WO2021001950A1 - Confidential information reference system, confidential information reference device, confidential information reference method, and program - Google Patents

Abstract

This confidential information reference system (10) is formed including this confidential information reference device (100), this confidential information reference device (200), and a collected confidential information accumulation device (300). When a reference key registration request including a collection condition is received, the confidential information reference device (100) collects data (223) (confidential information) having collateral attributes (222) suitable for the collection condition from the confidential information reference device (200), and stores as collection data (322) in association with the generated reference key in the collected confidential information accumulation device (300). When a confidential information request including the reference key is received, the confidential information reference device (100) acquires the collection data (322) corresponding to the reference key from the collected confidential information accumulation device (300), and transmits same to a request source.

Description

Confidential information reference system, confidential information reference device, confidential information reference method and program

The present invention relates to a confidential information reference system, a confidential information reference device, a confidential information reference method, and a program.

There is information that cannot be viewed (acquired) even by the owner of the information or a person directly related to it. For example, from the viewpoint of personal information protection or privacy of images taken by surveillance cameras, there is an agreement that even the installer of the surveillance camera is restricted from viewing the captured images (videos) (Non-Patent Document 1). In addition, even a person in the video, such as a passerby, cannot view the video unless he / she is confirmed as the person and there is a valid reason. In the following, information with access restrictions, including information that cannot be accessed even by the owner or related parties, is referred to as confidential information.

Examples of confidential information include communication records held by communication service providers, server access log information, transaction information at financial institutions, and resident information at government agencies, in addition to images taken by security cameras. There are restrictions on viewing information, even if it is an employee or employee of a business or institution.

Even if it is confidential information, it may be necessary to use the information if it is a party to the information. For example, when a victim of a stalker crime asks the police to investigate, it is useful because the image of the victim or the surveillance camera showing the stalker is evidence of the crime. However, it takes time and effort for the victim to find the surveillance camera in which he / she is reflected, find the installer, and request the provision of the image. Furthermore, even if the victim requests it, the installer does not always provide the image because the image of the surveillance camera is confidential information.

Another example of using confidential information is log information held by a communication service provider. For criminal investigations, investigative agencies may ask businesses for information on sites and services accessed by the suspect, as well as information on users who have contacted the suspect via social media, email, or telephone. In order to protect customer information (subscriber information), it is not desirable for even the person in charge of providing information in the business operator to directly access the log information including the customer information. The same applies to financial institutions and government agencies, and direct access of customer transaction information and resident information by employees and staff is not desirable.

The present invention has been made in view of such a background, and even if the user's terminal cannot access the confidential information, the confidential information is collected, and the confidential information collected by the accessible user's terminal is collected. The challenge is to make it available.

In order to solve the above-mentioned problems, the confidential information reference system is a confidential information reference system including a confidential information reference device, a confidential information storage device, and a collection confidential information storage device, and the confidential information storage device is , Confidential information with access restrictions and incidental attributes that are information given to the confidential information are stored in association with each other, and the collected confidential information storage device collects and collects confidential information acquired from the confidential information storage device. The information is stored in association with the reference key, which is a key for referring to the collected confidential information, and the confidential information reference device is a non-authorized user who is a user who does not have the authority to refer to the confidential information. When the terminal receives a request to generate the reference key including the collection condition which is the condition of the incidental attribute of the confidential information for the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information. , Generates a confidential information collecting unit that collects confidential information associated with the incidental attribute that matches the collecting condition from the confidential information storage device as the collected confidential information, and a reference key for referring to the collected confidential information. A reference key generation unit, a reference key registration unit that associates the collected confidential information with the reference key, stores the reference key in the collected confidential information storage device, and sends the reference key to the terminal of the non-authorized user. Upon receiving a request for acquisition of the collected confidential information including the reference key from the user's terminal, it is confirmed that the user is the authorized user, and the collected confidential information associated with the reference key is collected and confidential. It is equipped with a confidential information acquisition unit that acquires information from the information storage device and sends it to the user's terminal.

According to the present invention, even a user's terminal that cannot access the confidential information can collect the confidential information, and the accessible user's terminal can acquire the collected confidential information.

It is a figure which shows the whole structure of the confidential information reference system which concerns on 1st Embodiment. It is a hardware block diagram of the computer which realizes the function of the confidential information reference apparatus which concerns on 1st Embodiment. It is a functional block diagram of the confidential information reference apparatus which concerns on 1st Embodiment. It is a data structure diagram of the user information database which concerns on 1st Embodiment. It is a sequence diagram of the reference key registration process which concerns on 1st Embodiment. It is a sequence diagram of the confidential information acquisition process which concerns on 1st Embodiment. It is a sequence diagram of the reference key deletion process which concerns on 1st Embodiment. It is a figure which shows the whole structure of the video reference system which concerns on 2nd Embodiment. It is a functional block diagram of the video reference apparatus which concerns on 2nd Embodiment. It is a sequence diagram of the reference key registration process which concerns on 2nd Embodiment. It is a figure which shows the whole structure of the log reference system which concerns on 3rd Embodiment. It is a data structure diagram of the log database which concerns on 3rd Embodiment. It is a figure which shows the whole structure of the confidential information reference system which concerns on 4th Embodiment. It is a functional block diagram of the confidential information reference apparatus which concerns on 4th Embodiment. It is a sequence diagram of the reference key registration process which concerns on 4th Embodiment. It is a sequence diagram of the confidential information acquisition process which concerns on 4th Embodiment.

<< First Embodiment: Outline of Confidential Information Reference System >>
The confidential information reference system in the embodiment (first embodiment) for carrying out the present invention will be described below. The confidential information reference system generates a reference key for confidential information requested by a terminal of a non-authorized person (non-authorized user) who does not have access authority to the confidential information, and returns it. The reference key is not the confidential information itself, but a reference (reference information) for acquiring (viewing) the confidential information. The non-authorized person passes the reference key to the authorized person (authorized user) who has the authority to access the confidential information. When the terminal of the authorized person sends a browsing request including the reference key to the confidential information reference system, the confidential information corresponding to the reference key and the confidential information itself requested by the non-authorized person can be accessed. Even if the terminal of the non-authorized person sends the acquisition request including the reference key to the confidential information reference system, the confidential information cannot be accessed.

≪Overall configuration of confidential information reference system≫
FIG. 1 is a diagram showing an overall configuration of the confidential information reference system 10 according to the first embodiment. The confidential information reference system 10 includes a confidential information reference device 100, a confidential information storage device 200, and a collection confidential information storage device 300 that can communicate with each other on the network 490. The user terminal 400 is a terminal used by an authorized person and a non-authorized person, and accesses the confidential information reference device 100 to request registration of a reference key, acquisition of confidential information, and deletion of the reference key.

≪Configuration of confidential information storage device≫
The confidential information storage device 200 stores and stores confidential information. The confidential information storage device 200 includes a control unit 210 and a confidential information database 220. The confidential information database 220 is, for example, tabular data and stores confidential information. The record (row) of the confidential information database 220 indicates one confidential information, and is configured to include identification information 221 (described as an ID (identifier) in FIG. 1), ancillary attribute 222, and an attribute (column) of data 223. To.

The identification information 221 is the identification information of the confidential information. The incidental attribute 222 is information given to the confidential information or related information, and is information that is a search condition for the confidential information. Data 223 is confidential information itself. Taking the image of the surveillance camera as an example, the incidental attribute 222 includes the identification information of the surveillance camera, the shooting location, the shooting period, and the like. The data 223 is video data.
The control unit 210 causes the confidential information storage device 200, which is a computer, to function as a database server. Specifically, when a request for acquisition of confidential information including a collection condition (search condition) is received from the confidential information reference device 100 described later, a record of the confidential information database 220 having an incidental attribute 222 that matches the collection condition is searched, and the search result is obtained. Data 223 (confidential information) is returned as a response.

≪Configuration of confidential information storage device≫
The collection confidential information storage device 300 stores and stores confidential information (also referred to as collection confidential information) acquired from the confidential information storage device 200 by the confidential information reference device 100 in association with a reference key. The reference key is identification information generated when the confidential information reference device 100 registers the collected confidential information in the collected confidential information storage device 300.
The collection confidential information storage device 300 includes a control unit 310 and a collection confidential information database 320. The collection confidential information database 320 is, for example, tabular data and stores the collection confidential information. The record (row) of the collected confidential information database 320 indicates one collected confidential information, and is configured to include a reference key 321 and an attribute (column) of the collected data 322. The reference key 321 is a reference key that serves as identification information for the collected confidential information. The collected data 322 is data of collected confidential information.

The control unit 310 causes the collection confidential information storage device 300, which is a computer, to function as a database server. Specifically, when receiving a registration request including the reference key and the collected confidential information from the confidential information reference device 100, the control unit 310 adds a record to the collected confidential information database 320 to obtain the reference key and the collected confidential information, respectively. It is stored in the reference key 321 and the collected data 322 of the added record. Further, when the acquisition request including the reference key is received from the confidential information reference device 100, the control unit 310 searches for a record in which the reference key 321 matches the reference key included in the acquisition request, and collects data 322 of the search result. Reply as a response. Further, when the deletion request including the reference key is received from the confidential information reference device 100, the control unit 310 searches for a record in which the reference key 321 matches the reference key included in the deletion request and deletes the record.

≪Hardware configuration of confidential information reference device≫
FIG. 2 is a hardware configuration diagram of the computer 100Z that realizes the function of the confidential information reference device 100 according to the first embodiment. The computer 100Z includes a CPU 101, a RAM (Random Access Memory) 102, a ROM (Read Only Memory) 103, an SSD (Solid State Drive) 104, a NIC (Network Interface Card) 105, and an input / output interface 106 (input / output I / in FIG. 2). F (described as interface)) and a media drive 107 are included.

NIC105 is connected to network 490. A user interface device 198 (described as a UI (User Interface) device in FIG. 2) such as a display, a keyboard, and a mouse is connected to the input / output interface 106. The media drive 107 reads the program on the recording medium 199. When the CPU 101 executes the read program (see the program 121 in FIG. 3 described later), the computer 100Z functions as the confidential information reference device 100, searches for and collects the confidential information, and collects it in association with the reference key. The reference key registration process (see FIG. 5 described later) for accumulating the collected confidential information (collected confidential information) is executed. Further, when the CPU 101 executes the program 121, the computer 100Z functions as the confidential information reference device 100, and the confidential information acquisition process (see FIG. 6 described later) for acquiring the collected confidential information by using the reference key, and the reference. The reference key deletion process for deleting the key (see FIG. 7 described later) is executed.

≪Functional configuration of confidential information reference device≫
FIG. 3 is a functional configuration diagram of the confidential information reference device 100 according to the first embodiment. The confidential information reference device 100 includes a control unit 110, a storage unit 120, and an input / output unit 140. The input / output unit 140 is composed of the NIC 105 and the input / output interface 106, and transmits / receives communication data to / from the confidential information storage device 200, the collection confidential information storage device 300, and the user terminal 400.
The storage unit 120 is composed of a RAM 102, a ROM 103, and an SSD 104, and stores data necessary for processing such as a program 121, a user information database 130 (see FIG. 4 described later), and a reference key registration process.

FIG. 4 is a data structure diagram of the user information database 130 according to the first embodiment. The user information database 130 is, for example, tabular data that stores information related to the user of the confidential information reference system 10. The record (row) of the user information database 130 indicates the information of one user, and the identification information 131 (described as ID in FIG. 4), the authentication information 132, the generation right 133, the acquisition right 134, the deletion right 135, And the attribute (column) of the reference key 136 is included.

The identification information 131 is user identification information. The authentication information 132 is information referred to when authenticating a user, and is, for example, a password, biometric information, or a public key.
The generation right 133 indicates whether or not there is an authority to generate a reference key. The acquisition right 134 indicates whether or not there is an authority to acquire (view) the collected confidential information by using the reference key. The deletion right 135 indicates whether or not there is a right to delete the reference key.
The reference key 136 is a reference key that has been requested and generated from the user's terminal. The reference key 136 may include a plurality of reference keys.

Record 138 shows the information of the user whose identification information 131 is "4938". This user is a non-authorized person who has the right to generate and delete the reference key, but does not have the right to acquire (view) confidential information. This user has already registered a reference key called "5AQ3R45M".
Record 139 shows the information of the user whose identification information 131 is "7364". This user is an authorized person who has the right to acquire the collected confidential information using the reference key, and also has the right to delete the reference key, but does not have the right to generate the reference key.

Returning to FIG. 3, the control unit 110 will be described. The control unit 110 is composed of a CPU 101, and includes a message processing unit 111, a confidential information collection unit 112, a reference key generation unit 113, a reference key registration unit 114, a confidential information acquisition unit 115, and a reference key deletion unit 116. To.
The message processing unit 111 receives a request message from the terminal of the user (authorized person or non-authorized person), and in response to the request message, the confidential information collection unit 112, the confidential information acquisition unit 115, and the reference key deletion unit 116. Or call.
The confidential information collecting unit 112 accesses the confidential information storage device 200 and collects confidential information.

The reference key generation unit 113 generates a reference key corresponding to the collected confidential information (collected confidential information).
The reference key registration unit 114 stores the collected confidential information in the collected confidential information storage device 300 in association with the reference key, and transmits the reference key to the user's terminal.
The confidential information acquisition unit 115 acquires the collected confidential information corresponding to the reference key from the collected confidential information storage device 300 in response to the request from the terminal of the user (authorized person), and collects the confidential information on the user's terminal. To send.
The reference key deletion unit 116 deletes the record of the reference key stored in the collected confidential information storage device 300 and the reference key in the user information database 130.
The reference key registration process, the confidential information acquisition process using the reference key, and the reference key deletion process will be described below.

≪Reference key registration process≫
FIG. 5 is a sequence diagram of the reference key registration process according to the first embodiment. A process of acquiring a reference key for confidential information that matches the collection conditions will be described with reference to FIG.
In step S101, the user terminal 400A transmits an authentication request including the user's identification information (described as ID in FIG. 5) and the authentication information to the confidential information reference device 100.
In step S102, the message processing unit 111 of the confidential information reference device 100 authenticates the user. Specifically, the message processing unit 111 acquires the identification information 131 and the authentication information 132 from the user information database 130 to authenticate the user.

In step S103, the message processing unit 111 returns an authentication success (OK) or an authentication failure (NG) depending on the success or failure of the user authentication in step S102. If the authentication fails, the message processing unit 111 ends the process of FIG. In the following, the explanation will be continued assuming that the authentication was successful.
In step S104, the user terminal 400A requests the registration of the reference key. Specifically, the user terminal 400A requests the confidential information to be collected including the conditions (collection conditions). Upon receiving the request, the message processing unit 111 outputs the request to the confidential information collecting unit 112.

In step S105, the confidential information collecting unit 112 confirms the generation right. Specifically, the confidential information collecting unit 112 acquires the generation right 133 included in the record of the user authenticated in step S102 in the user information database 130, and determines whether or not the user has the generation right. Check. If the user has the generation right (step S105 → YES), the confidential information collecting unit 112 proceeds to step S107, and if the user does not have the generation right (step S105 → NO), proceeds to step S106.
In step S106, the confidential information collecting unit 112 returns a request refusal (NG) to the user terminal 400A, and ends the process of FIG.

In step S107, the confidential information collecting unit 112 requests the confidential information storage device 200 for confidential information including the collecting conditions.
In step S108, the confidential information storage device 200 searches for confidential information that matches the collection conditions, and returns the collected confidential information of the search results to the confidential information reference device 100. Specifically, the control unit 210 of the confidential information storage device 200 searches for a record in which the incidental attribute 222 matches the collection condition among the records of the confidential information database 220 (see FIG. 1), and the data 223 of the search result record. Reply (confidential information). The number of records of the search result is not limited to one, and may be 0 or 2 or more.

In step S109, the confidential information collecting unit 112 proceeds to step S110 if there are 0 records of the search result (step S109 → YES), and proceeds to step S111 if there is one or more records (step S109 → NO).
In step S110, the confidential information collecting unit 112 returns to the user terminal 400A that there is no confidential information (collected confidential information) that matches the collecting conditions (NG), and ends the process of FIG.
In step S111, the reference key generation unit 113 of the confidential information reference device 100 generates a random number as a reference key.

In step S112, the reference key registration unit 114 of the confidential information reference device 100 requests the collection confidential information storage device 300 to register the collection confidential information including the reference key and the collection confidential information.
In step S113, the collection confidential information storage device 300 associates and stores the reference key and the collection confidential information, and responds. Specifically, the control unit 310 of the collection confidential information storage device 300 adds a record to the collection confidential information database 320 (see FIG. 1), and the received reference key and the collection confidential information are combined with the reference key 321 of the added record. It is stored in the collected data 322. Subsequently, the control unit 310 returns the registration completion to the confidential information reference device 100.
In step S114, the reference key registration unit 114 returns the reference key to the user terminal 400A.

This completes the reference key registration process. If the user has the generation right (see step S105) and the confidential information to be referred to exists (see step S109), the confidential information and the reference key are stored in the collection confidential information storage device 300 (see step S113). The user's terminal acquires the reference key (see step S114).
Subsequently, a confidential information acquisition process for acquiring the collected confidential information stored in the collected confidential information storage device 300 using this reference key will be described.

≪Confidential information acquisition process≫
FIG. 6 is a sequence diagram of confidential information acquisition processing according to the first embodiment. In FIG. 6, the user terminal 400B is assumed to be a terminal of a user who has obtained a reference key from a user (non-authorized person, a user who has registered a reference key) in FIG. For example, the confidential information is an image taken by a surveillance camera, the user in FIG. 5 is a victim of a stalker, and the user in FIG. 6 is a police officer. Police officers obtain a reference key from the victim when asked to investigate the stalker.

Steps S121 to S123 are the same as steps S101 to S103 of FIG. 5, respectively.
In step S124, the user terminal 400B requests the acquisition of confidential information. Specifically, the user terminal 400B requests the reference key registrant's identification information (described as the reference key registrant ID in FIG. 6) and the reference key. The message processing unit 111 that has received the request outputs the request to the confidential information acquisition unit 115.
Steps S125 to S126 are the same as steps S105 to S106 of FIG. 6 except that the confidential information collecting unit 112 is replaced by the confidential information acquisition unit 115 and the generation right is replaced by the acquisition right.

In step S127, the confidential information acquisition unit 115 confirms whether or not the reference key received in step S124 and the identification information of the reference key registrant (described as ID in FIG. 6) correspond to each other. Specifically, the confidential information acquisition unit 115 receives in step S124 the reference key 136 of the record whose identification information 131 matches the identification information of the reference key registrant in the record in the user information database 130 (see FIG. 3). Check if the referenced key is included. If the confidential information acquisition unit 115 is included (step S127 → YES), the process proceeds to step S129, and if it is not included (step S127 → NO), the process proceeds to step S128.
In step S128, the confidential information acquisition unit 115 returns to the user terminal 400B that the reference key and the reference key registrant do not correspond (NG), and ends the process of FIG.

In step S129, the confidential information acquisition unit 115 requests the collection confidential information storage device 300 to acquire the collection confidential information including the reference key.
In step S130, the collection confidential information storage device 300 returns the collection confidential information corresponding to the reference key. Specifically, the control unit 310 of the collection confidential information storage device 300 is a record in the collection confidential information database 320 (see FIG. 1), and the collection data 322 (collection confidential information) of the record corresponding to the reference key received by the reference key 321. ) Is returned to the confidential information reference device 100.
In step S131, the confidential information acquisition unit 115 returns the collected confidential information to the user terminal 400B.

This completes the confidential information acquisition process. If the user has the acquisition right (see step S125) and the reference key and the reference key registrant correspond (see step S127), the terminal of the user (authorized person) acquires the collected confidential information corresponding to the reference key. (See step S131).
Next, the process of deleting this reference key will be described.

≪Reference key deletion process≫
FIG. 7 is a sequence diagram of the reference key deletion process according to the first embodiment.
Steps S141 to S143 are the same as steps S101 to S103 of FIG. 5, respectively.

In step S144, the user terminal 400 requests the deletion of the reference key. Specifically, the user terminal 400 requests the reference key registrant's identification information (described as the reference key registrant ID in FIG. 7) and the reference key. The message processing unit 111 that has received the request outputs the request to the reference key deletion unit 116.
Steps S145 to S146 are the same as steps S105 to S106 of FIG. 5, except that the confidential information collection unit 112 is replaced by the reference key deletion unit 116 and the generation right is replaced by the deletion right.

Steps S147 to S148 are the same as steps S127 to S128 of FIG. 6, except that the confidential information collecting unit 112 has been replaced by the reference key deleting unit 116.
In step S149, the reference key deletion unit 116 deletes the reference key of the user information database 130. Specifically, the reference key deletion unit 116 is a record in the user information database 130 (see FIG. 3), and the reference information 131 is included in the reference key 136 of the record whose identification information matches the identification information of the reference key registrant. The reference key that matches the reference key received in step S144 is deleted.

In step S150, the reference key deletion unit 116 requests the collection confidential information storage device 300 to delete the collection confidential information including the reference key.
In step S151, the collection confidential information storage device 300 deletes the collection confidential information corresponding to the reference key. Specifically, the control unit 310 of the collection confidential information storage device 300 deletes a record in the collection confidential information database 320 (see FIG. 1) that matches the reference key received by the reference key 321. Subsequently, the control unit 310 returns the deletion completion to the confidential information reference device 100.
In step S152, the reference key deletion unit 116 returns the deletion completion to the user terminal 400.

This completes the reference key deletion process. If the user has the right to delete (see step S145) and the reference key and the reference key registrant correspond (see step S147), the confidential information reference device 100 deletes the reference key and the corresponding collected confidential information. (See steps S149 and S151).

≪Features of confidential information reference system≫
Even a non-authorized person's terminal that cannot access the confidential information can collect the confidential information by specifying conditions and obtain a reference key corresponding to the collected confidential information. The terminal of the authorized person who can access the confidential information and who obtained the reference key from the non-authorized person (reference key registrant) acquires the collected confidential information by using this reference key. be able to. Even the terminal of the authorized person cannot acquire the collected confidential information without the reference key. In addition, the non-authorized person can indirectly present the confidential information that he / she cannot access to the authorized person (the terminal of the authorized person acquires the confidential information) by passing the reference key.

<< Modification example of the first embodiment: Reference key registrant >>
The confidential information acquisition request and the reference key deletion request include identification information of the reference key registrant (see step S124 of FIG. 6 and step S144 of FIG. 7). The identification information of the reference key registrant may be eliminated and only the reference key may be transmitted. In this case, in step S127, the confidential information acquisition unit 115 confirms whether or not the reference key is included in the reference key 136 (see FIG. 4) of any record in the user information database 130. The same applies to step S147.

<< Second Embodiment: Overall configuration of video reference system >>
Subsequently, as the second embodiment, the video reference system that handles the video of the surveillance camera as confidential information in the first embodiment will be described focusing on the differences from the first embodiment. A non-authorized user is, for example, a victim of a stalking crime and collects footage of the user being followed by a stalker in order to file a complaint with the police.
FIG. 8 is a diagram showing the overall configuration of the video reference system 10A according to the second embodiment. The video reference system 10A includes a video reference device 100A, a video storage device 200A, and a collected video storage device 300A that can communicate with each other on the network 490.

The user terminal 400 is a mobile terminal (for example, a smartphone) that can acquire location information. When the trailing by the stalker starts, the user instructs the user terminal 400 to request the registration of the reference key. When the trail is over, the user instructs the end of registration. From the registration request to the end of registration, the user terminal 400 transmits the position (for example, latitude and longitude) and time to the video reference device 100A at a predetermined cycle.

≪Configuration of video storage device≫
The video storage device 200A stores and stores the video captured by the surveillance camera 500 in the video database 220A. The record of the video database 220A shows one video, and is configured to include the attributes of the identification information 221 (denoted as ID in FIG. 8), the shooting location 222A1, the shooting period 222A2, and the video 223A.

The shooting location 222A1 and the shooting period 222A2 are incidental attributes of the image, and indicate the installation position (for example, latitude and longitude) of the surveillance camera and the shooting period. The shooting location 222A1 may be an area monitored by a surveillance camera shown in an image (for example, the latitude and longitude of the center point of the area).
The video 223A is the video data itself.

The control unit 210A collects images from the surveillance camera 500, divides the images by a predetermined time length, assigns identification information 221 and a shooting location 222A1 and a shooting period 222A2, and stores the images in the video database 220A. Further, when the control unit 210A receives a video request including the position information and the time from the video reference device 100A, the distance between the shooting location 222A1 and the position of the position information is equal to or less than a predetermined value, and the shooting period 222A2 includes the time. The record in the database 220A is searched, and the video 223A as the search result is returned as a response.

≪Configuration of collected video storage device≫
The collected video storage device 300A stores and stores the collected video acquired by the video reference device 100A from the video storage device 200A in association with the reference key. The record of the collected video database 320A shows one video and is configured to include the reference key 321 and the attributes of the collected video 322A.
The operation of the control unit 310A related to registration, acquisition, and deletion is the same as that of the control unit 310 of the first embodiment, except that the collected data 322 (see FIG. 1) is replaced with the collected video 322A.

≪Functional configuration of confidential information reference device≫
FIG. 9 is a functional configuration diagram of the video reference device 100A according to the second embodiment. Compared with the confidential information reference device 100 of the first embodiment, the processing of the image collecting unit 112A and the reference key registration unit 114A is different. The video acquisition unit 115A is the same as the confidential information acquisition unit 115, except that the confidential information is replaced with a video.
The reference key registration process will be described below, and the operations of the video collection unit 112A and the reference key registration unit 114A will be described. The video acquisition process and the reference key deletion process using the reference key are the same as those in the first embodiment.

≪Reference key registration process≫
FIG. 10 is a sequence diagram of the reference key registration process according to the second embodiment.
Steps S201 to S203 are the same as steps S101 to S103 (see FIG. 5) of the first embodiment.

In step S204, the user terminal 400A requests the registration of the reference key. Upon receiving the request, the message processing unit 111 outputs the request to the video collecting unit 112A.
Step S205 is the same as step S105.
In step S206, the image collecting unit 112A returns a request rejection (NG) to the user terminal 400A, and ends the process of FIG.
In step S207, the image collecting unit 112A returns the request acceptance (OK) to the user terminal 400A.

In step S208, the user terminal 400A repeatedly transmits the position and the time at a predetermined cycle. The image collecting unit 112A stores the received position and time.
In step S209, the user terminal 400A transmits the completion of registration of the reference key.
In step S210, the video collecting unit 112A requests the video storage device 200A to include the position and time received in step S208.
In step S211 the video storage device 200A searches for a video that matches the position and time, and returns the search result video to the video reference device 100A. Specifically, the control unit 210A of the video storage device 200A searches for a record in the video database 220A in which the distance between the shooting location 222A1 and the position is equal to or less than a predetermined value and the shooting period 222A2 includes the time, and responds with the video 223A as the search result. Reply as.

Steps S212 to S214 are the same as steps S109 to S111 (see FIG. 5) of the first embodiment.

In step S215, the reference key registration unit 114A processes the image. Specifically, the reference key registration unit 114A generates the collected video by connecting the videos acquired in step S211 in the order of shooting time and adding position and time information. Alternatively, the reference key registration unit 114A may generate the collected video so as not to include a portion in which the moving object is not shown (passerby is not shown) in the video.
Steps S216 to S218 are the same as steps S112 to S114 (see FIG. 5) of the first embodiment.
≪Characteristics of reference key registration process≫
The user terminal 400A repeatedly transmits the position and time while the user is being followed. The video reference device 100A collects the video corresponding to this position and time from the video storage device 200A, processes it, associates it with the reference key, and stores it in the collected video storage device 300A. When processing, the images are connected in the order of shooting time, and position and time information is added. For this reason, the viewer (police) of the video can easily understand the flow and location of the video, and the value as the video is high.

<< Modified example of the second embodiment >>
The collection condition in the second embodiment is the position and time of the user terminal, and the video reference device 100A collects the video of the shooting location and shooting period corresponding to this position and time. Instead of the position and time of the user terminal, the traffic route and time transmitted by the user terminal 400 may be specified by the user as a collection condition. Further, the image reference device 100A collects from the image using the person (object) recognition technology, subject to the user's clothes (color and type of upper and lower clothes) and portable items (bag, hat, glasses, etc.). You may want to collect footage of passers-by who meet the conditions.

The image storage device 200A may collect images by this person (object) recognition technology. Alternatively, after acquiring the video from the video storage device 200A with the passage route and time as the collection conditions, in step S215 (see FIG. 10), the video reference device 100A narrows down the video acquired by the person (object) recognition technology. , May be processed as a collected image.

<< Third Embodiment: Overall configuration of log reference system >>
Next, as the third embodiment, the log reference system that handles the log as confidential information in the first embodiment will be described focusing on the differences from the first embodiment. A user who is an unauthorized person is, for example, an operator of a telecommunications carrier, and collects logs of users (subscribers) who have made inquiries in order to respond to a communication record inquiry from the police.

FIG. 11 is a diagram showing an overall configuration of the log reference system 10B according to the third embodiment. The log reference system 10B includes a log reference device 100B, a log storage device 200B, and a collection log storage device 300B that can communicate with each other on the network 490.
The log storage device 200B stores and stores the communication log handled by the telecommunications carrier in the log database 230 (see FIG. 12 described later).

FIG. 12 is a data structure diagram of the log database 230 according to the third embodiment. The log database 230 is, for example, tabular data, one record indicates one communication log, identification information 231 (denoted as ID in FIG. 12), time 232, access source 233, access destination 234, And the attributes of the incidental information 235 are included.
The identification information 231 is communication identification information. Time 232 is the communication occurrence time (start time). The access source 233 and the access destination 234 are a communication source and a communication destination. The incidental information 235 is, for example, communication time.

In record 239, the identification information is "847347", the communication start time is 20:38:45 on March 3, 2019, the communication source address is "3-1111-1111", and the communication destination address. Is "44-222-2222", indicating communication with a communication time of 14 minutes and 39 seconds.
The collection log storage device 300B is the same as the collection confidential information storage device 300, except that the collection data 322 (collection confidential information) (see FIG. 1) is replaced with the collection log 322B. One communication log included in the collection log 322B corresponds to one record in the log database 230.

The log acquisition process and the reference key deletion process are the same as the confidential information acquisition process and the reference key deletion process of the first embodiment. The reference key registration process is the same as that of the first embodiment except for the collection conditions. The collection conditions in the third embodiment are the conditions relating to the time 232, the access source 233, and the access destination 234. For example, the condition is that the subscriber being investigated is the communication source or communication destination for the past three months. The confidential information collecting unit 112 collects a communication log in which the time 232 is included in the communication period of the collection condition and the communication source or communication destination of the collection condition matches the access source 233 or the access destination 234. If the collection condition is only one of the communication source and the communication destination, the other is considered to be arbitrary, and the communication log that matches the communication source or the communication destination included in the collection condition is collected.

<< Fourth Embodiment: Outline of Confidential Information Reference System >>
In the first embodiment, confidential information is collected by the reference key registration process (see steps S107 to S108 in FIG. 5). On the other hand, in the fourth embodiment, the confidential information is collected not in the reference key registration process but in the confidential information acquisition process. By doing so, the terminal of the authorized person can access the latest confidential information by using the reference key.

FIG. 13 is a diagram showing the overall configuration of the confidential information reference system 10C according to the fourth embodiment. The confidential information reference system 10C includes a confidential information reference device 100C, a confidential information storage device 200, and a collection condition storage device 300C. Hereinafter, the differences from the first embodiment will be mainly described.

≪Configuration of collection condition storage device≫
The collection condition storage device 300C stores and stores the collection conditions at the time of registering the reference key in association with the reference key. The collection condition database 320C of the collection condition storage device 300C has a configuration in which the collection data 322 (collection confidential information, see FIG. 1) in the first embodiment is replaced with the collection condition 322C.

≪Functional configuration of confidential information reference device≫
FIG. 14 is a functional configuration diagram of the confidential information reference device 100C according to the fourth embodiment. The difference from the confidential information reference device 100 (see FIG. 3) of the first embodiment is that the confidential information collection unit 112 is eliminated, and the reference key generation unit 113C, the reference key registration unit 114C, and the confidential information acquisition unit 115C operate. This is different from the first embodiment.

The reference key generation unit 113C confirms the user's generation right in addition to generating the reference key.
The reference key registration unit 114C stores the collection condition in the collection condition storage device 300C in association with the reference key, and transmits the reference key to the terminal of the user (non-authorized person).
The confidential information acquisition unit 115C acquires the collection condition corresponding to the reference key from the collection condition storage device 300C in response to the request from the terminal of the user (authorized person), and keeps the confidential information matching the collection condition confidential. It is acquired from the information storage device 200 and transmitted to the user's terminal.
The reference key registration process and the confidential information acquisition process using the reference key will be described below.

≪Reference key registration process≫
FIG. 15 is a sequence diagram of the reference key registration process according to the fourth embodiment.
Steps S401 to S406 are the same as steps S101 to S106 of the first embodiment (see FIG. 5). However, steps S405 to S406 are executed by the reference key generation unit 113C instead of the confidential information collection unit 112.
Step S407 is the same as step S111 of the first embodiment.

In step S408, the reference key registration unit 114C requests the collection condition storage device 300C to register the reference key and the collection condition received in step S404.
In step S409, the collection condition storage device 300C stores the reference key and the collection condition in association with each other, and responds.
In step S410, the reference key registration unit 114C returns the reference key to the user terminal 400A.

≪Confidential information acquisition process≫
FIG. 16 is a sequence diagram of confidential information acquisition processing according to the fourth embodiment. In FIG. 16, the user terminal 400B will be described on the assumption that it is a terminal of an authorized person who has obtained a reference key from the user (non-authorized person, user who has registered the reference key) of FIG.
Steps S421 to S428 are the same as steps S121 to S128 of FIG. 5, respectively.
In step S429, the confidential information acquisition unit 115C requests the collection condition storage device 300C to acquire the collection condition including the reference key.
In step S430, the collection condition storage device 300C returns the collection condition corresponding to the reference key.

Steps S431 to S434 are the same as steps S107 to S110 of the first embodiment. However, instead of the confidential information collecting unit 112, the confidential information acquisition unit 115C executes the operation. Further, the collection condition included in the confidential information request in step S431 is the collection condition acquired from the collection condition storage device 300C in step S430.
In step S435, the confidential information acquisition unit 115C returns the collected confidential information to the user terminal 400B.

<< Features of the Fourth Embodiment >>
In the first embodiment, the user terminal 400B acquires confidential information at the time of reference key registration. On the other hand, in the fourth embodiment, the user terminal 400B can acquire the latest confidential information at the time of acquiring the confidential information.

≪Modification example≫
The present invention is not limited to the above-described embodiment, and can be modified without departing from the spirit of the present invention. For example, in the first embodiment, the confidential information storage device 200 and the collected confidential information storage device 300 are different devices from the confidential information reference device 100. On the other hand, the confidential information storage device 200 and the collected confidential information storage device 300 may be the same device as the confidential information reference device 100, and the confidential information reference device 100 is the confidential information database 220 and the collected confidential information database. 320 may be stored. Further, although the confidential information reference device 100 executes the reference key registration process, the confidential information acquisition process, and the reference key deletion process, different devices may execute each of them.

In the above embodiment, the confidential information database 220 is one database, but is not limited to this. For example, an access source to a network service is indicated by an IP (Internet protocol) address, but the user cannot always be identified directly from the IP address. In some cases, a local and global IP address conversion database or subscriber information database owned by the IP service provider to which the user subscribes is required. The confidential information reference device 100 may collect confidential information by searching in combination of a plurality of confidential information storage devices (databases) so as to meet the collection conditions.

In the first embodiment, the confidential information reference device 100 checks the acquisition right of the user (see step S125 in FIG. 6). Instead of the confidential information reference device 100, the collection confidential information storage device 300 may check. Specifically, in step S129, the confidential information reference device 100 transmits the identification information of the user who requested the confidential information to the collection confidential information storage device 300. The collection confidential information storage device 300 may check the acquisition right of the user and determine in step S130 whether or not to transmit the collection confidential information.

The same applies to the fourth embodiment. In step S431 (see FIG. 16), the confidential information reference device 100 transmits the identification information of the user who requested the confidential information to the confidential information storage device 200. The confidential information storage device 200 may check the acquisition right of the user and determine whether or not to transmit the confidential information in step S432.

As a modification of the program, the program of the confidential information reference device 100 is read from the recording medium 199, but may be acquired via the network. As yet another embodiment, it may be a server that distributes the program of the confidential information reference device 100.

Although some embodiments of the present invention have been described above, these embodiments are merely examples and do not limit the technical scope of the present invention. The present invention can take various other embodiments, and various modifications such as omission and substitution can be made without departing from the gist of the present invention. These embodiments and modifications thereof are included in the scope and gist of the invention described in the present specification and the like, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

≪Effect≫
The effects of the confidential information reference system and the confidential information reference device will be described below.

The confidential information reference system 10 according to the present embodiment is a confidential information reference system 10 including a confidential information reference device 100, a confidential information storage device 200, and a collection confidential information storage device 300. The 200 stores the confidential information (data 223) with access restrictions in association with the incidental attribute 222 which is the information given to the confidential information, and the collected confidential information storage device 300 is acquired from the confidential information storage device 200. The collected confidential information (collected data 322) collected and stored in association with the reference key 321 which is a key for referring to the collected confidential information, and the confidential information reference device 100 has the authority to refer to the confidential information. Regarding the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information from the terminal of the non-authorized user who is not the user (user terminal 400A), the incidental attribute of the confidential information Upon receiving the request to generate the reference key including the collection condition which is the condition, the confidential information collection unit 112 which collects the confidential information associated with the incidental attribute matching the collection condition from the confidential information storage device 200 as the confidential information is collected. The reference key generation unit 113 that generates a reference key for referencing the collected confidential information, the collected confidential information and the reference key are stored in the collected confidential information storage device 300 in association with each other, and the reference key is stored in the collection confidential information storage device 300. When the reference key registration unit 114 to be sent to the terminal and the user's terminal (user terminal 400B) receive a request to acquire the collected confidential information including the reference key, it is confirmed that the user is an authorized user. It is provided with a confidential information acquisition unit 115 that acquires the collected confidential information associated with the reference key from the collected confidential information storage device 300 and sends it to the terminal of the user.

Such a confidential information reference system 10 collects confidential information that matches the collection conditions in response to a request from a terminal of an unauthorized person who cannot access the confidential information, and obtains a reference key corresponding to the collected confidential information. Can be sent. The confidential information reference system 10 returns the collected confidential information by receiving the reference key from the terminal of the authorized person who can access the confidential information and has obtained the reference key from the non-authorized person. You will be able to.
As a result, even a non-authorized person can collect confidential information that he / she cannot access and present it to the authorized person.

The confidential information reference device 100 according to the present embodiment is a confidential information reference device of the confidential information reference system 10 including the confidential information reference device 100, the confidential information storage device 200, and the collection confidential information storage device 300. , About the confidential information presented from the terminal of the non-authorized user who is the user who does not have the authority to refer to the confidential information (user terminal 400A) to the authorized user who is the user who has the authority to refer to the confidential information. Upon receiving a request to generate a reference key, which is a key for referring to the collected confidential information, which is confidential information that matches the collected condition, including the collection condition which is a condition of the incidental attribute of the confidential information, the confidential information storage device 200 Confidential information collection unit 112 that collects confidential information collected from, reference key generation unit 113 that generates a reference key for referring to the collected confidential information, and a collection confidential information storage device that associates the collected confidential information with the reference key. Upon receiving the reference key registration unit 114 that stores the reference key in the 300 and sends the reference key to the terminal of the non-authorized user and the acquisition request of the collected confidential information including the reference key from the user's terminal (user terminal 400B), With the confidential information acquisition unit 115 that confirms that the user is an authorized user, acquires the collected confidential information associated with the reference key from the collected confidential information storage device 300, and sends it to the terminal of the user. To be equipped with.

Such a confidential information reference device 100 collects confidential information that matches the collection conditions in response to a request from a terminal of an unauthorized person who cannot access the confidential information, and obtains a reference key corresponding to the collected confidential information. Can be sent. The confidential information reference device 100 returns the collected confidential information by receiving the reference key from the terminal of the authorized person who can access the confidential information and has obtained the reference key from the non-authorized person. can do.
As a result, even a non-authorized person can collect confidential information that he / she cannot access and present it to the authorized person.

In the confidential information reference device (video reference device 100A) according to the present embodiment, the confidential information is the video 223A of the surveillance camera 500, and the incidental attributes include the shooting period 222A2 of the video 223A and the shooting location 222A1, and the collection conditions Includes the position of the mobile terminal (user terminal 400) held by the non-authorized user and the time when the mobile terminal existed at the position, and the confidential information collecting unit (video collecting unit 112A) is set to the shooting location 222A1. The shooting period 222A2 collects images including the time when the mobile terminal was present when the distance from the position of the mobile terminal is equal to or less than a predetermined value.

Such a confidential information reference device (video reference device 100A) receives a collection condition including the position and time from the terminal of an unauthorized person, and is a surveillance camera that is photographing the shooting location 222A1 including the position of the collection condition. It is possible to return a reference key that refers to the captured video of the shooting period 222A2 including the time of the collection condition.
As a result, even a non-authorized person can collect the video of himself / herself and present it to the authorized person.

In the confidential information reference device (log reference device 100B) according to the present embodiment, the confidential information is the log information of the communication, and the incidental attributes are the communication time 232, the communication source (access source 233), and the communication destination (access destination). 234), and the collection conditions include any one of a specific communication source and an arbitrary communication destination, a specific communication destination and an arbitrary communication source, a specific communication source and a specific communication destination, and a communication period. , The confidential information collecting unit 112 includes a communication period including the communication time 232, and the communication source (access source 233) and the communication destination (access destination 234) of the communication match the communication source and the communication destination under the collection conditions. Collect log information.

Such a confidential information reference device (log reference device 100B) receives a collection condition including a communication period, a communication source, and a communication destination from a terminal of an unauthorized person, and is a communication generated during the communication period of the collection condition. , You can return a reference key that refers to the log related to the communication source or communication destination of the collection condition.
As a result, even a non-authorized person can collect communication logs that meet the collection conditions and present them to the authorized person.

The confidential information reference system 10C according to the present embodiment is a confidential information reference system 10C including a confidential information reference device 100C, a confidential information storage device 200, and a collection condition storage device 300C, and is a confidential information storage device 200. Stores the confidential information (data 223) with access restrictions in association with the incidental attribute 222 which is the information given to the confidential information, and the collection condition storage device 300C is a condition of the incidental attribute of the confidential information. The collection condition 322C and the reference key 321 which is a key for referring to the collection condition are stored in association with each other, and the confidential information reference device 100C is a non-authorized user who is a user who does not have the authority to refer to the confidential information. For confidential information presented to an authorized user who is a user who has the authority to refer to confidential information from the terminal (user terminal 400), a reference key including a collection condition which is a condition of ancillary attributes of the confidential information is generated. When the request is received, the reference key generation unit 113C that generates the reference key for referencing the collection condition, the collection condition, and the reference key are stored in the collection condition storage device 300C in association with each other, and the reference key is unauthorized. Upon receiving a request for acquisition of confidential information including the reference key from the reference key registration unit 114C to be sent to the user's terminal and the user's terminal (user terminal 400), it is confirmed that the user is an authorized user. Then, the collection condition associated with the reference key is acquired from the collection condition storage device 300C, the confidential information associated with the incidental attribute matching the collection condition is collected from the confidential information storage device 200, and the user is concerned. It is provided with a confidential information acquisition unit 115C to be sent to the terminal of.

Such a confidential information reference system 10C can transmit a reference key corresponding to the collection condition in response to a request from a terminal of an unauthorized person who cannot access the confidential information. The confidential information reference system 10C is an authorized person who can access the confidential information, and by receiving this reference key from the terminal of the authorized person who obtained the reference key from the non-authorized person, the confidential information matching the collection conditions is satisfied. Will be able to reply. Further, as compared with the confidential information reference system 10, the confidential information reference system 10C can return newer confidential information.
As a result, even a non-authorized person can collect confidential information that he / she cannot access and present it to the authorized person. Further, as compared with the confidential information reference system 10, the authorized person can acquire newer confidential information.

10,10C Confidential information reference system 10A Video reference system (Confidential information reference system)
10B log reference system (confidential information reference system)
100,100C Confidential information reference device 100A Video reference device (Confidential information reference device)
100B log reference device (confidential information reference device)
110 Control unit 111 Message processing unit 112 Confidential information collection unit 112A Video collection unit (Confidential information collection unit)
113, 113C Reference key generation unit 114, 114A, 114C Reference key registration unit 115, 115C Confidential information acquisition unit 115A Video acquisition unit (confidential information acquisition unit)
116 Reference key deletion unit 130 User information database 199 Recording medium 200 Confidential information storage device 200A Video storage device 200B Log storage device 300 Collection confidential information storage device 300A Collected video storage device 300B Collection log storage device 300C Collection condition storage device 500 Surveillance camera

Claims (7)

1. A confidential information reference system including a confidential information reference device, a confidential information storage device, and a collection confidential information storage device.
   The confidential information storage device stores confidential information with access restrictions in association with ancillary attributes that are information given to the confidential information.
   The collected confidential information storage device stores the collected confidential information acquired and collected from the confidential information storage device in association with a reference key which is a key for referring to the collected confidential information.
   The confidential information reference device is
   Regarding the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information from the terminal of the non-authorized user who is the user who does not have the authority to refer to the confidential information, the confidential information When the generation request of the reference key including the collection condition which is the condition of the incidental attribute is received, the confidential information associated with the incidental attribute that matches the collection condition is collected as the collected confidential information from the confidential information storage device. Information gathering department and
   A reference key generator that generates a reference key for referencing the collected confidential information,
   A reference key registration unit that associates the collected confidential information with the reference key, stores the collected confidential information in the collected confidential information storage device, and sends the reference key to the terminal of the non-authorized user.
   Upon receiving a request for acquisition of the collected confidential information including the reference key from the user's terminal, it is confirmed that the user is the authorized user, and the collected confidential information associated with the reference key is collected and confidential. A confidential information reference system characterized by having a confidential information acquisition unit that acquires from an information storage device and sends it to the user's terminal.
2. The confidential information reference device of the confidential information reference system including a confidential information reference device, a confidential information storage device, and a collection confidential information storage device.
   Regarding the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information from the terminal of the non-authorized user who is the user who does not have the authority to refer to the confidential information, the confidential information is attached. When a request for generating a reference key, which is a key for referring to the collected confidential information which is confidential information matching the collected condition, is received, the collected confidential information is received from the confidential information storage device. Confidential information gathering department to collect
   A reference key generator that generates a reference key for referencing the collected confidential information,
   A reference key registration unit that associates the collected confidential information with the reference key, stores the collected confidential information in the collected confidential information storage device, and sends the reference key to the terminal of the non-authorized user.
   Upon receiving a request for acquisition of the collected confidential information including the reference key from the user's terminal, it is confirmed that the user is the authorized user, and the collected confidential information associated with the reference key is collected and confidential. A confidential information reference device including a confidential information acquisition unit that acquires from an information storage device and sends it to the user's terminal.
3. The confidential information is an image of a surveillance camera.
   The incidental attribute includes a shooting period and a shooting location of the video.
   The collection condition includes the position of the mobile terminal held by the non-authorized user and the time when the mobile terminal was present at the position.
   The confidential information collecting unit is characterized in that the distance between the shooting location and the position of the mobile terminal is a predetermined value or less, and the shooting period includes a video including the time when the mobile terminal was present. Confidential information reference device according to 2.
4. The confidential information is communication log information, and is
   The incidental attribute includes the time of the communication, the communication source, and the communication destination.
   The collection condition includes any one of a specific communication source and an arbitrary communication destination, a specific communication destination and an arbitrary communication source, a specific communication source and a specific communication destination, and a communication period.
   The confidential information collecting unit is characterized in that the communication period includes the time of the communication, and the communication source and the communication destination of the communication collect the log information of the communication matching the communication source and the communication destination under the collection condition. The confidential information reference device according to claim 2.
5. A confidential information reference system including a confidential information reference device, a confidential information storage device, and a collection condition storage device.
   The confidential information storage device stores confidential information with access restrictions in association with ancillary attributes that are information given to the confidential information.
   The collection condition storage device stores the collection condition, which is a condition of the incidental attribute of the confidential information, and the reference key, which is a key for referring to the collection condition, in association with each other.
   The confidential information reference device is
   Regarding the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information from the terminal of the non-authorized user who is the user who does not have the authority to refer to the confidential information, the confidential information Upon receiving the request to generate the reference key including the collection condition that is the condition of the incidental attribute, the reference key generation unit that generates the reference key for referencing the collection condition, and the reference key generation unit.
   A reference key registration unit that associates the collection condition with the reference key, stores the reference key in the collection condition storage device, and sends the reference key to the terminal of the non-authorized user.
   Upon receiving a request for acquisition of the confidential information including the reference key from the user's terminal, it is confirmed that the user is the authorized user, and the collection condition associated with the reference key is stored in the collection condition storage device. It is characterized by having a confidential information acquisition unit that collects confidential information associated with the incidental attribute that matches the collection conditions from the confidential information storage device and sends it to the user's terminal. Confidential information reference system.
6. A confidential information reference method executed by the confidential information reference device of a confidential information reference system including a confidential information reference device, a confidential information storage device, and a collection confidential information storage device.
   The confidential information reference device is
   Regarding the confidential information presented to the authorized user who is the user who has the authority to refer to the confidential information from the terminal of the non-authorized user who is the user who does not have the authority to refer to the confidential information, the confidential information is attached. When a request for generating a reference key, which is a key for referring to the collected confidential information which is confidential information matching the collected condition, is received, the collected confidential information is received from the confidential information storage device. And the steps to collect
   A step of generating a reference key for referencing the collected confidential information, and
   A step of associating the collected confidential information with the reference key, storing the collected confidential information in the collected confidential information storage device, and sending the reference key to the terminal of the non-authorized user.
   Upon receiving a request for acquisition of the collected confidential information including the reference key from the user's terminal, it is confirmed that the user is the authorized user, and the collected confidential information associated with the reference key is collected and confidential. A confidential information reference method including a step of acquiring from an information storage device and sending it to the user's terminal.
7. A program for making a computer function as a confidential information reference device according to any one of claims 2 to 4.

Images