JP2007287102A - Data converter - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data converter for abstracting various pieces of secret information by various forms and efficiently performing the conversion processing of the secret information. <P>SOLUTION: An individual information abstraction server 1 for converting the conversion origin data of a conversion origin including the secret information to be kept secret to prescribed converted data comprises: a processing operation setting part 13 for performing setting relating to the conversion processing so as to convert the conversion origin data to the converted data not including the secret information by abstracting the secret information of the conversion origin data by the conversion processing corresponding to the kind of the secret information; a data abstraction conversion processing part 11 for converting the conversion origin data to the converted data corresponding to the kind of the respective conversion origin data on the basis of the setting in the processing operation setting part 13; and an abstraction information DB 32 for storing the converted data converted by the data abstraction conversion processing part 11. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a data conversion apparatus that performs processing for converting confidential information.

  Conventionally, when conducting marketing analysis, statistical processing of information, data mining, etc., various information on the host (server) is extracted with a search / aggregation program and downloaded to a PC (Personal Computer) etc. Data has been processed. However, information used for data processing often includes personal information such as customer information and employee information and information relating to trade secrets, and has the following problems.

  That is, when information on the host is downloaded to the PC, there is a problem that the information is illegally taken out, lost, stolen, and the risk of leaking personal information increases. In addition, there is a problem that the risk of leaking personal information increases when a form is output or stored in a recording medium such as an FD (flexible disk) / USB (Universal Serial Bus) memory. Furthermore, due to the enforcement of the Personal Information Protection Law, it is necessary to implement confidentiality measures (such as data encryption) in accordance with internal management rules, increasing the information management load and greatly restricting the scope of information usage. There has been a problem that the use efficiency of the system is reduced.

  For this reason, the development of a technique for providing various information while maintaining the confidentiality of information and performing data processing such as statistical processing is in progress. For example, the information providing system described in Patent Document 1 extracts data satisfying a search condition from a database including inhabitant information, and processes the extracted data based on region classification information, thereby making the search result anonymous and local It is output as rounded information every time.

JP 2002-149938 A

  However, the above conventional technique has a problem that information related to the address of the resident can be provided in a rounded manner, but information other than the address cannot be abstracted and provided in various forms. For this reason, there was a problem that various information could not be provided efficiently.

  The present invention has been made in view of the above, and an object of the present invention is to obtain a data conversion apparatus that abstracts various types of confidential information in various forms and efficiently converts the confidential information.

  In order to solve the above-described problems and achieve the object, the present invention provides a data conversion apparatus that converts conversion source data including confidential information to be concealed into predetermined post-conversion data. A conversion setting unit that performs settings related to the conversion process so that the information is abstracted by a conversion process according to the type of the confidential information and the conversion source data is converted into post-conversion data that does not include the confidential information; A data conversion unit that converts the conversion source data into post-conversion data corresponding to the type of each conversion source data based on the setting of the conversion setting unit, and a data storage unit that stores the post-conversion data converted by the data conversion unit And.

  According to this invention, since the secret information is abstracted by the conversion process according to the type of the secret information, there is an effect that the data conversion of the secret information can be performed efficiently.

  Embodiments of a data conversion apparatus according to the present invention will be described below in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

Embodiment First, the concept of data conversion (information provision) according to the present embodiment will be described. FIG. 1 is an explanatory diagram for explaining the concept of data conversion according to the embodiment. A system for managing confidential information such as personal information includes a personal information abstraction server (data conversion device) 1 that converts data including confidential information (information to be concealed) such as personal information into data that does not include confidential information, system management A personal computer (PC) and a personal computer of the user.

  Conversion setting information including an instruction for processing according to data such as a setting instruction related to data conversion and a setting instruction related to data abstraction is sent from the PC of the system administrator to the personal information abstraction server 1 (1). Based on this conversion setting information, the personal information abstraction server 1 abstracts (processes) customer information including confidential information, and converts / abstracts it into data not including confidential information (2).

  For example, the personal information abstraction server 1 converts the customer code into identification information (new customer code) unrelated to the customer code. In addition, the personal information abstraction server 1 converts the date of birth of the customer into data such as the age when the customer cannot be identified (30's etc.), and the customer's address, for example, a residential area where the customer's address cannot be identified (Kanto) Local data).

  Further, the personal information abstraction server 1 excludes the customer's telephone number from the customer information in order to keep it private, for example. Then, the personal information abstraction server 1 stores and manages data that does not include the converted / abstracted confidential information in a predetermined storage means (abstracted information DB 32 described later).

  A user who wants to acquire customer information accesses the personal information abstraction server 1 from the user's PC, and searches for and acquires customer information that does not include confidential information (3). Then, the user's PC performs statistical processing of customer information not including confidential information as necessary (4).

  FIG. 2 is a diagram showing a configuration of an information providing system including a personal information abstraction server according to the embodiment of the present invention. The information providing system 100 includes a personal information abstraction server 1, a general user PC that is a PC used by a general user, and a system management PC 4 used by a system administrator of the information providing system. The personal information abstraction server 1 and the general user PC 3 and system management PC 4 are connected via a communication network 2 such as the Internet or an intranet.

  The personal information abstraction server 1 includes a computer device that generates data obtained by abstracting this data from various data and provides it to the general user PC 3. The general user PC 3 is a computer device equipped with a Web browser or the like that retrieves data abstracted by the personal information abstraction server 1, and the system management PC 4 abstracts (converts) data by the personal information abstraction server 1. A computer device or the like for instructing various settings. In the information providing system 100, the setting of the processing operation (data abstraction processing or the like) in the processing operation setting unit 13 of the personal information abstraction server 1 is performed by a user having the system administrator authority of the information providing system 100 ( Only the system management PC4 user) can perform the configuration.

  The personal information abstraction server 1 includes a business information DB (Data Base) 31, an abstraction information DB (data storage unit) 32, a data search processing unit 12, a data abstraction conversion processing unit (data conversion unit) 11, and a communication unit 14. , A processing operation setting unit (conversion setting unit) 13, a conversion processing result storage unit 21, a conversion parameter storage unit 22, a conversion master data storage unit 23, and a conversion correspondence table temporary storage unit 24.

  The business information DB 31 stores various confidential information such as information used for business (traded parts, unit price, delivery date, etc.) and personal information (address, date of birth, etc.). In the following, for convenience of explanation, information stored in the business information DB 31 will be described as business data (conversion source data).

  The abstraction information DB 32 stores business data that has been subjected to abstraction processing (conversion processing) by the data abstraction conversion processing unit 11 (hereinafter referred to as abstract data). Note that the abstracted data (data after conversion) includes data that has not been converted from business data.

  The conversion processing result storage unit 21 stores the processing results (abstracted data generation history, error message log, etc.) by the data abstraction conversion processing unit 11 as processing result information. The conversion master data storage unit 23 stores a conversion master table (conversion correspondence information) that is a conversion table from business data to abstract data. The conversion master table is an information table in which business data and abstract data are associated with each other.

  The conversion parameter storage unit 22 stores information (parameter) (hereinafter referred to as abstract designation information) for designating how to abstract each business data (data item) in the business information DB 31. Abstraction specification information includes the file name (database name, table name) to be converted to abstract data, the extraction conditions for the data to be converted to abstract data (conversion target table), and the item of business data. It includes a conversion method to abstract data, a conversion master table name when using a conversion master table, a start time of conversion processing to abstract data, a conversion processing cycle to abstract data, and the like.

  The conversion correspondence table temporary storage unit 24 converts new identification information (for example, information for uniquely identifying a customer (for example, information for uniquely identifying a customer) assigned to abstract data (for example, one set of data for each customer) when converting business data to abstract data. And a personal information or the like (hereinafter referred to as an identification information correspondence table) in the business data corresponding to the post-conversion code.

  The processing operation setting unit 13 performs registration processing, deletion processing, inquiry processing, and the like of abstract designation information in the conversion parameter storage unit 22 based on instruction information from the system management PC 4. Further, the processing operation setting unit 13 performs registration processing, update processing, inquiry processing, and the like of the conversion master table in the conversion master data storage unit 23 based on the instruction information from the system management PC 4. Further, the processing operation setting unit 13 performs an inquiry process of the processing result information to the conversion processing result storage unit 21 based on the instruction information from the system management PC 4.

  The data abstraction conversion processing unit 11 stores a data conversion processing program for converting business data into abstract data, and converts the business data in the business information DB 31 into abstract data using the data conversion processing program. And stored in the abstraction information DB 32.

  The data abstraction conversion processing unit 11 starts the data conversion processing program based on the abstract designation information in the conversion parameter storage unit 22 (start time of conversion processing to abstract data, conversion processing cycle to abstract data). To do. The data abstraction conversion processing unit 11 converts (generates) business data into abstract data based on the abstract designation information (such as a conversion method to abstract data) in the conversion parameter storage unit 22.

  The data abstraction conversion processing unit 11 includes (1) key code conversion, (2) information abstraction (rounding) processing on date of birth and date, and (3) address as conversion processing of business data to abstract data. Abstraction processing, (4) no conversion (no conversion), (5) non-disclosure (not open), and the like.

  Among these, (1) key code conversion is a new code (post-conversion) that identifies individual or customer identification information (unique key) (for example, employee number, customer code, part order number, etc.) used in business data. Code). In this key code conversion, it is impossible to associate identification information such as individuals used in business data with a new converted code while converting information about the same individual or customer with a common converted code. Is converted to be As a new post-conversion code, a random number may be used, or a predetermined number may be assigned in the order of key code conversion processing. The key code conversion is performed for each item in the business data such as employee number and customer code. In addition, when key code conversion is performed, key information used for key conversion is changed every predetermined period, and a random value that cannot be specified is used as key information.

  When converting from business data to abstract data, the data abstraction conversion processing unit 11 converts a converted code of the abstract data provided, personal information in the business data corresponding to the converted code, etc. Previous personal information etc.) are associated with each other and stored in the conversion correspondence table temporary storage unit 24 as an identification information correspondence table. The data abstraction conversion processing unit 11 deletes the identification information correspondence table from the conversion correspondence table temporary storage unit 24 after the conversion processing from business data to abstraction data is completed.

  The data search processing unit 12 searches and extracts the abstract data in the abstract information DB 32 based on the instruction information from the general user PC 3. The abstract data extracted by the data search processing unit 12 is transmitted to the general user PC 3 via the communication unit 14.

  The communication unit 14 transmits / receives data (information) to / from the general user PC 3 and the system management PC 4 via the communication network 2. The communication unit 14 receives information (search conditions, etc.) for searching for abstract data from the general user PC 3 and transmits it to the data search processing unit 12, and extracts the abstract data extracted by the data search processing unit 12. It transmits to general user PC3. In addition, the communication unit 14 receives the abstract designation information instructing the setting of the processing operation setting unit 13 from the system management PC 4 and transmits it to the processing operation setting unit 13, as well as the conversion processing result storage unit 21, the conversion parameter storage unit. 22, information (such as setting information) in the conversion master data storage unit 23 is transmitted to the system management PC 4.

  Next, the processing procedure of the personal information abstraction server will be described. FIG. 3 is a flowchart showing a procedure for generating abstract data. A user (system administrator) of the system management PC 4 transmits abstract designation information, a conversion master table, and the like to the personal information abstraction server 1 and registers them in advance. The processing operation setting unit 13 of the personal information abstraction server 1 stores the abstraction designation information transmitted from the system management PC 4 in the conversion parameter storage unit 22 and converts the conversion master table transmitted from the system management PC 4 into conversion master data. The data is stored in the storage unit 23.

  The abstract specification information here includes extracting the file name to be converted into abstract data, the extraction condition of the data to be converted into abstract data (for example, only information related to quality-evaluated parts) Specified information), conversion method to abstract data (abstraction information, disclosure information, etc.), conversion master name when using conversion master data (identifies conversion master table) Information), start time of conversion processing to abstract data, conversion processing cycle to abstract data, and the like.

  The data abstraction conversion processing unit 11 of the personal information abstraction server 1 is based on the abstract information in the conversion parameter storage unit 22 (start time of conversion processing to abstract data, conversion processing cycle to abstract data). When the predetermined time comes, the data conversion processing program is started. The data abstraction conversion processing unit 11 checks whether there is any error or inconsistency in the abstraction designation information in the conversion parameter storage unit 22 as an initialization process (step S10).

  When the data abstraction conversion processing unit 11 determines that there is no error or inconsistency in the abstraction specification information (No in step S20), the data abstraction conversion processing unit 11 stores the data to be converted into the abstract data. The file name and extraction conditions are extracted from the abstract designation information in the conversion parameter storage unit 22.

  Based on the file name of the data to be converted and the extraction condition, the data abstraction conversion processing unit 11 reads the file name to be converted from the business information DB 31 storing the business data to be converted into abstract data, Business data (processing target data) corresponding to the extraction condition is read (step S30). Here, the data abstraction conversion processing unit 11 first reads business data relating to one individual or one customer from the business information DB 31.

  The data abstraction conversion processing unit 11 determines whether or not the business data corresponding to the file name to be converted and the extraction condition has been read from the business information DB 31 (whether there is unprocessed data to be processed) (step S40). ). When the business data matching the file name to be converted and the extraction condition can be read (step S40, Yes), the data abstraction conversion processing unit 11 performs the abstraction / conversion processing of the read business data.

  The data abstraction conversion processing unit 11 converts the business data into abstract data using the conversion method to abstract data included in the abstract designation information, the conversion master name (conversion master table name), and the like. (Step S50).

  The data abstraction conversion processing unit 11 performs a new conversion code to be assigned to the abstract data when performing abstraction / conversion processing of the read business data, personal information in the business data corresponding to the post-conversion code, and the like. Is temporarily stored in the conversion correspondence table temporary storage unit 24 as an identification information correspondence table.

  The data abstraction conversion processing unit 11 determines whether or not a conversion error has occurred during the conversion to abstract data (step S60). If no conversion error has occurred during the conversion to abstract data (No in step S60), the data abstraction conversion processing unit 11 performs output processing of the abstract data in which no conversion error has occurred (step S60). S70). That is, the data abstraction conversion processing unit 11 stores abstract data in which no conversion error has occurred in the abstraction information DB 32 as an output process of abstract data in which no conversion error has occurred.

  Further, the data abstraction conversion processing unit 11 reads the next business data corresponding to the file name to be converted and the extraction condition from the business information DB 31 based on the file name and extraction condition of the data to be converted (step) S30).

  On the other hand, when a conversion error occurs during the conversion process to the abstract data (step S60, Yes), the data abstraction conversion processing unit 11 performs log output of an error message as error processing and the like when an error occurs. A continuation processing method (continuation setting of data abstraction processing) is checked (step S80). When the data abstraction conversion processing unit 11 outputs a log of an error message as error processing, the data abstraction conversion processing unit 11 stores the error message or the like in the conversion processing result storage unit 21 as processing result information.

  The data abstraction conversion processing unit 11 extracts information related to the continuation setting at the time of error occurrence included in the abstraction designation information in order to check the continuation processing method at the time of error occurrence. When the continuation processing method when an error occurs is set to continue the data abstraction process (step S90, continuation), the data abstraction conversion processing unit 11 sets the file name and extraction condition of the data to be converted. Based on the business information DB 31, the next business data corresponding to the file name to be converted and the extraction condition is read (step S30).

  The data abstraction conversion processing unit 11 determines whether or not the business data corresponding to the file name to be converted and the extraction condition has been read from the business information DB 31 (step S40). Hereinafter, when the business data matching the file name to be converted and the extraction condition can be read (step S40, Yes), the processing of steps S50 to S90 and the processing of step S30 are repeated.

  The data abstraction conversion processing unit 11 repeats the processes of steps S50 to S90 and the process of step S30 until the business data corresponding to the file name to be converted and the extraction condition cannot be read from the business information DB 31.

  When the data abstraction conversion processing unit 11 cannot read the business data corresponding to the file name to be converted and the extraction condition from the business information DB 31 (No in step S40), the data abstraction conversion processing unit 11 ends the abstraction process. Perform processing. The data abstraction conversion processing unit 11 stores the processing result information (abstraction history of abstracted data) by the data abstraction conversion processing unit 11 in the conversion processing result storage unit 21 as the abstraction processing end processing (log) Output to file).

  If the data abstraction conversion processing unit 11 determines that there is an error or inconsistency in the abstract designation information in the process of step S20 (step S20, Yes), the data abstraction conversion processing unit 11 performs the abstraction processing. Perform termination processing. At this time, the data abstraction conversion processing unit 11 stores a log file (processing result information) indicating that there is an error or inconsistency in the abstraction designation information in the conversion processing result storage unit 21 as the abstraction processing end processing. Let

  In step S90, if the continuation processing method when an error occurs is set to forced termination of data abstraction processing (step S90, forced termination), the data abstraction conversion processing unit 11 terminates the abstraction processing. Perform processing. At this time, the data abstraction conversion processing unit 11 converts a log file (processing result information) indicating that a conversion error has occurred during the conversion processing into the abstract data into the conversion processing result storage unit as the abstraction processing end processing. 21 is stored.

  The data abstraction conversion processing unit 11 deletes the identification information correspondence table from the conversion correspondence table temporary storage unit 24 when the processing result information is stored in the conversion processing result storage unit 21 and the abstraction processing end processing is performed ( Step S100).

  Here, a processing procedure (processing of step S50 shown in FIG. 3) of conversion processing from business data to abstract data by the personal information abstraction server will be described in detail. FIG. 4 is a flowchart showing details of the abstract data generation procedure.

  The data abstraction conversion processing unit 11 first reads business data relating to one individual or one customer from the business information DB 31 as business data to be converted. The data abstraction conversion processing unit 11 of the personal information abstraction server 1 determines the conversion method from the read business data to the abstract data based on the conversion method to the abstract data included in the abstract designation information ( Step S110).

  As a conversion method from business data to abstract data, when the key code conversion of the identification information is set in the abstract designation information (step S120, key code conversion), the data abstraction conversion processing unit 11 is the business data. Replace personal and customer identification information with the converted code (key code conversion). The data abstraction conversion processing unit 11 first determines whether or not individual or customer identification information used in the business data has already been converted into a converted code. That is, the data abstraction conversion processing unit 11 determines whether the identification information of the individual or customer used in the business data has already been registered as the converted code in the identification information correspondence table of the conversion correspondence table temporary storage unit 24. Is determined (step S130).

  If the personal or customer identification information used in the business data is not converted into the converted code (No in step S140), the data abstraction conversion processing unit 11 is a random number of digits specified by the abstraction specifying information. Is generated. Then, a new converted code (identification information) is numbered using the generated random number, and the new converted code is associated with the individual identification information in the business data corresponding to the new converted code. For example, when the customer code is “C60210”, the customer code “C60210” is converted into a post-conversion code “KAZ45”.

  The data abstraction conversion processing unit 11 registers the new converted code and the individual identification information in the business data associated with the new converted code in the conversion correspondence table temporary storage unit 24 as an identification information correspondence table ( Step S150).

  The data abstraction conversion processing unit 11 outputs the newly converted code as abstracted data (output data), and registers (edits the abstracted data) in the abstraction information DB 32 (step S160).

  On the other hand, if the individual or customer identification information used in the business data has already been converted into the converted code (Yes in step S140), the data abstraction conversion processing unit 11 has already been registered from within the identification information correspondence table. The post-conversion code is extracted, and the post-conversion code is registered as abstract data in the abstract information DB 32 (abstract data editing process) (step S170).

  When key code conversion is set over a plurality of items of business data as a conversion method from business data to abstract data, key code conversion is performed for each item in the business data. For example, when key code conversion is set for an employee number and a customer code, the key code is converted for the employee number and the key code is converted for the customer code.

  Next, the data abstraction conversion processing unit 11 sets the data (item) in which no conversion is set in the abstract designation information as the conversion method to the abstract data from the business data (item) in which the converted code is registered. ). The data abstraction conversion processing unit 11 extracts data in which no conversion is set as a conversion method to abstract data from the business data (input data) read from the business information DB 31 (step S120, no conversion). .

  The data abstraction conversion processing unit 11 outputs the extracted business data as it is as abstract data (output data), and registers it in the abstraction information DB 32 in association with the converted code (step S180). For example, when the order number of business data parts is 1000, the 1000 pieces of information are registered in the abstract information DB 32 as abstract data as they are.

  Next, the data abstraction conversion processing unit 11 uses the data (item) in which abstraction is set in the abstract designation information as the conversion method to the abstract data from the business data (item) in which the converted code is registered. ). That is, the data abstraction conversion processing unit 11 extracts data for which abstraction is set as a conversion method to abstract data from the business data (input data) read from the business information DB 31 (step S120, abstract ).

  Based on the abstract designation information, the data abstraction conversion processing unit 11 determines whether or not the conversion method of the extracted business data into abstract data is a conversion process using a conversion master table (step S190).

  When the conversion method of the extracted business data to the abstract data is set to the conversion processing by the conversion master table (step S200, Yes), the data abstract conversion processing unit 11 converts the conversion master specified by the abstract specification information. The table is extracted from the conversion master data storage unit 23.

  The data abstraction conversion processing unit 11 performs an abstraction process of business data for which abstraction is set as a conversion method to abstract data using the conversion master table extracted from the conversion master data storage unit 23 (step S210). For example, if the business name of the business data is “Suzuki Kogyo”, the data abstraction conversion processing unit 11 uses the conversion master table to specify the initial name “Suzuki Kogyo” so that the customer name “Suzuki Kogyo” cannot be specified. S.K ". When the part code of the business data is “PRT10233”, the part code “PRT10233” is converted into a product code “A01” indicating the classification of the part code “PRT10233” so that the part code “PRT10233” cannot be specified.

  Based on the conversion master table, the data abstraction conversion processing unit 11 determines whether or not the business data has been converted into abstract data (whether or not the conversion was successful) (step S220). When the business data can be converted into the abstract data (Yes at Step S220), the abstract data (value) that has been converted (calculated / acquired) is registered in the abstract information DB 32 in association with the converted code (Step S230). ).

  On the other hand, when the business data cannot be converted into the abstract data (No at Step S220), the error processing described in Step S90 of FIG. 3 is performed (Step S240). That is, when the continuation processing method at the time of occurrence of an error is set to continue the data abstraction processing, the data abstraction conversion processing unit 11 performs the business based on the file name and extraction condition of the data to be converted. The next business data corresponding to the file name to be converted and the extraction condition is read from the information DB 31. If the continuation processing method when an error occurs is set to forcibly end the data abstraction process, the data abstraction conversion processing unit 11 performs the abstraction process end process. At this time, the data abstraction conversion processing unit 11 causes the conversion process result storage unit 21 to store a log file indicating that a conversion error has occurred during the conversion to abstract data.

  In the process of step S200, when the conversion method of the extracted business data (item) to the abstract data is not set to the conversion process by the conversion master table (step S200, No), the data abstraction conversion processing unit 11 stores in advance. A conversion process (calculation, etc.) from business data to abstract data (value) is performed using a set formula or the like. For example, when the business data is the date of birth of the customer, the data abstraction conversion processing unit 11 calculates the age of the customer corresponding to the date of birth of the customer. Specifically, when the date of birth of the customer is February 1, 1970, the data abstraction conversion processing unit 11 calculates the age of 30 years as the customer's age (step S250). Then, the data abstraction conversion processing unit 11 registers the calculated abstract data (value) in the abstraction information DB 32 in association with the converted code (step S230).

  Next, the data abstraction conversion processing unit 11 sets the data (item) that is set as non-disclosure in the abstract designation information as the conversion method to the abstract data from the business data (item) in which the converted code is registered. ). The data abstraction conversion processing unit 11 extracts and deletes data set as non-public as a conversion method to abstract data from the business data (input data) read from the business information DB 31 (step S120, non-data). Release). At this time, the data abstraction conversion processing unit 11 does not register the deleted business data as abstract data in the abstraction information DB 32 (step S260).

  Here, an example of conversion from business data to abstract data and an example of statistical processing of abstract data will be described. 5 and 6 are diagrams for explaining an example of conversion from business data to abstract data and an example of statistical processing of abstract data. FIG. 5 is an example in which business data is used for evaluation statistics of a material purchaser in a material business, and quality evaluation data and the like are totaled based on the purchase results of parts (arrival / inspection data).

  The business data 101 here includes, as data items, “order number” of parts (materials), “partner code” of parts, “partner name” of parts, “part code”, “order quantity” of parts, It includes information on the “ordering unit price” of the part, the “delivery date” of the part, the “number of arrivals” of the ordered part, the “date of arrival” of the ordered part, and the “number of inspection passes” of the inspected part.

  Conversion from the business data 101 to the abstract data 102 is performed by the data abstraction conversion processing unit 11 of the personal information abstraction server 1, and statistical processing (aggregation) of the abstract data 102 is performed by the general user PC 3.

  As a conversion method from the business data 101 to the abstract data 102, when the key code conversion of “order number” and the key code conversion of “customer code” are set in the abstract designation information, Replace “number” and “customer code” with the converted code. For example, a random number or the like is generated, and “order number” and “customer code” are replaced with the converted code by using the random number. Specifically, the order number “P01001” and the order number “P01003” in the business data 101 are converted into an order number “C0001”, an order number “C0002”, and the like that are unrelated to these order numbers. Further, the business partner code “V0210” and the business partner code “V0304” of the business data 101 are converted into a business partner code “ABS001”, a business partner code “ABS002” and the like which are unrelated to these business partner codes.

  As a conversion method from the business data 101 to the abstract data 102, the abstract designation information includes the abstraction based on the initial of the “customer name” and the conversion to the product code (part classification) of the “part code”. In this case, the “business partner name” in the business data 101 is initially converted, and the “part code” is converted into a product type code. For example, when the “business partner name” of the business data 101 is “Yamada Seisakusho”, the “business partner name” is converted into “YS” and abstracted as an abstraction by initial. Further, when the “part code” of the business data 101 is “PRT10233” or “PRT40560”, the “PRT” indicating the classification of the parts is the same, so the product code is converted into the product code by the same product code “A01”.

  When abstraction using a conversion master table (conversion table from business data to abstract data) is set as a conversion method from business data 101 to abstract data 102, this conversion master table is used. The business data 101 is converted (abstracted) into abstract data.

  As a conversion method from the business data 101 to the abstract data 102, when no conversion of “order quantity”, “order unit price”, and “delivery date” is set in the abstract designation information, the “order quantity” of the business data 101 is set. “Order unit price” and “Delivery date” are not converted. In addition, as a conversion method from the business data 101 to the abstract data 102, when non-conversion of “number of arrivals”, “date of arrival”, and “number of inspection passes” is set in the abstract designation information, the business data 101 “number of arrivals”, “date of arrival”, and “number of inspection passes” are not converted.

  The general user PC 3 acquires the desired abstract data from the abstract data converted by the personal information abstraction server 1 and performs statistical processing of the abstract data (creation of the total data 103).

  At this time, the general user PC 3 transmits a condition (search condition) of data to be acquired to the personal information abstraction server 1. Then, the data search processing unit 12 of the personal information abstraction server 1 searches the abstract information DB 32 based on the search condition transmitted from the general user PC 3 and extracts the abstract data corresponding to the search condition. The abstract data (search result) searched by the data search processing unit 12 is transmitted to the general user PC3, displayed on the display means (not shown) of the general user PC3, and downloaded as necessary.

  For example, as a statistical process of the abstract data 102, the general user PC3 aggregates “quality evaluation score”, “delivery date evaluation score”, and “price evaluation score” for each “customer name”. At this time, the general user PC3 performs statistical processing of the abstract data 102 using the “customer name” after the initial conversion as the “customer name”. Further, the general user PC3 calculates the “quality evaluation score” based on the “number of inspection passes” with respect to the “number of arrivals” and the “delivery date evaluation score” based on the “arrival date” with respect to the “delivery date”. . Further, the “price evaluation point” is calculated based on the “order unit price” for other business partners.

  FIG. 6 is an example in which business data is used for market analysis in sales business, and the consumption trend of customers is analyzed based on the sales performance of products. The business data 104 here includes data items such as “order number”, “customer code”, “customer name”, “product code”, “purchase amount”, “customer date of birth”, “customer”. "Address" and information on "TEL" indicating the customer's telephone number.

  Conversion from the business data 104 to the abstract data 105 is performed by the data abstraction conversion processing unit 11 of the personal information abstraction server 1, and statistical processing (aggregation) of the abstract data 105 is performed by the general user PC3.

  As a conversion method from the business data 104 to the abstract data 105, when the key code conversion of “order number” and the key code conversion of “customer code” are set in the abstract designation information, the “order number” of the business data 104 is set. ”,“ Customer code ”is replaced with the converted code. For example, a random number or the like is generated, and “order number” and “customer code” are replaced with the converted code by using the random number. Specifically, the order number “0DR1001” and the order number “0DR1003” in the business data 104 are converted into an order number “J00001” and an order number “J00002” that are unrelated to these order numbers. Further, the customer code “C60210” and the customer code “C60304” of the business data 104 are converted into a customer code “KAZ45”, a customer code “CJXP0”, and the like unrelated to these customer codes.

  As the conversion method from the business data 104 to the abstract data 105, when abstraction by initial of “customer name” is set in the abstract designation information, the “customer name” of the business data 104 is initially converted. For example, when the “customer name” of the business data 104 is “Taro Yamada”, the “customer name” is converted into “Y.T” and abstracted as an initial abstraction.

  Further, as the conversion method from the business data 104 to the abstract data 105, when the abstraction of the “customer date of birth” to the age and the abstraction of the “customer address” to the customer address area are set, the business data The “customer date of birth” 104 is abstracted to the age, and the “customer address” is abstracted to the customer address area. For example, when the “customer date of birth” of the business data 104 is “April 21, 1980” or “June 1, 1990”, the “date of birth of customer” is set to the age “20s”, “ Convert to "Teen". In addition, “Chiyoda-ku, Tokyo” in “Customer Address” is converted to “Kanto” in the customer address area, and “Nagoya City in Aichi Prefecture” is converted into “Customer Address” in the customer address area “ Convert to “Chubu”.

  When abstraction using a conversion master table is set as a conversion method from the business data 104 to the abstract data 105, the business data 104 is converted into abstract data using this conversion master table (abstract ).

  As the conversion method from the business data 104 to the abstract data 105, when “non-conversion” of “product code” and “purchase price” is set in the abstract designation information, the “product code” and “purchase price” of the business data 104 are set. "Is not converted. Further, as a method for converting the business data 104 to the abstract data 105, when “TEL” is not set to be public in the abstract designation information, “TEL” of the business data 104 is not disclosed.

  The general user PC 3 obtains desired abstract data from the abstract data converted by the personal information abstraction server 1 and performs statistical processing of the abstract data (creation of aggregate data 106 to 108). .

  At this time, the general user PC 3 transmits a condition (search condition) of data to be acquired to the personal information abstraction server 1. Then, the data search processing unit 12 of the personal information abstraction server 1 searches the abstract information DB 32 based on the search condition transmitted from the general user PC 3 and extracts the abstract data corresponding to the search condition. The abstract data (search result) searched by the data search processing unit 12 is transmitted to the general user PC3, displayed on the display means (not shown) of the general user PC3, and downloaded as necessary.

  For example, as a statistical process of the abstract data 105, the general user PC3 aggregates the sales ratio 106 by region, the sales ratio 107 by age, and the sales 108 by product. At this time, the general user PC 3 performs statistical processing of the abstract data 105 using the “customer address area” converted as the customer address. Further, the general user PC 3 performs statistical processing on the abstract data 105 using the “age” that has been converted into data instead of the date of birth of the customer.

  Next, setting of abstraction designation information by the system management PC 4 and conversion setting from business data to abstract data will be described. FIG. 7 is a diagram illustrating an example of setting abstraction designation information. The abstract designation information is set and registered in the processing operation setting unit 13 of the personal information abstraction server 1 from the system management PC 4 using a Web browser. At this time, the system management PC 4 sets the abstract designation information from the abstract designation information registration screen (display means not shown). The personal information abstraction server 1 stores the abstract designation information from the system management PC 4 in the processing operation setting unit 13 in the XML format.

  As the setting of the abstraction designation information by the system management PC 4, first, the abstraction designation information (conversion parameter) is set by <transfer-config>. Next, the identification number of the abstraction designation information (conversion parameter) and the comment (A) are set, and the information (D) regarding the data conversion corresponding to the abstraction designation information and the comment (A) is set.

  As data conversion information (D), first, a conversion target table name (business data file name) and a conversion target extraction condition (X) are set. Then, the conversion target table name, the data item name corresponding to the conversion target extraction condition (X), the data conversion method, the data conversion level, the conversion master table (B, C) to be referred to at the time of conversion are set. To do.

  Next, information (E) relating to the output of abstraction data (data after conversion) corresponding to the abstract specification information and the comment (A) is set. As information (E) relating to the output of abstract data, for example, an output destination table name (abstract data table name) and an output mode (overwrite or addition) are set.

  Next, the information (F) regarding the conversion process cycle to the abstract data corresponding to the abstract designation information and the comment (A) is set. As the information (F) related to the conversion process cycle to the abstract data, for example, the processing date or day of the week (information regarding the conversion date to the abstract data) and the start time of the conversion process to the abstract data are set.

  Next, a processing method (G) when a conversion error occurs corresponding to the abstract designation information and the comment (A) is set. As a processing method (G) when a conversion error occurs, continuation or forced termination is set.

  FIG. 8 is a diagram illustrating a conversion setting example from business data to abstract data. The conversion setting from business data to abstract data shown in FIG. 8 corresponds to the conversion setting from business data 104 to abstract data 105 shown in FIG.

  As the setting of the abstraction designation information by the system management PC 4, first, the abstraction designation information (conversion parameter) is set by <transfer-config>. Next, the identification number “0001” of the abstract designation information and the comment “abstract of sales record table” (H) are set, and information (I) regarding data conversion corresponding to this abstract designation information and comment (H). Set.

  As information (I) related to data conversion, first, a conversion target table name “ODRDTL_TABLE” and a conversion target extraction condition “ALL” (all cases) (Y) are set. As the data conversion process (I) corresponding to the conversion target table name and the conversion target extraction condition (Y), first, the data item name “ORDER_NO” (order number), the data conversion method “SEQUENTIAL” (sequential number assignment) ), The data conversion level “J99999” (assigned up to J99999) (J) is set.

  Next, data item name “CUST_CD” (customer code), data conversion method “RANDAM” (random value conversion using random numbers, etc.), data conversion level “CHAR5” (5-digit code number) (K) Set.

  Next, the data item name “CUST_NAME” (customer name), the data conversion method “ABSTRACT” (abstraction), the data conversion level “REF” (conversion with reference to the conversion master table), and reference during conversion The conversion master table “INITIAL_TABLE” (L) to be set is set.

  Next, a data item name “ITEM_CD” (part code) and a data conversion method “THROU” (no conversion) (M) are set. Next, a data item name “KONYUGAKU” (purchase amount) and a data conversion method “THROU” (no conversion) (N) are set.

  Next, the data item name “BIRTHDAY” (customer date of birth), the data conversion method “ABSTRACT” (abstraction), and the data conversion level “AGE” (convert to age) (O) are set.

  Next, the data item name “CUST_ADDR” (customer address), the data conversion method “ABSTRACT” (abstraction), the data conversion level “REF” (converted with reference to the conversion master table), and referred to at the time of conversion A conversion master table “AREA_TABLE” (P) is set. Next, a data item name “CUST_TEL” (TEL) and a data conversion method “NONE” (undisclosed) (Q) are set.

  In the present embodiment, the configuration in which the personal information abstraction server 1 includes one business information DB 31 and one abstract information DB 32 has been described. However, the personal information abstraction server 1 includes the business information DB 31 and the abstract information DB 32, respectively. It is good also as a structure provided with two or more. In this case, for example, an abstraction information DB corresponding to each business information DB is provided.

  In addition, it is good also as a structure which performs multiple types of abstraction processing with respect to one item (customer address etc.) of business data. For example, “customer address” of business data may be abstracted into “customer address area” and “by prefecture”. In this case, the processing operation setting unit 13 sets a plurality of types of abstractions for one item of business data. Then, the data abstraction conversion processing unit 11 performs a plurality of types of abstraction set in the processing operation setting unit 13 for one item of business data, and extracts each abstracted abstraction data as abstraction information. Store in the DB 32. Then, the general user PC 3 specifies the desired abstract data and acquires the desired abstract data from the abstract information DB 32.

  In the present embodiment, the system management PC 4 is configured to issue a setting instruction (abstraction designation information, conversion master table, etc.) regarding data conversion to the processing operation setting unit 13 of the personal information abstraction server 1. It may be configured such that a person directly performs settings related to data conversion in the processing operation setting unit 13 of the personal information abstraction server 1.

  As described above, according to the embodiment, the data abstraction conversion processing unit 11 abstracts various business data in various forms corresponding to the business data and stores them in the abstraction information DB 32. Therefore, the confidential information is efficiently stored. It is possible to perform data conversion.

  In addition, while maintaining the confidentiality of personal information etc. by abstracting business information data, it is possible to identify each customer (customer) data (record) as anonymous data (abstract data), so the abstract data is statistically processed, It can be used for tabulation processing.

  Further, since the key abstraction conversion is performed when the data abstraction conversion processing unit 11 converts business data into abstract data, the abstract data provided to the general user PC 3 cannot be associated with the business data. This makes it possible to manage abstract data using the same converted code (identification information) for the same individual or customer, and to prevent leakage of identification information in business data. Therefore, it is possible to prevent secondary unauthorized access (illegal acquisition of other business data based on key information) due to leakage of identification information in business data.

  Further, since the personal information abstraction server 1 stores the abstract data in the abstract information DB 32, it is necessary to individually process data encryption or the like in the general user PC 3 that is the download destination of the abstract data. Disappear. Therefore, compared to the case where business data is provided using encryption software, management of a password (decryption key) for decryption is unnecessary, and abstract data can be provided easily with a simple configuration. Is possible.

  By the way, in the internal system development related to information management, the actual system development work may be outsourced to an outside contractor. In such a case, when executing a test related to system development, the test is executed using production data including personal information and confidential information as required under the confidentiality agreement and confidentiality management rules. There is. In such a case, the information providing system 100 (personal information abstraction server 1) may be used as a test system for performing a test related to system development. As a result, it is possible to perform a test relating to system development using the abstract data as test data instead of the actual data (business data) itself, thereby reducing information leakage.

  In addition, since the information providing system 100 (personal information abstraction server 1) is configured using a general-purpose program, conversion is performed by changing the setting of the abstract designation information (conversion parameter) from the system management PC 4. You can specify the target file, the conversion method for each data item in the business data, and the level of abstraction. Therefore, it is possible to easily abstract business data with a simple configuration without providing a data conversion processing program for each business data.

  As described above, the data conversion apparatus according to the present invention is suitable for the confidential information conversion process.

It is explanatory drawing for demonstrating the concept of the data conversion which concerns on embodiment. It is a figure which shows the structure of the information provision system provided with the personal information abstraction server which concerns on embodiment. It is a flowchart which shows the production | generation procedure of abstract data. It is a flowchart which shows the detail of the production | generation procedure of abstract data. It is a figure (1) for demonstrating the conversion example from business data to abstract data, and the statistical processing example of abstract data. It is a figure (2) for demonstrating the conversion example from business data to abstract data, and the statistical processing example of abstract data. It is a figure which shows the example of a setting of abstraction specification information. It is a figure which shows the example of a conversion setting from business data to abstract data.

Explanation of symbols

1 Personal information abstraction server 2 Communication network 3 General user PC
4 System management PC
DESCRIPTION OF SYMBOLS 11 Data abstraction conversion process part 12 Data search process part 13 Processing operation setting part 14 Communication part 21 Conversion process result memory | storage part 22 Conversion parameter memory | storage part 23 Conversion master data memory | storage part 24 Conversion conversion table temporary storage part 31 Business information DB
32 Abstraction information DB
100 Information providing system 101, 104 Business data 102, 105 Abstracted data 103, 106 Total data

Claims (4)

In the data conversion device that converts the conversion source data including the confidential information to be concealed into predetermined post-conversion data,
The confidential information of the conversion source data is abstracted by a conversion process according to the type of the confidential information, and the conversion process is set so that the conversion source data is converted into converted data that does not include the confidential information. A conversion setting section;
A data conversion unit that converts the conversion source data into post-conversion data according to the type of each conversion source data based on the setting of the conversion setting unit;
A data storage unit for storing post-conversion data converted by the data conversion unit;
A data conversion device comprising:   The data conversion apparatus according to claim 1, wherein the conversion setting unit sets the conversion process of the conversion source data based on a setting instruction related to a conversion process input from the outside.   The conversion setting unit uses the conversion correspondence information in which the conversion source data and the converted data after converting the conversion source data are associated with each other so as to convert the conversion source data into the converted data. The data conversion apparatus according to claim 1, wherein conversion processing of conversion source data is set.   The data conversion unit converts the identification information of the conversion source data into predetermined identification information for each identification information, and stores the converted identification information and the converted data in association with each other in the data storage unit. The data conversion device according to claim 1, wherein the data conversion device is a data conversion device.

Images