Data control support system, data control system, and data control support method

Abstract

To support appropriate data transmission / reception control between systems even when criteria for data transmission / reception control are different between the systems.SOLUTION: A data control support system includes: a storage device for storing one or more evaluation categories for data; and a control apparatus configured to include a plurality of information processing devices and acquire evaluation rules from each of a plurality of data transmission / reception control systems, each of which stores evaluation rules for determining control contents for data transmitted / received between the plurality of information processing devices, generate new evaluation rules based on evaluation categories including each of the acquired evaluation rules based on each of the acquired evaluation rules and the evaluation categories, and transmit the generated new evaluation rules to each of the data transmission / reception control systems.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a data control support system, a data control system, and a data control support method. [Background technology]

[0002] In recent years, business services that utilize various types of data, such as industrial data or personal data, and link multiple fields, industries, or companies have been provided. However, when providing such business services that span multiple groups, data is shared between groups that have a certain relationship, such as an alliance or partnership, and so data linkage platforms (systems) that control data transmission and reception by setting different policies (policies regarding data handling) between groups for the services and applications used in the services may be constructed for each group.

[0003] Even when such a data sharing platform is established, it is desirable for data providers and users to be able to exchange data safely in accordance with their own business policies. For example, it is necessary that data users use data in accordance with the data usage purpose or terms of use, that data providers send reliable data, and that the reliability of the companies and the data be maintained.

[0004] In this regard, as a technology for supporting data transmission and reception control, for example, Patent Document 1 (JP 2017-167747 A) describes a means for matching device-side metadata for multiple devices with metadata on the data user side.

[0005] In addition, Patent Document 2 (JP 2018-142284 A) describes a technology for controlling access by calculating a risk index based on the risk factors of the data itself, the attributes of the data user, and the relationship between the data provider and the data user. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2017-167747 A [Patent Document 2] JP 2018-142284 A Summary of the Invention [Problem to be solved by the invention]

[0007] If these technologies were used to control the distribution of data, it would be possible to check the data's metadata, match data users with data providers, and control the distribution of data while taking into account the risks associated with the data.

[0008] However, these technologies do not take into account cases where the data users and data providers belong to different data sharing platforms. In particular, when groups work in different fields and the data evaluation methods (policies) differ for each data sharing platform, it is difficult to achieve appropriate data sharing in accordance with each policy.

[0009] The present invention has been made in consideration of the above background, and its object is to provide a data control support system, a data control system, and a data control support method that are capable of supporting appropriate data transmission and reception control between systems even when the criteria for data transmission and reception control differ between the systems. [Means for solving the problem]

[0010] One of the present inventions for solving the above problems is a data control support system comprising a storage device storing one or more evaluation categories for data, and a control device which executes an evaluation rule acquisition process for acquiring evaluation rules from each of a plurality of data transmission / reception control systems each of which includes a plurality of information processing devices and stores evaluation rules for determining control content for data transmitted and received between the plurality of information processing devices, an evaluation rule analysis and generation process for generating new evaluation rules based on the evaluation categories that include each of the acquired evaluation rules based on each of the acquired evaluation rules and the evaluation categories, and an evaluation rule transmission process for transmitting the new evaluation rules generated to each of the data transmission / reception control systems. Effect of the Invention

[0011] According to the present invention, even if the criteria for controlling data transmission and reception differ between systems, it is possible to support appropriate data transmission and reception control between those systems. Configurations and effects other than those described above will become apparent from the following description of the embodiments. [Brief description of the drawings]

[0012] [Figure 1] 1 is a diagram illustrating an example of a configuration of a data control system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a diagram illustrating an example of hardware included in a data provider computer and functions of the data provider computer. [Diagram 3] FIG. 13 is a diagram showing an example of data items contained in user information among auxiliary information. [Figure 4] FIG. 13 is a diagram showing an example of data items contained in system information among auxiliary information. [Diagram 5] FIG. 13 is a diagram showing an example of data items included in distributed data information among auxiliary information. [Figure 6] FIG. 2 is a diagram illustrating an example of hardware included in a data user computer and functions possessed by the data user computer. [Figure 7] 2 is a diagram illustrating an example of hardware included in a data distribution control computer and functions of the data distribution control computer. FIG. [Figure 8] FIG. 13 is a diagram illustrating an example of a trust evaluation table. [Figure 9] FIG. 13 is a diagram illustrating an example of a trust evaluation table. [Figure 10] FIG. 13 illustrates an example of a policy table. [Figure 11] 2 is a diagram illustrating an example of hardware included in a common trust management computer and functions of the common trust management computer. FIG. [Figure 12] FIG. 13 is a diagram illustrating an example of a category table. [Figure 13] 1 is a sequence diagram illustrating an example of processing (hereinafter, referred to as transmission / reception control processing) related to control of transmission and reception of target data performed within the same data linkage platform and between different data linkage platforms, which is performed in the data control system. [Figure 14] FIG. 13 is a diagram showing an example of a trust evaluation table editing screen. [Figure 15] FIG. 11 is a flow diagram illustrating details of a trust evaluation table update process. [Figure 16] FIG. 11 is a flow diagram showing an example of a process for setting a trust evaluation value and a correspondence criterion. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] (System Configuration) 1 is a diagram showing an example of the configuration of a data control system 1 according to this embodiment. The data control system 1 includes a common trust management computer 10 and a plurality of data linkage platforms 20 related to each field, which are used by companies or the like performing business in each field.

[0014] The data linkage platform 20 is an information processing system (data transmission / reception control system) for enabling companies in the corresponding fields to link and use data (hereinafter, referred to as target data) used by each company. The data linkage platform 20 is managed, for example, by a system administrator in each field.

[0015] Specifically, the data link infrastructure 20 includes one or more data provider computers 30, one or more data user computers 40, and a data distribution control computer 50.

[0016] The data provider computer 30 is an information processing device managed by a company (data provider) that generated the target data. The data provider computer 30 acquires the target data from a sensor system 60 and a business system 70. The data provider computer 30 also acquires data related to the target data (hereinafter referred to as auxiliary information; details will be described later) from the sensor system 60 and the business system 70.

[0017] The sensor system 60 is, for example, an IoT (Internet of Things) system, which manages measurement data of a predetermined device or equipment, and transmits the measurement data and related data as target data and attached information, respectively, to the data provider computer 30. The business system 70 is, for example, a business management system such as ERP (Enterprise Resource Planning), and transmits information on the content of business to the data provider computer 30 as target data or attached information.

[0018] The data user computer 40 is an information processing device managed by a company (data user) that desires the target data. The data user computer 40 transmits a predetermined data provision request to the data distribution control computer 50, and receives the target data from the data provider computer 30 based on the data transmission and reception control by the data distribution control computer 50.

[0019] The data distribution control computer 50 controls the transmission and reception of target data between the data provider computers 30 and the data user computers 40 in the data link infrastructure 20 to which the data distribution control computer 50 belongs.

[0020] Specifically, when the data distribution control computer 50 receives a data provision request, it calculates an evaluation value (trust evaluation value) indicating the degree of reliability (trust evaluation) of the target data based on an evaluation rule (trust evaluation table 400 described later) for determining the control content for the target data transmitted and received between the data provider computer 30 and the data user computer 40. Furthermore, the data distribution control computer 50 performs control on the target data (for example, whether or not to transmit and receive the target data) according to the trust evaluation value. The evaluation rule is associated with a predetermined policy (described later) held by each of the data user or data provider.

[0021] Here, the evaluation category (evaluation target, evaluation item) in the evaluation rule defined by the trust evaluation table 400 differs depending on the data linkage platform 20 (i.e., business field). Therefore, the common trust management computer 10 collects and analyzes the trust evaluation table 400 of each data linkage platform 20, thereby standardizing the evaluation category of each trust evaluation table 400 so that target data can be transmitted and received between the data linkage platforms 20, and generates (updates) a new trust evaluation table 400 that includes each trust evaluation table 400. Each updated trust evaluation table 400 is transmitted to the data distribution control computer 50 of each data linkage platform 20.

[0022] The data integration infrastructure 20 and the common trust management computer 10, each information processing device within the data integration infrastructure 20, and each information processing device within the common trust management computer 10 are each communicatively connected via a wired or wireless communication network 5, such as the Internet, a LAN (Local Area Network), a WAN, or a dedicated line. Next, each information processing device in the data control system 1 will be described in detail.

[0023] (Data provider computer) FIG. 2 is a diagram showing an example of the hardware included in the data provider computer 30 and the functions that the data provider computer 30 has.

[0024] The data provider computer 30 includes a processor 31 (control device) such as a CPU (Central Processing Unit), a memory 32 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 33 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 34 such as a keyboard, a mouse, a touch panel, or a display, and a network I / F 35 consisting of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, a serial communication module, or the like.

[0025] The data provider computer 30 stores each data of the target data 37 and the additional information 38.

[0026] The auxiliary information 38 is data related to the target data 37, and is data necessary for calculating an evaluation value (trust evaluation value) of the reliability of the target data 37. The auxiliary information 38 includes an evaluation target and one or more evaluation items for the evaluation target.

[0027] In this embodiment, with regard to the subject of evaluation, the auxiliary information 38 includes user information 100 which is data regarding the evaluation of the management entity of the target data 37 (e.g., the owner, rights holder, or administrator; hereinafter referred to as the target user), system information 200 which is data regarding the evaluation of the sensor system 60 or business system 70 (hereinafter referred to as the target system) that generated (manages) the target data 37, and circulation data information 300 which is data regarding the evaluation of the attributes of the target data 37 (hereinafter referred to as data attributes).

[0028] The data provider computer 30 also stores a data communication program 36 .

[0029] The data communication program 36 acquires target data 37 from the sensor system 60 and the business system 70. In addition, the data communication program 36 transmits the target data 37 to the data user computer 40.

[0030] (User information) 3 is a diagram showing an example of data items included in user information 100 of the auxiliary information 38. The user information 100 has data items of user identifier 101 in which an identifier of each user (target user) to be evaluated is set, user name 102 in which a name of each user is set, attribute 103 in which an attribute of each user is set, and evaluation item 104 in which an evaluation item related to each user is set.

[0031] Specifically, the evaluation items 104 have the following data items: transparency 105, in which the content of evaluation items (transparency evaluation items) related to the transparency of each user's business are set; quality 106, in which the content of evaluation items (quality evaluation items) related to the quality of each user's business are set; certainty 107, in which the content of evaluation items (certainty evaluation items) related to the certainty of each user's business are set; safety 108, in which the content of evaluation items (safety evaluation items) related to the safety of each user's business are set; responsibility 109, in which the content of evaluation items (responsibility evaluation items) related to the responsibility content of each user are set; and honesty 110, in which the content of evaluation items (honesty evaluation items) related to each user's honesty are set.

[0032] (System Information) 4 is a diagram showing an example of data items included in system information 200 of the auxiliary information 38. The system information 200 has data items of a system identifier 201 in which an identifier of each system to be evaluated (target system) is set, a system name 202 in which a name of each system is set, a serial number 203 in which a number of each system is set, and evaluation items 204 in which evaluation items related to each system are set.

[0033] Specifically, the evaluation item 204 has the following data items: transparency 205, in which the content of the transparency evaluation item of each system is set; quality 206, in which the content of the quality evaluation item of each system is set; certainty 207, in which the content of the certainty evaluation item of each system is set; and safety 208, in which the content of the safety evaluation item of each system is set.

[0034] (Distribution Data Information) 5 is a diagram showing an example of data items included in the distributed data information 300 of the auxiliary information 38. The distributed data information 300 has data items including a system identifier 301 in which an identifier of each piece of target data related to a data attribute to be evaluated is set, a data name 302 in which a name of each piece of target data is set, and an evaluation item 303 in which an evaluation item related to each data attribute is set.

[0035] Specifically, the evaluation item 303 has the data items of transparency 304, in which the content of the transparency evaluation item for each data attribute is set, quality 305, in which the content of the quality evaluation item for each data attribute is set, and certainty 306, in which the content of the certainty evaluation item for each data attribute is set.

[0036] (Data User Computer) Next, FIG. 6 is a diagram showing an example of the hardware included in the data user computer 40 and the functions that the data user computer 40 has.

[0037] The data user computer 40 comprises a processor 41 (control device) such as a CPU (Central Processing Unit), a memory 42 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 43 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 44 such as a keyboard, a mouse, a touch panel, or a display, and a network I / F 45 composed of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, or a serial communication module, etc.

[0038] The data user computer 40 stores a data communication program 46 and an application program 47 .

[0039] The data communication program 46 receives the target data 37 from the data provider computer 30 .

[0040] The application program 47 performs a predetermined process based on the target data 37 received from the data user computer 40 .

[0041] (Data Distribution Control Computer) Next, FIG. 7 is a diagram showing an example of the hardware included in the data distribution control computer 50 and the functions that the data distribution control computer 50 has.

[0042] The data distribution control computer 50 includes a processor 51 (control device) such as a CPU (Central Processing Unit), a memory 52 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 53 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 54 such as a keyboard, a mouse, a touch panel, or a display, and a network I / F 55 consisting of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, a serial communication module, or the like.

[0043] The data distribution control computer 50 stores a trust evaluation table 400 and a policy table 500 .

[0044] The trust evaluation table 400 is data in which a trust evaluation target, an evaluation item related to the evaluation target, a trust evaluation value corresponding to the evaluation target and evaluation criteria, and a policy corresponding to the trust evaluation value are associated with each other.

[0045] The policy table 500 is data that stores policies that are standards related to trust evaluation values. Specifically, the policies are data of judgment standards required for determining the control content (e.g., whether or not to transmit the target data) of the target data 37 between the data provider computer 30 and the data user computer 40 using the trust evaluation value. The policies include, for example, a provision policy that is a standard based on the operation of the data provider, a user policy that is a standard based on the operation of the data user, and a management policy that is a standard based on the operation of the system administrator in each field. Hereinafter, in this embodiment, it is assumed that the policy table 500 stores user policies, but this is not particularly limited.

[0046] (Trust Evaluation Table) 8 and 9 are diagrams showing an example of the trust evaluation table 400. The trust evaluation table 400 has data items including an attribute 401 in which an evaluation target (e.g., a target system, a target user, a data attribute) for the target data is set, a classification 402 in which an evaluation item (e.g., a transparency evaluation item, a responsibility evaluation item) for the evaluation target is set, a sub-classification 403 in which a subitem of the evaluation item (e.g., traceability, compliance with regulations, solvency) is set, a level 404 in which a trust evaluation value corresponding to the evaluation specified by the attribute 401, the classification 402, and the sub-classification 403 is set, and a criterion 405 in which the contents of the policy corresponding to the trust evaluation value indicated by the level 404 (hereinafter, referred to as a correspondence criterion) are set.

[0047] Concerning the level 404 and the criterion 405, specifically, when the trust evaluation level of certain target data is the trust evaluation level indicated by the level 404, this corresponds to the policy (of the data user) being the policy indicated by the criterion 405. In the example of Figure 8, if a certain target data is manually entered data (without evidence), the trust evaluation level for the items "transparency" and "traceability" that apply to the data attributes of that target data is "1."

[0048] The contents of the trust evaluation table 400 are set in advance based on, for example, social standards (international standards, group standards, social implicit rules, etc.) (however, as described later, they are updated by the common trust management computer 10). The trust evaluation table 400 is set in advance by, for example, a data provider, a data user, or an administrator in each field. In addition, the trust evaluation table 400 may be updated by the data user at any time.

[0049] Although the contents of the trust evaluation table 400 differ depending on each field, the data items are within the range of evaluation categories (evaluation targets and evaluation items) defined by the category table 600, as described below.

[0050] (Policy Table) 10 is a diagram showing an example of a policy table 500. The policy table 500 has data items including an attribute 501 in which a target of evaluation in trust evaluation (e.g., target data, target user, data attribute) is set, a classification 502 in which evaluation items for the target of evaluation (e.g., transparency evaluation items, responsibility evaluation items) are set, a sub-classification 503 in which sub-items of the evaluation items (e.g., traceability, compliance with regulations, solvency) are set, and a policy 504 in which a trust evaluation value related to the evaluation category related to the attribute 501, the classification 502, and the sub-classification 503, which is a criterion for determining transmission / reception control of the target data (hereinafter, referred to as a trust evaluation value threshold value), is set.

[0051] In this embodiment, the trust evaluation value threshold is the minimum value (threshold) of the trust evaluation value required to transmit target data from the data provider computer 30 to the data user computer 40. That is, in the example of the same figure, if the trust evaluation values ​​related to "data (attribute)", "transparency", and "traceability" of the target data are "2" or more, the data distribution control computer 50 controls to transmit the target data from the data provider computer 30 to the data user computer 40.

[0052] Next, as shown in FIG. 7, the data distribution control computer 50 stores a trust evaluation program 56, a distribution control program 57, and a policy management program 58.

[0053] When a data provision request for target data is received from the data user computer 40, the trust evaluation program 56 calculates a trust evaluation value of the target data based on the trust evaluation table 400 and the attached information .

[0054] The distribution control program 57 controls transmission and reception of target data from the data provider computer 30 to the data user computer 40 based on the trust evaluation value calculated by the trust evaluation program 56 and the policy table 500. For example, the distribution control program 57 transmits the target data from the data provider computer 30 to the data user computer 40 when the trust evaluation value related to a certain evaluation category calculated by the trust evaluation program 56 exceeds the trust evaluation threshold.

[0055] The trust evaluation program 56 may be included in the distribution control program 57 .

[0056] The policy management program 58 collects and manages the policy table 500 held by each data user computer 40. The policy management program 58 may also receive an input of the policy table 500 from a data user, a data provider, or an administrator.

[0057] (Common Trust Management Computer) Next, FIG. 11 is a diagram showing an example of the hardware included in the common trust management computer 10 and the functions that the common trust management computer 10 has.

[0058] The common trust management computer 10 includes a processor 11 (control device) such as a CPU (Central Processing Unit), a memory 12 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 13 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 14 such as a keyboard, a mouse, a touch panel, or a display, and a network I / F 15 composed of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, or a serial communication module, etc.

[0059] The common trust management computer 10 stores a category table 600 and a trust evaluation table 400 acquired from each data distribution control computer 50.

[0060] (Category table) 12 is a diagram showing an example of a category table 600. The category table 600 comprehensively defines the evaluation targets and evaluation items (evaluation categories) required for performing trust evaluation. In other words, the category table 600 is definition information of evaluation categories that includes all evaluation categories (including all business fields) held by the trust evaluation table 400 of each data linkage platform 20.

[0061] Specifically, the category table 600 has data items of a classification 601 in which the subject of evaluation (e.g., a target user, a target system, and data attributes) is set, and an evaluation item 602 in which evaluation items related to the subject of evaluation are set.

[0062] Specifically, the evaluation item 602 has the following data items: transparency 603, in which a transparency evaluation item is set, quality 604, in which a quality evaluation item is set, certainty 605, in which a certainty evaluation item is set, safety 606, in which a safety evaluation item is set, responsibility 607, in which a responsibility evaluation item is set, and honesty 608, in which an honesty evaluation item is set.

[0063] In addition, only evaluation items for the target user and the target system are set in safety 606. In responsibility 607 and sincerity 608, only evaluation items for the target user are set.

[0064] The category table 600 is created in advance, for example, based on input by an administrator.

[0065] The functions of the functional units of each information processing device in the data control system 1 described above are realized by the processor reading out a program from a memory or a storage device. Each program can be recorded on a portable or fixed recording medium and distributed, for example. All or a part of these programs may be realized using virtual information processing resources provided using a virtualization technology or a process space separation technology, such as a virtual server provided by a cloud system. All or a part of these programs may be realized by a service provided by a cloud system via an API (Application Programming Interface), for example. Next, the processing performed in the data control system 1 will be described.

[0066] FIG. 13 is a sequence diagram illustrating an example of processing related to control of transmission and reception of target data performed in the same data linkage platform 20 and between different data linkage platforms 20, which is performed in the data control system 1 (hereinafter referred to as transmission and reception control processing).

[0067] First, in the data link infrastructure 20A, the data user computer 40A generates and stores policy information (policy table 500). For example, the data user computer 40A accepts an input of policy information from a data user.

[0068] Thereafter, the data user computer 40A transmits the generated policy table 500 to the data distribution control computer 50A (s1). In addition, the data distribution control computer 50A generates and stores the trust evaluation table 400 (s3).

[0069] (Trust evaluation table editing screen) FIG. 14 is a diagram showing an example of a trust evaluation table editing screen 1400 for receiving input of the trust evaluation table 400, which is displayed in the process of s3.

[0070] The trust evaluation table editing screen 1400 has a category selection field 1401 that accepts selection input of evaluation targets (target system, handling user, data attributes) and evaluation items (transparency evaluation items, quality evaluation items) of the trust evaluation table 400 to be generated, a classification selection field 1402 and a sub-classification selection field 1403 that respectively accept selection of evaluation targets and evaluation items to be edited from the evaluation targets and evaluation items selected in the category selection field 1401, and a policy editing field 1404 that accepts input of trust evaluation levels and response criteria corresponding to the evaluation targets and evaluation items selected in the classification selection field 1402 and the sub-classification selection field 1403.

[0071] In this embodiment, the trust evaluation table editing screen 1400 is displayed on the screen of the data distribution control computer 50, but it may also be displayed on the data provider computer 30 or the data user computer 40, etc. (the data user or administrator may create the trust evaluation table 400).

[0072] 13, when the data distribution control computer 50A receives a request for providing target data held by the data provider computer 30A in the data federation infrastructure 20A from the data user computer 40 in the data federation infrastructure 20A, the data distribution control computer 50A calculates a trust evaluation value of the target data for each evaluation category (for each evaluation target and evaluation item) based on the attached information 38 corresponding to the target data and the trust evaluation table 400. Then, the data distribution control computer 50A causes the data provider computer 30A to transmit the target data accompanied by information on each calculated trust evaluation value to the data user computer 40A (s5).

[0073] At this time, the data distribution control computer 50A controls the transmission and reception of data according to the calculated trust evaluation value. In this embodiment, the data distribution control computer 50A executes the transmission of the target data only when the calculated trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold value indicated by the policy table 500 received at s1.

[0074] By the above-mentioned processes of s1 to s5, transmission and reception of target data between the data provider computer 30A and the data user computer 40A in the same data link infrastructure 20A is controlled.

[0075] Meanwhile, each data distribution control computer 50 (data distribution control computers 50A, B) in the data control system 1 transmits the trust evaluation table 400 it holds to the common trust management computer 10 at a predetermined timing (for example, a predetermined time, a predetermined time interval, or as specified by an administrator) (s11).

[0076] The common trust management computer 10 executes a trust evaluation table update process to generate a new trust evaluation table 400 by integrating each trust evaluation table 400 based on each received trust evaluation table 400 and the category table 600 (s13).

[0077] The common trust management computer 10 transmits the generated trust evaluation table 400 to each data distribution control computer 50 (s15). Each data distribution control computer 50 updates the existing trust evaluation table 400 with the received trust evaluation table 400. The data distribution control computer 50 may receive an input of a selection as to whether or not to perform an update.

[0078] In addition, when the common trust management computer 10 detects a new data integration platform 20 that transmits and receives target data (for example, when it receives specified request information from the new data integration platform 20), it may transmit the trust evaluation table 400 generated in s13 to the data distribution control computer 50 in that data integration platform 20 (s16).

[0079] In addition, the common trust management computer 10 compares the trust evaluation table 400 updated in s13 with the trust evaluation table 400 received in s11 (before the update), and identifies policy information (hereinafter referred to as missing information) that is missing in the trust evaluation table 400 received in s11 (s17).

[0080] Specifically, the common trust management computer 10 extracts information that is not included in the criteria 405 of the trust evaluation table 400 received in s11 from each piece of information in the criteria 405 of the trust evaluation table 400 updated in s13.

[0081] For example, if the policies associated with the evaluation categories of "data", "transparency", and "traceability" in the trust evaluation table 400 updated in s13 are "automatic input (without IoT sensor)" and "automatic input (IoT sensor)", and if the policy associated with the evaluation categories of "data", "transparency", and "traceability" in the trust evaluation table 400 received in s11 is "automatic input", then the missing information is "(without IoT sensor)" and "(with IoT sensor)".

[0082] Then, the common trust management computer 10 transmits a request for collection of the missing information (collection request) to each data provider computer 30 (s19).

[0083] The data provider computer 30 that has received the collection request acquires data on which the missing information is based (for example, sensor measurement data, which is IoT data) (s21). The data provider computer 30 may receive the missing information from the sensor system 60 or the business system 70, or may receive the missing information from a public information processing system such as the Internet.

[0084] Thereafter, when the data distribution control computer 50B in the data federation platform 20B receives a request to provide the target data held by the data provider computer 30A in the data federation platform 20A from the data user computer 40B in the data federation platform 20B, the data distribution control computer 50B calculates a trust evaluation value of the target data for each evaluation category (for each evaluation target and evaluation item) based on the attached information 38 corresponding to the target data and the trust evaluation table 400 updated in s15 (s23).Then, the data distribution control computer 50B causes the target data accompanied by the information of each calculated trust evaluation value to be transmitted from the data provider computer 30A to the data user computer 40B in accordance with the policy (s25).

[0085] At this time, the data distribution control computer 50B controls the transmission and reception of data according to the calculated trust evaluation value. In this embodiment, the data distribution control computer 50B executes the transmission of the target data only when the calculated trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold value indicated by the policy table 500 received at s1.

[0086] By the above-mentioned processes in s11 to s25, the transmission and reception of target data between different data link platforms 20 can be controlled.

[0087] <Trust evaluation table update process> FIG. 15 is a flow diagram illustrating the details of the trust evaluation table update process s13.

[0088] The trust evaluation table analysis and generation program 16 selects one of the evaluation targets (e.g., a target system, a target user, or a data attribute) and compares the evaluation target with multiple trust evaluation tables (here, a first trust evaluation table 400 and a second trust evaluation table 400).

[0089] First, the trust evaluation table analysis and generation program 16 judges whether the evaluation items and evaluation subitems (specifically, the contents of the category 402 and the subcategory 403) of the second trust evaluation table 400 have (match) the evaluation items and evaluation subitems (specifically, the contents of the category 402 and the subcategory 403) of the first trust evaluation table 400 (s131). For example, the trust evaluation table analysis and generation program 16 checks whether the evaluation items are both "transparency" and "responsibility" and the evaluation subitems are both "traceability", "compliance with regulations", and "ability to repay".

[0090] If the evaluation items and evaluation sub-items of the second trust evaluation table 400 have the evaluation items and evaluation sub-items of the first trust evaluation table 400 (s131: YES), the trust evaluation table analysis and generation program 16 executes the processing of s132, and if the evaluation items and evaluation sub-items of the second trust evaluation table 400 do not have all of the evaluation items and evaluation sub-items of the first trust evaluation table 400 (s131: NO), the trust evaluation table analysis and generation program 16 executes the processing of s136.

[0091] In s136, the trust evaluation table analysis and generation program 16 adds the contents of the evaluation items and evaluation sub-items of the first trust evaluation table 400 that are not included in the second trust evaluation table 400 to the second trust evaluation table 400. After that, the trust evaluation table update process s13 ends.

[0092] In s132, the trust evaluation table analyzing and generating program 16 identifies the differences and inclusion relationships of each configuration for each evaluation item and evaluation subitem, and compares the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400 with the combination of the trust evaluation value and the correspondence criterion of the second trust evaluation table 400. That is, the trust evaluation table analyzing and generating program 16 determines whether the combination of the trust evaluation value and the correspondence criterion of the second trust evaluation table 400 corresponds to the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400.

[0093] For example, the trust evaluation table analysis and generation program 16 compares the combination of "Level 1" and "No Manually Inputted Evidence" in the first trust evaluation table 400 with the combination of "Level 2" and "Manually Inputted Evidence" in the second trust evaluation table 400 with the combination of "Level 1" and "No Acquisition from IoT Sensor" and the combination of "Level 2" and "No Acquisition from IoT Sensor" in the classification "Transparency" and sub-classification "Traceability". The trust evaluation table analysis and generation program 16 then determines that "No Manual Input" corresponds to "Automatic Input" and that "Automatic Input" includes "Acquisition from IoT Sensor" and "No Acquisition from IoT Sensor". The trust evaluation table analysis and generation program 16 also determines that the trust evaluation level of "Evidence" is higher than that of "No Evidence" (because "Evidence" has been added), and that "Acquisition from IoT Sensor" is higher than that of "No Acquisition from IoT Sensor" (because "IoT Sensor" has been added). As a result of the above, the trust evaluation table analyzing and generating program 16 judges that the above four combinations do not correspond to each other (do not have the same trust evaluation level and the same correspondence criterion combination).

[0094] If the combination of the trust evaluation value and the correspondence criterion related to the second trust evaluation table 400 corresponds to the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400 (s132: YES), the trust evaluation table analysis and generation program 16 executes the process of s135. If the combination of the trust evaluation value and the correspondence criterion related to the second trust evaluation table 400 corresponds to the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400 (s132: NO), the trust evaluation table analysis and generation program 16 executes the process of s133.

[0095] In s135, the trust evaluation table analyzing and generating program 16 determines that there is no need to change the second trust evaluation table 400, and then the trust evaluation table update processing s13 ends.

[0096] In s133, the trust evaluation table analysis and generation program 16 updates the combinations of trust evaluation values ​​and correspondence criteria related to the first trust evaluation table 400 and the second trust evaluation table 400 for the uncorresponding combinations so that the combinations of trust evaluation values ​​and correspondence criteria related to the second trust evaluation table 400 correspond to the combinations of trust evaluation values ​​and correspondence criteria related to the first trust evaluation table 400 (s134). After that, the trust evaluation table update process s13 ends.

[0097] For example, the trust evaluation table analysis and generation program 16 sets "no manual input evidence" to trust evaluation level 1, "manual input evidence" to trust evaluation level 2, "automatic input (no IoT sensor)" to trust evaluation level 3, and "automatic input (IoT sensor)" to trust evaluation level 4 in the first trust evaluation table 400 and the second trust evaluation table 400. As a result, the first trust evaluation table 400 and the second trust evaluation table 400 are determined to have the same trust evaluation level using a common correspondence criterion (the first trust evaluation table 400 and the second trust evaluation table 400 are substantially integrated).

[0098] The trust evaluation table analyzing and generating program 16 repeats the above-mentioned processes of s131 to s136 for all evaluation targets (for example, target systems, target users, and data attributes).

[0099] In addition, the determination of the correlation (correspondence, inclusion relationship, etc.) between the trust evaluation level and the correspondence criteria and the update of the trust evaluation table 400 described in s132 to s135 may be based on, for example, a judgment (input setting) by an administrator, or may be automatically performed by the trust evaluation table analysis and generation program 16 based on a predetermined algorithm.

[0100] For example, FIG. 16 is a flow diagram showing an example of a process of setting trust evaluation values ​​and correspondence criteria performed by the trust evaluation table analyzing and generating program 16 for the attribute "data", the category "transparency", and the subcategory "traceability".

[0101] The trust evaluation table analysis and generation program 16 judges whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses "automatic input" (s161). If the criteria 405 of the trust evaluation table 400 includes a configuration that uses "automatic input" (s161: YES), the trust evaluation table analysis and generation program 16 executes the process of s162. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses "automatic input" (s161: NO), the trust evaluation table analysis and generation program 16 executes the process of s164.

[0102] In s162, the trust evaluation table analysis and generation program 16 determines whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses an "IoT sensor." If the criteria 405 of the trust evaluation table 400 includes a configuration that uses an "IoT sensor" (s162: YES), the trust evaluation table analysis and generation program 16 executes the process of s163. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses an "IoT sensor" (s162: NO), the trust evaluation table analysis and generation program 16 executes the process of s167.

[0103] In s163, the trust evaluation table analysis and generation program 16 determines whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses "blockchain". If the criteria 405 of the trust evaluation table 400 includes a configuration that uses "blockchain" (s163: YES), the trust evaluation table analysis and generation program 16 executes the process of s168. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses "blockchain" (s163: NO), the trust evaluation table analysis and generation program 16 executes the process of s166.

[0104] In s165, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to “level 5”.

[0105] In s166, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to “level 4”.

[0106] In s167, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to “level 3”.

[0107] In s164, the trust evaluation table analysis and generation program 16 determines whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses "evidence". If the criteria 405 of the trust evaluation table 400 includes a configuration that uses "blockchain" (s164: YES), the trust evaluation table analysis and generation program 16 executes the process of s168. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses "blockchain" (s164: NO), the trust evaluation table analysis and generation program 16 executes the process of s169.

[0108] In s168, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to “level 2”.

[0109] In s169, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to “level 1”.

[0110] In this way, the trust evaluation table analysis and generation program 16 can specify the correspondence between the correspondence criterion and the trust evaluation value by determining whether or not each configuration is included in the criterion 405 of the trust evaluation table 400, and determining each trust evaluation value corresponding to the presence or absence of each configuration. Note that the correspondence between each of the above configurations and each trust evaluation value may be determined, for example, based on a predetermined database in advance, or may be determined by processing (symbol processing, natural language processing, etc.) the data contents of the criterion 405 and the level 404 of the trust evaluation table 400.

[0111] As described above, the common trust management computer 10 (data control support system) of this embodiment acquires a trust evaluation table 400 from each of a plurality of data linkage platforms 20 that store the trust evaluation table 400 for determining the control content for target data transmitted and received between the data provider computer 30 and the data user computer 40, and generates a trust evaluation table 400 based on the category table 600 that includes each of the acquired trust evaluation tables 400 based on each acquired trust evaluation table 400 and the category table 600, and transmits the newly generated trust evaluation table 400 to each of the data linkage platforms 20.

[0112] In other words, the data control support system of this embodiment generates (updates) a new trust evaluation table 400 that incorporates the trust evaluation tables 400 of each data integration platform 20, and each data integration platform 20 can use the generated trust evaluation table 400 to determine the control content for the target data based on common criteria.

[0113] As described above, according to the data control support system of this embodiment, even if the criteria for determining data transmission and reception control differ between systems, it is possible to support appropriate data transmission and reception control between those systems.

[0114] In addition, in this embodiment, the category table 600 includes evaluation items for at least one of the evaluation targets, the target user, the target system, and the data attributes, as evaluation categories related to the reliability of the target data, and the data control support system generates a new trust evaluation table 400 based on the evaluation items for the above evaluation targets.

[0115] As a result, each data linkage platform 20 can objectively and clearly determine the reliability of the target data based on the attributes of people, organizations, systems, objects, or data regarding data distribution, and can perform appropriate data transmission and reception control.

[0116] In addition, in this embodiment, the category table 600 includes at least one of the following evaluation items as evaluation categories related to the reliability of the target data: transparency evaluation item, quality evaluation item, certainty evaluation item, safety evaluation item, responsibility evaluation item, and honesty evaluation item for the evaluation target, and the data control support system generates a new trust evaluation table 400 based on the above evaluation items.

[0117] This allows each data link platform 20 to evaluate the evaluation target from multiple perspectives and objectively with regard to data distribution, and to perform appropriate data transmission and reception control.

[0118] In addition, the data control support system of this embodiment identifies information (policy) necessary for determining the control content for data, which is missing from the trust evaluation table 400 received from the data integration platform 20, from the evaluation rules of the newly generated trust evaluation table 400, and transmits information (missing information) that identifies the identified information to the data integration platform 20.

[0119] This allows the data link platform 20 to collect information regarding policies that is required when using the new trust evaluation table 400 to control transmission and reception of target data.

[0120] Moreover, the data linkage platform 20 in the data control system 1 of this embodiment calculates a trust evaluation value related to the new trust evaluation table 400 based on the received missing information.

[0121] As a result, the data linkage platform 20 can use the new trust evaluation table 400 to appropriately evaluate the target data.

[0122] Moreover, the data linkage platform 20 in the data control system 1 of this embodiment controls the transmission and reception of target data based on the calculated trust evaluation value.

[0123] This allows the data link platform 20 to appropriately control transmission and reception of the target data based on the trust evaluation value.

[0124] Moreover, the data linkage platform 20 in the data control system 1 of this embodiment receives an input of information on the trust evaluation, and stores the input information on the trust evaluation in the trust evaluation table 400.

[0125] This allows the trust evaluation table 400 to be created with appropriate contents.

[0126] The present invention is not limited to the above-described embodiment, and can be implemented using any components without departing from the scope of the present invention. The above-described embodiments and modifications are merely examples, and the present invention is not limited to these contents as long as the features of the invention are not impaired. In addition, although various embodiments and modifications have been described above, the present invention is not limited to these contents. Other aspects conceivable within the scope of the technical idea of ​​the present invention are also included in the scope of the present invention.

[0127] For example, part of the hardware included in each device of this embodiment may be provided in another device.

[0128] Furthermore, each program of each device may be provided in another device, a program may consist of multiple programs, or multiple programs may be integrated into one program.

[0129] Furthermore, the evaluation targets and evaluation items described in this embodiment are merely examples, and are not limited to those described in this embodiment.

[0130] In addition, in this embodiment, the subject of judgment as to whether or not the target data can be distributed and the distribution method is the reliability (trust evaluation) of the target data, but the present invention can also be applied to cases where evaluations of other targets are made (for example, evaluation of the purpose of use of the target data, evaluation of the terms of the contract concluded between a data user and a data provider regarding the target data, evaluation of companies related to the target data, evaluation of the protection level of the target data, evaluation of the risk of data leakage of the target data).

[0131] In addition, in this embodiment, the data user computer 40 collects data based on the missing information, but the data distribution control computer 50 may collect the data and transmit it to the data user computer 40.

[0132] In addition, in this embodiment, the data distribution control computer 50 transmits the target data when the trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold, but it may also be configured to transmit the target data only when the trust evaluation value for a specified evaluation category (e.g., all evaluation categories) exceeds the trust evaluation threshold.

[0133] In addition, in the present embodiment, the data distribution control computer 50 controls the transmission and reception of the target data by determining whether or not the data can be transmitted and received, but other types of control may be performed. For example, the data distribution control computer 50 may control the target data to be subjected to a predetermined processing. [Explanation of symbols]

[0134] 1 Data control system, 10 Common trust management computer, 20 Data linkage platform, 30 Data provider computer, 40 Data user computer, 50 Data distribution control computer

Claims

1. a storage device storing one or more evaluation categories for the data; and an evaluation rule acquisition process for acquiring an evaluation rule from each of a plurality of data transmission / reception control systems, the data transmission / reception control systems being configured to include a plurality of information processing devices and each of which stores an evaluation rule for determining control content for data transmitted / received between the plurality of information processing devices; an evaluation rule analysis and generation process for generating new evaluation rules based on the evaluation categories and including the obtained evaluation rules, based on the evaluation rules and the evaluation categories; a control device that executes an evaluation rule transmission process for transmitting the generated new evaluation rule to each of the data transmission / reception control systems. A data control support system comprising:

2. the storage device includes, as an evaluation category related to the reliability of the data, an evaluation item for at least one evaluation target of an entity that manages the data, a system that manages the data, and an attribute of the data; the control device generates the new evaluation rule based on an evaluation item for the evaluation target in the evaluation rule analysis and generation process. The data control support system according to claim 1 .

3. The storage device includes, as an evaluation category related to the reliability of the data, at least one evaluation item of the transparency, quality, reliability, safety, responsibility, and sincerity of the evaluation target, the control device generates the new evaluation rule based on an evaluation item for the evaluation target in the evaluation rule analysis and generation process. The data control support system according to claim 2 .

4. The control device includes: execute a missing information analysis process to identify information that is missing from the newly generated evaluation rules and is necessary for determining control content for the data, the information being missing from the evaluation rules received from the data transmission / reception control system, and to transmit the identified information to the data transmission / reception control system; The data control support system according to claim 1 .

5. a plurality of data transmission / reception control systems each including a plurality of information processing devices, each storing an evaluation rule for determining control content for data transmitted / received between the plurality of information processing devices; a storage device storing one or more evaluation categories for the data; and an evaluation rule acquisition process for acquiring the evaluation rule from each of the plurality of data transmission / reception control systems; an evaluation rule analysis and generation process for generating new evaluation rules based on the evaluation categories and including the obtained evaluation rules, based on the evaluation rules and the evaluation categories; a control device that executes an evaluation rule transmission process for transmitting the generated new evaluation rule to each of the data transmission / reception control systems. A data control support system comprising: A data control system comprising:

6. the data transmission / reception control system calculates an evaluation value related to the new evaluation rule based on the received information. The data control system according to claim 5.

7. The data transmission / reception control system controls the transmission / reception of the data based on the calculated evaluation value. The data control system according to claim 5.

8. the data transmission / reception control system executes an evaluation rule input process for receiving an input of the evaluation rule and storing the input evaluation rule. The data control system according to claim 5.

9. An information processing device, storing one or more evaluation categories for the data; an evaluation rule acquisition process for acquiring an evaluation rule from each of a plurality of data transmission / reception control systems, the data transmission / reception control systems being configured to include a plurality of information processing devices and each of which stores an evaluation rule for determining control content for data transmitted / received between the plurality of information processing devices; an evaluation rule analysis and generation process for generating new evaluation rules based on the evaluation categories and including the obtained evaluation rules, based on the evaluation rules and the evaluation categories; and executing an evaluation rule transmission process of transmitting the generated new evaluation rule to each of the data transmission / reception control systems. Data control assistance method.

Images