Information processing apparatus and privacy protection data collaboration system

Abstract

An information processing device (10) is provided with: an encryption unit (11) that holds user data including a user ID and attribute information relating to a user, encrypts the user ID in the user data to be counted on the basis of a self-encryption key held by the device itself and a one-way exchangeable operation with a key, and stores the encrypted user ID in the user data to be counted on the basis of the encrypted user ID; the user data encryption unit is used for encrypting attribute information in the user data in a homomorphic encryption mode capable of performing statistical processing so as to generate encrypted user data related to the user data; a statistical processing unit (12) that generates encrypted statistical data by counting the number of encrypted user data having the same attribute information; and a hiding processing unit (13) that performs hiding processing on the generated encrypted statistical data as a target and generates encrypted statistical information.

Description

Technical Field

[0001] The present disclosure relates to an information processing device and a privacy protection data collaboration system. Background Art

[0002] When statistical analysis is performed on user data that should be kept private and managed in a database in information processing devices (which are devices that widely include computers, servers, etc., hereinafter referred to as "devices") of multiple organizations, some countermeasures need to be taken from the perspective of privacy protection. As an example of the above-mentioned countermeasure, the following technology is known: by having a system structure with an interface that can simultaneously process data that should be kept private and data that can be made public, the data of both parties are integrated while the data that should be kept private is kept private (Patent Document 1 below).

[0003] Prior art literature

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application Publication No. 2011-081301 Summary of the invention

[0006] Problems to be solved by the invention

[0007] However, the technology of Patent Document 1 requires selecting data to be kept private from the input user data, and does not take into account the situation where the user data does not contain data that can be disclosed, that is, the situation where all the input user data is made private. There is room for improvement in this regard.

[0008] In addition, in an information processing device of a single organization, for example, when user data containing information related to the user that should be kept confidential (hereinafter referred to as "attribute information") is used as the object for statistical analysis, it is also desired to prevent the leakage of information that should be kept confidential and eliminate the possibility of privacy infringement by generating statistical information in which the correspondence with individuals is excluded.

[0009] The purpose of the present disclosure is to prevent leakage of information that should be kept secret and eliminate the possibility of privacy infringement by generating statistical information from which the correspondence with individuals is excluded.

[0010] Means for solving problems

[0011] The information processing device disclosed in the present invention maintains user data including a user ID and attribute information related to the user, and generates statistical information related to the target user. The information processing device includes: an encryption unit, which encrypts the user ID in the user data that is the statistical object based on a self-encryption key maintained by the device itself and a one-way commutative operation with a key, and encrypts the attribute information in the user data that is the statistical object in a homomorphic encryption method that can perform statistical processing, thereby generating encrypted user data about the user data that is the statistical object; a statistical processing unit, which counts the number of encrypted user data with the same attribute information as the encrypted user data generated by the encryption unit, thereby generating encrypted statistical data; and a concealment processing unit, which performs concealment processing on the encrypted statistical data generated by the statistical processing unit as an object, thereby generating encrypted statistical information.

[0012] In the above-mentioned information processing device, the encryption unit encrypts the user ID in the user data to be counted based on the self-encryption key and the one-way commutative operation with the key held by the device itself, and encrypts the attribute information in the user data in a homomorphic encryption method that can perform statistical processing, thereby generating encrypted user data about the user data to be counted. In addition, the execution order of the encryption of the user ID and the encryption of the attribute information is arbitrary. Then, the statistical processing unit counts the number of encrypted user data with the same attribute information for the encrypted user data generated by the encryption unit, thereby generating encrypted statistical data. The above-mentioned counting is performed, for example, by dividing a plurality of records constituting the encrypted user data represented by binary values ​​according to the corresponding part categories of the attribute information, and summing them vertically (between the same bits in the bit string) for each category. Furthermore, the concealment processing unit performs concealment processing on the generated encrypted statistical data as an object, and generates encrypted statistical information. According to the above part, by generating statistical information in which the correspondence with individuals is excluded, it is possible to prevent the leakage of information to be concealed and eliminate the possibility of privacy infringement.

[0013] Effects of the Invention

[0014] According to the present disclosure, by generating statistical information in which correspondence with individuals is excluded, it is possible to prevent leakage of information that should be kept confidential and eliminate the possibility of privacy infringement. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 This is a diagram showing the configuration of the information processing device according to the first embodiment.

[0016] Figure 2 This is a flowchart showing the processing executed in the information processing device according to the first embodiment.

[0017] Figure 3 (a) is a diagram for explaining input of user data, (b) is a diagram for explaining encryption of a user ID, and (c) is a diagram for explaining encryption of attribute information.

[0018] Figure 4 (a) is a diagram for explaining statistical processing, (b) is a diagram for explaining concealment processing, and (c) is a diagram for explaining decryption processing.

[0019] Figure 5 This is a structural diagram of the privacy protection data collaboration system according to the second embodiment.

[0020] Figure 6 This is a flowchart showing the processing executed in the privacy protection data cooperation system according to the second embodiment.

[0021] Figure 7 (a) is a diagram for explaining input of user data, and (b) is a diagram for explaining anonymization processing.

[0022] Figure 8 This is a diagram for explaining the irreversible transformation of ID.

[0023] Fig. 9 This is a diagram for explaining encryption of ID.

[0024] Fig.10 (a) is a diagram for explaining encryption of attribute information, and (b) is a diagram for explaining transmission and reception of an encrypted ID.

[0025] Fig.11 This is a diagram for explaining the re-encryption of the ID.

[0026] Fig.12 This is a diagram for explaining data comparison.

[0027] Fig.13 This is a diagram for explaining statistical processing.

[0028] Fig.14 This is a diagram for explaining concealment processing.

[0029] Fig.15 It is a diagram for explaining the decryption process.

[0030] Fig.16 It is a diagram showing a modified example of the structure of the information processing device according to the first embodiment.

[0031] Fig.17 It is a diagram showing a modified example of the configuration of the privacy protection data collaboration system according to the second embodiment.

[0032] Fig.18This is a diagram showing another modified example of the configuration of the privacy protection data collaboration system according to the second embodiment.

[0033] Fig.19 This is a diagram showing a modified example of the configuration of a privacy protection data collaboration system that does not necessarily require attribute information but uses user data including at least a user ID as a statistical target.

[0034] Fig. 20 It means in Fig.19 Flowchart of the processing performed in the privacy-preserving data collaboration system.

[0035] Fig.21 It is a diagram showing a hardware configuration example of an information processing device. DETAILED DESCRIPTION

[0036] Various embodiments of the present disclosure are described below with reference to the accompanying drawings. As a first embodiment, an embodiment is described below: in an information processing device of a single organization, statistical information generated with a correspondence relationship with an individual is excluded for user data including attribute information to be kept confidential, and as a second embodiment, an embodiment is described below: in a privacy protection data collaboration system having multiple devices that retain user data including user IDs and attribute information related to users, statistical information is generated with a correspondence relationship with an individual excluded through collaboration between one of the multiple devices and a counterpart device.

[0037] (First embodiment)

[0038] like Figure 1 As shown, the information processing device 10 in the first embodiment includes an encryption unit 11, a statistical processing unit 12, and a concealment processing unit 13 as the minimum components required for generating statistical information in a single form in which the correspondence with an individual is excluded, and also includes a decryption unit 14 as a component for restoring the generated statistical information. The functions of each unit are described below.

[0039] The encryption unit 11 is a functional unit that obtains user data including a user ID and attribute information related to the user from an external device, encrypts the user ID in the user data to be counted based on the self-encryption key held by the device itself and a one-way exchangeable operation with a key, and encrypts the attribute information in the user data to be counted using a homomorphic encryption method that can perform statistical processing, thereby generating encrypted user data about the user data to be counted. The encryption unit 11 includes an ID encryption unit 11A having a function of encrypting the user ID, and an attribute information encryption unit 11B having a function of encrypting the attribute information. In addition, the encryption of the user ID and the encryption of the attribute information may be performed in any order.

[0040] The statistical processing unit 12 is a functional unit that generates encrypted statistical data by counting the number of encrypted user data having the same attribute information as the encrypted user data generated by the encryption unit 11. The counting method will be described later.

[0041] The concealment processing unit 13 is a functional unit that performs concealment processing on the encrypted statistical data generated by the statistical processing unit 12 to generate encrypted statistical information.

[0042] The decryption unit 14 is a functional unit that decrypts the encrypted statistical information generated by the concealment processing unit 13 based on a decryption method corresponding to the encryption performed by the encryption unit 11 and outputs the obtained statistical information to an external device.

[0043] Next, use Figure 2 , Figure 3 (a)~ Figure 3 (c) Figure 4 (a)~ Figure 4 (c) describes the processing performed in the information processing device 10.

[0044] First, the user data ( Figure 2 Step S1). Figure 3 As shown in (a), the user data input here includes a user ID and attribute information related to the user. For example, a telephone number is used as the user ID, and information such as gender, age, and purchase frequency are exemplified as the attribute information.

[0045] Then, if Figure 3 As shown in (b), the ID encryption unit 11A in the encryption unit 11 encrypts the user ID in the user data using the secret key a prepared in advance to obtain ID encrypted data (step S2).

[0046] Then, if Figure 3 As shown in (c), the attribute information encryption unit 11B in the encryption unit 11 encrypts the attribute information in the ID encrypted data using the secret key A prepared in advance to obtain encrypted user data (step S3).

[0047] Then, if Figure 4As shown in (a) of FIG. 1 , the statistical processing unit 12 counts the number of encrypted user data with the same attribute information for the encrypted user data generated by the encryption unit 11, thereby generating encrypted statistical data (step S4). The counting here is performed, for example, by classifying a plurality of records constituting the encrypted user data represented by binary values ​​according to corresponding parts of the attribute information and summing the values ​​in the vertical direction (between the same bits in the bit string) for each category. Furthermore, after generating the encrypted statistical data, since the user ID is not required, the statistical processing unit 12 deletes the user ID to generate the encrypted statistical data.

[0048] Next, if Figure 4 As shown in (b), the concealment processing unit 13 performs concealment processing on the encrypted statistical data generated by the statistical processing unit 12 to generate encrypted statistical information (step S5). Figure 4 (b) shows an example in which noise is added to the statistical result in the encrypted statistical data, thereby generating encrypted statistical information including the statistical result to which noise is added. In this way, "encrypted statistical information" is generated as statistical information from which the correspondence with an individual is excluded.

[0049] Then, if Figure 4 As shown in (c), the decryption unit 14 decrypts the encrypted statistical information generated by the concealment processing unit 13 using a decryption method corresponding to the encryption by the encryption unit 11, and outputs the obtained plaintext statistical information to the external device (step S6).

[0050] According to the first embodiment described above, since "encrypted statistical information" is generated as statistical information without any association with individuals, leakage of attribute information to be kept secret can be prevented in the single information processing device 10, and the possibility of privacy infringement can be eliminated.

[0051] (Second embodiment)

[0052] Next, as a second embodiment, the following embodiment is described: in a privacy protection data collaboration system having multiple devices that maintain user data including user IDs and attribute information related to users, statistical information in which correspondence with individuals is excluded is generated through collaboration between one of the multiple devices and the other device.

[0053] like Figure 5 As shown, the privacy protection data collaboration system 1 in the second embodiment includes "the device of Company A" (hereinafter referred to as "the device 20A") as one device and "the device of Company B" (hereinafter referred to as "the device 20B") as the counterpart device.

[0054] The device 20A includes an anonymization processing unit 21, an ID irreversible conversion unit 22, an encryption unit 23, a data transceiver unit 24, a data comparison unit 25, a statistical processing unit 26, and a concealment processing unit 27, while the device 20B includes an anonymization processing unit 21, an ID irreversible conversion unit 22, an encryption unit 23, a data transceiver unit 24, and a decryption unit 28. The functions of each unit will be described below.

[0055] The anonymization processing unit 21 is a functional unit that performs processing for privacy protection on attribute information before encrypting the user ID, taking the user data held by its own device as an object, and is provided in common in the devices 20A and 20B. In addition, as the above-mentioned privacy protection, for example, one or more of k-anonymization, l-diversity, and t-approximation are adopted, and an example of performing the above-mentioned k-anonymization will be described later.

[0056] The ID irreversible conversion unit 22 is a functional unit that performs irreversible conversion processing on the user ID before encrypting the user ID, taking the user data held by its own device as an object, and is provided in common in the devices 20A and 20B. In addition, the above-mentioned irreversible conversion processing includes hashing processing, and after performing the hashing processing on the user ID, the ID irreversible conversion unit 22 discards the salt value used in the hashing processing.

[0057] The encryption unit 23 provided in the device 20A is a functional unit that encrypts the user ID in the user data that is the subject of statistics based on the self-encryption key maintained by the device itself and a one-way exchangeable operation with a key, thereby generating encrypted user data about the user data that is the subject of statistics. The encryption unit 23 includes an ID encryption unit 23A that performs this functional action.

[0058] In contrast, the encryption unit 23 provided in the device 20B is a functional unit that encrypts the user ID in the user data to be counted based on the self-encryption key held by the device itself and the one-way exchangeable operation with the key, and encrypts the attribute information in the user data to be counted in a homomorphic encryption method that can perform statistical processing, thereby generating encrypted user data about the user data to be counted, and includes: an ID encryption unit 23A, which has a function of encrypting the user ID; and an attribute information encryption unit 23B, which has a function of encrypting the attribute information. In addition, the encryption of the user ID and the encryption of the attribute information can be performed in any order.

[0059] The data transceiver 24 is a functional unit for transmitting and receiving encrypted user data, and is provided in common in the devices 20A and 20B.

[0060] The data comparison unit 25 is a functional unit that compares the encrypted user data of device 20A generated by the encryption unit 23 of device 20A and the encrypted user data of device 20B as the other device based on the user ID corresponding part determined based on the structural information of the predetermined user data, and is set in device 20A.

[0061] The statistical processing unit 26 is a functional unit that counts the number of encrypted user data that match the corresponding user IDs as a result of the comparison by the data comparison unit 25, thereby generating encrypted statistical data related to the target user, and is provided in the device 20A. The counting method will be described later.

[0062] The concealment processing unit 27 is a functional unit that performs concealment processing on the encrypted statistical data generated by the statistical processing unit 26 to generate encrypted statistical information, and is provided in the device 20A.

[0063] The decryption unit 28 is a functional unit that decrypts the encrypted statistical information sent from the device 20A based on a decryption method corresponding to the encryption by the attribute information encryption unit 23B and outputs the obtained statistical information to an external device, and is provided in the device 20B.

[0064] Next, use Figure 6 to Figure 15 , describing the processing performed in the privacy protection data collaboration system 1.

[0065] First, in each of the devices 20A and 20B, user data to be counted is input to the anonymization processing unit 21 ( Figure 6 Steps A1 and B1). Figure 7 As shown in (a), the user data of Company A inputted here includes a user ID and attribute information related to the user, for example, a telephone number is used as the user ID, and information such as gender, age, and purchase frequency is exemplified as the attribute information. In addition, the user data of Company B inputted here includes a user ID and attribute information related to the user, a telephone number is used as the user ID, and information such as the travel distance estimated based on the location information is exemplified as the attribute information.

[0066] Then, if Figure 7As shown in (b), in each of the devices 20A and 20B, the anonymization processing unit 21 takes the user data retained by its own device as an object and performs anonymization processing as a process for privacy protection of attribute information (steps A2 and B2). Here, the following k-anonymization is exemplified: the probability of identifying an individual is reduced to less than 1 / k by transforming the user data in such a way that there are k or more user data with the same attribute information in the user data as an object (satisfying k-anonymity). For example, by setting k=2, the attribute information of 11km and the attribute information of 12km are both transformed into the attribute information of 10km, so that in the attribute information (movement distance estimated based on the location information) in the user data of Company B, there are two or more user data with the same attribute information (movement distance = 10km).

[0067] Next, if Figure 8 As shown, in each of the devices 20A and 20B, the ID irreversible conversion unit 22 takes the user data held by its own device as an object and performs irreversible conversion processing on the user ID (steps A3 and B3). Specifically, the ID irreversible conversion unit 22 performs hashing processing on the user ID (here, as an example, a telephone number) as an object, and then discards the salt value used in the hashing processing.

[0068] Then, if Fig. 9 As shown, in the device 20A, the ID encryption unit 23A encrypts the non-identifying hash (the part of the user data corresponding to the user ID) using the secret key a prepared in advance, and obtains the ID encrypted data of company A (step A4). Similarly, in the device 20B, the ID encryption unit 23A encrypts the non-identifying hash (the part of the user data corresponding to the user ID) using the secret key b prepared in advance, and obtains the ID encrypted data of company B (step B4).

[0069] Then, if Fig.10 As shown in (a), in device 20B, the attribute information encryption unit 23B uses a secret key B prepared in advance through a homomorphic encryption method that can perform statistical processing to encrypt the attribute information in the encrypted data of the ID of company B obtained in step B4, thereby generating encrypted user data of company B (step B5).

[0070] Then, if Fig.10As shown in (b), in the device 20A, the data transceiver 24 sends the encrypted ID of company A contained in the encrypted data of company A's ID obtained in step A4 to the data transceiver 24 of the device 20B (step A5). In addition, in the device 20B, the data transceiver 24 sends the encrypted user data of company B obtained in step B5 (that is, data containing the encrypted ID and encrypted attribute information of company B) to the data transceiver 24 of the device 20A (step B6).

[0071] Then, if Fig.11 As shown, in the device 20A, the ID encryption unit 23A re-encrypts the encrypted ID of the company B contained in the encrypted user data of the company B sent from the device 20B in step B6 using the secret key a, and obtains the encrypted ID of the company B encrypted using both the secret keys a and b (step A6). Similarly, in the device 20B, the ID encryption unit 23A re-encrypts the encrypted ID of the company A sent from the device 20A in step A5 using the secret key b, and obtains the encrypted ID of the company A encrypted using both the secret keys a and b (step B7). Then, in the device 20B, the data transceiver 24 sends the "encrypted ID of the company A encrypted using both the secret keys a and b" obtained in step B7 to the device 20A (step B8), and the data transceiver 24 of the device 20A receives the encrypted ID of the company A (step A7).

[0072] Then, if Fig.12 As shown, in the device 20A, the data comparison unit 25 replaces the "encrypted ID encrypted using secret key a" in the "ID encrypted data of company A" obtained by the ID encryption in step A4 with the "encrypted ID of company A encrypted using both secret keys a and b" received in step A7, thereby obtaining Fig.12 In addition, the data comparison unit 25 replaces the "encrypted ID of company B encrypted using secret key b" in the "encrypted user data of company B" received in step A5 with the "encrypted ID of company B encrypted using both secret keys a and b" obtained by re-encryption in step A6, thereby obtaining Fig.12The encrypted user data of Company B is shown in the upper right corner of . Then, the data comparison unit 25 uses "the encrypted ID of Company A encrypted by both secret keys a and b" and "the encrypted ID of Company B encrypted by both secret keys a and b" as keywords to compare the encrypted user data of Company A and the encrypted user data of Company B (step A8). Here, in the case that "the encrypted ID of Company A encrypted by both secret keys a and b" is consistent with "the encrypted ID of Company B encrypted by both secret keys a and b", the attribute information in the encrypted user data of Company A and the encrypted attribute information in the encrypted user data of Company B are combined as a record in the encrypted comparison data, and after the combination, "the encrypted ID of Company A encrypted by both secret keys a and b" and "the encrypted ID of Company B encrypted by both secret keys a and b" are deleted. Thus, we get Fig.12 The encrypted comparison data shown in the lower section of FIG. 1 includes the unencrypted attribute information of Company A and the encrypted attribute information of Company B. Here, since the attribute information of Company B is encrypted, Company A cannot know its content, and can generate the encrypted comparison data without disclosing the content of the attribute information that should be kept secret from Company B to Company A.

[0073] Then, if Fig.13 As shown, in the device 20A, the statistical processing unit 26 takes the encrypted comparison data as the object and performs the following statistical processing (step A9). As mentioned above, the attribute information in the encrypted data of the ID of company B is encrypted in the above step B5 using the homomorphic encryption method that can perform statistical processing using the pre-prepared secret key B. Therefore, in fact, Fig.13Each attribute information included in the encrypted comparison data is composed of a binary value predetermined in a format (bit string configuration). As for "gender", as an example, if the first and second bits in the encrypted comparison data are "10", it indicates "male", and if they are "01", it indicates "female". In addition, as for "moving distance" encrypted using the secret key B, as an example, if the predetermined Pth bit from the beginning of the encrypted comparison data is "1", the "moving distance" is determined to be "10km", if the (P+1)th bit is "1", the "moving distance" is determined to be "20km", if the (P+2)th bit is "1", the "moving distance" is determined to be "30km", etc. For example, in a record in which the Pth bit in the bit string indicating the "moving distance" is "1", the bits other than the Pth bit in the bit string indicating the "moving distance" are set to "0". At this time, since Company A does not know the secret key B, Company A cannot grasp the substance of the above-mentioned "movement distance" (10km, 20km, etc.), and can only grasp it as a simple bit string. Based on the above, as an example, the statistical processing unit 26 performs the following statistical processing.

[0074] First, the statistical processing unit 26 classifies the multiple records constituting the encrypted comparison data based on the attribute information (unencrypted gender, age, and purchase frequency) of Company A. That is, the multiple records constituting the encrypted comparison data are classified into multiple categories such as "male, 20s, high frequency", "male, 20s, low frequency", "male, 30s, high frequency", "male, 30s, low frequency", and so on.

[0075] Next, the statistical processing unit 26 performs statistical processing by taking multiple records represented by binary values ​​belonging to each category as objects and summing them vertically (between the same bits in the bit string). In addition, the attribute information of Company B represented by binary values ​​is encrypted in an encryption method having the characteristics of homomorphic encryption, so the sum can be calculated even in the encrypted state. Thus, according to each category, the number of records with the Pth bit being "1" (i.e., the statistical result of a moving distance of 10 km), the number of records with the (P+1)th bit being "1" (i.e., the statistical result of a moving distance of 20 km), the number of records with the (P+2)th bit being "1" (i.e., the statistical result of a moving distance of 30 km)... are obtained.

[0076] Then, the statistical processing unit 26 changes the encrypted statistical data obtained by adding the statistical data of each category to the classified encrypted comparison data into Fig.13In the statistical processing of step A9 as described above, company A does not know the secret key B, and therefore cannot grasp the substantial content (10km, 20km, etc.) related to the "moving distance" which is the attribute information of company B, and can prevent the substantial content of the attribute information of company B from being leaked to company A.

[0077] Next, if Fig.14 As shown, in the device 20A, the concealment processing unit 27 performs the following concealment processing on the encrypted statistical data generated by the statistical processing unit 26, and generates encrypted statistical information (step A10). For example, the concealment processing unit 27 generates noise using the operation key B' (a kind of public key) of company B, and gives the generated noise to the encrypted statistical data, thereby generating encrypted statistical information. In addition, it is assumed that the above-mentioned operation key B' corresponds to the secret key B and is shared from company B to company A in advance.

[0078] Then, the data transceiver 24 in the device 20A transmits the encrypted statistical information generated in step A10 to the device 20B (step A11 ), and the data transceiver 24 in the device 20B receives the encrypted statistical information (step B9 ).

[0079] Then, in the device 20B, the received encrypted statistical information is sent to the decryption section 28, and as Fig.15 As shown, the decryption unit 28 in the device 20B knowing the secret key B decrypts the encrypted statistical information and outputs the obtained statistical information appropriately (step B10). For example, the statistical information can be displayed or printed by a predetermined operation performed by the operator of the device 20B.

[0080] According to the above-described embodiment of the present disclosure, by cooperating between the device 20A of company A and the device 20B of company B, statistical information excluding the correspondence with individuals can be generated without disclosing attribute information and secret keys that should be kept confidential to other devices.

[0081] Both the device 20A and the device 20B have an ID irreversible transformation unit 22, which performs an irreversible transformation process on the user ID before encrypting the user ID, using the user data retained by its own device as an object, thereby improving the effectiveness of non-identification. In addition, since the irreversible transformation process includes hashing, it is not necessary to apply a special irreversible transformation process, but a general irreversible transformation process such as hashing can be applied, which can improve the ease of implementation. In addition, after performing the hashing process on the user ID, the ID irreversible transformation unit 22 discards the salt value used in the hashing process. By discarding the salt value used in the hashing process in this way, the reversibility of the data can be eliminated without fail.

[0082] Both the device 20A and the device 20B have an anonymization processing unit 21, which performs a privacy protection process on the attribute information before encrypting the user ID, taking the user data held by the device as an object, thereby improving the effectiveness of non-identification. In addition, the privacy protection includes at least one of k-anonymization, l-diversity, and t-approximation, so there is no need to apply special privacy protection, and general privacy protection such as k-anonymization, l-diversity, and t-approximation can be applied, which can improve the ease of implementation.

[0083] Furthermore, the concealment processing performed by the concealment processing unit 27 includes a concealment processing based on differential privacy. Therefore, there is no need to apply a special concealment processing, and a general concealment processing such as a concealment processing based on differential privacy can be applied, which can improve the ease of implementation.

[0084] The data transceiver 24 of the device 20A transmits the encrypted statistical information generated by the concealment processing unit 27 to the data transceiver 24 of the device 20B, and the decryption unit 28 of the device 20B decrypts the encrypted statistical information based on the decryption method corresponding to the encryption by the encryption unit 23. In this way, the encrypted statistical information can be restored to the plaintext statistical information.

[0085] (About Modification Example)

[0086] Various modifications of the above-mentioned first and second embodiments will be described in order below.

[0087] (Variant 1)

[0088] Fig.16 , as a modification of the information processing device of the first embodiment, a structure capable of generating encrypted statistical information in cooperation with other information processing devices having the same structure is shown. Fig.16 As shown, the information processing device 10 of the first modification example is Figure 1The structure of the present invention further includes a data transceiver 15 and a data comparison unit 16. The data transceiver 15 is a functional unit for transmitting and receiving encrypted user data between other devices, similar to the data transceiver 24 described in the second embodiment. The data comparison unit 16 is a functional unit for comparing the encrypted user data of the own device generated by the encryption unit 11 of the own device with the encrypted user data of other devices received from other devices, based on the user ID corresponding part determined based on the structure information of the predetermined user data, similar to the data comparison unit 25 described in the second embodiment.

[0089] In the presence of Fig.16 In the case of the A company device and the B company device of the structure, in each of the A company device and the B company device, the encryption unit 11 encrypts the retained user data with the key of its own device, and the data transceiver 15 exchanges the encrypted user data between the A company device and the B company device, and further, the encryption unit 11 double-encrypts the user data received from the other party device with the key of its own device. Then, the data transceiver 15 of the B company device sends the double-encrypted user data of the A company device to the A company device.

[0090] Then, in the A company device, the data comparison unit 16 compares the double-encrypted user data of the A company device and the double-encrypted user data of the B company device based on the user ID corresponding part determined based on the predetermined structure information of the user data, and the statistical processing unit 12 counts the number of encrypted user data whose user ID corresponding parts are consistent according to the comparison result of the data comparison unit 16, thereby generating encrypted statistical data related to the target user, and then the concealment processing unit 13 performs concealment processing on the encrypted statistical data as an object to generate encrypted statistical information. The generated encrypted statistical information is sent from the data transceiver unit 15 of the A company device to the data transceiver unit 15 of the B company device, and the decryption unit 14 of the B company device decrypts the encrypted statistical information, so that the obtained statistical information can be appropriately output.

[0091] According to the above-mentioned modification example 1, there are multiple organizations Fig.16 In the case of the same structure as shown in FIG. 1 , statistical information using data from two or more parties can be generated through secure matching and anonymity processing. Fig.16 In the structure, both or one of the anonymization processing unit 21 and the ID irreversible conversion unit 22 described in the second embodiment is further added. In this case, the effectiveness of de-identification can be improved.

[0092] (Variant 2)

[0093] Fig.17A modified example of the structure of the privacy protection data collaboration system of the second embodiment is shown in FIG. Fig.17 As shown, the privacy protection data collaboration system 1 of the second modification example is Figure 5 In the structure of , each of the devices 20A and 20B does not include the anonymization processing unit 21 as indicated by the dotted line.

[0094] The anonymization processing unit 21 is a functional unit that performs privacy protection processing on attribute information before encrypting the user ID, taking the user data held by its own device as an object. Although privacy protection can be strengthened by having each device 20A, 20B, it is not a necessary component. Fig.17 As shown, a simple configuration in which each of the devices 20A and 20B does not include the anonymization processing unit 21 is also allowed, and the privacy protection data cooperation system 1 can be configured with fewer structural elements.

[0095] (Variant 3)

[0096] Fig.18 Another variation of the structure of the privacy protection data collaboration system of the second embodiment is shown in FIG. Fig.18 As shown, the privacy protection data collaboration system 1 of the modification example 3 is configured as follows: Figure 5 In the structure, each of the devices 20A and 20B does not have an ID irreversible conversion unit 22 in addition to the anonymization processing unit 21 as indicated by the dotted line.

[0097] The ID irreversible conversion unit 22 is a functional unit that performs irreversible conversion processing on the user ID before encrypting the user ID, taking the user data held by the device as the object. Although the device 20A, 20B can strengthen privacy protection by having it, it is not a necessary component. Fig.18 As shown, a simple structure in which each of the devices 20A and 20B does not have the ID irreversible conversion unit 22 in addition to the anonymization processing unit 21 is also allowed, and the privacy protection data cooperation system 1 can be configured with fewer structural elements than the above-mentioned modification example 2.

[0098] (Variant 4)

[0099] In the above embodiment, the processing of using user data including both user ID and attribute information as the statistical object is described, but attribute information may not be a necessary condition, and user data including at least user ID may be used as the statistical object. The following describes an example of using such user data as the statistical object, and cooperating between Company A and Company B to count the number of people (number of users) who are compared using user ID as a keyword.

[0100] like Fig.19As shown, in the privacy protection data collaboration system 1 of variant example 4, the devices 20A and 20B each have: an ID encryption unit 23A, which encrypts the user ID in the user data as the statistical object based on the self-encryption key maintained by the device itself and the one-way exchangeable operation with the key, thereby generating encrypted user data about the user data as the statistical object; and a data transceiver unit 24, which transmits and receives the encrypted user data. The device 20A also has: a data comparison unit 25, which compares the encrypted user data of its own device (device 20A) generated by the ID encryption unit 23A and the encrypted user data of the other device (device 20B) received by the data transceiver unit 24 according to the corresponding part of the user ID determined based on the structural information of the user data determined in advance; and a statistical processing unit 26, which counts the number of encrypted user data whose corresponding parts of the user ID are consistent as a comparison result of the data comparison unit 25, thereby generating encrypted statistical data related to the object user. In addition, Fig.19 This shows the minimum necessary structure, and therefore, the devices 20A and 20B may of course have structures other than those described above.

[0101] In the privacy protection data collaboration system 1 of the modification example 4, the execution Fig. 20 Processing shown. Fig. 20 The processing shown is the same as that described in the second embodiment. Figure 6 Part of the processing corresponds to Fig. 20 and Figure 6 The same step number is marked for the corresponding processing. Although repeated detailed description is omitted here, before steps A6 and B7, without disclosing the content of the user data to the other party, the encrypted ID of company A encrypted by using the secret key a of company A and the secret key b of company B, and the encrypted ID of company B encrypted by using the secret key a and the secret key b are obtained, and then the data comparison unit 25 of the device 20A compares the encrypted ID of company A and the encrypted ID of company B (step A8), and the statistical processing unit 26 counts the number of encrypted user data whose corresponding parts of the user ID are consistent as a result of the above comparison, thereby obtaining the number of people (number of users) who have been compared as a statistical result (step A9). In this way, in the process of taking user data containing at least the user ID as the statistical object without taking attribute information as a necessary condition, the number of people (number of users) who have been compared can be obtained as a statistical result without disclosing the content of the user data to the other party.

[0102] In addition, the gist of the present disclosure lies in the following [1] to

[10] .

[0103] [1] An information processing device that stores user data including a user ID and attribute information related to the user and generates statistical information related to a target user, wherein the information processing device has:

[0104] an encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a keyed one-way commutative operation, and encrypts the attribute information in the user data to be counted in a homomorphic encryption method capable of statistical processing, thereby generating encrypted user data on the user data to be counted;

[0105] a statistical processing unit that counts the number of encrypted user data having the same attribute information as the encrypted user data generated by the encryption unit, thereby generating encrypted statistical data; and

[0106] The concealment processing unit performs concealment processing on the encrypted statistical data generated by the statistical processing unit to generate encrypted statistical information.

[0107] [2] The information processing device according to [1], which generates statistical information related to the target user by cooperating with a counterpart device, wherein the information processing device further comprises:

[0108] a data transceiver unit for transmitting and receiving the encrypted user data to and from the counterpart device; and

[0109] a data comparison unit that compares the encrypted user data of the own device generated by the encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on the structure information of the predetermined user data,

[0110] The statistical processing unit generates encrypted statistical data related to the target user by counting the number of encrypted user data for which the matching result of the data matching unit indicates that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

[0111] [3] An information processing device that holds user data including a user ID and generates statistical information related to a target user by cooperating with a counterpart device, wherein the information processing device comprises:

[0112] An ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a one-way exchangeable operation with a key, thereby generating encrypted user data on the user data to be counted;

[0113] A data transceiver unit, which transmits and receives the encrypted user data to and from the counterpart device;

[0114] a data comparison unit that compares the encrypted user data of the own device generated by the ID encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on predetermined structural information of the user data; and

[0115] A statistical processing unit counts the number of encrypted user data for which the comparison result of the data comparison unit shows that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

[0116] [4] A privacy protection data collaboration system having a plurality of devices for storing user data, wherein the user data includes a user ID and attribute information related to the user, wherein the privacy protection data collaboration system generates statistical information related to a target user through collaboration between one of the plurality of devices and a counterpart device, wherein:

[0117] The one device has an ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by the device itself and a one-way exchangeable operation with a key, thereby generating encrypted user data about the user data to be counted,

[0118] The other party device has an encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by the other party device and a one-way commutative operation with a key, and encrypts the attribute information in the user data to be counted in a homomorphic encryption method capable of statistical processing, thereby generating encrypted user data on the user data to be counted,

[0119] The one device and the other device further include a data transceiver unit for transmitting and receiving the encrypted user data.

[0120] The one device also has:

[0121] a data comparison unit that compares the encrypted user data of the own device generated by the encryption unit and the encrypted user data of the other device received by the data transceiver unit based on a user ID corresponding portion determined based on the structure information of the predetermined user data;

[0122] A statistical processing unit that counts the number of encrypted user data that match the corresponding part of the user ID as a result of the comparison by the data comparison unit, thereby generating encrypted statistical data related to the target user; and

[0123] The concealment processing unit performs concealment processing on the encrypted statistical data generated by the statistical processing unit to generate encrypted statistical information.

[0124] [5] The privacy-preserving data collaboration system according to [4], wherein:

[0125] The one device and the other device further include an anonymization processing unit that performs a process for privacy protection on the attribute information, targeting user data held by the own device before encryption of the user ID.

[0126] [6] The privacy-preserving data collaboration system according to [5], wherein:

[0127] The privacy protection includes at least one of k-anonymization, l-diversity, and t-proximity.

[0128] [7] The privacy-preserving data collaboration system according to any one of [4] to [6], wherein:

[0129] The concealment processing includes concealment processing based on differential privacy.

[0130] [8] The privacy-preserving data collaboration system according to any one of [4] to [7], wherein:

[0131] The data transceiver unit of the one device transmits the encrypted statistical information generated by the anonymity processing unit to the data transceiver unit of the other device,

[0132] The counterpart device further includes a decryption unit that decrypts the encrypted statistical information received by the data transceiver unit of the counterpart device based on a decryption method corresponding to the encryption performed by the encryption unit.

[0133] [9] A privacy protection data collaboration system having a plurality of devices for storing user data, the user data including a user ID, wherein the privacy protection data collaboration system generates statistical information related to a target user through collaboration between one of the plurality of devices and a counterpart device, wherein:

[0134] The one device and the other device have:

[0135] an ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a one-way exchangeable operation with a key, thereby generating encrypted user data on the user data to be counted; and

[0136] a data transceiver unit, which transmits and receives the encrypted user data,

[0137] The one device also has:

[0138] a data comparison unit that compares the encrypted user data of the own device generated by the ID encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on predetermined structural information of the user data; and

[0139] A statistical processing unit counts the number of encrypted user data for which the comparison result of the data comparison unit shows that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

[0140]

[10] The privacy-preserving data collaboration system according to any one of [4] to [9], wherein:

[0141] The one device and the other device further include an ID irreversible conversion unit that performs irreversible conversion processing on the user ID before encryption of the user ID, targeting user data held by the own device.

[0142]

[11] The privacy-preserving data collaboration system according to

[10] , wherein:

[0143] The irreversible transformation process includes a hashing process.

[0144]

[12] The privacy-preserving data collaboration system according to

[11] , wherein:

[0145] After performing the hashing process on the user ID, the ID irreversible conversion unit discards the salt value used in the hashing process.

[0146] (Explanation of terms, hardware structure) Fig.21 )

[0147] In addition, the block diagram used in the description of the above-mentioned embodiment shows a block in a function unit. These function blocks (structural parts) are implemented by any combination of at least one of hardware and software. In addition, there is no particular limitation on the implementation method of each function block. That is, each function block can be implemented using a device that is physically or logically combined, or two or more devices that are physically or logically separated can be directly or indirectly (for example, using wired, wireless, etc.) connected and implemented using these multiple devices. The function block can also be implemented by combining software in the above-mentioned one device or the above-mentioned multiple devices.

[0148] Functions include judging, determining, judging, calculating, calculating, processing, deriving, investigating, searching, confirming, receiving, sending, outputting, accessing, solving, selecting, selecting, establishing, comparing, assuming, expecting, regarding, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, assigning, etc., but are not limited to these. For example, a functional block (structural unit) that performs a sending function is called a transmitting unit or a transmitter. In short, as mentioned above, there is no particular limitation on the implementation method.

[0149] For example, the information processing device 10 in the present embodiment may function as a computer that executes the processing of the present disclosure. Fig.21 1 is a diagram showing an example of a hardware configuration of the information processing device 10. The information processing device 10 may be configured as a computer device that physically includes a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, and the like. Figure 5 The device 20A and the device 20B may also be configured to have the same structure as the information processing device 10.

[0150] In the following description, the word "device" may be replaced with "circuit", "device", "unit", etc. The hardware configuration of the information processing device 10 may include one or more of the devices shown in the figure, or may exclude some of the devices.

[0151] Each function in the information processing device 10 is implemented by the following method: predetermined software (program) is read into hardware such as the processor 1001 and the memory 1002, so that the processor 1001 performs calculations and controls the communication of the communication device 1004 or controls at least one of the reading and writing of data in the memory 1002 and the storage 1003.

[0152] The processor 1001 controls the entire computer by, for example, running an operating system. The processor 1001 may be constituted by a central processing unit (CPU) including an interface with peripheral devices, a control device, a calculation device, registers, and the like.

[0153] In addition, the processor 1001 reads a program (program code), a software module, data, etc. from at least one of the memory 1003 and the communication device 1004 to the memory 1002, and performs various processes accordingly. As a program, a program that causes a computer to perform at least a part of the actions described in the above embodiments is used. Although it is described that the above-mentioned various processes are performed by one processor 1001, the above-mentioned various processes can also be performed simultaneously or sequentially by more than two processors 1001. The processor 1001 can also be implemented by more than one chip. In addition, the program can also be sent from the network via a telecommunication line.

[0154] The memory 1002 is a computer-readable recording medium, and may be composed of at least one of a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electrically Erasable Programmable ROM), a RAM (Random Access Memory), etc. The memory 1002 may be referred to as a register, a cache memory, a main memory (main storage device), etc. The memory 1002 may store a program (program code), a software module, etc. that can be executed to execute the wireless communication method according to an embodiment of the present disclosure.

[0155] The memory 1003 is a computer-readable recording medium, and may be composed of at least one of an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a floppy disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a Floppy (registered trademark) disk, a magnetic strip, etc. The memory 1003 may also be referred to as an auxiliary storage device. The above-mentioned storage medium may be, for example, a database, a server, and other appropriate media including at least one of the memory 1002 and the memory 1003.

[0156] The communication device 1004 is hardware (transceiver) for communicating between computers via at least one of a wired network and a wireless network, and may also be referred to as a network device, a network controller, a network card, a communication module, etc. The communication device 1004 may also be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc., to implement at least one of frequency division duplex (FDD: Frequency Division Duplex) and time division duplex (TDD: Time Division Duplex).

[0157] The input device 1005 is an input device that receives input from the outside (e.g., a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.). The output device 1006 is an output device that implements output to the outside (e.g., a display, a speaker, an LED light, etc.). In addition, the input device 1005 and the output device 1006 may also be integrally formed (e.g., a touch panel).

[0158] In addition, the processor 1001, the memory 1002 and other devices are connected via a bus 1007 for communicating information. The bus 1007 may be configured using a single bus or different buses may be used between the devices.

[0159] In addition, the information processing device 10 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), or an FPGA (Field Programmable Gate Array), and a part or all of each functional block may be implemented by the hardware. For example, the processor 1001 may also be implemented using at least one of these hardware.

[0160] The notification of information is not limited to the form / implementation method described in the present disclosure, and other methods may also be used. For example, the notification of information may be implemented through physical layer signaling (e.g., DCI (Downlink Control Information), UCI (Uplink Control Information)), high-layer signaling (e.g., RRC (Radio Resource Control) signaling, MAC (Medium Access Control) signaling, broadcast information (MIB (Master Information Block), SIB (System Information Block)), other signals or a combination thereof. In addition, RRC signaling may also be referred to as an RRC message, for example, an RRC Connection Setup message, an RRC Connection Reconfiguration message, etc.

[0161] Each form / implementation method described in the present disclosure can also be applied to LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), 6G (6th generation mobile communication system), xG (xth generation mobile communication system) (xG (x is, for example, an integer or a decimal)), FRA (Future Radio Access), NR (new Radio), NX (New radio access), FX (Future generation radio access), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE At least one of 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark), systems using other appropriate systems, and next-generation systems that are extended, modified, created, and specified based on these systems. In addition, a combination of multiple systems (for example, a combination of at least one of LTE and LTE-A and 5G, etc.) may also be applied.

[0162] The processing steps, timing, and flow of each form / implementation described in this disclosure may be changed in order if there is no contradiction. For example, the method described in this disclosure uses the order of examples to indicate the elements of various steps, but is not limited to the specific order indicated.

[0163] The input or output information can be stored in a specific location (e.g., memory) or managed using a management table. The input or output information can be rewritten, updated, or appended. The output information can also be deleted. The input information can also be sent to other devices.

[0164] The determination may be made by a value represented by one bit (0 or 1), by a Boolean value (Boolean: true or false), or by comparison of numerical values ​​(for example, comparison with a predetermined value).

[0165] Each form / implementation described in the present disclosure may be used alone or in combination, and may be switched depending on the execution. In addition, notification of scheduled information is not limited to being performed explicitly (e.g., notification of "yes X"), but may also be performed implicitly (e.g., notification of the scheduled information is not performed).

[0166] The present disclosure is described in detail above, but it should be clear to those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be implemented as a modification and variation without departing from the subject matter and scope of the present disclosure as determined by the claims. Therefore, the purpose of the description of the present disclosure is to illustrate and has no limiting significance on the present disclosure.

[0167] Software, whether referred to as software, firmware, middleware, microcode, hardware description language, or by other names, shall be interpreted broadly to refer to commands, sets of commands, codes, code segments, program code, programs, subroutines, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, execution threads, procedures, functions, etc.

[0168] In addition, software, commands, information, etc. may also be sent and received via a transmission medium. For example, when software is sent from a web page, server, or other remote source using at least one of wired technology (coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), etc.) and wireless technology (infrared, microwave, etc.), at least one of these wired technology and wireless technology is included in the definition of transmission medium.

[0169] The information, signals, etc. described in the present disclosure may also be represented by any of a variety of different technologies. For example, the data, commands, instructions, information, signals, bits, symbols, chips, etc. that may be involved in the above description as a whole may be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, light fields or photons, or any combination of these.

[0170] In addition, the terms described in the present disclosure and the terms required for understanding the present disclosure may be replaced with terms having the same or similar meanings. For example, at least one of a communication channel and a code element may also be a signal (signaling). In addition, a signal may also be a message. In addition, a component carrier (CC) may also be referred to as a carrier frequency, a cell, a frequency carrier, etc.

[0171] As used in this disclosure, the terms "system" and "network" are used interchangeably.

[0172] In addition, the information, parameters, etc. described in the present disclosure may be represented by absolute values, relative values ​​to predetermined values, or other corresponding information. For example, a wireless resource may be indicated by an index.

[0173] The names used for the above parameters are non-restrictive names in all respects. Furthermore, the formulas etc. using these parameters may sometimes differ from those explicitly disclosed in the present disclosure. Various communication channels (e.g., PUCCH, PDCCH, etc.) and information elements may be identified by all appropriate names, and therefore the various names assigned to these various communication channels and information elements are non-restrictive names in all respects.

[0174] The terms "determining" and "determining" used in the present disclosure sometimes also include a variety of actions. "Determining" and "determining" may include, for example, considering matters that have been judged, calculated, calculated, processed, derived, investigated, searched (for example, searched in a table, database or other data structure), confirmed (ascertaining) as matters that have been "judged" or "determined", etc. In addition, "determining" and "determining" may include matters that have been received (for example, receiving information), transmitted (for example, sending information), input, output, accessed (for example, accessed data in memory) as matters that have been "judged" or "determined", etc. In addition, "determining" and "determining" may include matters that have been resolved (resolving), selected (selecting), chosen (choosing), established (establishing), compared (comparing), etc. as matters that have been "judged" or "determined". That is, "judgment" and "decision" may include certain actions that are considered to be "judged" or "decided". In addition, "judgment (decision)" may also be replaced by "assuming", "expecting", "considering", etc.

[0175] The phrase “based on” used in the present disclosure does not mean “based only on” unless otherwise explicitly stated. In other words, the phrase “based on” means both “based only on” and “based at least on”.

[0176] Any reference to an element using the designations "first", "second", etc. used in this disclosure does not necessarily limit the number or order of these elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Therefore, a reference to a first element and a second element does not mean that only two elements can be taken or that the first element must precede the second element in any form.

[0177] When the terms "include", "including" and their variations are used in the present disclosure, these terms are intended to be inclusive like the term "comprising". Furthermore, the term "or" used in the present disclosure does not mean an exclusive or.

[0178] In the present disclosure, when an article is added by translation, such as a, an, and the in English, for example, the present disclosure also includes the case where the noun following the article is in plural form.

[0179] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other". In addition, the term may mean "A and B are different from C, respectively". The terms "separate" and "combined" may also be interpreted in the same way as "different".

[0180] Description of symbols

[0181] 1: Privacy protection data collaboration system; 10: Information processing device; 11: Encryption unit; 11A: ID encryption unit; 11B: Attribute information encryption unit; 12: Statistical processing unit; 13: Anonymization processing unit; 14: Decryption unit; 15: Data transceiver unit; 16: Data comparison unit; 20A, 20B: Information processing device; 21: Anonymization processing unit; 22: ID irreversible transformation unit; 23: Encryption unit; 23A: ID encryption unit; 23B: Attribute information encryption unit; 24: Data transceiver unit; 25: Data comparison unit; 26: Statistical processing unit; 27: Anonymization processing unit; 28: Decryption unit; 1001: Processor; 1002: Memory; 1003: Storage; 1004: Communication device; 1005: Input device; 1006: Output device; 1007: Bus.

Claims

1. An information processing device that holds user data including a user ID and attribute information related to the user, and generates statistical information related to a target user, wherein: The information processing device comprises: an encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a one-way commutative operation with a key, and encrypts the attribute information in the user data to be counted in a homomorphic encryption method capable of statistical processing, thereby generating encrypted user data on the user data to be counted; a statistical processing unit for counting the number of encrypted user data having the same attribute information as the encrypted user data generated by the encryption unit, thereby generating encrypted statistical data; as well as The concealment processing unit performs concealment processing on the encrypted statistical data generated by the statistical processing unit to generate encrypted statistical information.

2. The information processing device according to claim 1, which generates statistical information related to the target user by cooperating with a counterpart device, wherein: The information processing device further comprises: A data transceiver unit, which transmits and receives the encrypted user data to and from the counterpart device; as well as a data comparison unit that compares the encrypted user data of the own device generated by the encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on the structure information of the predetermined user data, The statistical processing unit generates encrypted statistical data related to the target user by counting the number of encrypted user data for which the matching result of the data matching unit indicates that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

3. An information processing device that holds user data including a user ID and generates statistical information related to a target user by cooperating with a counterpart device, wherein: The information processing device comprises: An ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a one-way exchangeable operation with a key, thereby generating encrypted user data on the user data to be counted; A data transceiver unit, which transmits and receives the encrypted user data to and from the counterpart device; a data comparison unit that compares the encrypted user data of the own device generated by the ID encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on predetermined structural information of the user data; as well as A statistical processing unit counts the number of encrypted user data for which the comparison result of the data comparison unit shows that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

4. A privacy protection data collaboration system, comprising a plurality of devices for storing user data, the user data comprising a user ID and attribute information related to the user, wherein the privacy protection data collaboration system generates statistical information related to a target user through collaboration between one of the plurality of devices and a counterpart device, wherein: The one device includes an ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by the device itself and a one-way exchangeable operation with a key, thereby generating encrypted user data about the user data to be counted, The other party device has an encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by the other party device and a one-way commutative operation with a key, and encrypts the attribute information in the user data to be counted in a homomorphic encryption method capable of statistical processing, thereby generating encrypted user data on the user data to be counted, The one device and the other device further include a data transceiver unit for transmitting and receiving the encrypted user data. The one device also has: a data comparison unit that compares the encrypted user data of the own device generated by the encryption unit and the encrypted user data of the other device received by the data transceiver unit based on a user ID corresponding portion determined based on the structure information of the predetermined user data; A statistical processing unit for counting the number of encrypted user data for which the comparison result of the data comparison unit indicates that the corresponding part of the user ID is consistent, thereby generating encrypted statistical data related to the target user; as well as The concealment processing unit performs concealment processing on the encrypted statistical data generated by the statistical processing unit to generate encrypted statistical information.

5. The privacy protection data collaboration system according to claim 4, wherein: The one device and the other device further include an anonymization processing unit that performs a process for protecting the privacy of the attribute information on user data held by the own device before encryption of the user ID.

6. The privacy protection data collaboration system according to claim 5, wherein: The privacy protection includes at least one of k-anonymization, l-diversity, and t-proximity.

7. The privacy protection data collaboration system according to claim 4, wherein: The concealment processing includes concealment processing based on differential privacy.

8. The privacy protection data collaboration system according to claim 4, wherein: The data transceiver unit of the one device transmits the encrypted statistical information generated by the anonymity processing unit to the data transceiver unit of the other device, The counterpart device further includes a decryption unit that decrypts the encrypted statistical information received by the data transceiver unit of the counterpart device based on a decryption method corresponding to the encryption performed by the encryption unit.

9. A privacy protection data collaboration system, comprising a plurality of devices for storing user data, the user data including a user ID, the privacy protection data collaboration system generating statistical information related to a target user through collaboration between one of the plurality of devices and a counterpart device, wherein: The one device and the counterpart device have: An ID encryption unit that encrypts the user ID in the user data to be counted based on a self-encryption key held by its own device and a one-way exchangeable operation with a key, thereby generating encrypted user data on the user data to be counted; as well as a data transceiver unit, which transmits and receives the encrypted user data, The one device also has: a data comparison unit that compares the encrypted user data of the own device generated by the ID encryption unit and the encrypted user data of the other device received by the data transceiver unit, based on a user ID corresponding portion determined based on predetermined structural information of the user data; as well as A statistical processing unit counts the number of encrypted user data for which the comparison result of the data comparison unit shows that the corresponding part of the user ID matches, thereby generating encrypted statistical data related to the target user.

10. The privacy protection data collaboration system according to claim 4, wherein: The one device and the other device further include an ID irreversible conversion unit that performs irreversible conversion processing on user data held by the own device into the user ID before encryption of the user ID.

11. The privacy protection data collaboration system according to claim 10, wherein: The irreversible transformation process includes a hashing process.

12. The privacy protection data collaboration system according to claim 11, wherein: After performing the hashing process on the user ID, the ID irreversible conversion unit discards the salt value used in the hashing process.

Images