Information processing system, information processing method, and program

Abstract

To provide an information processing system that easily determines a correspondence between a global IP address and a group.SOLUTION: An information processing device 10 comprises a control part 11. The control part 11 executes: a first acquisition step of acquiring from a first user terminal 20 a plurality of first logs including at least an IP address and a date and time, with a unique ID set; a search step of searching for group information from a first DB 161 that stores unique IDs and the group information in association with each other, by using the unique ID of the first user terminal 20 as a key; an estimation step of, when there are changes in IP addresses in the acquired plurality of first logs within a prescribed period, estimating IP addresses in an object period on the basis of regularity of changes in the IP addresses; and a first storage step of storing in a second database information that at least associates the estimated IP addresses with the searched group information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] It is known that a group to which a user belongs is identified from an IP (Internet Protocol) address, and group information is used when distributing advertisements. For example, Patent Document 1 describes an advertisement distribution device that stores a correspondence between an IP address and a group ID, and identifies a group ID from the IP address of a target PC terminal. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2011-191614 A Summary of the Invention [Problem to be solved by the invention]

[0004] The relationship between global IP addresses and clusters is known only to the ISP (Internet Service Provider) with which the cluster has a contract, and it is difficult to accurately identify them from outside. It is particularly difficult to accurately identify the relationship between dynamic IP addresses and clusters.

[0005] In view of the above-mentioned problems, an object of the present disclosure is to provide an information processing system, an information processing method, and a program that can easily identify the correspondence between a global IP address and a population. [Means for solving the problem]

[0006] An information processing system according to an aspect of the present disclosure includes a control unit, which executes a first acquisition step of acquiring a plurality of first logs including at least an IP address and a date and time from a first user terminal to which a unique ID is set, a search step of searching for collective information from a first database that stores unique IDs and collective information in association with each other, using the unique ID of the first user terminal as a key, an estimation step of estimating an IP address during a target period based on regularity of the IP address fluctuation when an IP address changes within a predetermined period in the acquired plurality of first logs, and a first storage step of storing information in a second database that at least associates the estimated IP address with the searched collective information.

[0007] An information processing method according to an aspect of the present disclosure is executed by a computer including a control unit. The control unit executes a first acquisition step of acquiring a plurality of first logs including at least an IP address and a date and time from a first user terminal to which a unique ID is set, a search step of searching for collective information from a first database that associates and stores unique IDs with collective information by using the unique ID of the first user terminal as a key, an estimation step of estimating an IP address during a target period based on regularity of the IP address fluctuation when an IP address changes within a predetermined period in the acquired plurality of first logs, and a first storage step of storing information that at least associates the estimated IP address with the searched collective information in a second database.

[0008] A program according to an aspect of the present disclosure causes a computer to execute the following steps. The steps include a first acquisition step of acquiring a plurality of first logs including at least an IP address and a date and time from a first user terminal to which a unique ID is set, a search step of searching for group information from a first database that stores unique IDs in association with group information using the unique ID of the first user terminal as a key, an estimation step of estimating an IP address during a target period based on regularity of the IP address fluctuation when an IP address changes within a predetermined period in the acquired plurality of first logs, and a first storage step of storing information that at least corresponds the estimated IP address to the searched group information in a second database. Effect of the Invention

[0009] The present disclosure makes it possible to provide an information processing system, an information processing method, and a program that can easily identify the correspondence between a global IP address and a group. [Brief description of the drawings]

[0010] [Figure 1] 1 is a block diagram showing a configuration of a system according to a first embodiment. [Diagram 2] 4 is a flowchart showing a flow of information processing by the information processing device according to the first embodiment. [Diagram 3] FIG. 11 is a block diagram showing a schematic configuration of a system according to a second embodiment. [Figure 4] FIG. 11 is a block diagram showing a hardware configuration of a first user terminal according to a second embodiment. [Diagram 5] FIG. 11 is a diagram illustrating an example of the appearance of a first user terminal according to a second embodiment. [Figure 6] FIG. 11 is a block diagram showing a hardware configuration of a second user terminal according to the second embodiment. [Figure 7] FIG. 11 is a block diagram showing a hardware configuration of an information processing device according to a second embodiment. [Figure 8]FIG. 11 illustrates an example of the configuration of a storage unit according to the second embodiment. [Figure 9] FIG. 11 is a diagram showing an example of a data structure of a confirmation table according to the second embodiment. [Figure 10] FIG. 11 is a diagram illustrating an example of a data structure of an estimation table according to the second embodiment. [Figure 11] FIG. 11 is a diagram illustrating an example of a functional configuration of a control unit according to a second embodiment. [Figure 12] 11 is a flowchart showing the flow of a registration process by a control unit according to the second embodiment. [Figure 13] 13 is a flowchart showing a flow of a second storage process by a control unit according to the second embodiment. [Figure 14] FIG. 11 is a diagram showing the concept of a second storage process according to the second embodiment. [Figure 15] 13 is a flowchart showing a flow of a third storage process by a control unit according to the second embodiment. [Figure 16] FIG. 11 is a diagram illustrating a concept of a third storage process according to the second embodiment. [Figure 17] 13 is a flowchart showing a flow of a first storage process by a control unit according to the second embodiment. [Figure 18] FIG. 11 is a diagram showing the concept of a first storage process according to the second embodiment. [Figure 19] 11 is a flowchart showing the flow of a generation process by a control unit according to the second embodiment. [Figure 20] FIG. 11 is a diagram showing a first example of the data structure of analysis data according to the second embodiment. [Figure 21] FIG. 11 is a diagram showing a first example of a data structure of an analysis result according to the second embodiment. [Figure 22] FIG. 11 is a diagram showing a second example of the data structure of analysis data according to the second embodiment. [Figure 23] FIG. 11 is a diagram showing a second example of the data structure of the analysis result according to the second embodiment. [Figure 24] FIG. 11 is a block diagram showing a schematic configuration of a system according to a third embodiment. [Diagram 25]FIG. 11 is a diagram illustrating an example of a functional configuration of a control unit according to a third embodiment. [Figure 26] 13 is a flowchart showing the flow of a comparison process by a control unit according to the third embodiment. [Figure 27] FIG. 13 is a diagram showing an example of a data structure of measurement data according to the third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are denoted by the same reference numerals, and duplicated descriptions will be omitted as necessary for clarity of explanation.

[0012] <Embodiment 1> First, a first embodiment of the present disclosure will be described. Fig. 1 is a block diagram showing a configuration of a system 1 according to the first embodiment. The system 1 is a computer system including an information processing device 10 and a first user terminal 20. The information processing device 10 and the first user terminal 20 are communicatively connected via a network NW such as the Internet.

[0013] The first user terminal 20 is a terminal that belongs to a predetermined group, and a unique ID corresponding to the group is set in advance. The fact that the first user terminal 20 belongs to a group means that the first user terminal 20 is installed in the place of the group, for example, the place where the group is active. Examples of the first user terminal 20 include an image forming device such as a multifunction printer, a personal computer, a tablet terminal, a smartphone, a wireless LAN router, a smart speaker, and the like.

[0014] A group is a gathering of people who share a purpose, space, etc. Examples of groups include a company, a department, a club, a family, users of a facility, and residents of an apartment building.

[0015] The information processing device 10 is a computer that identifies the correspondence between a group and an IP address. For example, the information processing device 10 is a server. The IP address is a global IP address. The information processing device 10 includes a control unit 11, a communication unit 15, and a storage unit 16.

[0016] The control unit 11 has a processor that controls the entire system of the information processing device 10. The control unit 11 realizes the functions of a first acquisition unit 111, a search unit 112, an estimation unit 113, and a registration unit 114 by executing a program.

[0017] The first acquisition unit 111 receives and acquires a measurement log from the first user terminal 20, whose unique ID is known, via the communication unit 15. The measurement log is also referred to as a first log. The measurement log includes at least the IP address and date and time of the first user terminal 20. The IP address included in the measurement log is an IP address assigned when the first user terminal 20 connects to the network NW. The date and time included in the measurement log is the date and time when the first user terminal 20 connects to the network NW, but may be the date and time when the information processing device 10 receives the measurement log, or may be the date and time when the first user terminal 20 transmits the measurement log. The measurement log may include the unique ID of the first user terminal 20. The first acquisition unit 111 receives the measurement log from the first user terminal 20 at a predetermined time interval. However, instead of this, the first acquisition unit 111 may receive the measurement log from the first user terminal 20 in response to the occurrence of a predetermined event. In this way, the first acquisition unit 111 receives the measurement log from the first user terminal 20 periodically or irregularly, thereby acquiring a plurality of measurement logs with different dates and times.

[0018] The search unit 112 searches for group information from the first DB 161 using the unique ID of the first user terminal 20 that is the transmission source of the measurement log as a key. The group information is not particularly limited as long as it is information that can identify the group in which the first user terminal 20 is installed, but may be the group name, the corporation number, or other public data related to the group.

[0019] The estimation unit 113 determines whether or not there is a change in the IP address within a predetermined period in the multiple measurement logs acquired by the first acquisition unit 111. As an example, the predetermined period is one month, one week, one day, or one hour. If there is a change in the IP address within the predetermined period, the estimation unit 113 estimates the regularity of the change in the IP address. Then, the estimation unit 113 estimates the IP address in a target period based on the regularity of the estimated change in the IP address. The target period may be a future period or a past period.

[0020] The registration unit 114 stores in the second DB 162 information in which at least the group information searched by the search unit 112 and the IP address estimated by the estimation unit 113 are associated with each other.

[0021] The communication unit 15 is a communication interface for connecting to the network NW. The storage unit 16 is a storage device having a non-transitory computer-readable medium or a tangible storage medium. The storage unit 16 has a first DB 161 and a second DB 162.

[0022] The first DB 161 is a storage device that stores the correspondence between unique IDs and group information. The second DB 162 is a storage device that stores the correspondence between group information and IP addresses.

[0023] Although the first DB 161 and the second DB 162 are described as being included in the storage unit 16 of the information processing device 10, they may be included in an external device accessible by the information processing device 10.

[0024] FIG. 2 is a flowchart showing the flow of information processing by the information processing device 10 according to the first embodiment. First, the first acquisition unit 111 acquires a plurality of measurement logs including an IP address and a date and time from the first user terminal 20 whose unique ID is known (S10: first acquisition step). Next, the search unit 112 accesses the first DB 161 and searches for group information using the unique ID of the first user terminal 20 that is the transmission source of the measurement log as a key (S11: search step). Next, the estimation unit 113 determines whether or not there is a change in the IP address within a predetermined period in the acquired plurality of measurement logs (S12). If there is a change in the IP address within the predetermined period (YES in S12), the estimation unit 113 estimates the IP address in the target period based on the regularity of the change in the IP address (S13: estimation step). Next, the registration unit 114 registers information in which at least the group information searched in S11 and the IP address estimated in S13 are associated with each other in the second DB 162 (S14: first storage step).

[0025] [effect] In this way, the information processing device 10 estimates the IP address of the group based on the regularity of the change in the IP address. Although it is particularly difficult to identify the IP address of the group when the IP address changes, according to the first embodiment, the correspondence between the group and the global IP address can be easily identified.

[0026] <Embodiment 2> Next, a description will be given of a second embodiment of the present disclosure. The second embodiment is a specific example of the first embodiment. Fig. 3 is a block diagram showing a schematic configuration of a system 1 according to the second embodiment.

[0027] The system 1 includes an information processing device 10, first user terminals 20-A and 20-B, second user terminals 30-A and 30-B, a log collection server 40, and an advertiser device 50. These are connected to a network NW and are capable of communicating with each other.

[0028] The information processing device 10 according to the second embodiment, like the information processing device 10 according to the first embodiment, identifies the correspondence between the group and the IP address based on the measurement log acquired from each of the first user terminals 20-A and 20-B. Furthermore, the information processing device 10 according to the second embodiment performs access analysis on a group basis based on the site log when the second user terminals 30-A and 30-B access the advertiser's website and the above-mentioned correspondence. Then, the information processing device 10 provides the analysis result to the advertiser side device 50.

[0029] The first user terminals 20-A and 20-B are specific examples of the first user terminal 20 according to the first embodiment. The first user terminals 20-A and 20-B are multifunction machines with signage installed in different locations of groups A and B, respectively. A unique ID corresponding to the group is set in the first user terminals 20-A and 20-B. The first user terminals 20-A and 20-B have a function of delivering advertisements. For example, the first user terminals 20-A and 20-B obtain advertisement data for the group in which they are installed from the information processing device 10 or the advertiser device 50, and display the advertisement data. The first user terminals 20-A and 20-B each transmit a measurement log to the information processing device 10 periodically or irregularly.

[0030] The second user terminals 30-A and 30-B are terminals used by users (members) belonging to different groups A and B, respectively. The members may be employees, staff, members, or other members of the group. For example, the second user terminals 30-A and 30-B may be personal computers, smartphones, tablet terminals, or the like. No unique ID is set to the second user terminals 30-A and 30-B. The second user terminals 30-A and 30-B may be mobile or non-mobile.

[0031] In the following, when referring to the first user terminals 20-A and 20-B without specifying the group, they will be simply referred to as the first user terminal 20. When referring to the second user terminals 30-A and 30-B without specifying the group, they will be simply referred to as the second user terminal 30.

[0032] The log collection server 40 acquires a site log when the second user terminal 30 accesses the advertiser's website and stores it in the site log DB 401. Then, the log collection server 40 transmits the site log to the information processing device 10. The site log is also called a second log. The site log includes at least the IP address when the second user terminal 30 accesses the website, the access date and time, an identifier that directly or indirectly indicates the user who accessed the website, and log information related to web browsing. For example, the identifier is a user ID, a terminal ID, or a session ID. The user ID is an identifier unique to the user who accessed the website. The terminal ID is information that identifies the terminal that accessed the website. The session ID is information that uniquely identifies the session of the user who accessed the website. The site log may include a device fingerprint that includes unique information possessed by the hardware or software of the second user terminal 30, or the browser. For example, the site log is automatically transmitted to the log collection server 40 by a tag embedded in the advertiser's website accessed by the second user terminal 30.

[0033] The advertiser's device 50 is a computer used by the advertiser.

[0034] 4 is a block diagram showing a hardware configuration of the first user terminal 20 according to the embodiment 2. The first user terminal 20 includes a control unit 21 for controlling the entire system. A communication unit 25, a storage unit 26, an input unit 27, a display unit 28, and an output unit 29 are connected to the control unit 21 via a communication bus.

[0035] The control unit 21 includes a processor 22, a ROM 23, and a RAM 24. The processor 22 performs various information processing and control according to a program stored in the ROM 23 or the storage unit 26. The ROM 23 is a non-transient storage medium such as a ROM (Read-only memory), and stores in advance various programs or data for the processor 22 to perform various controls or calculations. The RAM 24 is a volatile storage medium such as a RAM (Random Access Memory), and is a storage area for temporarily holding information when the processor 22 is operating. In the RAM 24, an area for performing various processes according to this embodiment can be secured.

[0036] The communication unit 25 is a communication interface for connecting to the network NW. The storage unit 26 is a storage device including a non-transitory computer-readable medium or a tangible storage medium.

[0037] The input unit 27 is an input device that accepts input from a user, such as a keyboard, a mouse, a touch panel, etc. The display unit 28 is a display device, such as a CRT, a liquid crystal display, an organic EL display, a plasma display, etc. The output unit 29 is an output device that outputs the results of information processing by the control unit 21 by printing.

[0038] 5 is a diagram showing an example of the appearance of the first user terminal 20 according to the second embodiment. The control unit 21, the communication unit 25, the storage unit 26, the input unit 27, and the output unit 29 may constitute a general multifunction peripheral MFP. As shown in this figure, the display unit 28 may be an external digital signage.

[0039] 6 is a block diagram showing a hardware configuration of the second user terminal 30 according to the embodiment 2. The second user terminal 30 includes a control unit 31 for controlling the entire system. A communication unit 35, a storage unit 36, an input unit 37, and a display unit 38 are connected to the control unit 31 via a communication bus.

[0040] The control unit 31 includes a processor 32, a ROM 33, and a RAM 34. The processor 32 performs various information processing and control according to a program stored in the ROM 33 or the storage unit 36. The ROM 33 is a non-transient storage medium such as a ROM, and stores in advance various programs or data for the processor 32 to perform various controls or calculations. The RAM 34 is a volatile storage medium such as a RAM, and is a storage area for temporarily holding information when the processor 32 is operating. In this RAM 34, an area for performing various processes according to this embodiment can be secured.

[0041] The communication unit 35 is a communication interface for connecting to the network NW. The storage unit 36 ​​is a storage device including a non-transitory computer-readable medium or a tangible storage medium.

[0042] The input unit 37 is an input device that accepts input from a user, such as a keyboard, a mouse, a touch panel, etc. The display unit 38 is a display device such as a CRT, a liquid crystal display, an organic EL display, or a plasma display.

[0043] 7 is a block diagram showing a hardware configuration of an information processing device 10 according to embodiment 2. The information processing device 10 includes a control unit 11, a communication unit 15, a storage unit 16, an input unit 17, and a display unit 18.

[0044] The control unit 11 includes a processor 12, a ROM 13, and a RAM 14. The processor 12 performs various information processing and control according to a program stored in the ROM 13 or the storage unit 16. The ROM 13 is a non-transient storage medium such as a ROM, and stores in advance various programs or data for the processor 12 to perform various controls or calculations. The RAM 14 is a volatile storage medium such as a RAM, and is a storage area for temporarily holding information when the processor 12 is operating. In this RAM 14, an area for performing various processes according to this embodiment can be secured.

[0045] The input unit 17 is an input device that accepts input from a user, such as a keyboard, a mouse, a touch panel, etc. The display unit 18 is a display device such as a CRT, a liquid crystal display, an organic EL display, a plasma display, etc. Note that the input unit 17 and the display unit 18 are not essential.

[0046] 8 is a diagram showing an example of the configuration of the storage unit 16 according to the embodiment 2. The storage unit 16 has a measurement log DB 160 and a third DB 163 in addition to a first DB 161 and a second DB 162.

[0047] The measurement log DB 160 is a storage device that stores the measurement log received from the first user terminal 20. The measurement log includes an IP address, a unique ID, and a date and time.

[0048] The third DB 163 is a storage device that stores population information, analysis data to be the subject of access analysis, and analysis results by the information processing device 10 in association with each other.

[0049] The first DB 161 is generated in advance based on known information.

[0050] Here, in the second embodiment, the second DB 162 includes a determination table 1620 and an estimation table 1621 .

[0051] 9 is a diagram showing an example of a data structure of the determination table 1620 according to the embodiment 2. The determination table 1620 associates record numbers with population names as an example of population information, fixed IP flags, target periods, and global IP addresses.

[0052] The record number indicates the order in which the record was registered in the determination table 1620 . The fixed IP flag is a variable that indicates whether the global IP address is a fixed IP address. For example, if the fixed IP flag is ON, the global IP address is a fixed IP address, and if the fixed IP flag is OFF, the global IP address is a dynamic IP address.

[0053] The determination table 1620 is generated by a registration process, described later, performed by the information processing device 10. However, the determination table 1620 may previously include records for groups whose IP addresses are known.

[0054] 10 is a diagram showing an example of a data structure of the inference table 1621 according to the embodiment 2. The inference table 1621 associates record numbers, population names as an example of population information, regularity flags, target periods, and inferred global IP addresses.

[0055] The record number indicates the order in which the record was registered in the inference table 1621 . The regularity flag is a variable that indicates whether or not there is regularity in the fluctuation of the global IP address during the measurement period. The estimated global IP address is a global IP address that is estimated to be an IP address of a group during a target period. The estimated global IP address may be a single IP address or may include multiple IP addresses.

[0056] The estimated table 1621 is generated by a registration process performed by the information processing device 10, which will be described later.

[0057] 11 is a diagram illustrating an example of a functional configuration of the control unit 11 according to embodiment 2. The control unit 11 includes a first acquisition unit 111, a search unit 112, an estimation unit 113, and a registration unit 114, as well as a second acquisition unit 115, a generation unit 116, and an analysis unit 117.

[0058] The first acquisition unit 111 and the search unit 112 are similar to those in the first embodiment, and therefore the description thereof will be omitted.

[0059] As in the first embodiment, the estimation unit 113 judges whether or not there is a change in the IP address within a predetermined measurement period in the multiple measurement logs acquired by the first acquisition unit 111. If there is a change in the IP address within the measurement period, the estimation unit 113 judges whether or not there is a pattern in the change in the IP address associated with the unique ID. If there is a pattern in the change in the IP address, the estimation unit 113 executes a first storage process described later together with the registration unit 114. As a result, the control unit 11 stores information in which at least the estimated IP address is associated with the searched group information in the estimation table 1621 of the second DB 162.

[0060] If there is no change in the IP address within the measurement period, the estimation unit 113 executes a second storage process described later together with the registration unit 114. As a result, the control unit 11 stores information that at least associates the IP address that has not changed with the searched group information as one record in the determination table 1620 of the second DB 162.

[0061] On the other hand, if there is a change in the IP address within the measurement period, the estimation unit 113 executes a third storage process described later together with the registration unit 114. As a result, the control unit 11 stores information that at least associates the IP address included in the measurement log in which the IP address has changed with the searched group information as one record in the determination table 1620 of the second DB 162.

[0062] The second acquisition unit 115 acquires a site log when the second user terminal 30 accesses a specific website from the log collection server 40. The specific website is, for example, an advertiser's website, but may be any website that includes content related to the advertiser.

[0063] The generating unit 116 identifies group information associated with the IP address included in the site log from the second DB 162, and corresponding to the access date and time included in the site log. The generating unit 116 generates information that associates at least the log information related to web browsing included in the site log, the access date and time, and the identified group information, as analysis data. The generating unit 116 then stores the analysis data in the third DB 163.

[0064] The analysis unit 117 performs an access analysis based on the analysis data. The analysis unit 117 stores the analysis result in the third DB 163. Then, the analysis unit 117 transmits the analysis result to the advertiser side device 50 via the communication unit 15.

[0065] FIG. 12 is a flowchart showing the flow of the registration process by the control unit 11 according to the second embodiment.

[0066] First, the first acquisition unit 111 collects measurement logs including unique IDs, IP addresses, and date and time from the first user terminals 20-A and 20-B whose unique IDs are known (S20: first acquisition step). Next, the control unit 11 repeats the process shown in S21 to S26 for each unique ID for the measurement logs extracted for each unique ID of the first user terminal 20 that is the sender. In S21, the search unit 112 accesses the first DB 161 and searches for group information using the unique ID as a key (S21: search step). Next, the estimation unit 113 determines whether or not there is a change in the IP address within the measurement period in the acquired multiple measurement logs (S22). If there is no change in the IP address within the measurement period (NO in S22), that is, if the IP address is a fixed IP address, the estimation unit 113 and the registration unit 114 execute the second storage process (S23: second storage step). Then, the control unit 11 returns the process to S21 if there is an unprocessed unique ID.

[0067] On the other hand, if the IP address changes within the measurement period (YES in S22), that is, if the IP address is a variable IP address, the estimation unit 113 and the registration unit 114 execute a third storage process (S24: third storage step).

[0068] Next, the estimation unit 113 judges whether there is a pattern in the IP address fluctuation (S25). At this time, the estimation unit 113 may judge whether there is a pattern in the fluctuation based on at least one of the number of times the same IP address appears, the appearance period of the IP address, and the fluctuation range of the IP address. The estimation unit 113 may also identify an Internet Service Provider (ISP) based on an IP address included in a measurement log in which an IP address has changed, and judge whether there is a pattern based on the ISP. This allows the estimation unit 113 to easily estimate the pattern in the IP address fluctuation.

[0069] If it is determined that there is a pattern in the IP address fluctuations (YES in S25), the estimation unit 113 and the registration unit 114 execute the first storage process (S26). Then, the control unit 11 returns the process to S21 if there is an unprocessed unique ID. On the other hand, if it is not determined that there is a pattern in the IP address fluctuations (NO in S25), if there is an unprocessed unique ID, the control unit 11 returns the process to S21.

[0070] Fig. 13 is a flowchart showing the flow of the second storage process by the control unit 11 according to the second embodiment. Fig. 14 is a diagram showing the concept of the second storage process according to the second embodiment.

[0071] The estimation unit 113 determines whether the IP address has changed during the measurement period, and if there has been no change, determines that the IP address is a fixed IP address (S230). As an example, the measurement period is from November 1, 2022 to November 30, 2022. Since the IP address of Company A during this measurement period is fixed at 198.51.100.1, the estimation unit 113 turns on the fixed IP flag.

[0072] Then, the registration unit 114 sets the target period based on the measurement period (S231). In the example shown in FIG. 14, the registration unit 114 sets the same period as the measurement period as the target period (November 1, 2022 to November 30, 2022). However, this is not limited to this. For example, the registration unit 114 may set the target period to one month in the future, several months ahead of the measurement period.

[0073] Next, the registration unit 114 stores the information associating the fixed IP address, the searched group information, and the target period as one new record in the determination table 1620 of the second DB 162 (S232). Therefore, the registration unit 114 can consolidate the information of multiple measurement logs within the measurement period into one record. This makes it possible to reduce the amount of data stored in the determination table 1620 while complementing logs for dates and times with no measurement results.

[0074] The registration unit 114 may store information of a plurality of measurement logs within the measurement period together with the searched group information as a plurality of records in the determination table 1620. In this case, the amount of data can be saved by making the number of records smaller than the number of the measurement logs that are the basis.

[0075] Fig. 15 is a flowchart showing the flow of the third storage process by the control unit 11 according to the second embodiment. Fig. 16 is a diagram showing the concept of the third storage process according to the second embodiment.

[0076] The estimation unit 113 determines whether the IP address has changed during the measurement period, and if there has been a change, determines that the IP address is a variable IP address (S240). As shown in Fig. 16, for example, the measurement period is from November 1, 2022 to November 30, 2022. As shown in Fig. 16, the IP address of Company B has changed during the measurement period. Therefore, the estimation unit 113 turns off the fixed IP flag.

[0077] Then, the estimation unit 113 detects the change timing within the measurement period (S241). Next, the estimation unit 113 sets the target period based on the change timing (S242). As shown in FIG. 16, November 1, 2022, 12:00:00 and November 1, 2022, 12:01:00 are the change timings when the IP address is switched. The estimation unit 113 sets November 1, 2022, 12:00:00 to November 1, 2022, 12:00:59 and November 1, 2022, 12:01:00 to November 1, 2022, 17:59:59 as the target period for each record.

[0078] Then, the control unit 11 repeats the processes shown in S243 to S244 for each record, that is, for each target period. In S243, the registration unit 114 selects one measurement log after a fluctuation from among the measurement logs within the measurement period. The registration unit 114 may select the measurement log immediately after the fluctuation occurs, but may also arbitrarily select a measurement log from immediately after the fluctuation to when the next fluctuation occurs.

[0079] Then, in S244, the registration unit 114 stores information associating the IP address included in the selected measurement log, the searched group information, and the target period as one new record in the determination table 1620 of the second DB 162. Therefore, the registration unit 114 omits the generation of records for IP addresses included in measurement logs that were not selected. This makes it possible to save the amount of data stored in the determination table 1620 while complementing logs for dates and times with no measurement results.

[0080] The registration unit 114 may select a plurality of measurement logs after fluctuations within the measurement period and store them together with the searched population information as a plurality of records in the determination table 1620. In this case, the amount of data can be saved by making the number of records smaller than the number of selected measurement logs.

[0081] Fig. 17 is a flowchart showing the flow of the first storage process by the control unit 11 according to the second embodiment. Fig. 18 is a diagram showing the concept of the first storage process according to the second embodiment.

[0082] First, the estimation unit 113 sets the target period based on the measurement period (S260). In the example shown in Fig. 18, the estimation unit 113 sets the same period as the measurement period as the target period (November 1, 2022 to November 30, 2022). However, this is not limited thereto, and for example, the registration unit 114 may set the target period to one month in the future, which is several months ahead of the measurement period.

[0083] Next, the estimation unit 113 estimates IP addresses in the target period based on the regularity of IP address fluctuations determined in S25 (S261). For example, the estimation unit 113 may estimate IP addresses based on at least one of the number of times the same IP address appears, the period of appearance of the IP address, and the fluctuation range of the IP address. Alternatively, for example, the estimation unit 113 may estimate IP addresses in the target period based on regularity according to the identified ISP. Alternatively, for example, the estimation unit 113 may generate a regression equation of IP addresses and dates and times within the target period to estimate IP addresses within the target period.

[0084] Then, the registration unit 114 stores information associating the IP address estimated in S261, the group information searched for in S21, and the target period in the second DB 162 (S262). By implementing such a method, the information processing device 10 can easily identify the correspondence between the group and the variable IP address.

[0085] FIG. 19 is a flowchart showing the flow of the generation process by the control unit 11 according to the second embodiment.

[0086] First, the second acquisition unit 115 collects from the log collection server 40 the site log when the second user terminal 30 accesses a website (S30: second acquisition step). Next, the generation unit 116 searches for group information from the determination table 1620 or the estimation table 1621 of the second DB 162 using the IP address and access date and time included in each site log as a key (S31). Here, for a variable IP address that varies with regularity, a record will exist in both the determination table 1620 and the estimation table 1621. The generation unit 116 may determine whether to search the determination table 1620 or the estimation table 1621 depending on the required analysis accuracy.

[0087] Next, the generating unit 116 formats the data of the site log so that it includes at least the access date and time, the group information searched for in S31, and the session ID for each site log (S32). For example, the generating unit 116 adds group information to the site log. Note that in S32, the generating unit 116 may format the data of the site log so that it includes a user ID or a terminal ID instead of or in addition to the session ID.

[0088] Next, the control unit 11 repeats the processes shown in S33 to S37 for each group. In S33, the generation unit 116 collects the shaped data of the same group, and generates analysis data including the collected shaped data (S33: generation step).

[0089] Next, the analysis unit 117 determines whether the amount of analysis data corresponding to one group is sufficient (S34). Here, the analysis unit 117 determines that the amount of analysis data is sufficient when the number of formatted data included in the analysis data for one group (i.e., the number of site logs that are the basis of the analysis data) is equal to or greater than a predetermined number. Alternatively, the analysis unit 117 may determine that the amount of analysis data is sufficient when the number of formatted data included in the analysis data for a certain parameter of one group is equal to or greater than a predetermined number.

[0090] When the analysis unit 117 determines that the amount of analysis data corresponding to one population is sufficient (YES in S34), it analyzes the analysis data corresponding to that population (S35).

[0091] On the other hand, when the analysis unit 117 does not determine that the amount of analysis data corresponding to one group is sufficient (NO in S34), it analyzes the analysis data using the analysis data or analysis results of groups similar to the group (S36). The similarity of groups may be determined based on the group's attribute information, such as the group's industry, customer base, whether it is profitable or unprofitable, market share, and organizational structure. As an example, groups A and B that belong to the same automobile industry and have a profitable attribute are recognized as similar companies. Therefore, the analysis unit 117 performs the analysis by supplementing the missing data in group B with the data of group A.

[0092] Then, the analysis unit 117 stores the analysis result in the third DB 163 (S37). The analysis unit 117 may transmit the analysis result to the advertiser side device 50.

[0093] FIG. 20 is a diagram showing a first example of the data structure of the analysis data according to the second embodiment. As an example, the log information included in the site log includes a referrer / medium, a conversion, a page URL, and other indicators. The referrer / medium is information indicating which website or medium the user accessed the website from, that is, information indicating the referrer. In S32, the generation unit 116 generates formatted data in which the group information is added to the site log. Then, in S33, the generation unit 116 generates a set of formatted data filtered by a group name, group A, as analysis data.

[0094] The analysis unit 117 analyzes the analytical data for each group in S35. As an example, the analysis unit 117 calculates a score for each referral source medium based on the conversion in the analytical data for group A.

[0095] 21 is a diagram showing a first example of a data structure of an analysis result according to the second embodiment. The magnitude of the score indicates the degree of conversion that the medium has. This diagram shows that when distributing an advertisement to employees of group A, distributing the advertisement through medium a is the most effective.

[0096] In this way, the analysis unit 117 can identify effective media for advertising to that group by analyzing the analysis data.

[0097] Here, if the analytical data for group B lacks data on conversions for medium c, the analysis unit 117 may substitute the score of medium c of group B, which is a similar company, for the score of medium c of group B.

[0098] 22 is a diagram showing a second example of the data structure of the analysis data according to the second embodiment. The generation unit 116 further filters the set of formatted data filtered by the group name "group A" in S33 by the session ID, and identifies the access route from the transition of the reference source media. The generation unit 116 then collects the access date and time, the session ID, the access route, and other log information for each group, and generates the collected data as analysis data.

[0099] The analysis unit 117 analyzes the analysis data for each group in S35. As an example, the analysis unit 117 calculates a score for each access path based on the conversion in the analysis data for group A.

[0100] 23 is a diagram showing a second example of the data structure of the analysis result according to the second embodiment. The magnitude of the score indicates the degree of conversion of the access path. This diagram shows that when delivering an advertisement to employees of group A, it is most effective to deliver the advertisement in a form that leads from medium a to medium b.

[0101] [effect] According to the second embodiment, the same effects as those of the first embodiment are obtained.

[0102] Furthermore, when there is no change in the IP address within the measurement period in multiple measurement logs, the control unit 11 of the information processing device 10 stores at least information associating the IP address with the population information as one record. This makes it possible to reduce the amount of data stored in the determination table 1620.

[0103] Furthermore, when there is a change in IP address within a measurement period in multiple measurement logs, the control unit 11 of the information processing device 10 stores, as one record for each change, information that at least associates the IP address included in the measurement log in which the change occurred with the population information. This makes it possible to reduce the amount of data stored in the determination table 1620.

[0104] According to the second embodiment, the correspondence between the group and the global IP address can be easily specified, which facilitates the analysis of the access to the advertiser's website on a group basis. Also, according to the second embodiment, the accuracy of the correspondence between the group and the global IP address is improved, which improves the accuracy of the analysis of the access to the advertiser's website on a group basis.

[0105] Although the measurement log DB 160, the first DB 161, the second DB 162, and the third DB 163 are described as being included in the storage unit 16 of the information processing device 10, they may be included in an external device accessible by the information processing device 10.

[0106] <Embodiment 3> Next, a third embodiment of the present disclosure will be described. Fig. 24 is a block diagram showing a schematic configuration of a system 1a according to the third embodiment. The system 1a has a configuration basically similar to that of the system 1. However, the system 1a differs from the system 1 in that the system 1a includes an information processing device 10a instead of the information processing device 10, a third user terminal 60-C, and a second user terminal 30-C.

[0107] Group C is a group similar to group A. More specifically, group C is a group whose similarity to group A is equal to or greater than a predetermined threshold. The similarity of groups may be determined based on attribute information of the groups, such as the group's industry, customer demographics, whether it is profitable or unprofitable, share, and organizational structure.

[0108] The third user terminal 60-C is an image forming device such as a multifunction peripheral, a wireless LAN router, a smart speaker, or the like, installed in group C. The third user terminal 60-C is a terminal to which a unique ID is set, but unlike the first user terminal 20, it does not have a function to distribute advertisements. As an example, the third user terminal 60-C is a multifunction peripheral without a signage.

[0109] The second user terminal 30-C is also referred to as a fourth user terminal. The second user terminal 30-C is a second user terminal 30 used by a user belonging to group C. A unique ID is not set for the second user terminal 30-C.

[0110] The information processing device 10a differs from the information processing device 10 in that the information processing device 10a includes a control unit 11a instead of the control unit 11.

[0111] 25 is a diagram showing an example of a functional configuration of a control unit 11a according to embodiment 3. The control unit 11a includes a third acquisition unit 118 and a comparison unit 119 in addition to the configuration of the control unit 11.

[0112] The third acquisition unit 118 receives and acquires a delivery log from the first user terminal 20 via the communication unit 15. The delivery log is also referred to as a third log. The delivery log is a log related to the delivery of advertisement data to the first user terminal 20, and includes information related to the delivery date and time and the delivery content.

[0113] When the delivery content corresponding to the delivery log is related to a predetermined group, the comparison unit 119 compares the delivery date and time with the access date and time included in the site log. The predetermined group may be advertisers. When the comparison result satisfies a predetermined condition, the comparison unit 119 determines that the delivery is effective. For example, the predetermined condition may be that the delivery date and time is before the access date and time. In addition to the above condition, the predetermined condition may include at least one of the following: the period from the delivery date and time to the access date and time is within a predetermined period, and there has been a conversion. This makes it possible to easily measure the effectiveness of the ad delivery based on the relationship between the ad delivery and the access.

[0114] Furthermore, the comparison unit 119 compares the log information of the site log when the second user terminal 30-A of group A accesses the advertiser's website with the log information of the site log when the second user terminal 30-C of group C accesses the advertiser's website. This makes it possible to easily measure the effectiveness of advertisement delivery based on the presence or absence of advertisement delivery. The site log when the second user terminal 30-C accesses the advertiser's website is also referred to as a fourth log. The step in which the second acquisition unit 115 acquires the fourth log is also referred to as a fourth acquisition step.

[0115] The comparison unit 119 then transmits various comparison results to the advertiser side device 50. This allows the advertiser to be provided with feedback on the effectiveness of advertisement distribution.

[0116] 26 is a flowchart showing a flow of a comparison process by the control unit 11a according to the third embodiment. First, the control unit 11a repeats the processes shown in S40 to S46 for each group. In S40, the third acquisition unit 118 collects, from the log collection server 40, a site log when the second user terminal 30 accesses the content of the advertiser.

[0117] Next, the comparison unit 119 judges whether or not the first user terminal 20 to which the advertisement is to be delivered is installed in the location of the group to which the second user terminal 30 belongs (S41). Specifically, the comparison unit 119 identifies the group using the second DB 162 based on the IP address and access date and time of the site log. The comparison unit 119 then searches the first DB 161 using the group information as a key, and judges that the first user terminal 20 is installed if a corresponding unique ID is found.

[0118] If the first user terminal 20 is not installed in the place of the group (NO in S41), the comparison unit 119 advances the process to S46. On the other hand, if the first user terminal 20 is installed in the place of the group (YES in S41), the comparison unit 119 causes the third acquisition unit 118 to acquire a delivery log from the first user terminal 20 (S42: third acquisition step).

[0119] Next, the comparison unit 119 judges whether the distribution content included in the advertisement data is related to the content of the advertiser's website (S43). Specifically, the comparison unit 119 makes the above judgment based on whether the degree of association based on the attribute information of the distribution content and the attribute information of the content of the advertiser's website is equal to or greater than a predetermined value. If the distribution content and the content of the advertiser's website are not related to each other (NO in S43), the control unit 11a advances the process to S46.

[0120] On the other hand, if the delivery content and the content of the advertiser's website are related (YES in S43), the comparison unit 119 judges whether the access date and time of the site log is later than the delivery date and time of the delivery log (S44: judgment step). If the access date and time is not later than the delivery date and time of the delivery log (NO in S44), the control unit 11a advances the process to S46.

[0121] On the other hand, if the access date and time is later than the delivery date and time of the delivery log (YES in S44), the comparison unit 119 turns on the delivery effect flag (S45).

[0122] Then, in S46, the comparison unit 119 generates measurement data.

[0123] 27 is a diagram showing an example of a data structure of measurement data according to the third embodiment. The comparison unit 119 calculates, as the measurement data, the values ​​of the index indicating the delivery effect based on the log information separately for before and after the delivery. The comparison unit 119 also includes the rate of change of the index before and after the delivery in the measurement data.

[0124] In S47, the comparison unit 119 compares the measurement data of similar companies based on whether the first user terminal 20 is installed (comparison step). For example, the comparison unit 119 compares the measurement data of group A in which the first user terminal 20 is installed with the measurement data of group C in which the first user terminal 20 is not installed. Then, the comparison unit 119 outputs the comparison result to the advertiser side device 50 (output step).

[0125] [effect] According to the third embodiment, the same effects as those of the first and second embodiments are obtained.

[0126] In addition, the control unit 11a of the information processing device 10a determines that the delivery is effective when the delivered content corresponding to the delivery log is related to the content of the advertiser's website and was accessed after delivery. This makes it easy to measure the effectiveness of the ad delivery based on the relationship between the ad delivery and the access.

[0127] Furthermore, the control unit 11a of the information processing device 10a compares the log information depending on whether or not an advertisement is delivered, which makes it possible to easily measure the effectiveness of the advertisement delivery based on the presence or absence of the advertisement delivery.

[0128] <Other embodiments> In the first to third embodiments, the information processing devices 10 and 10a are described as a single device, but some or all of the components of the information processing devices 10 and 10a may be realized by a plurality of information processing devices, circuits, etc. In this case, the plurality of information processing devices, circuits, etc. may be centrally arranged or distributed. For example, the information processing devices, circuits, etc. may be realized as a client-server system, a cloud computing system, etc., in a form in which each is connected via a communication network. In addition, the functions of the information processing devices 10 and 10a may be provided in a SaaS (Software as a Service) format.

[0129] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above. Various modifications that can be understood by a person skilled in the art can be made to the configuration and details of the present disclosure within the scope of the invention.

[0130] For example, in the second and third embodiments, the first user terminal 20 is a multifunction peripheral with a signage, but is not limited to this. As an example, the first user terminal 20 may be another image forming device with an external signage, a wireless LAN router, a smart speaker, or another communication device. As another example, the first user terminal 20 may be a terminal having a communication function integrated with the signage. [Explanation of symbols]

[0131] 1,1a System 10, 10a Information processing device 11 Control section 12 processors 13 ROM 14 RAM 15 Communications Department 16 Memory section 17 Input section 18 Display 20 First user terminal 21 Control section 22 processors 23 ROM 24 RAM 25 Communications Department 26 Memory section 27 Input section 28 Display section 29 Output section 30 Second user terminal 31 Control Unit 32 processors 33 ROM 34 RAM 35 Communications Department 36 Memory section 37 Input section 38 Display section 40 Log Collection Server 50 Advertiser's device 60 Third User Terminal 111 First acquisition part 112 Search Department 113 Estimation Department 114 Registration Department 115 Second acquisition part 116 Generation part 117 Analysis Department 118 Third Acquisition Department 119 Comparison Section 160 Measurement log DB 161 The first DB 162 The second database 163 The third DB 401 Site Log DB 1620 Definitive Table 1621 Estimation Table NW Network

Claims

1. An information processing system including a control unit, The control unit a first acquisition step of acquiring a plurality of first logs including at least a unique ID, an IP address, and a date and time of the first user terminal; a search step of searching for group information from a first database that stores unique IDs associated with group information, using the unique ID of the first user terminal as a key; an estimation step of estimating an IP address corresponding to the searched group information during a target period based on a regularity of the IP address fluctuation when there is a change in IP address within a predetermined period in the acquired plurality of first logs; An information processing system that executes the above.

2. The first user terminal is a terminal installed in a home, and the group information is information that can identify the home. The information processing system according to claim 1 .

3. In the estimation step, if there is no change in an IP address within a predetermined period in the acquired plurality of first logs, the control unit estimates the IP address as an IP address corresponding to the searched group information. The information processing system according to claim 1 .

4. In the estimation step, when an IP address change occurs within a predetermined period in the acquired plurality of first logs, the control unit estimates an IP address included in a first log in which an IP address change has occurred, among the first logs within the predetermined period, as an IP address corresponding to the searched group information. The information processing system according to claim 1 .

5. In the estimation step, the control unit determines whether there is a pattern to the fluctuations based on at least one of the number of times the same IP address appears within the predetermined period, the period during which the IP address appears, and the fluctuation range of the IP address. The information processing system according to claim 1 .

6. The control unit a second acquisition step of acquiring a second log including at least an IP address when a second user terminal, to which a unique ID is not set, accesses a website, log information related to web browsing, and an access date and time; a generating step of identifying, from a second database in which the estimated IP address and the retrieved group information are associated with each other, group information associated with the IP address included in the second log, the group information corresponding to the access date and time, and generating, as analysis data, information in which log information related to the web browsing, the access date and time, and the identified group information are associated with each other; The information processing system according to claim 1 , wherein the information processing system executes the following:

7. the log information regarding web browsing includes information indicating a referrer and a conversion; The control unit, for each group, Based on the log information associated with the group information of the group in the analysis data, the level of conversion when the advertisement is delivered to the group for each medium or access route is estimated. The information processing system according to claim 6.

8. The control unit a second acquisition step of acquiring a second log including an IP address when a second user terminal accesses a website, log information related to web browsing, and an access date and time; a third acquisition step of acquiring a third log related to advertisement distribution, the third log including information on a distribution date and time and distribution content, when the first user terminal has a function of distributing advertisements; a determining step of comparing the distribution date and time with the access date and time included in the second log when the distribution content corresponding to the third log is related to the website, and determining that the distribution is effective when the comparison result satisfies a predetermined condition; Run The second user terminal is a terminal used by a user who belongs to the group to which the first user terminal belongs, and is a terminal to which no unique ID is set. The information processing system according to claim 1 .

9. The control unit a second acquisition step of acquiring a second log including an IP address when a second user terminal accesses a website, log information related to web browsing, and an access date and time; a fourth acquisition step of acquiring a fourth log including an IP address when a fourth user terminal accesses a website, log information related to web browsing, and an access date and time; a comparison step of comparing log information included in the second log with log information included in the fourth log; An output step that outputs the comparison results Run the second user terminal is a terminal used by a user who belongs to a group to which the first user terminal belongs, and is a terminal to which no unique ID is set; The fourth user terminal is a terminal used by a user who belongs to a group similar to the group to which the first user terminal belongs, and is a terminal to which no unique ID is set. The information processing system according to claim 1 .

10. An information processing method executed in a computer including a control unit, The control unit a first acquisition step of acquiring a plurality of first logs including at least a unique ID, an IP address, and a date and time of the first user terminal; a search step of searching for group information from a first database that stores unique IDs associated with group information, using the unique ID of the first user terminal as a key; an estimation step of estimating an IP address corresponding to the searched group information during a target period based on a regularity of the IP address fluctuation when there is a change in IP address within a predetermined period in the acquired plurality of first logs; An information processing method that performs the above.

11. On the computer, a first acquisition step of acquiring a plurality of first logs including at least a unique ID, an IP address, and a date and time of the first user terminal; a search step of searching for group information from a first database that stores unique IDs associated with group information, using the unique ID of the first user terminal as a key; an estimation step of estimating an IP address corresponding to the searched group information during a target period based on a regularity of the IP address fluctuation when there is a change in IP address within a predetermined period in the acquired plurality of first logs; A program to execute.

Images