WO2022269861A1

WO2022269861A1 - Information collection system, information management system, information collection method, and program

Info

Publication number: WO2022269861A1
Application number: PCT/JP2021/023955
Authority: WO
Inventors: 賢治太田
Original assignee: 日本電信電話株式会社
Priority date: 2021-06-24
Filing date: 2021-06-24
Publication date: 2022-12-29

Abstract

This information management system comprises a basic information encryption unit, an additional information demanding unit, an encrypted basic information recording means, an encrypted additional information recording means, an information combination means, and an encrypted combined information recording means. The basic information encryption unit outputs encrypted basic information obtained by encrypting plaintext basic information. The additional information demanding unit demands information about an additional attribute that is an attribute other than a basic attribute. The encrypted basic information recording means records the encrypted basic information. The encrypted additional information recording means acquires and records encrypted additional information obtained by encrypting information about the basic attribute and the information about the additional attribute. The information combination means combines the encrypted basic information and the encrypted additional information on the basis of the information about the basic attribute included in the encrypted additional information, and outputs encrypted combined information. The encrypted combined information recording means records the encrypted combined information.

Description

Information collection system, information management system, information collection method, program

The present invention relates to an information collection system, an information management system, an information collection method, and a program for collecting and holding information such as personal information.

　Businesses that provide customer services possess customer information (personal information, corporate information, etc.), and have a storage system (for example, a customer management database, etc.). There is also an information trust function (information bank, etc.) for the purpose of promoting data utilization of personal information. An organization that holds such personal information is called a personal information holding organization (see Non-Patent Document 1). Non-Patent Literature 1 describes a service that distributes products, services, and advertisements tailored to individuals by using personal attribute information (personal information) collected by personal information holding organizations such as information banks. ing. As a technique for combining tables while making information confidential, a secure calculation technique disclosed in Non-Patent Document 2 is known.

However, when performing data analysis using personal information, there may be cases where you want to obtain new attribute information other than the attributes you already have. However, there is a problem that it is difficult to obtain additional attribute information again because the individual who provides the information does not want the personal information holding organization to know the new attribute information. Such cases where it is difficult to obtain additional attribute information are considered to be personal information in many cases, but similar cases can also be information held by companies. Therefore, hereinafter, an organization that holds attribute information will be called an information holding organization. SUMMARY OF THE INVENTION An object of the present invention is to provide a technology that allows an information holding organization to easily obtain additional attribute information from an information provider.

The information collection system of the present invention includes an information management system and an analysis device. The information management system includes a plaintext basic information recording unit, a basic information encryption unit, an additional information request unit, encrypted basic information recording means, encrypted additional information recording means, information combining means, and encrypted combined information recording means. The plaintext basic information recording unit records plaintext basic information, which is plaintext information of a predetermined basic attribute. The basic information encryption unit outputs encrypted basic information obtained by encrypting the plaintext basic information. The additional information requesting unit requests information on additional attributes, which are attributes other than the basic attributes, from outside the information collecting system based on a request from the analysis device. The encrypted basic information recording means records encrypted basic information. The encrypted additional information recording means externally acquires and records encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information. The information combining means combines the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information, and outputs encrypted combined information. The encrypted combination information recording means records the encrypted combination information. The analyzer includes an additional information requesting section and an analysis requesting section. The additional information requesting unit requests the information management system to acquire additional attribute information.

According to the information collection system and the information management system of the present invention, the additional attribute information is acquired in an encrypted state, and the encrypted basic information and the encrypted additional information are combined to obtain the encrypted combined information. Subsequent analyzes using encrypted binding information can also be analyzed using secure computation techniques. Therefore, the information of the additional attribute can be maintained in a confidential state with respect to the information holding organization. Therefore, information providers do not have to worry about information leaks, so information holding organizations can easily obtain additional attribute information from information providers such as individuals.

FIG. 2 is a diagram showing a functional configuration example of the information collection system according to the first embodiment; FIG. FIG. 4 is a diagram showing an example of information on predetermined basic attributes; The figure which shows the example of the information which added the attribute. The figure which shows the processing flow after basic information is provided. FIG. 10 is a diagram showing a processing flow for acquiring and recording additional information according to the first embodiment; The figure which shows the processing flow which combines basic information and additional information. FIG. 10 is a diagram showing a functional configuration example of an information collection system according to modification 1; FIG. 10 is a diagram showing a processing flow for acquiring and recording additional information according to Modification 1; The figure which shows the functional structural example of a computer.

Hereinafter, embodiments of the present invention will be described in detail. Components having the same function are given the same number, and redundant description is omitted.

In the following description, N is a predetermined integer of 3 or more, n is an integer of 1 or more and N or less, K is a predetermined integer of 2 or more and N or less, M is an integer of 1 or more, and m is 1 or more of M or less. be an integer. FIG. 1 shows a functional configuration example of the information collection system of the first embodiment. The information collection system 10 includes an information management system 50 and an analysis device 300 . The information management system 50 is composed of an information management device 100 and a secure computing system 200 . The secure computing system 200 is composed of N secure computing devices 200 ₁ , . . . , 200 _N . The information management device 100, the secure _computing devices 200 ₁ , . Similarly, _M information providing devices 400 ₁ , . In the present invention, the information providing device _400m is primarily assumed to be a mobile terminal owned by an individual, but may be a database owned by a company.

In the secure computing technology shown in Non-Patent Document 2, etc., data is divided into N pieces called "shares". , the data cannot be restored (the secret is not leaked). Therefore, if the information providing device 400m generates _N shares from the information that the information providing device 400m _wishes to keep confidential, and distributes one share to each of the secure computing devices 200n, the information can be made confidential. For example, N=3 and K=2, or other values may be used.

Fig. 2 shows an example of information on predetermined basic attributes. Also, FIG. 3 shows an example of information with added attributes. For example, as basic attribute information, personal name, gender, age, address, telephone number, and e-mail address are recorded in plaintext (unencrypted) in the plaintext basic information recording unit 190 of the information management device 100. . If the analysis device 300 wishes to use the information on the purchase frequency of the product group A to search for individuals who are likely to purchase the products, information such as that shown in FIG. 3 is required. However, an individual (information provider) cannot easily provide information on the purchase frequency of the A product group. Although the information shown in FIG. 3 is shown in a plaintext state, the present invention employs a technique for generating the information shown in FIG. 3 in an encrypted state. In the case of this method, the information shown in FIG. 3 is kept secret from both the organization (information holding organization) that owns the information management system 50 and the organization that owns the analysis device 300 (such as a company that sells product A). You can keep it in a solid state. The present invention provides an environment in which an individual (information provider) can easily provide information by using a technique that can conceal information. By providing such an environment, the information holding organization can easily obtain additional attribute information from the information provider.

As shown in FIG. 1, the information management system 50 is composed of an information management device 100 and a secure computing system 200 . The secure computing system 200 is composed of N secure computing devices 200 ₁ , . . . , 200 _N . The information management device 100 includes a plaintext basic information recording unit 190 , a basic information encryption unit 110 and an additional information request unit 130 . The information management device 100 may also include a basic attribute notification unit 120 . The secure computing device _200n includes an information combiner _210n , an analyzer _250n , and a recorder _290n . The information combining units 210 ₁ , . . . , 210 _N constitute an information combining means 210 . The analysis units 250 ₁ , . . . , 250 _N constitute the analysis means 250 . The recording unit 290 _n records the n-th share of the encrypted basic information, the n-th share of the encrypted additional information, and the n-th share of the encrypted combined information. Encrypted basic information recording means 291 is the part that records shares of the encrypted basic information of the recording units 290 ₁ , . . . , 290 _N . Encrypted additional information recording means 292 is a portion that records shares of the encrypted additional information of the recording units 290 ₁ , . . . , 290 _N . Encrypted combined information recording means 293 is a portion that records shares of encrypted combined information of recording units 290 ₁ , . . . , 290 _N .

The analysis device 300 includes an additional information requesting section 320 , an analysis requesting section 340 and an analysis recording section 390 . The analysis device 300 may also include an additional information extraction section 310 and a combination request section 330 . The analysis recording unit 390 records analysis rules to be requested to the information management system 50 . The analysis requesting section 340 requests the analysis recorded by the analysis recording section 390 to the information management system 50 . The information providing device 400m includes a basic information providing section _410m , an additional information encrypting section _420m , an encrypted additional information _providing section _430m , and a recording section _490m . Information on various attributes held by individuals is recorded in the recording unit _490m .

FIG. 4 is a diagram showing the processing flow after basic information is provided. FIG. 5 is a diagram illustrating a processing flow for acquiring and recording additional information according to the first embodiment. FIG. 6 is a diagram showing a processing flow for combining basic information and additional information. The basic information providing unit _410m sends plaintext basic information, which is plaintext information of a predetermined basic attribute, to the information management device 100 ( _S410m ). The information management device 100 records plaintext basic information, which is plaintext information of a predetermined basic attribute, in the plaintext basic information recording unit 190 (S190).

The basic information encryption unit 110 outputs encrypted basic information (N shares of the plaintext basic information) obtained by encrypting the plaintext basic information, and sends the encrypted basic information (n-th share) to the secure computing device 200 _n . Send (S110). The recording unit _290n of the secure computing device 200n records the encrypted basic information (the _n -th share of the basic information) ( _S291n ). Summarizing steps S291 ₁ , . . . , S291 _N , the encrypted basic information recording means 291 records the encrypted basic information (S291). If the information management device 100 also includes the basic attribute notification unit 120, the basic attribute notification unit 120 transmits the predetermined basic attribute type to the analysis device 300 (S120). The analysis device 300 records the type of basic attribute in the analysis recording unit 390 (S391). In the case of FIG. 2, the "types of basic attributes" are personal name, sex, age, address, telephone number, and e-mail address.

If the analysis device 300 also includes an additional information extraction unit 310, the additional information extraction unit 310 stores the analysis rule to be requested to the information management system 50 and the types of basic attributes recorded in the analysis recording unit 390. By comparison, attributes that are insufficient with only the basic attributes are extracted, and additional attributes that need to be added are output (S310). If the types of basic attributes are known and the additional information extraction unit 310 is not provided, the administrator who manages the analysis device 300 may specify the additional attributes.

The additional information requesting unit 320 of the analysis device 300 requests the information management system 50 to acquire additional attribute information (S320). The information management device 100 of the information management system 50 receives the request, and the additional information requesting unit 130 sends the information of the additional attribute, which is an attribute other than the basic attribute, to the information collection system 10 based on the request from the analysis device 300. is requested to the information providing devices ₄₀₀ ₁ , .

When the owner of information such as an individual is permitted to provide additional attribute information, the additional information encryption unit _420m of the information providing device 400m _encrypts all or part of the basic attribute information and the additional attribute information. Encrypted additional information (N shares of additional information) is generated by associating and encrypting the information (S420 _m ). For example, the personal name, gender, age, address, telephone number, and e-mail address information, which are all of the basic attributes shown in FIG. 2, may be associated with additional attribute information. , the email address information may be associated with additional attribute information. The additional information may be associated with information that can identify an individual in the basic attribute information.

The encrypted additional information providing unit 430 _m transmits the encrypted basic information (the nth share) to the secure computing device 200 _n (S430 _m ). The recording unit _290n of the secure computing device 200n records the encrypted additional information (the _n -th share of the additional information) ( _S292n ). To summarize steps _S292 ₁ , . (S292). Through the processing of steps S310 to S292, the information management system 50 can acquire the anonymized additional information.

If the analysis device 300 also includes a combination requesting section 330, the combination requesting section 330 requests the information management system 50 to combine the encrypted basic information and the encrypted additional information (S330). The encrypted basic information and the encrypted additional information may be combined automatically when the information management system 50 records the encrypted additional information. In that case, the connection requesting unit 330 is not required.

The information combining means 210 combines the encrypted basic information and the encrypted additional information based on the information of all or part of the basic attributes included in the encrypted additional information to obtain encrypted combined information (encrypted combined information). N shares) are output (S210). More specifically, the information combining units 210 ₁ , . . . , 210 _N of the _secure computing devices 200 ₁ , . Then, the encrypted basic information and the encrypted additional information with matching basic attribute information are combined (S210 ₁ , . . . , S210 _N ). The encrypted combined information recording means 293 records encrypted combined information (N shares of encrypted combined information). That is, the recording unit _290n of the secure computing device 200n records the encrypted combined information (the _n -th share of combined information) ( _S293n ). Through steps S210 and S293, information obtained by encrypting the information obtained by combining the basic attribute information and the additional attribute information shown in FIG. 3 is recorded in the information management system 50. FIG.

The analysis requesting unit 340 of the analysis device 300 requests the information management system 50 to perform analysis according to the analysis rule recorded by the analysis recording unit 390 (S341). The analysis means 250 of the secure computing system 200 of the information management system 50 performs the requested analysis using secure computing (S250), and the analysis device 300 acquires the analysis result (S342). Analysis using secure calculation may be executed by cooperative processing of analysis units 250 ₁ , . . . , 250 _N .

According to the information collection system 10 and the information management system 50, the additional attribute information is acquired in an encrypted state, and the encrypted basic information and the encrypted additional information are combined to obtain the encrypted combined information. Subsequent analyzes using encrypted binding information can also be analyzed using secure computation techniques. Therefore, the information of the additional attribute can be maintained in a confidential state with respect to the information holding organization. Therefore, information providers (individuals, etc.) do not need to worry about information (personal information, etc.) leaking out. In such an environment, information holding organizations can easily obtain additional attribute information from information providers such as individuals.
[Modification 1]

In step S320 of the first embodiment, the analysis device 300 transmits to the information management system 50 in plaintext what information is required as additional attributes. In other words, the information holding organization does not know the additional attribute information itself, but can know what kind of information has been added as additional attribute information (type of additional attribute). In Modified Example 1, the information holding organization does not know the type of the additional attribute. FIG. 7 shows a functional configuration example of the information collection system of Modification 1. As shown in FIG. FIG. 8 shows a processing flow for acquiring and recording additional information in Modification 1. As shown in FIG. Although the details of the information combining means 210 and the analyzing means 250 are omitted in FIG. 7, the secure computing device 201n includes an information combining unit _210n and an analyzing unit _250n as in _FIG .

In the information management system 51 of the information collection system 11 , the information management device 101 does not have the additional information request section 130 . Instead, secure computing system 201 comprises additional attribute request means 230 . The additional attribute request means 230 is composed of additional attribute request units 230 ₁ , . . . , 230 _N of the _secure computing devices 201 ₁ , . The analysis device 301 includes an encrypted additional information requesting section 325 instead of the additional information requesting section 320 . The information providing device _401m also includes an additional attribute decoding unit _440m . Other configurations are the same as those of the first embodiment. The processing flow after basic information is provided is the same as in FIG. 4, and the processing flow for combining basic information and additional information is the same as in FIG.

A modified example will be described according to FIG. If the analysis device 301 also includes an additional information extraction unit 310, the additional information extraction unit 310 stores the analysis rules to be requested to the information management system 51 recorded by the analysis recording unit 390 and the types of basic attributes. By comparison, attributes that are insufficient with only the basic attributes are extracted, and additional attributes that need to be added are output (S310). If the types of basic attributes are known and the additional information extraction unit 310 is not provided, the administrator who manages the analysis device 301 may specify the additional attributes.

The encrypted additional information requesting unit 325 of the analysis device 301 encrypts the type of the additional attribute, generates an encrypted additional attribute (N shares indicating the type of the additional attribute) indicating the type of the additional attribute, and encrypts the type of the additional attribute. Information acquisition is requested to the information management system 51 (S325). The secure computing system 201 of the information management system 51 receives the request, and the additional attribute request means 230 sends the information of the additional attribute, which is an attribute other than the basic attribute, to the information collection system 11 based on the request from the analysis device 301. is requested to the information providing devices ₄₀₁ ₁ , . In other words, the secure computing device 201 _n receives one of the N shares (n-th share) indicating the type of additional attribute, and the additional attribute requesting unit 230 _n requests based on the request from the analysis device 301 , _401M for information on additional attributes other than the basic attributes ( _S230n ₎ .

The information providing device 401 _m receives K or more shares among the shares indicating the types of additional attributes, and the additional attribute decoding unit 440 _m decodes the types of additional information (S440 _m ). When the owner of information such as an individual is allowed to provide additional attribute information, the additional information encryption unit _420m of the information providing device _401m encrypts all or part of the basic attribute information and the additional attribute information. Encrypted additional information (N shares of additional information) is generated by associating and encrypting the information (S420 _m ).

The encrypted additional information providing unit 430 _m transmits the encrypted basic information (the nth share) to the secure computing device 201 _n (S430 _m ). The recording unit _290n of the secure computing device 201n records the encrypted additional information (the _n -th share of the additional information) ( _S292n ). To summarize steps _S292 ₁ , . (S292). Through the processing of steps S310 to S292, the information management system 51 can acquire the anonymized additional information.

According to the information collection system of Modification 1, the same effects as in Embodiment 1 can be obtained while preventing the information holding organization from knowing the types of additional attributes.

[Program, recording medium]
In the above-described various processes, the recording unit 2020 of the computer 2000 shown in FIG. 7 reads a program for executing each step of the above method, and the control unit 2010, the input unit 2030, the output unit 2040, the display unit 2050, etc. operate. It can be implemented by

A program that describes this process can be recorded on a computer-readable recording medium. Any computer-readable recording medium may be used, for example, a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, or the like.

In addition, the distribution of this program is carried out, for example, by selling, assigning, lending, etc. portable recording media such as DVDs and CD-ROMs on which the program is recorded. Further, the program may be distributed by storing the program in the storage device of the server computer and transferring the program from the server computer to other computers via the network.

A computer that executes such a program, for example, first stores the program recorded on a portable recording medium or the program transferred from the server computer once in its own storage device. Then, when executing the process, this computer reads the program stored in its own recording medium and executes the process according to the read program. Also, as another execution form of this program, the computer may read the program directly from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to this computer. Each time, the processing according to the received program may be executed sequentially. In addition, the above-mentioned processing is executed by a so-called ASP (Application Service Provider) type service, which does not transfer the program from the server computer to this computer, and realizes the processing function only by its execution instruction and result acquisition. may be It should be noted that the program in this embodiment includes information that is used for processing by a computer and that conforms to the program (data that is not a direct instruction to the computer but has the property of prescribing the processing of the computer, etc.).

In addition, in this embodiment, the device is configured by executing a predetermined program on a computer, but at least part of these processing contents may be implemented by hardware.

10, 11 Information collection system 50, 51

Information management system

100, 101 Information management device 110 Basic information encryption unit 120 Basic attribute notification unit 130 Additional information request unit 190 Plaintext basic information recording unit 200, 201 Secure computing system 200 _n , 201 _n secure computing device 210 information combining means 210 _n information combining section 230 additional attribute requesting means 230 _n additional attribute requesting section 250 analyzing means 250 _n analyzing section 290 _n recording section 291 encrypted basic information recording means 292 encrypted additional information recording means 293 Encrypted combined information recording means 300, 301 Analysis device 310 Additional information extraction unit 320 Additional information request unit 325 Encrypted additional information request unit 330 Combine request unit 340 Analysis request unit 390 Analysis recording unit 400 _m , 401 _m Information providing device 410 _m Basic information providing unit 420 _m Additional information encryption unit 430 _m Encrypted additional information providing unit 440 _m Additional information decoding unit 490 _m Recording unit

Claims

An information collection system comprising an information management system and an analysis device,
The information management system is
a plaintext basic information recording unit for recording plaintext basic information, which is plaintext information of predetermined basic attributes;
a basic information encryption unit that outputs encrypted basic information obtained by encrypting the plaintext basic information;
an additional information requesting unit that requests information on additional attributes, which are attributes other than the basic attributes, from outside the information collection system based on a request from the analysis device;
encrypted basic information recording means for recording the encrypted basic information;
encrypted additional information recording means for acquiring from the outside and recording encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information;
information combining means for combining the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information and outputting encrypted combined information;
and encryption combination information recording means for recording the encryption combination information,
The analysis device is
An information collection system, comprising: an additional information requesting unit that requests the information management system to acquire information on the additional attribute.
An information collection system comprising an information management system and an analysis device,
The information management system is
a plaintext basic information recording unit for recording plaintext basic information, which is plaintext information of predetermined basic attributes;
a basic information encryption unit that outputs encrypted basic information obtained by encrypting the plaintext basic information;
An additional attribute request for encrypting additional attribute information, which is an attribute other than the basic attributes, and requesting it from the outside of the information collection system, based on a request for acquisition of encrypted additional attribute information from the analysis device. means and
encrypted basic information recording means for recording the encrypted basic information;
encrypted additional information recording means for acquiring from the outside and recording encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information;
information combining means for combining the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information and outputting encrypted combined information;
and encryption combination information recording means for recording the encryption combination information,
The analysis device is
An information collection system, comprising: an encrypted additional information requesting unit for encrypting and requesting the information management system to obtain the additional attribute information.
The information collection system according to claim 1 or 2,
The information management system is
A basic attribute notification unit that transmits the type of the basic attribute to the analysis device,
The analysis device is
An information collection system, further comprising an additional attribute extracting unit that extracts an attribute that is lacking in the basic attributes as an additional attribute in order to perform the information analysis.
The information collection system according to any one of claims 1 to 3,
The information collecting system, wherein the external is an information providing device that has provided the basic attributes to the information management system.
a plaintext basic information recording unit for recording plaintext basic information, which is plaintext information of predetermined basic attributes;
A basic information encryption unit that outputs encrypted basic information obtained by encrypting the plaintext basic information; an additional attribute request means for requesting the
encrypted basic information recording means for recording the encrypted basic information;
encrypted additional information recording means for externally acquiring and recording encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information;
information combining means for combining the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information and outputting encrypted combined information;
and encrypted combination information recording means for recording the encrypted combination information.
An information collection method using an information management system and an analysis device,
The information management system records plaintext basic information, which is plaintext information of predetermined basic attributes,
The information management system outputs and records encrypted basic information obtained by encrypting the plaintext basic information,
The analysis device requests the information management system to acquire information on additional attributes that are attributes other than the basic attributes,
The information management system externally requests the additional attribute information based on a request from the analysis device,
the information management system obtains from the outside and records encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information;
The information management system outputs encrypted combined information combining the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information. and recording said cryptographic binding information.
An information collection method using an information management system and an analysis device,
The information management system records plaintext basic information, which is plaintext information of predetermined basic attributes,
The information management system outputs and records encrypted basic information obtained by encrypting the plaintext basic information,
The analysis device encrypts and requests the information management system to acquire information on an additional attribute that is an attribute other than the basic attribute;
The information management system encrypts and requests the additional attribute information from the outside based on a request from the analysis device;
the information management system obtains from the outside and records encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information;
The information management system outputs encrypted combined information combining the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information. and recording said cryptographic binding information.
3. A program for causing a computer to function as one of an information management device, a secure computing device, and an analysis device constituting the information management system according to claim 1 or 2.