JP7107979B2 - Linkage server program, provider server program, and data linkage system - Google Patents

Description

The present invention relates to a linking server program, a provider server program, and a data linking system.

In recent years, there are many services that utilize so-called big data. In providing such services, a large amount of diverse data is collected, and big data is realized by multiplying the collected large amount of data. However, when collecting customer-related data such as personal information from different business operators, it is necessary to obtain the consent of the customer himself/herself, or to make it so that the individual customer cannot be identified (e.g., anonymization). In Patent Document 1 below, anonymized health care data obtained by anonymizing health care data of general users and employees is acquired from a health care system for general users and a health care system for companies, and aggregated. A comprehensive health information management system is disclosed that transmits aggregated data to a corporate healthcare system.

JP 2019-105913 A

In the above system disclosed in Patent Document 1, since general user identification data for identifying general users and employee identification data for identifying employees are associated in advance, can be multiplied by the anonymized health care data of employees and the anonymized health care data of employees. For this reason, the above system has a problem that it is impossible to associate the anonymized data of the same person with each other unless such association is made in advance.

Therefore, in order to solve the above problems, the present invention provides a link server program capable of associating anonymized data of the same person even if the data of the same person is not associated in advance between different business operators. The object is to provide a server program and a data linkage system.

A cooperation server program according to one aspect of the present invention provides a cooperation server capable of communicating with a plurality of business servers that manage customer data relating to customers. and hash data indicating a hash value calculated based on the data of the key data item of the customer data as a key for linking the customer data managed by each of the multiple business server servers. Combine the anonymized customer data acquired from each of the multiple operator servers, using the hash values acquired from each of the multiple operator servers as keys, and generate combined anonymized customer data. A combining unit and a cooperation providing unit that provides combined anonymized customer data to at least one of a business operator server and other external devices are realized.

A business server program according to an aspect of the present invention stores, among data items of customer data, a business server program that manages customer data that can be communicated with a linking server that combines customer data relating to a plurality of customers. By referring to a key storage unit that stores key information indicating a key data item that serves as a key for linking customer data between different business servers, hashing is performed based on the data of the key data item of the customer data. A hash calculation unit that calculates a value, a customer data storage unit that stores anonymized customer data obtained by anonymizing customer data, and hash data that indicates a hash value and the anonymized customer data are transferred between different business servers. A business that acquires anonymized customer data that is generated by combining anonymized customer data on the linking server with a business provider that provides it to the linking server in order to combine the anonymized customer data, and from the linking server. a person acquisition unit;

A data linkage system according to one aspect of the present invention is a data linkage system that includes a plurality of business operator servers that manage customer data related to customers, and a linkage server that can communicate with the plurality of business operator servers, wherein the business operator The server refers to a key storage unit that stores key information indicating a key data item that serves as a key for linking customer data between different business servers, among the data items of the customer data, and stores customer data. The cooperation server comprises a hash calculation unit that calculates a hash value based on data of key data items of data, and a customer data storage unit that stores anonymized customer data obtained by anonymizing customer data. a cooperative acquisition unit that acquires each anonymized customer data and hash value from each company server; A combining unit that combines the data to generate combined anonymized customer data, and a cooperation providing unit that provides the combined anonymized customer data to at least one of the operator server and other external devices. .

According to the above aspect, the linking server acquires hash values calculated for combining customer data between anonymized customer data from a plurality of operator servers and different operator servers. can be done. Then, according to the above aspect, the cooperation server can associate and combine the anonymized customer data by using the acquired hash value as a combining key. Further, according to the above aspects, the merchant server can obtain this combined customer data.

ADVANTAGE OF THE INVENTION According to the present invention, a linking server program, a business server program, and a data linking system capable of linking anonymized data of the same person even if data of the same person are not linked in advance between different business operators. can be provided.

1 is a diagram for explaining a system configuration example of a data linkage system according to a first embodiment; FIG. 1 is a diagram for explaining an example of an overview of a data linkage system according to a first embodiment; FIG. It is a figure showing an example of functional composition of a provider server concerning a 1st embodiment. 3 is a diagram illustrating an example of a functional configuration of a cooperation server according to the first embodiment; FIG. 4 is a diagram showing an operation example of the data linkage system according to the first embodiment; FIG. It is a figure which shows an example of the hardware constitutions of a provider server and a cooperation server which concern on 1st Embodiment. FIG. 11 is a diagram for explaining an example of an overview of a data linkage system according to a second embodiment; FIG. FIG. 10 is a diagram illustrating an example of a functional configuration of a cooperation server according to the second embodiment; FIG.

Preferred embodiments of the present invention will be described with reference to the accompanying drawings. It should be noted that, in each figure, the same reference numerals have the same or similar configurations.

In the present invention, "part", "means", "apparatus" and "system" do not simply mean physical means, but the "part", "means", "apparatus" and "system" It also includes the case where the function is realized by software. In addition, even if the function of one "part", "means", "apparatus", or "system" is realized by two or more physical means or devices, two or more "part", "means", "device", or "system" The functions of "apparatus" and "system" may be realized by one physical means or device.

In addition, the program of the present embodiment can be installed or loaded into a computer by downloading through various storage media such as optical discs such as CD-ROMs, magnetic discs, semiconductor memories, etc., or through communication networks, etc. can.

[First embodiment]
First, a first embodiment of the present invention will be described. In this embodiment, anonymized customer data is collected from a server used by each of a plurality of business operators (hereinafter referred to as a "business server") and combined to link customer data of multiple business operators. An example of providing so-called big data will be used for explanation, but it is not intended to be limited to this.

"Customer data" corresponds to various data related to customers. Customer data may include, for example, customer identification information for identifying the customer, customer's so-called personal information such as customer's name, telephone number, address, e-mail address, personal number (My Number), gender or date of birth. good. In addition, customer data includes, for example, the customer's driver's license number, card number, account information of the account held by the customer (e.g., account type, account number, name, etc.), device information of the terminal device used by the customer (e.g., MAC address, IP address, serial number, etc.). The customer data may also include, for example, biometric information related to the user's biometric features (eg, user's face image data, fingerprint information, iris information, voiceprint information, etc.). Further, the customer data may include, for example, location information (eg, GPS data, etc.), web history information (eg, browsing history, search history, cookie information, etc.), or product purchase history information on EC sites. .

<1. System configuration>
A system configuration example of a data linkage system 1 according to the present embodiment will be described with reference to FIG.

The data linkage system 1 is a system for providing so-called big data, which is a combination of customer data managed by each business operator, to a plurality of business operators who want to mutually cooperate customer data. be. As shown in FIG. 1 , the data linkage system 1 includes a first operator server 100 a used by a first operator, a second operator server 100 b used by a second operator, and a linkage server 200 . The first operator server 100a and the second operator server 100b are collectively referred to as "operator server 100" when there is no particular need to distinguish between them.

The linking server 200 connects the first business server 100a and the second business server 100b via the network N in order to link customer data between the first business server 100a and the second business server 100b. 100b is communicatively connected. Also, the cooperation server 200 may be connected to other external devices via the network N, for example, so as to be able to communicate therewith.

The network N is composed of a wireless network and a wired network. Examples of networks include mobile phone networks, PHS (Personal Handy-phone System) networks, wireless LAN (Local Area Network), 3G (3rd Generation), LTE (Long Term Evolution), 4G (4th Generation), 5G ( 5th Generation), WiMax (registered trademark), infrared communication, Bluetooth (registered trademark), wired LAN, telephone line, power line network, and IEEE1394-compliant network.

The business server 100 is a server device for managing customer data regarding business customers. The business server 100 implements a server function of managing customer data and information about the customer data by executing a predetermined program such as a business server program. Note that this predetermined program may be, for example, an application program dedicated to the data linkage system 1 installed in the provider server 100 . The business server 100, for example, performs so-called data cleansing such as normalizing customer data so as to conform to a predetermined format, calculates hash values from customer data, and anonymizes customer data. In FIG. 1, only one operator server 100 is shown for each operator for the sake of simplicity of explanation, but a plurality of operators may be provided.

The linking server 200 is a server device for providing a service (hereinafter referred to as "data linking service") for linking the respective customer data to the first business operator and the second business operator. In other words, the linking server 200 is also a platform for linking customer data between the first business operator and the second business operator (hereinafter also referred to as "linkage platform"). The linking server 200 executes a predetermined program such as a linking server program to acquire anonymized customer data from a plurality of business operator servers 100 , combine the acquired data, and provide them to the business operator server 100 . It implements a server function that Note that this predetermined program may be, for example, an application program dedicated to the data linkage system 1 installed in the linkage server 200 . Note that the linkage server 200 may be provided with dedicated hardware, an OS, etc. (for example, an on-premise server configuration) dedicated to the data linkage system 1, or may be SaaS (Software as a Service) or PaaS (Platform as a Service) using a cloud server. Service) and IaaS (Infrastructure as a Service) may be used as appropriate. Here, "anonymized customer data" refers to anonymized customer data. Details of the anonymized customer data will be described later.

<2. Overview>
An example of the outline of the data linkage system 1 will be described with reference to FIG. In this example, anonymized customer data obtained by anonymizing customer data managed by each of the first business server 100a and the second business server 100b are acquired and combined, and the combined anonymized customer data is An example of provision to the provider server 100 will be used for explanation, but it is not intended to be limited to this. For example, there may be three or more operator servers 100 from which customer data is acquired, and the destination of the combined anonymized customer data may be any one of the operator servers 100 from which the customer data is acquired. Alternatively, it may be some other external device.

(1) As shown in FIG. 2, the data cleansing unit 111 of the first operator server 100a and the second operator server 100b performs data cleansing such as the difference between full-width and half-width characters, and the presence or absence of blank characters and delimiters. In order to eliminate fluctuations in notation, format matching is performed for each customer data. The data cleansing unit 111 of the provider server 100 stores the formatted customer data in the storage unit 120 as normalized customer data. Here, "normalized customer data" is customer data that has been subjected to data cleansing in order to combine customer data of different business operators.

(2) The hash calculation unit 112 of the first business server 100a and the second business server 100b refer to the key storage unit 231 of the cooperation server 200, which stores the key information, respectively, to obtain the key of the normalized customer data. A hash value is calculated based on the data of the data item. Here, the “key information” is information indicating a key data item that serves as a key (so-called merge key) for merging customer data between different provider servers 100 among the data items of the customer data. A key data item is, for example, any one data item of a customer's name, address, telephone number, e-mail address, telephone number, personal number, driver's license number, card number, account information, device information, etc. or a permutation or combination of two or more data items.

(3) The anonymization processing units 114 of the first business server 100a and the second business server 100b anonymize the customer data managed by themselves. The anonymization processing unit 114 of the provider server 100 stores the anonymized customer data in the storage unit 120 as anonymized customer data.

(4) The cooperation acquisition unit 211 of the cooperation server 200 obtains the anonymized customer data and the hash value provided from the provider providing unit 115 of the provider server 100 from the first provider server 100a and the second provider server 100b, respectively. Get hash data indicating

(5) The combining unit 212 of the link server 200 combines the anonymized customer data acquired from each of the first business server 100a and the second business server 100b using the hash values obtained from each of the first business server 100a and the second business server 100b as keys. (6) The combining unit 212 of the cooperation server 200 accumulates the combined anonymized customer data as combined anonymized data in the accumulated customer data storage unit 232 for a predetermined period.

(7) The categorization unit 219 of the link server 200 categorizes the characteristics of the customer based on the combined anonymized data accumulated in the accumulated customer data storage unit 232 . (8) The cooperation providing unit 213 of the cooperation server 200 provides the combined anonymized customer data and the type information indicating the result of the above categorization to the first operator server 100a and the second operator server 100b. The business acquisition unit 116 of the business server 100 acquires the provided combined anonymized customer data and type information.

According to the above configuration, in the data linkage system 1, by using the hash value calculated from the common data item of the customer data as the joining key, even if the data of the same person is not associated in advance between different business operators, Anonymized data of the same person can be associated with each other. In addition, when providing customer data to the cooperation server 200 in order to combine each customer data, the business server 100 provides a hash value calculated from the customer data and anonymized anonymized customer data, In particular, customer data can be provided to the cooperation server 200 without the customer's consent to the provision of personal information to a third party.

<3. Functional Configuration of Provider Server>
A functional configuration of the provider server 100 according to the present embodiment will be described with reference to FIG. As shown in FIG. 3, the provider server 100 includes a control unit 110, a storage unit 120, and a communication unit .

The control unit 110 includes a hash calculator 112 , a provider provider 115 , and a provider acquirer 116 . Also, the control unit 110 may include a data cleansing unit 111, an extraction unit 113, or an anonymization processing unit 114, for example.

The data cleansing unit 111 performs data cleansing on data of key data items of customer data. The data cleansing in the data cleansing unit 111 is such that when a hash value is calculated from the key data item data in the hash calculation unit 112, which will be described later, a different hash value may be generated due to data fluctuation or the like even though the data is substantially the same. prevent it from being calculated. For example, as data cleansing, the data cleansing unit 111 extracts data fluctuations and inconsistencies between customer data, and processes the customer data so as to eliminate the extracted fluctuations and inconsistencies (for example, data correction or normalization, etc.). ). The data cleansing unit 111 may, for example, extract fluctuations and inconsistencies in these data based on a predetermined format and eliminate them.

The hash calculation unit 112 refers to the key storage unit 231 of the cooperation server 200 that stores key information, and calculates a hash value based on the key data item data of the customer data. The hash calculation unit 112 may store hash data indicating the hash value thus calculated in the storage unit 120 .

The hash calculation unit 112 may calculate a hash value, for example, based on the data of the key data item that has undergone data cleansing. With such a configuration, the hash calculator 112 can more accurately calculate a hash value as a key for combining customer data.

The extracting unit 113 extracts data items that can identify the individual customer from the data items included in the customer data. The extraction unit 113 may, for example, extract data items that match predetermined extraction conditions. The predetermined extraction condition may be, for example, a condition for extracting listed data items such as the customer's name, personal number, passport number, etc. that can identify the individual customer.

The anonymization unit 114 anonymizes the data of the data item extracted by the extraction unit 113 to generate anonymized customer data. The object to be anonymized by the anonymization unit 114 may be customer data or normalized customer data. Anonymization processing unit 114 stores the generated anonymized customer data in customer data storage unit 121 . For example, the anonymization processing unit 114 deletes items or cells, abstracts all or part of the data, generalizes it by replacing it with higher-level concepts or numerical abbreviations, top (bottom) coding, data exchange, or noise (error) may be processed by adding to the target data.

According to the above configuration, the anonymization unit 114 can anonymize only data items that can identify the individual customer. Therefore, according to the above configuration, the anonymization unit 114 can efficiently anonymize customer data limited to data items necessary and sufficient for anonymization.

The business provider providing unit 115 exchanges the hash data indicating the hash value calculated by the hash calculation unit 112 and the anonymized customer data anonymized by the anonymization processing unit 114 with a different business server. Provided to the cooperation server 200 to combine them. The manner in which the provider providing unit 115 provides various data and various information including hash data and anonymized customer data may be any manner, and is the same as the cooperation providing unit 213 described later.

The business acquisition unit 116 acquires from the cooperation server 200 the combined anonymized customer data generated by combining the anonymized customer data in the cooperation server 200 . The manner in which the business acquisition unit 116 acquires various types of information including the combined anonymized customer data may be any manner, and is the same as the cooperative acquisition unit 211 described later.

The storage unit 120 stores customer data and information on management of the customer data. The storage unit 120 may also store key information, hash data, normalized customer data, anonymized customer data, and the like, for example. The storage unit 120 may store each information using a database management system (DBMS), or may store each information using a file system. When using a DBMS, a table may be provided for each piece of information described above, and each piece of information may be managed by associating the tables.

The storage unit 120 may include a customer data storage unit 121, for example. The customer data storage unit 121 stores customer data and anonymized customer data. Further, the customer data storage unit 121 may store normalized customer data indicating normalized customer data, for example.

The communication unit 130 transmits/receives various information to/from the provider server 100 or other external system devices via the network N. FIG. The communication unit 130 transmits anonymized customer data and hash data to the cooperation server 200 via the network N, and receives combined anonymized customer data and type information from the cooperation server 200, for example.

<4. Functional Configuration of Collaborative Server>
A functional configuration of the cooperation server 200 according to the present embodiment will be described with reference to FIG. As shown in FIG. 4 , the cooperation server 200 includes a cooperation control unit 210 , a cooperation storage unit 230 and a cooperation communication unit 240 .

The cooperation control unit 210 includes a cooperation acquisition unit 211 , a connection unit 212 , and a cooperation provision unit 213 . Further, the cooperation control unit 210 may include a reference unit 214, a key determination unit 215, a combination extraction unit 216, an additional anonymization processing unit 217, an accumulation unit 218, or a categorization unit 219, for example.

The cooperation acquisition unit 211 acquires anonymized customer data obtained by anonymizing the customer data managed by each of the plurality of business operators 100, and key data of the customer data serving as a key for combining the customer data managed by each. and hash data indicating a hash value calculated based on the data of the item. The form in which the cooperative acquisition unit 211 acquires the above-described anonymized customer data, hash data, etc. (hereinafter also referred to as "anonymized customer data, etc.") may be in any manner. Data files such as customer data may be received. In addition, as another example of how the cooperative acquisition unit 211 acquires the anonymized customer data and the like, remote access to the business server 100 may be performed to acquire a data file of the anonymized customer data and the like. An API implemented by the server 100 may be instructed to refer to the anonymized customer data, etc., and as a result, the anonymized customer data, etc. may be obtained.

The combining unit 212 combines the anonymized customer data acquired from each of the multiple company servers 100 using the hash values of the hash data acquired from each of the multiple company servers 100 as keys. The combiner 212 generates combined anonymized customer data from the combined anonymized customer data.

The cooperation providing unit 213 provides the combined anonymized customer data to at least one of the operator server 100 and other external devices. The form in which the cooperation providing unit 213 provides various data/various information including combined anonymized customer data to the operator server 100 or the like may be any form. 100 or the like, or an API may be implemented to cause the provider server 100 or the like to refer to various data and various information. As another example, the cooperative providing unit 213 may generate a website showing various data and various information, It may be distributed to the provider server 100 or the like. Business operators can inquire about various data and information through this website distributed to the business operator server 100 and the like.

As another example, the form in which the cooperation providing unit 213 provides various data/various information is to remotely access the cooperation server 200 from the operator server 100 or the like, and obtain various data stored in the cooperation server 200 in the operator server 100 or the like.・Various information may be obtained. For remote access from the provider server 100 or the like to the cooperation server 200, for example, a VPN (Virtual Private Network) constructed on the network N may be used. When using this VPN, the communication between the provider server 100 and the cooperation server 200 may be performed via a VPN device. In addition, remote access from the operator server 100 or the like to the cooperation server 200 is realized by using a communication protocol such as TELNET or a remote access tool such as SSH (Secure Shell) or VNC (Virtual Network Computing). may

According to the above configuration, the cooperation providing unit 213 can provide the combined anonymized data obtained by combining the anonymized customer data of each of a plurality of businesses to these businesses without the consent of the customer to the provision of personal information to a third party. can be provided to According to the above configuration, the business operator can obtain the anonymized customer data of other business operators in a form in which they are combined with their own customer data.

The cooperation providing unit 213 may provide, for example, type information indicating the result of categorization by the categorization unit 219 described later, to at least one of the provider server 100 and other external devices. According to such a configuration, the cooperation providing unit 213 can provide the result of customer categorization that contributes to marketing activities to each business operator. In addition, according to such a configuration, the cooperation providing unit 213 outputs the result of categorization as a classification model or the like for the business operator to predict the characteristics of the business operator's own customer from the customer data managed by the business operator. can provide.

The reference unit 214 instructs the business server 100 to refer to data items of customer data managed by each. The reference unit 214 acquires the data items of the customer data managed by each provider server 100 as a result of the reference.

The key determination unit 215 compares the data items of the customer data to be combined based on the result of the reference by the reference unit 214, and determines key data items. For example, the key determining unit 215 sorts each data item of the customer data to be combined in a predetermined order, and sequentially sorts each data item in addition to the data item name or data item name and data type and/or data type. Match size. The key determining unit 215 may determine items that substantially match (including complete matches or partial matches) as key data items as a result of the collation. The key determination unit 215 causes the key storage unit 231 to store key information indicating the determined key data item.

According to the above configuration, the data linkage system 1 can determine the key data item according to the changed data configuration even if the data configuration of the customer data is changed on the business operator side.

The combination extraction unit 216 extracts a combination of data items that can identify an individual customer from among the combinations of data items included in the combined anonymized customer data. The combination extraction unit 216 may, for example, extract a combination of data items that meet a predetermined combination condition set in advance.

The "predetermined combination condition" is a condition for determining whether or not a combination of data items can identify an individual customer. The predetermined combination condition may be, for example, extracting a combination of the customer's date of birth, gender, and address (all or part of the address) in the combined anonymized data. Specifically, out of the date of birth, gender, and address, the anonymized customer data of the first business includes only the date of birth in an unprocessed state, while the anonymized customer data of the second business in the date of birth, gender, and address, if the gender and address are included in an unprocessed state, when the anonymized customer data of the first business operator and the second business operator are combined, the date of birth, gender, and , and addresses are combined in an unprocessed state. The combination extracting unit 216 extracts the combination, assuming that the date of birth, sex, and address alone cannot identify an individual, but the combination of these may lead to identification of an individual.

The additional anonymization processing unit 217 anonymizes the combination of the extracted data items to update the combined anonymization customer data. The additional anonymity processing unit 217 may, for example, process target data by deleting items, generalizing, or the like, similarly to the anonymization processing unit 114 described above.

According to the above configuration, the additional anonymization processing unit 217 performs additional anonymization processing even when an individual customer can be identified by combining the anonymized customer data of different businesses as a result of combining the data items. can prevent individual customers from being identified.

The accumulation unit 218 accumulates the combined anonymized customer data in the accumulated customer data storage unit 232 for a predetermined period. Here, the "predetermined period" is a period for accumulating the combined anonymized customer data.

The typifying unit 219 typifies customer behavioral characteristics based on the combined anonymized customer data accumulated in the accumulated customer data storage unit 232 . The categorization unit 219 stores the result of the categorization as the categorization information in the linked storage unit 230 .

The categorization by the categorization unit 219 may be in any manner. The typifying unit 219 constructs a classification model using techniques such as clustering (for example, k-means method, etc.), principal component analysis, and self-organization map (SOM) as unsupervised learning, for example. may be changed. In addition, as another example, the typifying unit 219 builds and typifies a classification model learned by a method such as a support vector machine, a Bayesian filter, ID3 for building a decision tree, a random forest, etc. as supervised learning. may The type information may be these classification models. In other words, the type information includes, for example, gender, age, occupation, preferences, health condition, income, nature, family structure, and location indicated in the customer data (for example, it may be calculated based on the location information of the customer data). , Web site access history, product purchase history, etc., may be used as explanatory variables, and characteristic trends including customer behavioral characteristics may be obtained as objective variables.

Specifically, the categorization unit 219 is a person who lives in Chiba prefecture, is 45 years old, is single, and works for a foreign-affiliated IT vendor. A person who has an attribute of having a browsing history may be categorized as having a tendency of characteristics such as "middle income or above", "thrifty person", and "suburban living".

The cooperation storage unit 230 stores various information related to acquisition of anonymized customer data and the provision of combined anonymized customer data to the outside. The linked storage unit 230 may store, for example, anonymized customer data, hash data, or type information (including a classification model described later). The linked storage unit 230 may store each information using a database management system (DBMS), or may store each information using a file system. When using a DBMS, a table may be provided for each piece of information described above, and each piece of information may be managed by associating the tables. The linked storage unit 230 may include a key storage unit 231 or an accumulated customer data storage unit 232, for example. The key storage unit 231 stores key information. The accumulated customer data storage unit 232 stores combined anonymized customer data accumulated for a predetermined period.

The cooperative communication unit 240 transmits/receives various information to/from the provider server 100 or other external devices via the network N. FIG. The cooperative communication unit 240 receives, for example, anonymized customer data, hash data, etc. from the operator server 100 via the network N, and couples to the operator server 100 or other external devices to receive anonymized customer data and type data. Send information, etc.

<5. Operation example>
An operation example of the data linkage system 1 will be described with reference to FIG. FIG. 5 shows that in the data linkage system 1, the linkage server 200 determines key data items from the data items of each customer data of the business operator server 100, and uses the hash values of the key data items determined by the linkage server 200 to identify the anonymized customer. FIG. 4 is a flow chart showing the flow of processing for combining data and providing it to the provider server 100. FIG. Note that the order of the processes shown below is an example, and may be changed as appropriate.

As shown in FIG. 5, the reference unit 214 of the link server 200 instructs the first business server 100a and the second business server 100b to refer to data items of customer data managed by each (S10). . When the first business operator server 100a receives an instruction to refer to the data item of the customer data from the link server 200, it refers to the data item of the customer data related to the customer of the first business operator stored in the customer data storage unit 121 (S11). ). When the second business operator server 100b receives an instruction to refer to the data items of the customer data from the cooperation server 200, the second business server 100b refers to the data items of the customer data related to the customers of the second business operator stored in the customer data storage unit 121 (S12). ). The first operator server 100a transmits the reference result to the link server 200 (S13). The second operator server 100b transmits the reference result to the link server 200 (S14).

When the key determination unit 215 of the cooperation server 200 receives the result of the reference from the first operator server 100a and the second operator server 100b via the cooperation communication unit 240, the first operator server 100a to be combined and The key data items are determined by comparing the data items of the customer data of the second business server 100b. The key determination unit 215 causes the key storage unit 231 to store the key information indicating the determined key data items (S15).

The cooperation server 200 transmits key information indicating the determined key data items to the first operator server 100a and the second operator server 100b (S16).

When receiving the key information, the data cleansing unit 111 of the first business operator server 100a performs data cleansing on the key data items of the customer data (S17). The hash calculator 112 calculates a hash value based on the data of the key data item for which data cleansing has been performed (S18). The extraction unit 113 extracts data items that can identify the individual customer from the data items included in the customer data (S19). The anonymization processing unit 114 anonymizes the data of the extracted data item to generate anonymized customer data, and stores the generated anonymized customer data in the customer data storage unit 121 (S20). The first operator server 100a transmits the generated anonymized customer data and hash data indicating the calculated hash value to the cooperation server 200 (S21).

Upon receiving the key information, the data cleansing unit 111 of the second operator server 100b performs data cleansing on the key data items of the customer data (S22). The hash calculator 112 calculates a hash value based on the data of the key data item for which data cleansing has been performed (S23). The extraction unit 113 extracts data items that can identify the individual customer from the data items included in the customer data (S24). The anonymization processing unit 114 anonymizes the data of the extracted data item to generate anonymized customer data, and stores the generated anonymized customer data in the customer data storage unit 121 (S25). The second operator server 100b transmits the generated anonymized customer data and the hash data indicating the calculated hash value to the cooperation server 200 (S26).

The cooperation acquisition unit 211 of the cooperation server 200 acquires the anonymized customer data and hash data from the first operator server 100a and the second operator server 100b (S27).

The combining unit 212 of the cooperation server 200 uses the hash values obtained from the first operator server 100a and the second operator server 100b as keys, and obtains the hash values from the first operator server 100a and the second operator server 100b. The anonymized customer data are combined to generate combined anonymized customer data (S28).

The combination extraction unit 216 of the cooperation server 200 extracts a combination of data items that can identify the individual customer from among the combinations of data items included in the combined anonymized customer data (S29). The additional anonymization processing unit 217 anonymizes the combination of the extracted data items to update the combined anonymization customer data (S30).

The cooperation providing unit 213 of the cooperation server 200 provides the combined anonymized customer data to the first operator server 100a and the second operator server 100b (S31).

<6. Hardware Configuration>
With reference to FIG. 6, an example of a hardware configuration in which the above-described provider server 100 and cooperation server 200 are implemented by a computer 800 will be described. The function of each device can also be implemented by being divided into a plurality of devices.

As shown in FIG. 6, the computer 800 includes a processor 801, a memory 803, a storage device 805, an input I/F section 807, a data I/F section 809, a communication I/F section 811, and a display device. 813 included.

Processor 801 controls various processes in computer 800 by executing programs stored in memory 803 . For example, each functional unit included in the control unit 110 of the provider server 100 and the cooperation control unit 210 of the cooperation server 200 can be realized by the processor 801 executing a program temporarily stored in the memory 803 .

The memory 803 is a storage medium such as a RAM (Random Access Memory). The memory 803 temporarily stores program codes of programs executed by the processor 801 and data necessary for executing the programs.

The storage device 805 is a non-volatile storage medium such as a hard disk drive (HDD) or flash memory. A storage device 805 stores an operating system and various programs for realizing the above configurations. In addition, the storage device 805 can also store a table for registering various types of information and data such as anonymized customer data and hash data, and a DB for managing the table. Such programs and data are referred to by the processor 801 by being loaded into the memory 803 as necessary.

An input I/F unit 807 is a device for receiving input from the user. Specific examples of the input I/F unit 807 include a keyboard, mouse, touch panel, various sensors, wearable devices, and the like. The input I/F unit 807 may be connected to the computer 800 via an interface such as USB (Universal Serial Bus).

A data I/F unit 809 is a device for inputting data from outside the computer 800 . A specific example of the data I/F unit 809 is a drive device for reading data stored in various storage media. Data I/F unit 809 may be provided outside computer 800 . In that case, the data I/F unit 809 is connected to the computer 800 via an interface such as USB.

The communication I/F unit 811 is a device for performing data communication with a device external to the computer 800 via the Internet N by wire or wirelessly. Communication I/F unit 811 may be provided outside computer 800 . In that case, the communication I/F unit 811 is connected to the computer 800 via an interface such as USB.

The display device 813 is a device for displaying various information. Specific examples of the display device 813 include a liquid crystal display, an organic EL (Electro-Luminescence) display, and a wearable device display. The display device 813 may be provided outside the computer 800 . In that case, the display device 813 is connected to the computer 800 via, for example, a display cable. Further, when a touch panel is adopted as the input I/F section 807 , the display device 813 can be integrated with the input I/F section 807 .

[Second embodiment]
Next, a second embodiment of the invention will be described. In this embodiment, after obtaining the consent of the customer himself/herself, customer data is combined between a plurality of business operators, and the characteristics of the customers categorized in the first embodiment are applied to the combined customer data, It is a form of predicting customer characteristics. In the following, the points different from the first embodiment will be mainly described.

<1. Overview>
An example of the overview of the data linkage system according to this embodiment will be described with reference to FIG. In this example, customer data is acquired from each of the first business server 100a and the second business server 100b according to the present embodiment and combined, the characteristics of the customer in the combined customer data are predicted, and the results are will be described using an example provided to the business operator server 100, but it is not intended to be limited to this. For example, there may be three or more business operator servers 100 from which customer data is acquired, and at least one of the business operator servers 100 from which customer characteristics are to be provided is provided. or other external device. The first operator server 100Aa and the second operator server 100Ab according to the present embodiment will be collectively referred to as "operator server 100A" when there is no particular need to distinguish them.

(1) As shown in FIG. 7, the provider server 100A performs format matching for each customer data as data cleansing. The provider server 100A stores the formatted customer data in the storage unit 120 as normalized customer data.

(2) The cooperation acquisition unit 211A of the cooperation server 200A according to the present embodiment instructs the provider server 100A to refer to consent information. If normalized customer data can be provided from the operator server 100A to the cooperative server 200A as a result of the reference, the cooperation acquisition unit 211A acquires the normalized customer data from the operator server 100A.

"Consent information" is information that represents the customer's consent to the provision of customer data to the outside and the use of customer data at the destination. Consent information may include, for example, a subject's consent. For example, whether customer data can be provided externally, whether it can be used externally, or if the provision and use of customer data to the outside is permitted, the purpose of use (for example, provision/disclosure to a third party, etc.).

(3) Based on the key information, the linking unit 212A of the linkage server 200A combines the first business operator server 100Aa and the second business operator server Ab with the data of the key data items of the normalized customer data to be combined as keys. Combine the normalized customer data acquired from each to generate combined customer data.

(4) Based on the type information, the classification unit 220 of the link server 200A classifies the customer identified by the combined customer data into each type resulting from the classification. (5) The prediction unit 221 of the link server 200A predicts the characteristics of the specified customer based on the classification results of (4) above. (6) The cooperation providing unit 213A provides at least one of the provider server 100A and other external devices with prediction information indicating the result of the prediction in (5) above.

According to the above configuration, the cooperation server 200A can provide each business operator with predictions of customer characteristics that contribute to one-to-one marketing activities and the like of each business operator.

<2. Functional Configuration of Collaborative Server>
An example of the functional configuration of the cooperation server 200A according to this embodiment will be described with reference to FIG. The cooperation server 200A includes in common the cooperation storage unit 230 and the cooperation communication unit 240 of the cooperation server 200 according to the first embodiment. In the cooperation control unit 210 of the cooperation server 200A, a cooperation acquisition unit 211A obtained by adding functions to the cooperation acquisition unit 211, the combining unit 212, and the cooperation providing unit 213 of the cooperation control unit 210 according to the first embodiment, It includes a combining unit 212A and a cooperation providing unit 213A, and in addition to these functional units, a classifying unit 220 and a predicting unit 221 are provided.

The cooperation acquisition unit 211A, for example, instructs the provider server 100A to refer to the consent information. 211 A of cooperation acquisition parts acquire the result of the said reference from provider server 100A. If customer data can be provided from the business operator server 100A to the cooperative server 200A as a result of the reference, the cooperation acquisition unit 211A may acquire the customer data from the business operator server 100. FIG.

The merging unit 212A may merge customer data acquired from a plurality of business server 100A, for example, based on key information, using data of key data items of customer data to be merged as a key. The combiner 212A generates combined customer data from the combined customer data. As another example, the merging unit 212A may merge customer data acquired from a plurality of business operator servers 100A using customer identification information set for merging. For example, for the same customer, the combining unit 212A combines the identification information of the customer issued and managed by the first business operator and the identification information of the customer issued and managed by the second business operator. Identification information of the customer to be linked may be issued. The combination unit 212A may set the issued customer identification information as the customer identification information for combination.

The cooperation providing unit 213A may provide, for example, prediction information indicating a result of prediction by the prediction unit 221, which will be described later, to at least one of the provider server 100A and other external devices.

According to the above configuration, the cooperation providing unit 213A can provide each business operator with predictions of customer characteristics that contribute to one-to-one marketing activities and the like of each business operator.

Based on the type information, the classification unit 220 classifies the customer identified by the combined customer data into each type that is the result of the classification. For example, the classification unit 220 may classify the customers identified by the combined customer data by type using the classification model constructed by the classification unit 219 in the first embodiment as type information. As another example, the classification unit 220 classifies the customers specified by the combined customer data by type, using a classification model stored in advance in the linked storage unit 230, which is not the classification model constructed by the categorization unit 219, as type information. can be classified.

The prediction unit 221 predicts the characteristics of the customer identified by the combined customer data based on the classification result of the classification unit 220 . The prediction unit 221 may predict customer characteristics using, for example, a classification model constructed by the categorization unit 219 or stored in the linked storage unit 230 . The prediction unit 221 may store the result of the prediction in the linked storage unit 230 as prediction information.

It should be noted that the above-described embodiment is an example for explaining the present invention, and is not intended to limit the present invention only to the embodiment. Also, the present invention can be modified in various ways without departing from the gist thereof. Furthermore, those skilled in the art can adopt embodiments in which each element described below is replaced with equivalents, and such embodiments are also included in the scope of the present invention.

Further, the components provided in the provider server 100 and the linking server 200 described in the above embodiment can perform predetermined processing on other hardware when the program stored in the storage device 805 is executed by the processor 801. It shall be realized in cooperation with wear. Also, in other words, these components are envisioned as software or firmware as well as their hardware counterparts, and in both concepts "function", "means", "unit", "processing circuit", "Unit", "module", etc. are also described, and can be read accordingly.

[Modification]
Although the present invention has been described based on the above embodiments, the following cases are also included in the present invention.

(1) At least part of each configuration included in the provider servers 100 and 100A according to the above embodiments may be included in the link servers 200 and 200A. For example, the functions of the extraction unit 113 of the provider server 100 may be implemented in the cooperation server 200 .

(2) Contrary to (1) above, at least a part of each configuration included in the link servers 200 and 200A according to the above embodiments may be included in the provider servers 100 and 100A. For example, a dedicated application program for the data linkage system 1 installed on the provider servers 100 and 100A is made to implement the function of each functional section included in the linkage control section 210 of the linkage servers 200 and 200A. By installing this application program on the business server 100, 100A, cooperation such as customer data, anonymized customer data, or combined anonymized customer data between the business server 100, 100A without providing the cooperation server 200, 200A, Customer characteristics may be categorized, predicted, or the like. In other words, at least one server among the plurality of business operator servers 100 and 100A may be the cooperation servers 200 and 200A. At this time, the above functions of the linking servers 200 and 200A may be provided centrally in a specific server among the provider servers 100 and 100A, or may be distributed and provided in each of the plurality of provider servers 100 and 100A. good too. It should be noted that the function of each functional unit included in the cooperation control unit 210 of the cooperation servers 200 and 200A to be implemented in the dedicated application program of the data cooperation system 1 may be all or part thereof.

As described above, if the cooperation servers 200 and 200A, which are the cooperation bases, are not provided, type information, prediction information, or combined anonymized customer data is generated by one of the plurality of business server 100, and the generated combined anonymized customer Data may be distributed and managed among a plurality of provider servers 100 . Also, this decentralized management may be implemented using distributed ledger technology, so-called block chain technology, for example. In addition, when linking customer data, anonymized customer data, combined anonymized customer data, type information or forecast information, etc. between a plurality of business servers 100 and 100A without providing the linking servers 200 and 200A, the P2P method is used. may be used to connect and communicate between the provider servers 100 and 100A.

(3) In the above embodiment, the key storage unit for storing key information is provided in the cooperation server 200, but it may be provided in a device other than the cooperation server 200, for example, the provider server 100. Further, when the key determination unit refers to the key storage unit provided in the provider server 100, for example, an API implemented by the provider server 100 for the reference may be used, or a remote key to the provider server 100 may be used. may access.

DESCRIPTION OF SYMBOLS 1... Data linkage system 100, 100A... Provider server 100a, 100Aa... 1st provider server 100b, 100Ab... 2nd provider server 110... Control part 111... Data cleansing part 112... Hash calculation part , 113... extracting unit, 114... anonymization processing unit, 115... business provider providing unit, 116... business acquisition unit, 120... storage unit, 121... customer data storage unit, 130... communication unit, 200, 200A... cooperation server, 210... cooperation control unit 211, 211A... cooperation acquisition unit 212, 212A... combination unit 213, 213A... cooperation provision unit 214... reference unit 215... key determination unit 216... extraction unit 217... additional anonymous processing Part 218... Storage part 219... Classification part 220... Classification part 221... Prediction part 230... Cooperation storage part 231... Key storage part 232... Accumulated customer data storage part 240... Cooperation communication part 800 ... Computer 801 ... Processor 803 ... Memory 805 ... Storage device 807 ... Input I/F section 809 ... Data I/F section 811 ... Communication I/F section 813 ... Display device

Claims (6)

In a cooperation server that can communicate with multiple business servers that manage customer data related to customers,
Anonymized customer data obtained by anonymizing customer data managed by each of the plurality of operator servers, and the customer data serving as a key for linking the customer data managed by each of the plurality of operator servers. a cooperation acquisition unit that acquires hash data indicating a hash value calculated based on the data of the key data item of
a combining unit for generating combined anonymized customer data by combining the anonymized customer data respectively acquired from the plurality of operator servers using the hash values respectively acquired from the plurality of operator servers as keys;
a cooperation providing unit that provides the combined anonymized customer data to at least one of the business operator server and other external devices ;
a combination extracting unit that extracts a combination of data items that can identify an individual customer from among the combinations of data items included in the combined anonymized customer data;
an additional anonymization processing unit that anonymizes the combination of the extracted data items and updates the combined anonymized customer data;
Cooperation server program. an accumulation unit for accumulating the combined anonymized customer data in an accumulated customer data storage unit for a predetermined period;
a typifying unit that typifies customer characteristics based on the combined anonymized customer data accumulated in the accumulated customer data storage unit;
The cooperation providing unit provides type information indicating the result of the categorization to at least one of the business operator server and other external devices,
The cooperation server program according to claim 1 . The cooperation acquisition unit instructs the business operator server to refer to consent information including whether or not to provide the customer data managed by the business operator server to a third party, and as a result of the reference, when the customer data can be provided to the cooperation server, obtaining the customer data from the business operator server;
The combining unit generates combined customer data by combining the customer data acquired from each of the plurality of business operator servers, using the data of the key data item of the customer data to be combined as a key.
The cooperation server program according to claim 2 . a classifying unit that classifies the customers identified by the combined customer data according to the types resulting from the classification, based on the type information;
a prediction unit that predicts the characteristics of the customer based on the result of the classification;
The cooperation providing unit provides prediction information indicating the result of the prediction to at least one of the business operator server and other external devices,
A cooperation server program according to claim 3 . a reference unit that instructs the business server to refer to a data item of customer data managed by each;
Based on the result of the reference, the data items of the customer data to be combined are compared to determine the key data items, respectively, and key information indicating the determined key data items is provided to the business operator server. further realizing a key determination unit;
The cooperation server program according to any one of claims 1 to 4 . A data linkage system comprising: a plurality of operator servers for managing customer data relating to customers; and a linkage server capable of communicating with the plurality of operator servers,
The operator server is
By referring to a key storage unit that stores key information indicating a key data item that serves as a key for linking customer data between different business servers, among the data items of the customer data, the customer a hash calculation unit that calculates a hash value based on the data of the key data item of the data;
a customer data storage unit that stores anonymized customer data obtained by anonymizing the customer data;
The cooperation server is
a cooperation acquisition unit that acquires each of the anonymized customer data and the hash value from the plurality of business servers;
a combining unit that generates combined anonymized customer data by combining the anonymized customer data respectively acquired from the plurality of operator servers using the hash values respectively acquired from the plurality of operator servers as keys;
a cooperation providing unit that provides the combined anonymized customer data to at least one of the business operator server and other external devices ;
a combination extracting unit that extracts a combination of data items that can identify an individual customer from among the combinations of data items included in the combined anonymized customer data;
an additional anonymization processing unit that anonymizes the combination of the extracted data items and updates the combined anonymized customer data;
Data linkage system.

Images