not need to repeat the same setting when using multiple services, and the management can be facilitated by making the settings common. Can be

  When the privacy policy agreement inquiry screen is received by the terminal device 10N used by the user who has requested the use of the service, the user refers to the privacy policy agreement inquiry screen and determines whether or not to agree with the privacy policy or the like. I do. The privacy policy agreement inquiry screen displays the contents of the preset information corresponding to the type information of one or a plurality of pieces of user information that the service provider requests to provide. The user determines whether to provide each type of user information requested to be provided to the service provider, and then determines whether or not to agree with a privacy policy or the like. If the user agrees to the content displayed on the privacy policy agreement inquiry screen as it is, the user performs an operation of agreeing. In a case where the displayed content is partially changed and the user agrees, the user performs the operation of agreeing after correcting the setting of the provision possibility for each type of user information. If you do not agree, perform an operation that does not agree according to the contents of the privacy policy agreement screen. By performing either operation, a privacy policy agreement response is transmitted from the terminal device 10N to the privacy protection device 100.

  The privacy protection device 100 receives the privacy policy agreement response from the terminal device 10N, and acquires a service ID, a user ID, and information indicating whether or not to provide for each type of user information. If the user agrees with the privacy policy or the like, the privacy protection device 100 stores the user information identification information permitted to be provided to the service provider as the authorization setting information. Then, the privacy protection device 100 transmits, to the service providing device T0M, the service ID, the user ID, the consent / non-consent to the privacy policy and the like, and in the case of consent, the user information identification information permitted to be provided by the user. . The service providing apparatus T0M determines whether or not to provide the service and the contents based on the information received from the privacy protection apparatus 100.

<Privacy protection device>
An example of a hardware configuration of the privacy protection device 100 according to the present embodiment will be described. The privacy protection device 100 includes a CPU, a memory, a nonvolatile memory, a communication I / F, and an internal bus.
The CPU executes a program stored in, for example, a nonvolatile memory, and controls each unit of the privacy protection device 100 using the memory as a work memory. The memory is configured by a RAM such as a volatile memory using a semiconductor element. The memory is used as a work memory of the CPU. The non-volatile memory includes, for example, a hard disk (HD) or a ROM, and stores a program executed by the CPU. The communication I / F is an interface for communicating with an external device such as the terminal device 10N via the communication network 20 to transmit and receive data and the like. Further, the communication I / F communicates with the service providing apparatus T0M via the communication network 50. The internal bus connects the CPU, the memory, the nonvolatile memory, and the communication I / F to each other. Each unit connected to the internal bus can exchange data with each other via the internal bus.

<Functional configuration of privacy protection device>
FIG. 2 is a functional block diagram of the privacy protection device according to the embodiment. The privacy protection device 100 includes a communication unit 152, a preset information setting unit 154, a service use request processing unit 156, a comparison unit 158, a screen information creation unit 162, and a storage unit 166. The storage unit 166 stores a pre-setting table 1662. Each of these units is a function realized by operating any one of the constituent elements shown in FIG. 2 according to an instruction from a CPU that executes a program expanded on a memory from a non-volatile memory.

<Functional configuration of privacy protection device>
Each functional configuration of the privacy protection device 100 will be described in detail with reference to FIG. In the following, in describing each functional configuration of the privacy protection device 100, among the constituent elements shown in FIG. Explain the relationship.
The communication unit 152 is realized by a command from the CPU and a communication I / F. The communication unit 152 transmits and receives various data to and from the terminal device 10N and other devices such as the service providing device T0M.

The pre-setting information setting unit 154 is realized by a command from the CPU, and sets pre-setting information in the privacy protection device 100 by a user operation. For example, each of the plurality of terminal devices 10N accesses the privacy protection device 100 and transmits a preset registration application including the user ID. When acquiring the pre-registration registration application received by the communication unit 152, the pre-setting information setting unit 154 transmits a pre-registration registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a pre-setting registration screen transmitted from the privacy protection device 100.
Further, upon acquiring the detailed information registration application received by the communication unit 152, the pre-setting information setting unit 154 transmits a detailed setting registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays the detailed setting registration screen transmitted from the privacy protection device 100.
Further, for example, each of the plurality of terminal devices 10N transmits information indicating an operation to the privacy protection device 100. When acquiring the information indicating the operation received by the communication unit 152, the pre-setting information setting unit 154 creates a pre-setting registration screen or a detailed setting registration screen reflecting the operation. The pre-setting information setting unit 154 transmits the prepared pre-setting information and the detailed setting registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a pre-setting registration screen and a detailed setting registration screen transmitted from the privacy protection device 100.
In addition, the pre-setting information setting unit 154 performs an operation on the pre-setting registration screen or the detailed setting registration screen transmitted to the terminal device 10N to determine whether or not the user provides the service provider for each type of user information. When information indicating an operation transmitted by performing the operation is acquired, the setting information of the type information of other user information other than the user information of the operation target is automatically set according to the user information of the operation target. . Specifically, when an operation is performed on the setting information of the type information of the user information of the upper layer, the pre-setting information setting unit 154 determines the type information of the user information of the upper layer on the lower layer. Is changed to the same setting information as the setting information of the type information of the user information of the upper layer. In addition, when an operation is performed on each piece of setting information of the type information of a plurality of pieces of user information in the lower layer, the pre-setting information setting unit 154 determines the type information of the user information in the upper layer. The setting information of the information type information is changed according to the setting information of the type information of the user information of the lower hierarchy.

The service use request processing unit 156 is realized by a command from the CPU. When the user operates the terminal device 10N to request the use of a certain service, a service use start request is transmitted from the terminal device 10N, and the service use start request is received by the communication unit 152 of the privacy protection device 100. You. The service use start application includes the user ID and the service ID. The communication unit 152 outputs the service use start application to the service use request processing unit 156.
When the service use request processing unit 156 acquires the service use start application from the communication unit 152, the service use request processing unit 156 sends a request to the service providing apparatus T0M that provides the service based on the service ID included in the service use start application. Send an inquiry for user information identification information.
When the service providing device T0M obtains the inquiry about the requested user information identification information from the privacy protection device 100, it transmits the requested user information identification information to the privacy protection device 100. The requested user information identification information is transmitted together with the service provider's privacy policy including the handling of the user information collected from the user. The request user information identification information and the privacy policy are received by the communication unit 152 of the privacy protection device 100 and output to the service use request processing unit 156. The service use request processing unit 156 outputs the requested user information identification information to the comparison unit 158 and the screen information creation unit 162.
Further, based on the privacy policy agreement response transmitted by the terminal device 10N, the service use request processing unit 156 determines the service ID, the user ID, the user information identification information, the user information provision setting information, and the service ID included in the privacy policy agreement response. A response to the service provider is created based on whether or not the user has agreed to the privacy policy, and the response is output to the communication unit 152. The communication unit 152 transmits the response to the service provider supplied from the service use request processing unit 156 to the service providing apparatus T0M.

The comparison unit 158 is realized by a command from the CPU. The comparison unit 158 compares one or more pieces of user information identification information included in the requested user information identification information supplied from the service use request processing unit 156 with one or more pieces of user information identification information included in the preset table 1662. Compare and identify the matching user information identification information. The comparison unit 158 outputs the specified user information identification information to the screen information creation unit 162.
The screen information creation unit 162 is realized by a command from the CPU. The screen information creation unit 162 stores the user information identification information in the pre-setting table 1662 based on the requested user information identification information supplied from the service use request processing unit 156 and the user information identification information supplied from the comparison unit 158. Create a privacy policy agreement inquiry screen that reflects the basic handling rules associated with the information. Screen information creation section 162 outputs a privacy policy inquiry screen to communication section 152.
The storage unit 166 is realized by a nonvolatile memory. The storage unit 166 stores a pre-setting table 1662.

<Pre-setting registration screen>
FIG. 3 is a diagram illustrating an example of the pre-setting registration screen.
A plurality of types of user information such as name information 302, telephone number 304, mail address 306, contractor detailed information 308, family information 310, and residence information 312 are displayed on the pre-setting registration screen 350. Check boxes 301, 303, 305, 307, 309, and 311 are displayed on the pre-setting registration screen 350 corresponding to each of a plurality of types of user information. The pre-setting registration screen 350 includes a detail button 314 for displaying a detailed information registration screen for setting setting information of a lower layer user information of the contractor detailed information 308 and setting information of a lower layer user information of the residence information 312. A detailed button 316 for displaying a detailed information registration screen for setting is displayed. An OK button 322 indicating agreement or approval is displayed on the pre-setting registration screen 350.

  Name information 302 is information indicating the name of the user, telephone number 304 is information indicating the telephone number of the user, mail address 306 is information indicating the mail address of the user, and contractor detailed information 308 is information of the contractor. This is information indicating a name. The family information 310 is information indicating the user's family, and the residence information 312 is information indicating the user's residence. In the example shown in FIG. 3, the check box 301 corresponds to the name information 302, the check box 303 corresponds to the telephone number 304, and the check box 305 corresponds to the mail address 306. Further, in the example shown in FIG. 3, the check box 307 corresponds to the contractor detailed information 308, the check box 309 corresponds to the family information 310, and the check box 311 corresponds to the residence information 312.

  The user refers to the pre-setting registration screen 350, determines whether the information is basically considered to be provided to the service provider for each type of the plurality of pieces of user information, and provides the information to the service provider. Regarding the type of user information considered to be good, a check mark is displayed by clicking on a corresponding check box. Here, when the user clicks on the check box 307 to display the check mark, the check mark is automatically displayed also in the check box corresponding to the user information in the lower hierarchy of the contractor detailed information 308. As a result, it is determined that all the user information in the lower hierarchy of the contractor detailed information 308 is basically information that is considered to be provided to the service provider. When the user clicks on the check box 311 to display the check point, the check point is automatically displayed also in the check box corresponding to the user information in the lower hierarchy of the residence information 312. As a result, it is determined that all of the user information in the lower hierarchy of the residence information 312 is basically information that can be provided to the service provider.

In addition, the user refers to the pre-setting registration screen 350 and presses the detail button 314 to transmit a detailed information registration application from the terminal device 10N. The detailed information registration application includes the user information identification information corresponding to the contractor detailed information. Upon acquiring the detailed information registration application received by the communication unit 152, the pre-setting information setting unit 154 of the privacy protection device 100 transmits a detailed information registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a detailed information registration screen for the contractor detailed information provided by the privacy protection device 100.
FIG. 4 is a diagram showing an example of a detailed information registration screen for contractor detailed information.
A plurality of types of user information such as date of birth 402, gender 404, occupation 406, and annual income 408 are displayed on the detailed information registration screen 450 for contractor detailed information. Also, on the detailed information registration screen 450, check boxes 401, 403, 405, and 407 are displayed corresponding to each of a plurality of types of user information. Further, on the detailed information registration screen 450, a return button 422 indicating that the screen returns to the pre-setting registration screen 350 is displayed.
The date of birth 402 is information representing the date of birth of the user, the gender 404 is information representing the gender of the user, the occupation 406 is information representing the occupation of the user, and the annual income 408 represents the annual income of the user. Information. In the example shown in FIG. 4, the check box 401 corresponds to the date of birth 402, the check box 403 corresponds to the gender 404, the check box 405 corresponds to the occupation 406, and the check box 407 corresponds to the annual income 408.
In the example shown in FIG. 4, since the user has pressed the detail button 314 on the pre-setting registration screen 350 without clicking on the check box 307, a check mark is displayed in the check boxes 401, 403, 405, and 407. It has not been. On the other hand, when the user clicks on the check box 307 on the pre-setting registration screen 350 to display the check point and then presses the detail button 314, the check box 401, 403, 405, and 407 displays the check mark. Is displayed.
The user refers to the detailed information registration screen 450, and determines whether the detailed information of the contractor is considered to be basically provided to the service provider for each type of one or a plurality of detailed user information. Is determined, and the type of user information considered to be provided to the service provider is displayed by clicking on a corresponding check box. On the other hand, for the type of user information that is not considered to be provided to the service provider, if the user does not click on the corresponding check box or the check mark is displayed on the check box corresponding to the type of user information considered not to be provided. Clicks on the point to delete the point.
When the specification of the type of the user information considered to be provided to the service provider is completed, the user presses the return button 422.

Returning to FIG. 3, the description will be continued. The user refers to the pre-setting registration screen 350 and presses the detail button 316 to transmit a detailed information registration application from the terminal device 10N. The detailed information registration application includes the user information identification information corresponding to the residence information. Upon acquiring the detailed information registration application received by the communication unit 152, the pre-setting information setting unit 154 of the privacy protection device 100 transmits a detailed information registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a detailed information registration screen for the residence information provided by the privacy protection device 100.
FIG. 5 is a diagram illustrating an example of a detailed information registration screen for residence information.
On the detailed information registration screen 550 about the residence information, types of a plurality of pieces of user information such as the address information 502 and the residence information 504 are displayed. Further, on the detailed information registration screen 550, check boxes 501 and 503 are displayed corresponding to each of a plurality of types of user information. The detailed information registration screen 550 includes a detail button 506 for displaying a detailed information registration screen for setting user information in a lower layer of the address information 502 and a detailed information registration screen for setting user information in a lower layer of the house information 504. A detail button 508 to be displayed is displayed. Further, on the detailed information registration screen 550, a return button 522 indicating that the screen returns to the pre-setting registration screen 350 is displayed.
The address information 502 is information indicating the address of the user, and the house information 504 is information indicating the house of the user. In the example shown in FIG. 5, the check box 501 corresponds to the address information 502, and the check box 503 corresponds to the house information 504.
In the example shown in FIG. 5, since the user has pressed the details button 316 without clicking on the check box 311 on the pre-setting registration screen 350, no check mark is displayed in the check boxes 501 and 503. On the other hand, when the user clicks on the check box 311 on the pre-setting registration screen 350 to display the check mark and then presses the detail button 316, the check mark is displayed in the check boxes 501 and 503.
The user refers to the detailed information registration screen 550, and determines whether or not the information is basically considered to be provided to the service provider for each type of one or more pieces of user information that embodies the residence information, Regarding the type of user information that can be provided to the service provider, a check mark is displayed by clicking on the corresponding check box. On the other hand, for the type of user information that is not considered to be provided to the service provider, if the user does not click on the corresponding check box or the check mark is displayed on the check box corresponding to the type of user information considered not to be provided. Clicks on the point to delete the point. Here, when the user clicks on the check box 501 to display the check point, the check point is automatically displayed also in the check box corresponding to the user information in the lower hierarchy of the address information 502. As a result, it has been determined that all of the user information in the lower hierarchy of the address information 502 is basically information that can be provided to the service provider. Similarly, when the user clicks on the check box 503 to display the check point, the check point is automatically displayed also in the check box corresponding to the user information in the lower hierarchy of the house information 504. As a result, it is determined that all of the user information in the lower hierarchy of the house information 504 is information basically considered to be provided to the service provider.
When the designation of the type of the user information considered to be provided to the service provider is completed, the user presses a return button 522.

In addition, the user refers to the detailed information registration screen 550 and presses the details button 506, whereby a detailed information registration application is transmitted from the terminal device 10N. The detailed information registration application includes the user information identification information corresponding to the address information. The detailed information registration request transmitted by the terminal device 10N is received by the communication unit 152 of the privacy protection device 100, and the communication unit 152 outputs the received detailed information registration request to the preset information setting unit 154. When acquiring the detailed information registration request received by the communication unit 152, the pre-setting information setting unit 154 transmits a detailed information registration screen for address information from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a detailed information registration screen for the address information provided by the privacy protection device 100.
FIG. 6 is a diagram illustrating an example of a detailed information registration screen for address information.
On the detailed information registration screen 650 for address information, a plurality of types of user information such as a prefecture 602, a ward, a municipalities 604, and a town area / chome / address 606 are displayed. Further, on the detailed information registration screen 650, check boxes 601, 603, and 605 are displayed corresponding to each of a plurality of types of user information. Further, on the detailed information registration screen 650, a return button 622 pressed when returning to the detailed information registration screen 550 is displayed.
The prefecture 602 is information representing the prefecture, the ward municipalities 604 are information representing the municipalities, and the town area / chome / address 606 is information representing the town area / chome / address. In the example illustrated in FIG. 6, the check box 601 corresponds to the prefecture 602, the check box 603 corresponds to the ward / municipalities 604, and the check box 605 corresponds to the town area / chome / address 606.
In the example shown in FIG. 6, since the user pressed the detail button 506 without clicking on the check box 501 on the detailed information registration screen 550, the check marks are displayed in the check boxes 601, 603, and 605. Absent. On the other hand, when the user clicks on the check box 501 on the detailed information registration screen 550 to display the check mark and then presses the detail button 506, the check mark is displayed in the check boxes 601, 603, and 605. You.
The user refers to the detailed information registration screen 650, and determines whether or not the information is considered to be basically provided to the service provider for each type of one or more pieces of user information that embodies the address information, Regarding the type of user information that is considered to be provided to the service provider, a check mark is displayed by clicking on the corresponding check box. On the other hand, for the type of user information that is not considered to be provided to the service provider, if the user does not click on the corresponding check box or the check mark is displayed on the check box corresponding to the type of user information considered not to be provided. Clicks on the point to delete the point.
When the designation of the type of the user information considered to be provided to the service provider is completed, the user presses the return button 622.

Returning to FIG. 5, the description will be continued. The user refers to the detailed information registration screen 550 and presses the details button 508 to transmit a detailed information registration application from the terminal device 10N. The detailed information registration application includes the user information identification information corresponding to the house information. When acquiring the detailed information registration application received by the communication unit 152, the pre-setting information setting unit 154 of the privacy protection device 100 transmits a detailed information registration screen from the communication unit 152 to the terminal device 10N. The terminal device 10N displays a detailed information registration screen for the house information provided by the privacy protection device 100.
FIG. 7 is a diagram illustrating an example of a detailed information registration screen for house information.
On the detailed information registration screen 750 for house information, types of a plurality of pieces of user information such as a detached house 702, an apartment 704, and a rental 706 are displayed. Further, on the detailed information registration screen 750, check boxes 701, 703, and 705 are displayed corresponding to each of a plurality of types of user information. Further, on the detailed information registration screen 750, a return button 722 indicating that the screen returns to the detailed information registration screen 550 is displayed.
A detached house 702 is information indicating a detached house, an apartment 704 is information indicating an apartment, and a lease 706 is information indicating a lease. In the example shown in FIG. 7, the check box 701 corresponds to the detached house 702, the check box 703 corresponds to the apartment 704, and the check box 705 corresponds to the lease 706.
In the example shown in FIG. 7, since the user has pressed the detail button 508 without clicking on the check box 503 on the detailed information registration screen 550, the check marks are displayed in the check boxes 701, 703, and 705. Absent. On the other hand, when the user clicks on the check box 503 on the detailed information registration screen 550 to display the check mark and then presses the detail button 508, the check mark is displayed in the check boxes 701, 703, and 705. You.
The user refers to the detailed information registration screen 750, and determines whether or not the information is considered to be basically provided to the service provider for each type of one or more pieces of user information that embodies the house information, Regarding the type of user information that is considered to be provided to the service provider, a check mark is displayed by clicking on the corresponding check box. On the other hand, for the type of user information that is not considered to be provided to the service provider, if the user does not click on the corresponding check box or the check mark is displayed on the check box corresponding to the type of user information considered not to be provided. Clicks on the point to delete the point.
When the designation of the type of the user information considered to be provided to the service provider ends, the user presses a return button 722.
When the designation of the type of user information considered to be provided to the service provider is completed, the user presses an OK button 322 on the pre-setting registration screen 350. As a result, a preset registration response specifying whether or not to provide to the service provider according to the type of the user information is transmitted from the terminal device 10N to the privacy protection device 100.

  The communication unit 152 of the privacy protection device 100 outputs the received preset registration response and the user ID of the user who transmitted the preset registration response to the preset information setting unit 154. The pre-setting information setting unit 154 associates the user ID of the user who transmitted the pre-setting registration response, a plurality of pieces of user information identification information, and a basic handling rule for each of the plurality of pieces of user information identification information. Stored in the pre-setting table 1662.

<Hierarchical structure of user information>
The hierarchical structure of the user information will be described with reference to FIGS. As described above, each of the plurality of pieces of user information forms a hierarchical structure. The details of the user information in the upper layer are detailed and embodied as the lower layer user information, and the information obtained by summarizing and abstracting the lower layer user information is the user information in the upper layer.
FIG. 8 is a diagram illustrating an example of a hierarchical structure of contractor detailed information.
As shown in FIG. 8, the hierarchical structure of the contractor detailed information is composed of two layers, that is, a hierarchy 1 (L1) as an upper hierarchy and a hierarchy 2 (L2) as a lower hierarchy. In the example illustrated in FIG. 8, the user information included in the lower hierarchy of the “contractor detailed information” represented by the user information identification information “info04” is “birth date” represented by the user information identification information “info041”. "," Sex "represented by user information identification information" info042 "," occupation "represented by user information identification information" info043 ", and" annual income "represented by user information identification information" info044 ". including.

FIG. 9 is a diagram illustrating an example of a hierarchical structure of the residence information.
As shown in FIG. 9, the hierarchical structure of the residence information is composed of three layers, a layer 1 (L1), a layer 2 (L2), and a layer 3 (L3). In the example illustrated in FIG. 9, the user information included in the lower hierarchy of the “resident information” represented by the user information identification information “info06” includes “address information” represented by the user information identification information “info061”; This is “house information” represented by the user information identification information “info062”. In the example illustrated in FIG. 9, the user information included in the lower hierarchy of the “address information” represented by the user information identification information “info061” includes “prefecture” represented by the user information identification information “info0611”; It includes “ward, municipalities” represented by user information identification information “info0612”, and “town area / chome / address” represented by user information identification information “info0613”. In the example illustrated in FIG. 9, the user information included in the lower hierarchy of the “house information” represented by the user information identification information “info062” includes “house” represented by the user information identification information “info0621”; It includes “apartment” represented by user information identification information “info0622” and “rental” represented by user information identification information “info0623”.

<Pre-setting table>
FIG. 10 is a diagram illustrating an example of the pre-setting table.
The pre-setting table 1662 includes a plurality of user IDs, one or more pieces of user information identification information relating to the user for each of the plurality of user IDs, and a basic handling for each of the one or more user information identification information. This is information in the form of a table that associates rules.
In the example shown in FIG. 10, one user is shown as an example. In the example shown in FIG. 10, the user ID “01aa”, the user information identification information “info01”, “info02”, “info03”, “info04”, “info05”, and “info06”, and basic handling rules “No”, “OK”, “OK”, “OK”, “NO”, and “NO” are associated with each other. "Available" indicates that the service provider can be provided, and "No" indicates that the service provider cannot be provided. The user information identification information "info01" corresponds to the name information 302, the user information identification information "info02" corresponds to the telephone number 304, the user information identification information "info03" corresponds to the mail address 306, and the user information identification information ""info04" corresponds to contractor detailed information 308, user information identification information "info05" corresponds to family information 310, and user information identification information "info06" corresponds to residence information 312. Name information 302, telephone number 304, e-mail address 306, contractor detailed information 308, family information 310, and residence information 312 are included in layer 1.

In addition, since the basic handling rule “OK” is set in the setting information of the user information identification information “info04”, the user information is stored in the layer 2 (L2) lower than the user information identification information “info04”. Basic handling rules “OK”, “OK”, “OK”, and “OK” are set in each setting information of the information identification information “info041”, “info042”, “info043”, and “info044”. ing.
Further, a basic handling rule “No” is set in the setting information of the user information identification information “info06”, and in the layer 2 (L2), which is a lower hierarchy of the user information identification information “info06”, the user information identification information “ In the setting information of “info061” and “info062”, basic handling rules “No” and “No” are set. In layer 3 (L3), which is a lower layer of the user information identification information “info061”, the basic handling rule “OK” is added to each setting information of the user information identification information “info0611”, “info0612”, and “info0613”. , “No” and “No” are set. In layer 3 (L3), which is a lower layer of the user information identification information “info062”, the basic handling rule “No” is included in the setting information of each of the user information identification information “info0621”, “info0622”, and “info0623”. , “No” and “No” are set.
User information identification information “info041,” “info042,” “info043,” “info044,” “info061,” “info062,” “info0611,” “info0612,” “info0613,” “info0621,” “info062,” and “23” Are as shown in FIGS. 8 and 9.

<Privacy policy agreement inquiry screen>
FIG. 11 shows an example of a privacy policy agreement inquiry screen transmitted from the privacy protection device 100 to the terminal device 10N that has requested use of the service.
The privacy policy agreement inquiry screen 850 includes an application service name 815, a privacy policy defined by the service provider, and user information that the service provider requests the user to provide. The user information requested to be provided includes, for example, name information 802, telephone number 804, mail address 806, contractor detailed information 808, family information 810, residence information 812, and the like.
Check boxes 801, 803, 805, 807, 809, and 811 are displayed on the privacy policy agreement inquiry screen corresponding to each of a plurality of types of user information. The privacy policy agreement inquiry screen 850 includes a detail button 814 for displaying a privacy policy detailed information agreement inquiry screen, which is a screen for inquiring of a privacy policy agreement regarding user information in a lower layer of the contractor detailed information 808, and residence information 812. A details button 816 for displaying a privacy policy detailed information agreement inquiries screen, which is a screen for inquiring the agreement of the privacy policy for the user information of the lower hierarchy, is displayed. In addition, a button 820 indicating agreement and a button 822 indicating disagreement are displayed on the privacy policy agreement inquiry screen.
3, the name information 802 is information indicating the name of the user, the telephone number 804 is information indicating the telephone number of the user, the mail address 806 is information indicating the mail address of the user, and the contractor details. Information 808 is information representing the name of the contractor, family information 810 is information representing the family of the user, and residence information 812 is information representing the residence of the user.

  In the example shown in FIG. 11, the application service name is “XXX service”, the check box 801 corresponds to the name information 802, the check box 803 corresponds to the telephone number 804, and the check box 805 corresponds to the mail address 806. I do. In the example shown in FIG. 11, a check box 807 corresponds to contractor detailed information 808, a check box 809 corresponds to family information 810, and a check box 811 corresponds to residence information 812. The telephone number 804, the e-mail address 806, and the contractor detailed information 808 of the user information are set so as to be permitted to be provided to the service provider by displaying a check mark in the corresponding check box. It is possible for the user to recognize that the error has occurred.

In addition, the user refers to the privacy policy agreement inquiry screen 850 and presses the details button 814, whereby a privacy policy detailed information agreement inquiry screen application is transmitted from the terminal device 10N. The privacy policy detailed information consent inquiry screen application includes the user information identification information corresponding to the contractor detailed information. When acquiring the privacy policy detailed information consent inquiry screen application received by the communication unit 152, the screen information creation unit 162 of the privacy protection device 100 sends the privacy policy detailed information on the contractor detailed information from the communication unit 152 to the terminal device 10N. Send the consent inquiry screen. The terminal device 10N displays a privacy policy detailed information consent inquiry screen for the contractor detailed information provided by the privacy protection device 100.
FIG. 12 is a diagram showing an example of a privacy policy detailed information agreement inquiry screen for contractor detailed information.
A plurality of types of user information such as date of birth 902, gender 904, occupation 906, annual income 908, and the like are displayed on the privacy policy detailed information agreement inquiry screen 950 for the contractor detailed information. Also, on the privacy policy detailed information agreement inquiry screen, check boxes 901, 903, 905, and 907 are displayed corresponding to each of a plurality of types of user information. Further, a return button 922 indicating that the screen returns to the privacy policy agreement inquiry screen 850 is displayed on the privacy policy detailed information agreement inquiry screen.
4, the date of birth 902 is information representing the date of birth of the user, the sex 904 is information representing the gender of the user, the occupation 906 is information representing the occupation of the user, and the annual income 908. Is information indicating the user's annual income. In the example shown in FIG. 12, the check box 901 corresponds to the date of birth 902, the check box 903 corresponds to the gender 904, the check box 905 corresponds to the occupation 906, and the check box 907 corresponds to the annual income 908. In the customer information, the date of birth 902, gender 904, occupation 906, and annual income 908 are set to permit the provision to the service provider by indicating a check mark in the corresponding check box. The user can recognize that there is.

Returning to FIG. 11, the description will be continued. The user refers to the privacy policy agreement inquiry screen 850 and presses the details button 816 to transmit a privacy policy detailed information agreement inquiry screen application from the terminal device 10N. The privacy policy detailed information consent inquiry screen application includes user information identification information corresponding to the residence information. When the screen information creation unit 162 of the privacy protection device 100 acquires the privacy policy detailed information consent inquiry screen application received by the communication unit 152, the communication unit 152 sends the privacy policy detailed information consent inquiry for the residence information to the terminal device 10N. Send the screen. The terminal device 10N displays a privacy policy detailed information consent inquiry screen for the residence information provided by the privacy protection device 100.
FIG. 13 is a diagram showing an example of a privacy policy detailed information agreement inquiry screen for residence information.
On the privacy policy detailed information consent inquiry screen 1050 for the residence information, a plurality of types of user information such as address information 1002 and residence information 1004 are displayed. In addition, check boxes 1001 and 1003 are displayed on the privacy policy detailed information agreement inquiry screen 1050 corresponding to each of a plurality of types of user information. Further, on the privacy policy detailed information agreement inquiry screen 1050, a return button 1022 indicating that the screen returns to the privacy policy agreement inquiry screen 850 is displayed.

The privacy policy detailed information consent inquiry screen 1050 includes a detail button 1006 for displaying a privacy policy detailed information consent inquiry screen, which is a screen for inquiring the consent of the privacy policy about the details of the user information in the lower hierarchy of the address information 1002, and the residence. A details button 1008 for displaying a privacy policy detailed information agreement inquiries screen, which is a screen for inquiring the agreement of the privacy policy regarding the details of the user information in the lower hierarchy of the information 1004, is displayed.
As in FIG. 5, the address information 1002 is information indicating the address of the user, and the house information 1004 is information indicating the house of the user. In the example shown in FIG. 13, the check box 1001 corresponds to the address information 1002, and the check box 1003 corresponds to the house information 1004. In the customer information, as for the address information 1002 and the house information 1004, since the corresponding check box is not displayed with a check mark, the user is informed that the setting is not permitted to be provided to the service provider. It has become recognizable.

Further, the user refers to the privacy policy detailed information consent inquiry screen 1050 and presses the details button 1006, whereby a privacy policy detailed information consent inquiry screen application is transmitted from the terminal device 10N. The privacy policy detailed information consent inquiry screen application includes the user information identification information corresponding to the address information. When the screen information creation unit 162 of the privacy protection device 100 acquires the privacy policy detailed information consent inquiry screen application received by the communication unit 152, the communication unit 152 inquires the terminal device 10N of the privacy policy detailed information consent inquiry about the address information. Send the screen. The terminal device 10N displays a privacy policy detailed information consent inquiry screen, which is a screen for inquiring the agreement of the privacy policy on the address information provided by the privacy protection device 100.
FIG. 14 is a diagram showing an example of a privacy policy detailed information agreement inquiry screen for address information.
On the privacy policy detailed information consent inquiry screen 1150 for address information, types of a plurality of pieces of user information such as a prefecture 1102, a ward, municipalities 1104, and a town area / chome / address 1106 are displayed. Check boxes 1101, 1103, and 1105 are displayed on the privacy policy detailed information agreement inquiry screen 1150 corresponding to each of a plurality of types of user information. Further, on the privacy policy detailed information consent inquiry screen 1150, a return button 1122 indicating to return to the privacy policy detailed information consent inquiry screen 1050 is displayed.
Similarly to FIG. 6, the prefecture 1102 is information indicating the prefecture, the ward municipalities 1104 is information indicating the ward municipalities, and the town area / chome / address 1106 is information indicating the town area / chome / address. In the example shown in FIG. 14, the check box 1101 corresponds to the prefecture 1102, the check box 1103 corresponds to the ward, municipalities 1104, and the check box 1105 corresponds to the town area / chome / address 1106. In the user information, for the prefecture 1102, the ward municipalities 1104, and the town area / chome / address 1106, since the corresponding check box is not displayed with a check mark, the setting to permit the provision to the service provider is made. The user can recognize that it is not.

Returning to FIG. 13, the description will be continued. The user refers to the privacy policy detailed information consent inquiry screen 1050 and presses the details button 1008, whereby a privacy policy detailed information consent inquiry screen application is transmitted from the terminal device 10N. The privacy policy detailed information consent inquiry screen application includes user information identification information corresponding to the house information. When the screen information creation unit 162 of the privacy protection device 100 acquires the privacy policy detailed information consent inquiry screen application received by the communication unit 152, the communication unit 152 inquires the terminal device 10N of the privacy policy detailed information consent inquiry about the address information. Send the screen. The terminal device 10N displays a privacy policy detailed information consent inquiry screen for the address information provided by the privacy protection device 100.
FIG. 15 is a diagram showing an example of a privacy policy detailed information agreement inquiry screen for house information.
A plurality of types of user information such as a detached house 1202, a condominium 1204, and a rental 1206 are displayed on the privacy policy detailed information consent inquiry screen 1250 for house information. In addition, check boxes 1201, 1203, and 1205 are displayed on the privacy policy detailed information agreement inquiry screen 1250 corresponding to each of a plurality of types of user information. Further, on the privacy policy detailed information agreement inquiry screen 1250, a return button 1222 indicating that the screen returns to the privacy policy detailed information agreement inquiry screen 1050 is displayed.
As in FIG. 7, a detached house 1202 is information indicating a detached house, an apartment 1204 is information indicating an apartment, and a lease 1206 is information indicating a lease. In the example shown in FIG. 15, the check box 1201 corresponds to the detached house 1202, the check box 1203 corresponds to the apartment 1204, and the check box 1205 corresponds to the rental 1206. In the user information, as for the detached house 1202, a check mark is displayed in the corresponding check box, so that the user can recognize that the setting is permitted to be provided to the service provider. ing. Also, in the customer information, for the condominium 1204 and the rental 1206, the corresponding check box is not displayed with a check mark so that the user can recognize that the setting is not permitted to be provided to the service provider. It has become.
The user refers to the privacy policy consent inquiry screen or the privacy policy detailed information consent inquiry screen, and presses the button 820 on the privacy policy consent inquiry screen if he or she agrees, or to the check box if he does not agree After inputting the check point or deleting the check point input to the check box, the button 820 is pressed. If the user does not agree, the user presses a button 822 on the privacy policy agreement inquiry screen.

<Configuration of terminal device>
An example of a hardware configuration of the terminal device 10N according to the embodiment will be described. The terminal device 10N includes a CPU, a memory, a nonvolatile memory, a display, an operation unit, a communication I / F, and an internal bus.
The CPU executes, for example, a program stored in a non-volatile memory, and controls each unit of the terminal device 10N using the memory as a work memory. The program includes a web browser, an application, and the like. The memory is configured by a RAM such as a volatile memory using a semiconductor element, and is used as a work memory of the CPU. The nonvolatile memory includes, for example, a hard disk (HD), a ROM, and the like. The program executed by the CPU is stored in the nonvolatile memory. The display is controlled by the CPU, and displays an image, a GUI (Graphical User Interface), and the like.
The CPU generates a control signal and a video signal representing an image to be displayed on the display by executing the program. The CPU outputs a video signal representing an image to a display. The display displays an image by processing the image signal output by the CPU. The operation unit is an input device that receives a user operation.
The communication I / F is an interface for transmitting and receiving various contents such as video data by communicating with an external device, the privacy protection device 100 connected to the communication network 20, and the like. The internal bus connects the CPU, the memory, the nonvolatile memory, the display, the operation unit, and the communication I / F to each other. Each unit connected to the internal bus can exchange data with each other via the internal bus.

<Functional configuration of terminal device>
FIG. 16 is a functional block diagram of the terminal device 10N according to the present embodiment. The terminal device 10N includes a communication unit 252 and a communication control unit 254. Each of these units is a function realized by operating any one of the components shown in FIG. 16 according to a command from a CPU that executes a program or an application loaded on a memory from a non-volatile memory. is there.

<Functional configuration of terminal device>
Each functional configuration of the terminal device 10N will be described in detail with reference to FIG. In the following, in describing each functional configuration of the terminal device 10N, among the components illustrated in FIG. 16, the relationship with the main hardware for realizing each functional configuration of the terminal device 10N is also described. explain.
The communication unit 252 is realized by a command from the CPU and a communication I / F. The communication unit 252 transmits and receives various data to and from another device such as the privacy protection device 100 via the communication network 20. For example, upon receiving the pre-setting registration screen transmitted by the privacy protection device 100, the communication unit 252 outputs the pre-setting registration screen to the CPU. In addition, for example, the communication unit 252 transmits the detailed information registration application output by the CPU to the privacy protection device 100. In addition, for example, the communication unit 252 outputs a detailed information registration screen transmitted by the privacy protection device 100 to the CPU.
Further, for example, the communication unit 252 transmits information indicating the operation output by the CPU to the privacy protection device 100. Further, for example, the communication unit 252 outputs to the CPU a pre-setting registration screen or a detailed information registration screen on which the operation transmitted by the privacy protection device 100 is reflected.
Further, for example, upon receiving the privacy policy agreement inquiry screen transmitted by the privacy protection device 100, the communication unit 252 outputs the privacy policy agreement inquiry screen to the CPU. Further, for example, the communication unit 252 transmits the privacy policy detailed information agreement inquiry screen application output from the CPU to the privacy protection device 100. Further, for example, upon receiving the privacy policy detailed information agreement inquiry screen transmitted by the privacy protection device 100, the communication unit 252 outputs the privacy policy detailed information agreement inquiry screen to the CPU.
Further, for example, the communication unit 252 transmits information indicating the operation output by the CPU to the privacy protection device 100. In addition, for example, the communication unit 252 outputs a privacy policy agreement inquiry screen or a privacy policy detailed information agreement inquiry screen that reflects the operation transmitted by the privacy protection device 100 to the CPU.

  The communication control unit 254 is realized by a command from the CPU. The communication control unit 254 performs connection processing and communication control between the communication unit 252 and the privacy protection device 100. The communication control unit 254 transmits a pre-setting registration application, a detailed information registration application, information indicating an operation, a pre-setting registration response, and the like from the communication unit 252 to the privacy protection device 100. Further, the communication control unit 254 transmits a service use start application, a privacy policy agreement response, a privacy policy detailed information agreement response, and the like to the privacy protection device 100 from the communication unit 252.

<Operation of Communication System According to Present Embodiment>
17 to 20 are diagrams illustrating an example of the operation of the communication system according to the present embodiment. FIGS. 17 to 19 are diagrams showing a registration process of pre-setting, and FIG. 20 is a diagram showing a process for requesting use of a service.
<Pre-registration registration process (1)>
The process (part 1) of registering the advance setting will be described.
(Step S102) When the user performs an operation of requesting registration of pre-setting to the operation unit, the web browser of the terminal device 10N creates a pre-setting registration application including the user ID. The communication control unit 254 outputs the pre-registration registration application created by the web browser to the communication unit 252. The communication unit 252 transmits a pre-setting registration application to the privacy protection device 100.
(Step S104) Upon receiving the pre-registration registration application transmitted from the terminal device 10N, the communication unit 152 of the privacy protection device 100 outputs the pre-registration registration application to the pre-setting information setting unit 154. When the pre-setting information setting unit 154 acquires the pre-setting registration application from the communication unit 152, it outputs a pre-setting registration screen to the communication unit 152. The communication unit 152 transmits the pre-setting registration screen supplied from the pre-setting information setting unit 154 to the terminal device 10N.
The pre-setting registration screen transmitted from privacy protection device 100 is received by communication unit 252 of terminal device 10N. The web browser outputs a pre-setting registration screen to the display. The display displays a pre-setting registration screen shown in FIG. The user of the terminal device 10N refers to the pre-setting registration screen, and operates the operation unit to determine whether or not to input a check point for each of the type information of one or a plurality of pieces of user information. Set basic handling rules for.
(Step S106) When the user performs an operation for requesting registration of the detailed setting to the operation unit, the web browser of the terminal device 10N displays the user information identification information corresponding to the contractor detailed information and the user information corresponding to the residence information. Create a detailed information registration application including user information identification information requesting registration of detailed settings such as identification information. The communication control unit 254 outputs the detailed information registration application created by the web browser to the communication unit 252. The communication unit 252 transmits the detailed information registration application to the privacy protection device 100.
(Step S108) Upon receiving the detailed information registration request transmitted from the terminal device 10N, the communication unit 152 of the privacy protection device 100 outputs the detailed information registration request to the preset information setting unit 154. When acquiring the detailed information registration application from the communication unit 152, the pre-setting information setting unit 154 outputs a detailed information registration screen to the communication unit 152. The communication unit 152 transmits the detailed information registration screen supplied from the pre-setting information setting unit 154 to the terminal device 10N.

(Step S110) The detailed information registration screen transmitted from the privacy protection device 100 is received by the communication unit 252 of the terminal device 10N. The web browser outputs the detailed information registration screen to the display. The display displays the detailed information registration screen shown in any of FIGS. The user of the terminal device 10N refers to the detailed information registration screen and operates the operation unit to determine whether or not to input a check point for each of the type information of one or a plurality of pieces of user information. Set basic handling rules for. When detecting that the OK button 322 in FIG. 3 has been pressed, the web browser generates a pre-set registration response including information set by the user and outputs the pre-set registration response to the communication unit 252. When the communication unit 252 of the terminal device 10 </ b> N acquires the pre-set registration response from the web browser, the communication unit 252 transmits the pre-set registration response to the privacy protection device 100.
(Step S112) The pre-set registration response transmitted by the terminal device 10N is received by the communication unit 152 of the privacy protection device 100. The communication unit 152 outputs the pre-setting registration response to the pre-setting information setting unit 154. When the pre-setting information setting unit 154 acquires the pre-setting registration response supplied from the communication unit 152, the pre-setting registration response includes the user ID, the user information identification information, and the basic handling rules of the user information included in the pre-setting registration response. Are stored in the pre-setting table 1662 of the storage unit 166 in association with each other. Here, if the user ID, the user information identification information, and the information related to the provision to the service provider are already stored in association with each other, the pre-setting information setting unit 154 changes each time the user ID is changed. The date and the setting information may be stored in association with each other. Through steps S102 to S112, the user can set and register in advance information relating to the provision of the one or more pieces of user information to the service provider in the privacy protection device 100.

<Pre-registration registration process (2)>
The process (part 2) of registering the pre-setting will be described. In the process of registering the pre-setting (part 2), the process of automatically setting the setting information of the lower layer user information when the setting information of the upper layer user information is changed will be described.
(Step S202) When the user performs an operation for setting user information on the operation unit, the web browser of the terminal device 10N creates information indicating the operation. The communication control unit 254 outputs information indicating the operation created by the web browser to the communication unit 252. The communication unit 252 transmits information indicating an operation to the privacy protection device 100.
When receiving the information indicating the operation transmitted from the terminal device 10N, the communication unit 152 of the privacy protection device 100 outputs the information indicating the operation to the preset information setting unit 154. Upon acquiring the information indicating the operation from the communication unit 152, the pre-setting information setting unit 154 determines whether the operation corresponds to a change in the setting of the user information of the first tier. If the operation corresponds to a change in the setting of the user information of the first tier, the process proceeds to step S204; otherwise, the process proceeds to step S212.
(Step S204) When the operation corresponds to the change of the setting of the user information of the layer 1, the pre-setting information setting unit 154 determines whether or not the user information of the layer 1 includes the user information of the layer 2. . If there is no user information of the second tier in the corresponding user information of the first tier, the process ends. If there is, the process proceeds to step S206.
(Step S206) When the user information of the layer 1 includes the user information of the layer 2, the pre-setting information setting unit 154 determines whether the user information of the layer 2 includes the user information of the layer 3. When the user information of the layer 2 includes the user information of the layer 3, the process proceeds to step S208. When the user information of the layer 2 does not include the user information of the layer 3, the process proceeds to step S210.

(Step S208) When the user information of the layer 2 includes the user information of the layer 3, the pre-setting information setting unit 154 converts the user information of the layer 2 and the setting information of the user information of the layer 3 into the user of the layer 1 Change to the same setting information as the information setting information. The pre-setting information setting unit 154 creates a pre-setting registration screen including a result of changing the setting information of the user information of the layer 2 and the setting information of the user information of the layer 3, and communicates the created pre-setting registration screen. Output to the unit 152. The communication unit 152 transmits the pre-setting registration screen supplied from the pre-setting information setting unit 154 to the terminal device 10N.
(Step S210) If there is no user information of the layer 3 in the user information of the layer 2, the pre-setting information setting unit 154 sets the setting information of the user information of the layer 2 to the same setting information as the setting information of the user information of the layer 1. Change to information. The pre-setting information setting unit 154 creates a pre-setting registration screen including the result of changing the setting information of the user information of the layer 2, and outputs the created pre-setting registration screen to the communication unit 152. The communication unit 152 transmits the pre-setting registration screen supplied from the pre-setting information setting unit 154 to the terminal device 10N.
(Step S212) When the operation does not correspond to the change of the setting information of the user information of the layer 1 in step S202, the pre-setting information setting unit 154 determines whether the operation corresponds to the change of the setting of the user information of the layer 2 or not. Determine whether or not. If the operation corresponds to the change of the setting of the user information of the layer 2, the process proceeds to step S214, and if not, the process ends.
(Step S214) When the operation corresponds to the change of the setting of the user information of the layer 2, the pre-setting information setting unit 154 determines whether the user information of the layer 2 includes the user information of the layer 3 or not. . If there is no user information of the layer 3 in the corresponding user information of the layer 2, the process is ended, and if there is, the process proceeds to step S216.
(Step S216) When the user information of the layer 2 includes the user information of the layer 3, the pre-setting information setting unit 154 sets the setting information of the user information of the layer 3 to the same setting information as the setting information of the user information of the layer 2. Change to information. The pre-setting information setting unit 154 creates a detailed information registration screen including the result of changing the setting information of the user information of the layer 3, and outputs the created detailed information registration screen to the communication unit 152. The communication unit 152 transmits the detailed information registration screen supplied from the pre-setting information setting unit 154 to the terminal device 10N.
According to steps S202 to S216, when the setting of the user information of the upper layer is changed, the setting of the user information of the lower layer of the user information of the upper layer can be automatically set.

<Pre-registration registration process (3)>
The process (part 3) of registering the advance setting will be described. In the process of registering the pre-setting (part 3), the process of automatically setting the user information of the upper layer when the setting of the user information of the lower layer is changed will be described.
(Step S302) When the user performs an operation for setting user information on the operation unit, the web browser of the terminal device 10N creates information indicating the operation. The communication control unit 254 outputs information indicating the operation created by the web browser to the communication unit 252. The communication unit 252 transmits information indicating an operation to the privacy protection device 100.
When receiving the information indicating the operation transmitted from the terminal device 10N, the communication unit 152 of the privacy protection device 100 outputs the information indicating the operation to the preset information setting unit 154. When acquiring the information indicating the operation from the communication unit 152, the pre-setting information setting unit 154 determines whether the operation corresponds to a change in the setting of the user information of the lower hierarchy such as the hierarchy 2 and the hierarchy 3. If it corresponds to the change of the setting of the lower layer user information, the process proceeds to step S304, and if not, the process ends.
(Step S304) When the setting corresponds to the change of the setting of the user information of the lower hierarchy, the pre-setting information setting unit 154 sets the setting of the user information whose setting has been changed and the setting of the user information of the upper hierarchy of the user information. It is determined whether all other user information has the same setting. If all the other user information of the lower hierarchy has the same setting, the process proceeds to step S306, and if not, the process ends.
(Step S306) When all the other user information of the lower layer has the same setting, the pre-setting information setting unit 154 changes the setting of the user information of the upper layer to the same setting as the setting of the lower layer.
After step S306, when the setting information of one of the user information of the lower layer is changed, the setting information of the user information of the upper layer of the lower layer is also automatically changed. .
According to steps S302 to S306, when the setting of the lower layer user information is changed, the setting of the changed user information and the other user information of the lower layer of the user information of the higher layer of the user information If all the settings are the same, the user information of the upper layer can be automatically set.

<Process for requesting use of service>
Next, with reference to FIG. 20, a process when a user requests use of a service will be described.
(Step S402) When the web browser of the terminal device 10N is notified that the operation requesting the use of the service is detected by the operation unit, the web browser creates a service use start application including the service ID and the user ID. Then, the web browser transmits a service use start application to the privacy protection device 100 via the communication unit 252. The service use start application is received by the communication unit 152 of the privacy protection device 100.
(Step S404) The communication unit 152 of the privacy protection device 100 outputs the received service use start application to the service use request processing unit 156. The service use request processing unit 156 specifies the service providing apparatus T0M that provides the service based on the service ID included in the service use start application, and requests transmission of a privacy policy or the like determined by the service provider of the service. Create a transmission request such as a privacy policy. The service use request processing unit 156 transmits the created transmission request such as a privacy policy to the specified service providing apparatus T0M via the communication unit 152. The transmission request such as the privacy policy is received by the service providing apparatus T0M.

(Step S406) The service providing apparatus T0M transmits, to the privacy protection apparatus 100, a privacy policy or the like determined by a service provider that provides a service corresponding to the service ID included in the received privacy policy or other transmission request.
The privacy policy and the like transmitted to the privacy protection device 100 include request user information identification information that identifies the type of user information that the service provider requests the service user to provide.
(Step S408) The communication unit 152 of the privacy protection device 100 outputs the received privacy policy and the like to the service use request processing unit 156. The service use request processing unit 156 is registered in the request user information identification information requested by the service provider to the service user included in the privacy policy and the like, and registered in the pre-setting table 1662 stored in the storage unit 166. Based on the obtained user information identification information, the user information identification information stored in the pre-setting table 1662 is specified from the user information identification information requested by the service provider. The service use request processing unit 156 outputs the specified user information identification information to the screen information creation unit 162.
(Step S410) The screen information creation unit 162 of the privacy protection device 100 displays the information stored in the advance setting table 1662 for the type information corresponding to the user information identification information specified by the service use request processing unit 156. Create a privacy policy agreement inquiry screen. The screen information creation unit 162 outputs the created privacy policy agreement inquiry screen to the communication unit 152.

(Step S412) When the privacy policy agreement inquiry screen is supplied from the screen information creation unit 162, the communication unit 152 of the privacy protection device 100 displays the privacy policy inquiry agreement screen on the terminal device 10N of the user who has requested use of the service. Send to When the communication unit 252 receives the privacy policy agreement inquiry screen from the privacy protection device 100, the web browser of the terminal device 10N outputs the privacy policy agreement inquiry screen to the display. When the privacy policy agreement inquiry screen is supplied from the web browser, the display processes the privacy policy agreement inquiry screen information to display the privacy policy agreement inquiry screen as shown in FIG.
The user who has requested the use of the service refers to the privacy policy agreement inquiry screen and determines whether or not to agree to provide each of the one or a plurality of types of user information to the service provider. The user who has requested the use of the service performs an operation of agreeing by pressing the button 620 when agreeing, and corresponds to one or a plurality of types of user information when agreeing by partially changing the content. After inputting a check mark in the check box or deleting a check mark input in the check box, an operation of agreeing is performed by pressing the button 620.
Further, the user who has requested use of the service refers to the privacy policy agreement inquiry screen and presses the details button, so that the terminal device 10N displays a privacy policy detailed information agreement inquiry screen. The user who has requested the use of the service refers to the privacy policy detailed information agreement inquiry screen, and determines whether or not to agree to provide each of the one or more types of user information to the service provider. The user who has requested the use of the service performs an operation of agreeing by pressing the back button when agreeing, and corresponds to one or a plurality of types of user information when partially changing the contents and agreeing. After inputting a check mark in the check box or deleting a check mark input in the check box, an operation of agreeing is performed by pressing a back button.
When the operation unit detects that the button 820 is pressed on the privacy policy agreement inquiry screen, the web browser generates a privacy policy agreement response and outputs the response to the communication unit 252. If the user who has requested the use of the service does not agree, the user presses the button 822 to perform an operation that does not agree.

(Step S414) When the privacy policy agreement response screen information is supplied from the web browser, the communication unit 252 of the terminal device 10N transmits the privacy policy agreement response to the privacy protection device 100.
(Step S416) The privacy policy agreement response transmitted by the terminal device 10N is received by the communication unit 152 of the privacy protection device 100. The communication unit 152 outputs the privacy policy agreement response to the service use request processing unit 156. Upon obtaining the privacy policy agreement response supplied from the communication unit 152, the service use request processing unit 156 acquires the service ID, the user ID, the user information type information ID included in the privacy policy agreement response, and the service provider. Is stored in the storage unit 166 as authorization setting information in association with setting information relating to the provision to the user.
(Step S418) The service use request processing unit 156 of the privacy protection device 100 creates a response to the service provider based on the information included in the privacy policy agreement response, and outputs the response to the communication unit 152. The communication unit 152 transmits the response to the service provider supplied by the service use request processing unit 156 to the service providing apparatus T0M.
Upon receiving the response to the service provider transmitted by the privacy protection device 100, the service providing apparatus T0M stores the service ID, the user ID, and the setting information relating to the provision of the user information to the service provider for each type of user information. . When providing the service corresponding to the service ID to the user corresponding to the user ID, the service providing apparatus TOM provides the service according to the setting information stored in association with the user.
Through steps S402-S418, the user can refer to the privacy policy agreement inquiry screen transmitted from privacy protection device 100 and set whether to provide user information to the service provider.

In the embodiment described above, the case where the communication network 20 and the communication network 50 are different has been described, but the present invention is not limited to this example. For example, the communication network 20 and the communication network 50 may be the same network.
In the above-described embodiment, the case where the user information has two layers and the case where the user information has three layers have been described. However, the present invention is not limited to this example. For example, the user information may be in four or more layers.

In the above-described embodiment, the name information, the telephone number, the mail address, the contractor detailed information, the family information, the house information, and the like have been described as examples of the type information of the user information. However, the present invention is not limited to this example. For example, the type information of the user information may include information indicating whether or not the advertisement can be sent by direct mail or the like.
Also, in the above-described embodiment, a case has been described in which each of the plurality of types of user information type information is input on the pre-setting registration screen and the checkbox corresponding to the type information of the user information that can be provided to the service provider is input. However, it is not limited to this example. For example, each of the type information of the plurality of user information may be input on a screen different from the pre-setting registration screen.
Further, in the above-described embodiment, the case where “OK” or “NO” is set in advance in the availability information of provision to a third party in the advance setting table 1662 has been described, but the present invention is not limited to this example. For example, in addition to “OK” or “NO”, information indicating confirmation to the user each time may be set.
Further, in the above-described embodiment, the case where the communication system includes one privacy protection device has been described, but the present invention is not limited thereto. For example, a communication system may include a plurality of privacy protection devices. In this case, the plurality of privacy protection devices may have the same function, or may have different functions.

According to the embodiment, by operating the terminal device 10N, the user can register the basic handling rule of the user information in the privacy protection device 100 as a preset. The privacy protection device 100 transmits a pre-registration registration screen or a detailed information registration screen when allowing the user to perform pre-registration, and the user information of the upper hierarchy performed by the user on the pre-registration registration screen or the detailed information registration screen. In response to the operation of changing the setting information of the type information of the user information, the setting information of the type information of a plurality of user information in a lower hierarchy is changed with respect to the type information of the user information of the upper layer. In addition, the privacy protection device 100 responds to an operation performed by the user on the pre-registration registration screen or the detailed information registration screen to change the setting information of the type information of the lower-layer user information. The setting information of the type information of a plurality of pieces of user information which is a higher layer than the type information is changed. With this configuration, the user can easily perform the pre-setting.
According to the embodiment, when the user requests the use of the service from the terminal device 10N to the privacy protection device 100, the privacy protection device 100 requests the privacy protection device 100 from the service providing device T0M that provides the service. The type information of the user information is acquired, and among the type information of the user information requested by the service provider, the type information set in the preset table 1662 is the service provider set in the preset table 1662. A privacy policy inquiry screen and a privacy policy detailed information inquiry screen displayed based on the availability information of the provision to the terminal device 10N are transmitted to the terminal device 10N. The privacy protection device 100 responds to an operation performed by the user on the privacy policy inquiry screen or the privacy policy detailed information inquiry screen to change the setting information of the type information of the upper layer user information, and the user information of the upper layer user information is changed. The setting information of the type information of a plurality of pieces of user information which is a lower layer with respect to the type information is changed. In addition, the privacy protection device 100 responds to an operation performed by the user on the privacy policy inquiry screen or the privacy policy detailed information inquiry screen to change the setting information of the type information of the lower-level user information. The setting information of the type information of a plurality of pieces of user information, which is an upper layer with respect to the information type information, is changed. With this configuration, the user can easily set the privacy policy inquiry screen and the privacy policy detailed information inquiry screen. Further, even when the user requests the use of a new service, the screen for requesting to agree to the usage contract transmitted from the provider of the new service is displayed as set in the pre-setting table 1662. Therefore, it is not necessary to input check marks in all check boxes corresponding to each of the plurality of pieces of identification information. In other words, the user does not have to perform an input operation such as inputting a check mark in the check box for all of the type information of the user information required by the privacy policy every time the use of the service is requested. Easy to set.

The embodiments of the present invention and the modifications thereof have been described above. However, these embodiments and the modifications thereof have been presented as examples, and are not intended to limit the scope of the invention. These embodiments and their modifications can be implemented in other various forms, and various omissions, replacements, changes, and combinations can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, and are also included in the invention described in the claims and their equivalents.
Each of the above devices has a computer inside. The process of each process of each device described above is stored in a computer-readable recording medium in the form of a program, and the above process is performed by reading and executing the program by the computer. Here, the computer-readable recording medium refers to a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to a computer via a communication line, and the computer that has received the distribution may execute the program.
Further, the program may be for realizing a part of the functions described above.
Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.
In the above-described embodiment, the privacy protection device 100 is an example of an information processing device, the storage unit 166 is an example of a storage unit, the preset setting information setting unit 154 is an example of an installation unit, and the user information identification information is a user. This is an example of identification information of information type information, and the presence / absence of a point is an example of first information and second information.

  20 communication network, 50 communication network, 101-10N terminal device, T01-TOM service providing device, 100 privacy protection device, T01-TOM service providing device, 152 communication unit, 154 pre-setting information setting Unit, 156: service use request processing unit, 158: comparison unit, 162: screen information creation unit, 166 ... storage unit, 1662 ... pre-set table, 168 ... bus line, 252 ... communication unit, 254 ... communication control unit, 265 … Bus line

Claims (8)

An information processing apparatus that manages information related to provision of information about the plurality of users to a service provider used by a plurality of users,
Identification information of the plurality of users, identification information of the type information of the plurality of user information relating to the user for each of the plurality of users, and third information of the type information of the user information for each of the type information of the plurality of user information A storage unit for storing setting information relating to provision to a user in association with the setting information,
A setting unit for setting the setting information for each of the type information of the plurality of user information stored in the storage unit,
The storage unit stores each of the type information of the plurality of user information according to a hierarchical structure,
The setting unit, among the plurality of types of user information, sets a plurality of pieces of user information that are lower layers with respect to the type information of the upper layer user information according to the setting information of the type information of the upper layer user information. An information processing apparatus, wherein the setting information of the type information of the upper layer is changed, and the setting information of the type information of the user information of the upper layer is changed according to the setting information of each of the type information of the plurality of lower layer user information.   The setting unit, of the type information of the plurality of pieces of user information, includes the type information of the user information of the upper layer and the type information of the user information of the lower layer with respect to the type information of the user information of the upper layer. When changing the setting information of the type information of the upper layer user information to the second information in a state where all the setting information is the first information, setting of the type information of the plurality of user information of the lower layer The information processing apparatus according to claim 1, wherein the information is also changed to the second information.   The setting unit, among the type information of the plurality of pieces of user information, the type information of the user information of the upper layer, and the type information of a plurality of pieces of user information that is a lower layer relative to the type information of the user information of the upper layer In the case where any of the setting information of the lower hierarchy is changed to the second information in a state where all the setting information of the lower hierarchy is the first information, the type information of the user information of the lower hierarchy is changed to the second information. 3. The information processing apparatus according to claim 1, wherein the setting information of the type information of the user information of the upper hierarchy is also changed to the second information.   The setting unit, when all the setting information of the type information of the plurality of lower layer user information among the type information of the plurality of user information is the second information, sets the type of the upper layer user information. The information processing apparatus according to claim 1, wherein the information setting information is set to the second information.   The setting unit, when all setting information of the type information of the plurality of lower layer user information among the type information of the plurality of user information is the first information, sets the type of the upper layer user information. The information processing apparatus according to claim 1, wherein the information setting information is set to the first information.   The storage unit stores each type information of the plurality of pieces of user information in accordance with a hierarchical structure that becomes type information of lower-level user information by embodying type information of higher-level user information. The information processing apparatus according to claim 1. An information processing method executed by an information processing apparatus that manages information related to provision of information on a plurality of users to a service provider used by a plurality of users,
Identification information of the plurality of users, identification information of the identification information of the plurality of user information related to the user for each of the plurality of users, and third identification information of the user information for each of the identification information of the plurality of user information. Storing setting information relating to provision to the user in association with the hierarchical structure,
Setting the setting information for each of the identification information of the plurality of user information stored by the storing step,
Setting of the identification information of a plurality of pieces of user information that is a lower layer with respect to the identification information of the upper layer of user information among the pieces of identification information of the plurality of pieces of user information in accordance with the setting information of the identification information of the upper layer of user information Changing the information and changing the setting information of the identification information of the user information of the upper layer according to each setting information of the identification information of the plurality of user information of the lower layer. In the computer of the information processing device,
Identification information of the plurality of users, identification information of the identification information of the plurality of user information related to the user for each of the plurality of users, and third identification information of the user information for each of the identification information of the plurality of user information. Storing setting information relating to provision to the user in association with the hierarchical structure,
Setting the setting information for each of the identification information of the plurality of user information stored by the storing step,
Setting of the identification information of a plurality of user information that is a lower layer with respect to the identification information of the upper layer user information among the identification information of the plurality of user information in accordance with the setting information of the identification information of the upper layer user information Changing the information, and changing the setting information of the identification information of the user information of the upper hierarchy according to the setting information of each of the identification information of the plurality of user information of the lower hierarchy.

Images