Information management device, information management method and information management system

Abstract

To assist updating of an information system of each area complying with amendment of a law of each area.SOLUTION: In a management server that manages handling of personal information in an information system handling the personal information, a processing unit refers to base model area information stored in a memory when a law of an area is amended, and determines whether or not a law amendment area is a base model area. When the law amendment area is the base model area, the processing unit updates information of the base model area in base model area information and law system requirement information complying with the law after amendment. When the law amendment area is not the base model area, and a requirement corresponding to the law after the amendment is included in the law system requirement information as a requirement of any base model area, the processing unit defines the base model area as a new base model area of the law amendment area, and presents a design change plan for changing a design of the information system of the law amendment area.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a technique for managing personal information across areas. [Background technology]

[0002] Some applications that run on information systems and services provided by information systems acquire, use, and store personal information from users. Businesses that provide information systems that handle personal information must comply with laws and regulations when designing and operating such systems. Laws and regulations are enacted for various areas, such as countries and regions, so businesses that handle personal information in multiple countries must comply with the laws and regulations of each area. In addition, laws and regulations are amended and new laws and regulations are enacted from time to time in each country, so businesses are also required to update their information systems to keep up with the latest laws and regulations.

[0003] Patent Document 1 discloses a method for estimating which departments will be affected by legal amendments. The information processing device of Patent Document 1 acquires information on legal amendments from outside, acquires external information related to the legal amendments from external information present outside as external related information, converts the external related information to generate input information, inputs the legal amendments and the external related information into a learning model trained from a pair of external related information acquired in accordance with past legal amendments and internal company information changed in accordance with the past legal amendments, and obtains information indicating the scope of impact of the legal amendments on the company. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent Publication No. 2021-92957 Summary of the Invention [Problem to be solved by the invention]

[0005] As described above, the method of Patent Document 1 estimates which departments within a company will be affected by amendments to laws and regulations. Therefore, the method of Patent Document 1 is not suitable for updating information systems in each area so that their design and operation correspond to amendments to laws and regulations in each area.

[0006] One objective of the present disclosure is to provide technology that supports updating information systems in each area to comply with amendments to laws and regulations in each area. [Means for solving the problem]

[0007] An information management device according to one aspect of the present invention is an information management device that manages the handling of personal information in an information system that handles personal information, and has a memory and a processor. The memory stores base model area information that records a correspondence between each area, which is a geographical range within which laws and regulations apply, and a base model area that has laws and regulations with common requirements regarding the handling of personal information with the requirements in the laws and regulations of the area, and law system requirement information that records requirements regarding the handling of personal information in an information system to comply with the provisions of the laws and regulations of the base model area, corresponding to each base model area. When the laws and regulations of an area are revised, the processor refers to the base model area information and records the law revision area, which is an area where the laws and regulations have been revised, as the base model area. This is an information management device that determines whether the area in which the statute revision has been made is a base model area, and if the area in which the statute revision has been made is a base model area, updates the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute, and if the area in which the statute revision has been made is not a base model area, determines whether a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, and if a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, sets the base model area as a new base model area that is a new base model area for the statute revision area, and presents a design change proposal to change the design of the information system of the statute revision area based on the requirements of the new base model area. Effect of the Invention

[0008] According to one aspect of the present disclosure, it becomes possible to update the information systems of each area so that their design and operation correspond to changes in the laws and regulations of each area. [Brief description of the drawings]

[0009] [Figure 1] 1 shows an overview of an entire information management system, and is a diagram showing the structural blocks of each server and client that make up the system. [Diagram 2] 13 is a diagram showing a table representing a data structure of base model area information in a memory of the management server. FIG. [Diagram 3] 13 is a diagram showing a table representing the data structure of statute definition information in the memory of the management server. [Figure 4] 13 is a diagram showing a table representing the data structure of statutory system requirement information in the memory of the management server. FIG. [Diagram 5] 13 is a diagram showing a table representing the data structure of change response information stored in a memory of the management server. [Figure 6] 13 is a diagram illustrating a table representing a data structure of base server information in a memory of a management server. FIG. [Figure 7] 11 is a diagram showing a table representing a data structure of personal information management information in a memory of the management server. [Figure 8] 13 is a diagram showing a table representing the data structure of data link management information in a memory of the management server. [Figure 9] 13 is a diagram showing a table representing a data structure of base model area change candidate information in a memory of the management server. FIG. [Figure 10] 13 is a diagram illustrating a table representing the data structure of cloud management information in the memory of the management server. [Figure 11] 13 is a flowchart for explaining a process for updating a law database (DB) in the management server. [Figure 12]13 is a flowchart illustrating a process of presenting a design change proposal and issuing a change instruction in the management server. [Figure 13] FIG. 13 is a conceptual diagram illustrating an example of a graph structure of a data path and an algorithm for calculating the number of modification steps, which is the number of modification processes required to modify a base model area. [Figure 14] FIG. 11 is a sequence diagram for explaining a series of design change sequences from when a change in laws and regulations occurs in a certain area to when a system design change is executed. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

[0011] FIG. 1 is a diagram showing a schematic configuration of an entire information management system according to an embodiment of the present disclosure, and also showing a functional block configuration of each server and each client constituting the system. <Information Management System 1>

[0012] The information management system 1 of the present embodiment shown in FIG. 1 includes a management server 100, base servers 200, 200A, and 200B (hereinafter, sometimes simply referred to as reference numeral 200), a change response server 300, a management client terminal 400, and a base client terminal 500. The management server 100 is a server that is the core of the information management system. The base server 200 is a server that is installed at a base in an area. The area here is a general term for a geographical range such as a country or region to which a certain law applies. The change response server 300 is a server that is installed to correspond to a certain base server 200 when a system design change is required for the base server 200. The management client terminal 400 is a terminal device that allows an administrator of the management server 100 to operate the management server 100. The base client terminal 500 is a terminal device that allows a user of the base server 200 and the corresponding change response server 300 to operate these servers 200 and 300.

[0013] These servers 100, 200, 300 and client terminals 400, 500 are connected to each other so as to be able to communicate with each other via a communication network NW such as the Internet, an intranet, a wireless LAN (Local Area Network), a WAN (Wide Area Network), etc. In addition, the management server 100 and the management client terminal 400 may be a common system, and the base server 200 or the change response server 300 and the base client terminal 500 may be a common system.

[0014] In the information management system 1 of this embodiment, generally, when laws and regulations are changed or enacted in a certain area, the management server 100 presents system design change recommendations to the base client terminals 500 in each area where the system design requirements need to be changed accordingly, and based on the response from the base client terminals 500 to the recommendations, a system design change instruction is sent to the base server 200 and / or the change response server 300, making it possible to change the system design requirements in the base server 200 to adapt to the legal changes in each area, or to set up a new change response server 300. <Management Server 100>

[0015] 1, the information management server 100 includes a processing unit 110, a communication interface (I / F) 120, a memory 130, and a storage area 140. Note that this configuration is an example, and the information management server 100 may include other configurations.

[0016] The processing unit 110 controls the processing for executing various functions of the information management server 100 by executing various programs stored in the memory 130 or the storage area 140, and is composed of a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit). The processing unit 110 operates to realize the processing and functions performed by the information management server 100, as will be described with reference to Figs. 11 to 14, etc.

[0017] I / F120 is a communication interface that enables the information management server 100 to communicate with the other servers 200, 300 and the management client terminal 400 mentioned above via the communication network NW, and is capable of adopting various communication protocols such as TCP / IP (Transmission Control Protocol / Internet Protocol).

[0018] The memory 130 stores programs, input data, intermediate data, and various information for executing various control processes and functions of the processing unit 110, and is composed of, for example, a main memory including a RAM (Random Access Memory) and a ROM (Read Only Memory), and a storage memory such as an HDD (Hard Disk Drive) and an SSD (Solid State Drive).

[0019] The memory 130 serves as a storage section for programs for executing various control processes and functions of the processing section 110, and has a linking section 130A, an information management section 130B, a law management section 130C, and an impact determination section 130D that are realized by the programs.

[0020] The collaboration unit 130A transmits and receives processing commands and information, etc. between the other servers 200, 300 and the management client terminal 400 via the I / F 120, thereby causing the processing unit 110 to execute processing for the management server 100 to operate in collaboration with those other servers 200, 300 and the management client terminal 400.

[0021] The information management unit 130B causes the processing unit 110 to execute various processes performed by the information management server 100, as described later.

[0022] The law management unit 130C receives information on amendments to laws and regulations in each area such as a country or region from the management client terminal 400, and causes the processing unit 110 to execute a process of reflecting the information in various information tables, which will be described later.

[0023] The influence determination unit 130D causes the processing unit 110 to execute a process of determining whether or not the information on the amendment of laws and regulations in each area received by the laws and regulations management unit 130C influences the system design requirements of other areas. The processing operation of the processing unit 110 will be described later with reference to Figs. 11 and 12.

[0024] The memory 130 also has base model area information 130E, statutory definition information 130F, statutory system requirement information 130G, change response information 130H, base server information 130I, personal information management information 130J, data link management information 130K, base model area change candidate information 130L, and cloud management information 130M. Details of these pieces of information will be described below with reference to Figs. 2 to 10.

[0025] 2 shows a table representing the data structure of the base model area information 130E in the memory 130 of the management server 100. As shown in Fig. 2, the base model area information 130E includes information items related to an information identification ID, a base model area, a registration date, an extension flag, an extension number (No.), a type, and a subordinate area. The base model area information 130E mainly records the correspondence between each of the areas, which are the geographical ranges within which the laws and regulations apply, and base model areas that have laws and regulations with requirements common to the requirements regarding the handling of personal information in the laws and regulations of those areas.

[0026] The "base model area" refers to an area such as a country or region that is the basis for legal requirements.

[0027] "Registration date" indicates the date on which the base model area information was registered.

[0028] The "extension flag" indicates that new base model area information has been created by extending existing base model area information when some of the requirements for the base model area information have been changed or added to the base model area information for a certain base model area. If the base model area information has been created by extension, the value "1" is entered as the flag.

[0029] The "extension number" indicates the base model area information on which the extended base model area information is based. In Fig. 2, an example is shown in which extended base model area information b3 is determined based on base model area information b2 with country B as the base model area.

[0030] "Type" indicates the type attribute of the base model area information, for example, if the information is about system requirements, the information "system" is added, and if the information is about legal definitions, the information "def" is added. "Dependent area" indicates an area such as a country or region that complies with the legal requirements of the base model area.

[0031] Fig. 3 shows a table representing the data structure of the law definition information 130F in the memory 130 of the management server 100. As shown in Fig. 3, the law definition information 130F includes information items relating to the area, the type of personal information, the rights of the data subject, sensitive personal information, and the like.

[0032] "Area" indicates the area related to the statute-defined information. "Type of personal information" indicates the type of personal information defined in the statutes, etc. of the area, and includes, for example, name, telephone number, address, account information, etc. "Rights of data subject" indicates the rights held by the data owner defined in the statutes, etc. of the area, and includes, for example, the right to know, the right to delete, the right to data portability, etc. "Sensitive personal information" is information that should be treated as particularly sensitive information among personal information, and includes, for example, biometric information, religious information, etc.

[0033] Fig. 4 shows a table representing the data structure of statutory system requirement information 130G in memory 130 of management server 100. As shown in Fig. 4, statutory system requirement information 130G includes information items related to identification ID, area related to statutory definition information, information related to "who", "what", "how", "to what" and "how much" as system requirements for complying with laws and regulations, direct impact, and registration date. The statutory system requirement information 130G records requirements related to the handling of personal information in an information system for complying with the legal provisions of those base model areas in association with each base model area.

[0034] Among statutory system requirements, "who" indicates the subject of the action to be taken regarding the requirement, for example, the data manager. "What" indicates the target of the action to be taken regarding the requirement, for example, personal information, consent to handling of personal information, records of handling of personal information, origin server of personal information, etc. "How" indicates the content of the action to be taken regarding the requirement, for example, encrypt and store, store domestically, not handle overseas, acquire, store, install domestically, etc. "What to" indicates the subject of the action to be taken regarding the requirement, for example, the data subject who is the data owner. "How long" indicates the period for which the action to be taken regarding the requirement will continue.

[0035] "Direct impact" indicates whether the requirement directly impacts the need for system changes, and if so, the value "1" is entered as a flag. "Registration date" indicates the date on which the legal system requirement information was registered.

[0036] Fig. 5 shows a table representing the data structure of change response information 130H stored in memory 130 of management server 100. As shown in Fig. 5, change response information 130H includes information items relating to identification ID, violation detection search, change response command, and response requirements.

[0037] The "violation detection search" is information on a method for detecting whether the requirements for complying with the revised legal provisions are met or not, and includes the type of information to be searched (personal information, etc.) and the state of the information (storage area, whether encrypted, etc.) as search targets. As an example, the "violation detection search" associated with ID1 in FIG. 5 includes "search, personal information, outside local", which specifies that personal information stored in a local server outside the local area is searched for. The "violation detection search" associated with ID2 includes "search, personal information, origin not local", which specifies that personal information stored in an origin server, not a local server in the local area, is searched for. The "violation detection search" associated with ID3 includes "search, personal information, outside local not linked with local", which specifies that personal information stored in a local server outside the local area and not linked to a local server in the local area is searched for. In addition, the "violation detection search" associated with ID4 includes "search, personal information, not encrypted", which specifies that unencrypted personal information is searched for.

[0038] The "change response command" is a change response command to be executed on the information when the corresponding information is found as a result of the violation detection search, in other words, information that specifies a command to the information system to resolve the violation detected by the method specified in the violation detection search. As an example, the "change response command" associated with ID1 in FIG. 5 includes "set all to change response server, move all to change response server, shift destination to change response server", which specifies setting a change response server for all of the corresponding information, moving all of the corresponding information to the change response server, and changing the destination of the corresponding information to those change response servers. The "change response command" associated with ID2 includes "set origin to change response server, move origin to change response server, shift destination to change response server", which specifies setting a change response server to be the origin of the corresponding information, moving the corresponding information stored in the origin server to the change response server, and changing the destination of the corresponding information to those change response servers. The "change response command" associated with ID3 includes "copy origin to change response server", which specifies copying the corresponding information stored in the origin server to the change response server. Additionally, the "change response instructions" associated with ID4 include "encrypt with AES256," which specifies that the information is to be encrypted in accordance with the AES256 standard.

[0039] The "corresponding requirement" is information indicating the legal system requirement to be searched for by the violation detection search and changed by the change response command. The information determined by the corresponding requirement (for example, "02" and "03" in the corresponding requirement associated with ID1) indicates the ID in the legal system requirement information 130G shown in FIG. 4.

[0040] Fig. 6 shows a table representing the data structure of base server information 130I in memory 130 of management server 100. As shown in Fig. 6, base server information 130I includes information items relating to identification ID, base, base model, server name, address, and location area.

[0041] "Base" is information that indicates the area of ​​the base server, and "base model area" is information that defines the area that is the base model area defined by law. "Server name" is information that indicates the server name of the base server, and "address" is information that indicates the IP address of that server.

[0042] "Location area" is information that indicates the location area of ​​the base server. The base server is not necessarily installed in the base area. For example, as shown in the base server information for ID02, there are cases where the base server is installed in a location area "Country B" different from the base area "Country G".

[0043] Fig. 7 shows a table representing the data structure of personal information management information 130J in memory 130 of management server 100. As shown in Fig. 7, personal information management information 130J includes information items related to an identification ID, a base, a server number, a file, a type of information, an acquisition area, an acquisition date, a storage state, and an acquisition source address.

[0044] "Location" is information indicating the location area where personal information is stored. "Server number" is information indicating the number of the server where personal information is stored. "File" is information indicating the file name of the stored personal information. "Type of information" is information indicating the type of personal information stored. Examples of types of information include IP address, user name, operation history, etc.

[0045] "Acquisition area" is information indicating the area from which the personal information stored at the base was acquired, and "acquisition date" is information indicating the date the personal information was acquired. "Storage status" is information indicating the status of the stored personal information, examples of which include "raw" indicating an unencrypted status and "AES256" indicating an encrypted status in compliance with the AES256 standard.

[0046] Fig. 8 shows a table representing the data structure of the data link management information 130K in the memory 130 of the management server 100. As shown in Fig. 8, the data link management information 130K includes information items relating to an identification ID, a base, a data number, a starting point, a distance, and a connection destination.

[0047] "Location" is information indicating the location area of ​​the data, and "data number" is information indicating the number of the data.

[0048] "Start point" is information that indicates the identification ID that is the start point of the data. In the example shown in Fig. 8, the start point of ID "L1" is "0", which indicates that L1 itself is the start point of the data. On the other hand, the start points of IDs "L2" and "L3" are "L1", which indicates that the start points of both "L2" and "L3" are "L1".

[0049] "Distance" is information that indicates the number of links from the starting point as the distance to the starting point. In the example shown in Figure 8, L1 is the data starting point, so the number of links is 0, and so the distance from the starting point is "0", while L2 and L3 are each directly linked to L1, so the number of links is 1, and so the distance from the starting point is "1".

[0050] "Connection destination" is information indicating the ID of the connection destination of the data of the corresponding ID. In the example shown in Fig. 8, the data connection relationship is shown as follows: L1, which is the starting point, is connected to L2 and L3 on the downstream side, the connection destination of L2 is connected to the starting point L1 on the upstream side and L4 on the downstream side, and L3 is connected only to the starting point L1 on the downstream side.

[0051] Fig. 9 shows a table representing the data structure of base model area change candidate information 130L in the memory 130 of the management server 100. As shown in Fig. 9, the base model area change candidate information 130L includes information items related to an identification ID, an area, a law change date, and a candidate base model area.

[0052] The "area" is information indicating an area to which the legal requirements of a certain base model area may apply. The "law change date" is information indicating the date on which a change was made to the legal requirements in the area, for example, the effective date of the revised law.

[0053] "Candidate base model area" is information indicating candidates for base model areas that may be applied to an area where a change in law has been made. In the example shown in Fig. 9, for example, in the area "Country G" related to ID1, base model areas "b6" and "b7" are shown as base model areas that may be candidates for change in response to the change in law. These base model areas "b6" and "b7" correspond to the identification IDs of the base model area information shown in Fig. 2.

[0054] Fig. 10 shows a table representing the data structure of cloud management information 130M in memory 130 of management server 100. Cloud management information 130M is information relating to cloud services provided as base server 200 or change response server 300 in this embodiment, and as shown in Fig. 10, cloud management information 130M includes information items relating to identification ID, vendor name, server name, address, region, crawl destination, and crawl date and time.

[0055] "Vendor name" is information indicating the name of the provider of the cloud server, "server name" is the name of the cloud server, and "address" is information indicating the IP address or URL (Uniform Resource Locator) of the cloud server.

[0056] "Region" is information that indicates the region of the cloud server that stores the data. The region "Europe" indicates that the data may only be stored in cloud servers installed in Europe, and the region "US" indicates that the data may only be stored in cloud servers installed in the United States.

[0057] "Crawl destination" is information indicating the URL of a server crawled by a cloud server to collect data, and "crawl date and time" is information indicating the date and time when the server was crawled.

[0058] The memory area 140 is composed of, for example, a storage memory such as a hard disk drive (HDD) or a solid state drive (SSD), and is used to auxiliary store at least a portion of the information stored in the above-mentioned memory 430, or to store information different from the information stored in the memory 430. <Base Server 200 and Change Response Server 300>

[0059] 1, the base server 200 includes a processing unit 210, a communication interface (I / F) 220, a memory 230, and a storage area 240. Of these components, the processing unit 210, the communication interface (I / F) 220, and the storage area 240 are similar to the processing unit 110, the communication interface (I / F) 120, and the storage area 140 of the management server 100.

[0060] The memory 230 of the base server 200 serves as a storage unit for programs for executing various control processes and functions of the processing unit 210, and has a linking unit 230A and an information management unit 230B that are realized by the programs. The functions of the linking unit 230A and the information management unit 230B are similar to those of the linking unit 130A and the information management unit 130B in the management server 100. The memory 230 of the base server 200 also includes, as various types of information, server information 230C and data information 230D.

[0061] The server information 230C is information about the base server 200 itself, and includes, for example, information about the base area, location area, server name, server number, etc. of the base server 200. The data information 230D is information about data stored in the base server 200, and includes, for example, information about the file name, type of information, data body, etc. of each data.

[0062] Moreover, each of the components 310 to 340 of the change handling server 300 shown in FIG. <Management Client Terminal 400 and Base Client Terminal 500>

[0063] 1, the management client terminal 400 includes a processing unit 410, a communication interface (I / F) 420, a memory 430, and a display operation unit 440. Note that this configuration is an example, and the management client terminal 400 may include other configurations.

[0064] The processing unit 410 controls the processing for executing various functions of the management client terminal 400 by executing various programs stored in the memory 430, and is composed of a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), etc. The processing unit 410 operates to realize the processing and functions performed by the management client terminal 400, as will be described with reference to FIG. 11 etc.

[0065] I / F420 is a communication interface that enables the management client terminal 400 to communicate with the above-mentioned management server 100 via the communication network NW or by being directly connected thereto, and it is possible to adopt various communication protocols such as TCP / IP (Transmission Control Protocol / Internet Protocol).

[0066] The memory 430 stores programs, input data, intermediate data, and various information for executing various control processes and functions of the processing unit 410, and is composed of, for example, a main memory including a RAM (Random Access Memory) and a ROM (Read Only Memory), and a storage memory such as an HDD (Hard Disk Drive) and an SSD (Solid State Drive).

[0067] The memory 430 is a storage unit for programs for executing various control processes and functions of the processing unit 410, and has a linking unit 130A that is realized by the programs. The linking unit 430A transmits and receives processing commands and information to and from the management server 100 via the I / F 420, thereby causing the processing unit 410 to execute processing for the management client terminal 400 to operate in linkage with the management server 100.

[0068] The display operation unit 440 is a user interface used for inputting instructions by the user of the management client terminal 400 and displaying text, images, etc. according to input data from the processing unit 410, and is configured with a touch panel, etc., when the management client terminal 400 is configured as a smartphone or tablet terminal. This display operation unit 440 is started up by a control program stored in the memory 430 and executed by the management client terminal 400, which is a computer (electronic calculator).

[0069] Moreover, each of the components 510 to 540 of the base client terminal 500 shown in FIG.

[0070] FIG. 11 is a flowchart for explaining a process for updating the law database (DB) in the management server 100 of this embodiment.

[0071] Next, a process of updating the statute database (DB) stored in the memory 130 of the management server 100 of this embodiment will be described mainly with reference to Fig. 11. The statute database (DB) stored in the memory 130 may include base model area information 130E (see Fig. 2), statute definition information 130F (see Fig. 3), and statute system requirement information 130G shown in Fig. 2.

[0072] First, in step S101, the cooperation unit 130A of the management server 100 receives, from the management client terminal 400, a law update request relating to a law revision area (country / region) in which a law change has occurred.

[0073] An example of a law update request for a specific area is a request to update personal information stored in country K to be encrypted when the law is revised to require personal information to be encrypted when stored in country K. Such a law update request is input by a user of the management client terminal 400 on its display operation unit 440, transmitted to the management server 100 by the linking unit 430A of the management client terminal 400, and received by the linking unit 130A of the management server 100. The law management unit 130C of the management server 100 updates the law definition information 130F related to the law revision area based on the information included in the received law update request.

[0074] Next, in step S102, the law management unit 130C of the management server 100 refers to the base model area information 130E to determine whether the area related to the received law update request (law revision area where the law has been revised) is a base model area.

[0075] The legal management unit 130C refers to the base model area information 130E (FIG. 2) and determines whether the area exists in the "base model area", and if the area does not exist in the "base model area", it determines that the area is not a base model area (NO), and the process proceeds to step S103. On the other hand, if the area exists in the "base model area", the legal management unit 130C determines that the area is a base model area (YES), and the process proceeds to step S108.

[0076] Next, in step S103, the impact determination unit 130D of the management server 100 determines whether the requirements corresponding to the revised law included in the law update request are included as requirements for the base model area in the law system requirement information 130G. The requirements for the base model area may include the legal requirements defined in the law definition information 130F (FIG. 3) and the system requirements defined in the law system requirement information 130G (FIG. 4).

[0077] In step S103, the influence determination unit 130D refers to the "dependent area" in the base model area information 130E (FIG. 2) to identify the identification ID of the base model area information including the area (Country K in the above example), and further identifies the base model area to which the area is dependent by identifying the base model area associated with the identification ID. Next, the influence determination unit 130D refers to the statute definition information 130F (FIG. 3) to determine whether the requirements included in the statute update request are included in the requirements defined in the statute definition associated with the identified base model area, and further refers to the statute system requirement information 130G (FIG. 4) to determine whether the requirements included in the statute update request are included in the statute system requirement associated with the identified base model area.

[0078] If the requirements included in the law update request are included in the requirements of the law definition information 130F and the law system requirement information 130G associated with the specified base model area, the impact determination unit 130D determines that the requirements included in the law update request are included in the requirements of the base model area (YES), and the process ends. In this case, since the requirements related to the law update request are already included in the requirements of the base model area, the law database (DB) in the management server 100 is not updated. On the other hand, if the requirements included in the law update request are not included in the requirements of the law definition information 130F and the law system requirement information 130G associated with the specified base model area, the impact determination unit 130D determines that the requirements included in the law update request are not included in the requirements of the base model area (NO), and the process proceeds to step S104.

[0079] Next, in step S104, the impact determination unit 130D of the management server 100 determines whether or not a requirement corresponding to the revised law included in the law update request is included as a requirement of another base model area in the law system requirement information 130G.

[0080] In step S104, the impact determination unit 130D refers to the "base model area" in the base model area information 130E (FIG. 2) to identify one or more base model areas other than the base model area identified in step S103. Next, the impact determination unit 130D refers to the statute definition information 130F (FIG. 3) to determine for each base model area whether the requirements included in the statute update request are included in the requirements defined in the statute definition associated with each base model area, and further refers to the statute system requirement information 130G (FIG. 4) to determine for each base model area whether the requirements included in the statute update request are included in the statute system requirement associated with each base model area.

[0081] Based on the results of these judgments, if the requirements included in the law update request are included in the requirements of the law definition information 130F and the law system requirement information 130G associated with another base model area other than the base model area identified in step S103, the impact judgment unit 130D judges that the requirements included in the law update request are included in the requirements of the other base model area (YES), and the process proceeds to step S109. On the other hand, if the requirements included in the law update request are not included in the requirements of the law definition information 130F and the law system requirement information 130G associated with the other base model area, the impact judgment unit 130D judges that the requirements included in the law update request are not included in the requirements of the other base model area (NO), and the process proceeds to step S105.

[0082] Next, in step S105, the collaboration unit 130A of the management server 100 transmits a confirmation request to the management client terminal 400 inquiring as to whether or not to create an extended base model based on the model of the base model area. In response to the confirmation request, the user of the management client terminal 400 inputs answer information on whether or not to generate an extended base model area on the display operation unit 440 and transmits the answer information to the management server 100, and the collaboration unit 130A of the management server 100 receives the answer information. In the case of answer information for generating an extended base model area, information indicating which base model area the extended base model area is to be created based on is also included in the answer information.

[0083] Next, in step S106, if the received answer information indicates that an extended base model area is not to be generated (NO), the information management unit 130B of the management server 100 ends the process. In this case, the law database (DB) is not updated in this processing flow. On the other hand, if the received answer information indicates that an extended base model area is to be generated (YES), the information management unit 130B advances the process to step S107.

[0084] Next, in step S107, the law management unit 130C of the management server 100 creates an expanded base model area of ​​the base model area, and registers it in the base model area information 130E.

[0085] Explaining with reference to the example shown in FIG. 2, the law management unit 130C creates an extended base model area "Extended Country B" of the base model area "Country B" in the base model area information 130E, associates it with the identification ID "b3", and registers it additionally in the base model area information 130E. In the base model area information 130E, the "extended flag" associated with "Extended Country B" is assigned "1" indicating that it is an extended model, and the "extended No." is assigned "b2", which is the identification ID of the base model area "Country B" from which it is extended. "Extended Country B" is a fictitious area (country) that does not actually exist, used in the base model area information 130E. Alternatively, the law management unit 130C can generate requirements for an extended base model area by overwriting existing requirements in the base model area information 130E with requirements corresponding to the revised law.

[0086] In step S107, the law management unit 130C further creates law definition information 130F and law system requirement information 130G for the extended area "Extended Country B" based on the information included in the law update request, updates the information, and ends the process. Through such processing, the law management unit 130C adds or overwrites the requirements corresponding to the revised law to the requirements of the base model area associated with the law revision area, thereby adding an extended base model area to the base model area information 130E, and adds a correspondence between the requirements corresponding to the revised law and the extended base model area to the law system requirement information 130G. As a result, the law DB of the management server 100 is updated in response to the law update request.

[0087] Furthermore, in the above-mentioned step S102, if the law management unit 130C judges that the target area of ​​the law update request (law revision area) is a base model area (YES) and the process proceeds to step S108, in step S108, the law management unit 130C updates the base model area information 130E and the law system requirement information 130G related to the target area of ​​the law update request, which is also a base model area, based on the information included in the law update request to comply with the revised law, and ends the process. As a result, the law DB of the management server 100 is updated in response to the law update request.

[0088] Also, in step S104, if the impact determination unit 130D determines that the requirements included in the statute update request are included in the requirements of other base model areas (YES) and the process proceeds to step S109, the impact determination unit 130D further determines in step S109 whether or not there is one other base model area in which the requirements included in the statute update request are included, i.e., whether there is only one or two or more, based on the processing result of step S104. If there is one other base model area in which the requirements included in the statute update request are included (YES), the process proceeds to step S110, and if there is not one other base model area, in other words, if there are two or more (NO), the process proceeds to step S111.

[0089] If there is only one other base model area that includes the requirement included in the law update request, in step S110, the law management unit 130C changes the base model area to which the target area (law revision area) of the law update request is subordinate to the other base model area, which is a base model area that becomes a new base model area that is a new base model area of ​​the law revision area. More specifically, the law management unit 130C cancels the association between the target area (e.g., Country K) and the base model area that was associated with it in the "dependent area" of the base model area information 130E shown in FIG. 2, and updates the base model area information 130E so that the target area is associated with the other base model area. After that, the process proceeds to step S112.

[0090] On the other hand, if the number of other base model areas that include the requirements included in the law update request is not one (two or more), in step S111, the law management unit 130C updates the base model area change candidate information 130L. More specifically, the law management unit 130C adds all other base model areas identified in the processing of steps S104 and S109 by the influence determination unit 130D to the "candidate base model area" associated with the target area of ​​the law update request (e.g., Country K) in the base model area change candidate information 130L shown in FIG. 9, and updates the "law change date" based on the information included in the law update request. As a result, the information on the base model area is recorded in the base model area change candidate information 130L as base model area change candidate information in association with the law revision area, and information on the candidate base model area that can become a base model area is updated for the target area of ​​the law update request that is a law revision area. This makes it possible for the information management unit 130B to present design change proposals for changing the design of the information system in the law revision area based on the requirements of the base model area recorded in the base model area change candidate information when the laws in the law revision area are revised again.

[0091] Next, in step S112 following step S110 or step 111, the information management unit 130B generates one or more design change proposals for changing the design of the information system in the law revision area based on the requirements of the new base model area, and the collaboration unit 130A transmits the design change proposals to the base client terminal 500 in the law revision area (e.g., country K). Then, the collaboration unit 130A receives a response result to the design change proposal from the base client terminal 500, and the information management unit 130B transmits instructions required for the design change based on the response result to the base server 200 and / or the change response server 300 of the target area. The design change proposal is a recommended proposal for changing the base model area.

[0092] The process of updating the legal database (DB) in the management server 100 is now completed.

[0093] Next, a process of presenting a design change proposal and issuing a change instruction for an information system in the management server 100 of this embodiment will be described mainly with reference to Fig. 12. Fig. 12 is a flowchart for explaining a process of presenting a design change proposal and issuing a change instruction in the management server 100 of this embodiment.

[0094] First, in step S201, the cooperation unit 130A of the management server 100 transmits and presents one or more design change proposals (recommended proposals for changes to the base model area) generated in step S112 in the processing flow of Fig. 11 to the base client terminal 500 in the law change area. The one or more design change proposals received by the base client terminal 500 are presented on the display operation unit 540.

[0095] Next, in step S202, the impact determination unit 130D of the management server 100 determines whether or not there is one candidate plan (base model area that is a candidate for change) in the design change plan presented by the collaboration unit 130A (whether there is one or two or more). If there is one candidate plan (YES), the process proceeds to step S203, and if there are two or more candidates but not one, in other words, if the requirements corresponding to the revised laws and regulations are included in the laws and regulations system requirement information 130G as requirements for multiple base model areas (NO), the process proceeds to step S206.

[0096] Next, in step S203, the information management unit 130B of the management server 100 creates data link management information 130K (Figure 8) based on the personal information management information 130J (Figure 7) for each piece of data, such as personal information, stored in the memory 230 of the base server 200 in the law change area.

[0097] As shown in Fig. 7, in the personal information management information 130J, for each data file such as personal information, at least an ID (d1, d2, etc.) which is a data file number, a base area which is a storage location of the data file and its server number, an acquisition area of ​​the data file, and an address of a base server from which the data file is acquired are associated. Based on this information included in the personal information management information 130J, the information management unit 130B creates data link management information 130K (Fig. 8) which indicates which base server is the starting point and by what route each data file is transferred to another base server. As shown in Fig. 8, in the data link management information 130K, a subordinate relationship between the base server which is the starting node of the storage location of the data file and the base server which is the node of the storage location to which the data file is transferred is specified and stored.

[0098] In step S203, the information management unit 130B further generates data path graph information based on the data link management information 130K (FIG. 8), in which the base server 200 at the storage location of the data file at the origin and the transfer destination are nodes, and the paths along which the data files are transferred that connect these nodes are links, and stores the information in the memory 130 or the storage area 140. The information management unit 130B further refers to the change response information 130H (FIG. 5), detects violations that may occur when the base model area is changed for the law change area (in other words, violations from the new base model area to be changed), identifies a method of dealing with the violations, and calculates the number of change steps, which is the number of change processes (the number of times personal data is moved across areas) required to change the base model area, based on the above. More specifically, the information management unit 130B calculates a graph structure of a data path that satisfies the requirements corresponding to the revised law, and calculates the number of change steps by comparing the graph structure of the data model with the graph of the data path that satisfies the requirements corresponding to the revised law.

[0099] Fig. 13 shows an example of a graph structure of a data path generated by using the base servers of the storage location at the origin and destination of the data file as nodes and the paths along which the data files are transferred that connect these nodes as links, and is also a conceptual diagram for explaining an algorithm for calculating the number of change steps, which is the number of change processes required to change a base model area. In Fig. 13, the base server that is the origin of the data file is indicated by a black circle "●", and the base server that is the destination of the data file is indicated by a white circle "◯".

[0100] The example shown in Figure 13(a) shows a case of a base model area of ​​legal system requirements in which the base server of the data file origin and the storage location at the transfer destination are both installed in another area rather than the own area. As an example, in a case where a legal system requirement requires that the origin server of personal information be installed within the country due to a legal change in a certain area, as shown in Figure 13(b), the legal system requirement can be satisfied with just one change process of moving one base server "●" that is the origin of the data file from another area to the own area, so the number of change steps, which is the number of change processes required to change the base model area for that legal change area, is "1".

[0101] Alternatively, in a case where a change in laws and regulations in a certain area requires that personal information be stored domestically or not handled overseas as a legal system requirement, as shown in Fig. 13(c), the legal system requirement can be satisfied by performing a change process to move one base server "●" that is the origin of the data file from another area to the own area, and a change process to move two base servers "○" that are the destinations of the data file from another area to the own area, so the number of change steps, which is the number of change processes required to change the base model area for that legal change area, is "3." Based on this algorithm, the information management unit 130B calculates the number of change steps, which is the number of change processes required to change the base model area.

[0102] The above describes how to calculate the number of change steps when moving the base server 200 that stores the data. However, even when a cloud service in which the physical location where the data is stored changes is used as the storage location for personal information and other data, the number of change steps, which is the number of change processes required to change the base model area, can be calculated based on a similar algorithm as above.

[0103] As described with reference to FIG. 10 regarding cloud management information 130M, the cloud server crawls the crawl destination servers to collect data and knows which data (personal information, etc.) is stored in which server at the time of crawling. In cloud services, the location of the server where data is stored varies depending on the service provider. Furthermore, it may change appropriately over time. In response to this, by specifying the area (country or region) where data should be stored in the "region" of cloud management information 130M, it is possible to prevent the data from being stored in a server outside the specified area, so-called "region binding." Therefore, when using a cloud service, the storage location of data can be changed by changing the setting of the "region" of cloud management information 130M.

[0104] Therefore, the information management unit 130B of the management server 100 may be configured to obtain information on the current location where data such as personal information is stored by referring to cloud management information 130M for cloud services where data such as personal information is stored and where the physical location where the data is stored changes, and if the requirements corresponding to the revised laws and regulations are requirements regarding the location where personal information is stored and personal information in the information system is stored using a cloud service, detect the location of the violation and count the number of commands to resolve the violation (the number of change steps in the change process) based on the current location.

[0105] Next, in step S204, the collaboration unit 130A of the management server 100 transmits the number of change steps calculated by the information management unit 130B in step S203 above and the design change contents related to the change processing to the base client terminal 500 in the law change area, and presents them.

[0106] Explaining with reference to the above example, the number of change steps that the collaboration unit 130A presents to the base client terminal 500 is "1", and the design change content for the change process is "move one base server "●" that is the origin of the data file from another area to the own area". In addition, in a case where a legal system requirement requires that personal information be stored domestically or not handled overseas, the number of change steps that the collaboration unit 130A presents to the base client terminal 500 is "3", and the design change content for the change process is "move one base server "●" that is the origin of the data file from another area to the own area", and "move two base servers "○" that are the transfer destinations of the data file from another area to the own area".

[0107] The base client terminal 500 receives the number of change steps and the design change content related to the change process, and displays them on the display operation unit 540, and also displays, for example, a button "Execute this change process." If the user of the base client terminal 500 affirmatively accepts the proposed design change content of the change process, the user touches the "Execute this change process" button on the display operation unit 540 to input a response. The base client terminal 500 transmits the response result to the management server 100.

[0108] Next, in step S205, the cooperation unit 130A of the management server 100 instructs the base client terminal 500, the base server 200, and the corresponding change support server 300 on the design change to be executed, based on the response result received from the base client terminal 500.

[0109] When the base client terminal 500, the base server 200, and the change response server 300 receive the design change contents to be executed from the management server 100, the base server 200 executes the change processing according to the design change contents, and the user of the base client terminal 500 instructs the change response server 300 to execute the design change via the base client terminal 500, and the change response server 300 executes the instructed design change. As an example, in the case of changing personal information to be stored in its own area, as specified in the change response command for ID1 of the change response information in Fig. 5, the change response servers 300 are set for all of the personal information, all of the information is moved to the change response servers 300, and a design change is executed to change the destination of the personal information to those change response servers 300.

[0110] Also, if it is determined in step S202 that there is not just one candidate plan (NO) and the processing proceeds to step S206, in step S206 the information management unit 130B of the management server 100 calculates the number of change steps for each base model area that is a candidate for change by processing similar to that in step S203.

[0111] Next, in step S207, the collaboration unit 130A of the management server 100 transmits and presents the number of change steps calculated for each base model area candidate by the information management unit 130B in the above step S206 and the design change contents related to the change processing to the base client terminal 500 in the law change area. This presentation includes recommending the base model area with the smallest number of change steps among the multiple base model area candidates as the new base model area.

[0112] The base client terminal 500, which has received the number of change steps for each base model area candidate and the design change contents for the change processing, displays them on the display operation unit 540, and also displays, for example, a message "Please select the design change to be executed" and design change option buttons. The design change option buttons are, for example, options for the base model areas of the candidates to be changed, and the option button for the recommended base model area includes an indication that it is a recommended plan. The user of the base client terminal 500 touches the option button for the design change to be executed from the option buttons for the presented design changes (base model areas of the candidates to be changed) to input a response. The base client terminal 500 transmits the response result to the management server 100.

[0113] Next, in step S205, the collaboration unit 130A of the management server 100 instructs the base client terminal 500 and the corresponding change support server 300 on the design changes to be executed based on the response result (selected candidate base model area) received from the base client terminal 500.

[0114] The process of presenting design change proposals and issuing change instructions in the management server 100 is now completed.

[0115] Next, a series of design change sequences from when a change in laws and regulations occurs in a certain area to when a system design change is executed will be described with reference mainly to the sequence diagram shown in FIG.

[0116] First, in step S301, when a change in laws and regulations occurs in a certain base area, the laws and regulations database (particularly, the laws and regulations definition information 130F and the laws and regulations system requirement information 130G) in the memory 130 of the management server 100 is updated by an input operation from the management client terminal 400. The processing of this step S301 corresponds to the processing of updating the laws and regulations database described with reference to the flowchart of FIG.

[0117] Next, in step S302, the management server 100 calculates the number of change steps required to execute a design change for changing a base model area of ​​a certain base area in response to the change in laws and regulations, and presents a change proposal for the design change (one or more base model areas that can be candidates for the change) to the base client terminal 500. The process of step S302 corresponds to the processes of steps S201 to S207 in the process of presenting a design change proposal and issuing a change instruction, which has been described with reference to the flowchart of FIG.

[0118] Next, in step S303, the base client terminal 500 replies to the management server 100 with a response as to whether or not to accept the proposed change proposal for the design change if there is only one, or as to which change proposal to select if there are two or more. The process of step S302 corresponds to the process of step S204 or S207 of the above-mentioned process described with reference to the flowchart of FIG.

[0119] When the management server 100 receives the response from the base client terminal 500, it transmits instructions to the base server 200, the change response server 300, and the base client terminal 500 based on the received response result (the base model area of ​​the approved or selected change plan) (steps S304, S305, S306). These processes correspond to the process in step S205 of the processes described with reference to the flowchart in FIG. 12.

[0120] In step S304, the management server 100 transmits an instruction to store information in accordance with the statutory system requirements of the selected base model area to the corresponding change response server 300. In this example, a case where the requirement corresponding to the revised statutory law requires that personal information be stored within the area will be described as an example.

[0121] In step S305, the management server 100 transmits to the base server 200 a change response instruction to be executed by the base server 200. This change response instruction is, for example, copying of target data to the change response server 300, deleting copied data, and the like.

[0122] In step S306, the management server 100 transmits a change response instruction to be executed by the base client terminal 500 to the base client terminal 500. This change response instruction is, for example, a data transmission destination switching instruction for switching the data transmission destination from the base server 200 to the change response server 300.

[0123] The base server 200 that has received the change response instruction executes the change response in accordance with the change response instruction in step S307. In the above example, the base server 200 executes the change response by copying the target data to the change response server 300 and deleting the copied target data from the base server 200.

[0124] The base client terminal 500 that has received the change handling instruction accepts an input operation from the user for switching the data transmission destination from the base server 200 to the change handling server 300 in step S308, and transmits this to the change handling server 300.

[0125] Finally, in step S309, the change response server 300 executes the storage instruction received from the management server 100 (S304), the change response relating to the transfer by copying the target data executed by the base server 200 (S305), and the change response instruction for switching the data transmission destination received from the base client terminal 500 (S306), and stores the information in accordance with the design requirements of the selected base model area. In this example, in accordance with the requirement that the location for storing personal information be within the own area, the information system is changed so that the change response server 300 in the own area stores the personal information.

[0126] As described above, according to one aspect of the present disclosure, there is provided an information management device (management server) that manages the handling of personal information in an information system that handles personal information, the information management device having a memory and a processor (processing unit), the memory storing base model area information that records correspondence between each of areas, which are geographical areas within which laws and regulations apply, and base model areas that have laws and regulations with common requirements regarding the handling of personal information in the laws and regulations of the area, and statutory system requirement information that records requirements regarding the handling of personal information in an information system for complying with the legal provisions of the base model area, corresponding to each of the base model areas, and when the laws and regulations of an area are revised, the processor refers to the base model area information and determines whether the area in which the laws and regulations have been revised is a statutory revision area. An information management device is provided that determines whether an area where a statute revision has been made is a model area, and if the area where a statute revision has been made is a base model area, updates the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute, and if the area where a statute revision has been made is not a base model area, determines whether a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, and if a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, sets the base model area as a new base model area that is a new base model area for the statute revision area, and presents a design change proposal to change the design of the information system of the statute revision area based on the requirements of the new base model area.

[0127] According to the information management device of the present disclosure configured in this manner, the requirements for handling personal information in information systems in areas where laws and regulations have been revised are changed based on the base model area, thereby supporting the efficient updating of information systems in each area to correspond to revisions to laws and regulations in each area.

[0128] The information management device of the present disclosure may further be configured such that, if the requirement corresponding to the revised law is not included in the law system requirement information as a requirement of any base model area, the processor adds an extended base model area to the base model area information, and adds a correspondence between the requirement corresponding to the revised law and the extended base model area to the law system requirement information. In this way, if the requirement corresponding to the revised law is not included in the law system requirement information as a requirement of any base model area, by adding an extended base model area including a requirement corresponding to the revised law, when a law revision including a similar requirement occurs in another area later, it becomes possible to use the extended base model area as the base model area of ​​the other area.

[0129] The information management device of the present disclosure may further be configured such that the processor generates requirements for an extended base model area by adding or overwriting requirements corresponding to the revised law to the requirements of the base model area associated with the revised law area, and adds the requirements to the law system requirement information.

[0130] The information management device of the present disclosure may further be configured such that the memory further stores change response information that associates a method for detecting whether the design of the information system in the area where the law has been revised satisfies or violates the requirements for complying with the provisions of the revised law with an instruction to the information system for resolving the violation detected by the method, and the processor presents design change content for executing the method to resolve the detected violation by the instruction associated with the method. By further storing such change response information in the memory, the processor is able to compare the requirements associated with the new base model area with the requirements corresponding to the revised law, and identify and present design change content necessary to satisfy the requirements corresponding to the revised law.

[0131] The information management device of the present disclosure may further be configured such that, when the statutory system requirement information includes requirements corresponding to revised laws and regulations as requirements for multiple base model areas, the processor generates design change contents for the multiple base model areas and presents a recommendation of the base model area with the fewest number of change steps, which is the number of times personal information data is moved across areas, as a new base model area in the design change contents. This allows a user in the base area who receives such a presentation to easily select the recommended base model area with the fewest number of change steps as the optimal new base model area from the multiple design change contents.

[0132] The information management device of the present disclosure may further be configured such that the memory further stores data path graph information for each base model area, the data path being indicated in a graph structure with the storage locations of the personal information as nodes and the paths along which the personal information has been transferred as links, and the processor calculates a graph structure of the data path that satisfies the requirements of the revised law, and calculates the number of change steps by comparing the graph structure of the base model area with the graph structure of the data path that satisfies the requirements of the revised law. By comparing the graph structures in this manner, it becomes possible to easily calculate the number of change steps.

[0133] The information management device of the present disclosure may further be configured such that the processor acquires information on a current location where data is stored for a cloud service that is a storage destination for personal information and where the physical location where data is stored changes, and when a requirement corresponding to the revised law is a requirement regarding a location where personal information is stored and personal information in the information system is stored using a cloud service, the processor detects a violation and counts the number of commands for resolving the violation based on the current location. This makes it possible to calculate the number of change steps required to satisfy the requirement corresponding to the revised law even when personal information is stored using a cloud service.

[0134] The information management device of the present disclosure may further be configured such that, when the statute revised area is not a base model area and the statute system requirement information includes a requirement corresponding to the revised statute as a requirement of any of the base model areas, the processor records the information of the base model area as base model area change candidate information in association with the statute revised area, and when the statute in the statute revised area is revised again, a design change proposal for changing the design of the information system in the statute revised area based on the requirements of the base model area recorded in the base model area change candidate information is presented. This makes it easy to search for a base model area to be used as a base model area when the statute in a certain area is revised again.

[0135] According to another aspect of the present disclosure, there is provided an information management method for a computer having a memory and a processor to function as an information management device for managing the handling of personal information in an information system that handles personal information, the memory storing base model area information that records a correspondence between each of areas that are geographical areas within the scope of the effect of laws and regulations and base model areas that have laws and regulations with common requirements regarding the handling of personal information as those in the laws and regulations of the area, and statutory system requirement information that records requirements regarding the handling of personal information in an information system for complying with the provisions of the laws and regulations of the base model area, corresponding to each of the base model areas, and when the laws and regulations of an area are revised, the processor refers to the base model area information and records the revised laws and regulations area information for the area in which the laws and regulations have been revised. The present invention provides an information management method that determines whether an area where a statute revision has been made is a base model area, and if the area where a statute revision has been made is a base model area, updates the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute, and if the area where a statute revision has been made is not a base model area, determines whether a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, and if a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any of the base model areas, sets the base model area as a new base model area that is a new base model area for the statute revision area, and presents a design change proposal to change the design of the information system of the statute revision area based on the requirements of the new base model area.

[0136] According to yet another aspect of the present disclosure, a server of an information system that handles personal information includes a base server that is arranged in an area that is a geographical range within which laws and regulations apply, a base client that provides a user interface for managing the handling of personal information in the base server, and a management server that manages the handling of personal information in the information system, and the management server stores base model area information that records a correspondence between each area and a base model area that has laws and regulations with the same requirements regarding the handling of personal information as the requirements in the laws and regulations of the area, and law system requirement information that corresponds to each of the base models and records requirements regarding the handling of personal information in the information system to comply with the provisions of the laws and regulations of the base model area, and when a law in a certain area is revised, the management server refers to the base model area information and determines whether the law revision area, which is the area in which the law has been revised, is a base model, and if the law revision area is a base model, the management server performs the revision process. An information management system is provided in which the information on the base model area in the base model area information and the statutory system requirement information is updated in accordance with the revised law, and if the area in which the law is revised is not a base model area, the management server determines whether or not a requirement corresponding to the revised law is included as a requirement of any of the base model areas in the statutory system requirement information, and if the requirement corresponding to the revised law is included as a requirement of any of the base model areas in the statutory system requirement information, the management server designates the base model area as a new base model area that is a new base model area for the area in which the law is revised, and presents to the base client a design change proposal for changing the design of the information system of the area in which the law is revised based on the requirements of the new base model area, and if the design change proposal is approved by the base client, the management server sends an instruction to the base server to change the storage destination of personal information to a change-compliant server, and the base server handles the personal information in accordance with the requirements corresponding to the revised law.

[0137] The information management system of the present disclosure may further include a change-response server that is located in the same area as the base server and is capable of storing personal information of the information system, and if the requirements corresponding to the revised laws and regulations require the location for storing personal information to be within its own area, the management server may be configured to send an instruction to the change-response server, the base server, and the base client to change the storage destination of the personal information to the change-response server, the base server may send the personal information to the change-response server, the change-response server may store the personal information in accordance with the requirements corresponding to the revised laws and regulations, and the base client may be configured to switch the destination to which the acquired personal information is sent.

[0138] The above-described embodiments of the present invention are merely illustrative examples of the present invention, and are not intended to limit the scope of the present invention to these embodiments. Those skilled in the art can implement the present invention in various other forms without departing from the scope of the present invention. [Explanation of symbols]

[0139] 1... information management system, 100... management server, 200... base server, 300... change response server, 400... management client terminal, 500... base client terminal

Claims

1. An information management device that manages handling of personal information in an information system that handles the personal information, comprising: A memory and a processor are included. The memory includes: Base model area information that records the correspondence between each area, which is the geographical range within which the law applies, and a base model area that has laws and regulations with requirements common to the requirements regarding the handling of personal information in the laws and regulations of the area; legal system requirement information that corresponds to each of the base model areas and records requirements regarding the handling of personal information in an information system for complying with legal provisions of the base model areas; Remember, The processor, When the law of an area is revised, the base model area information is referenced to determine whether the area in which the law has been revised is a base model area; If the statute revised area is a base model area, update the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute; If the statute revised area is not a base model area, it is determined whether or not a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any base model area; If the requirements corresponding to the revised law are included as requirements for any of the base model areas in the law system requirement information, the base model area is designated as a new base model area that is a new base model area for the law revision area, and a design change proposal is presented for changing the design of the information system for the law revision area based on the requirements of the new base model area. Information management device.

2. The processor, If the requirement corresponding to the revised law is not included in the law system requirement information as a requirement of any base model area, an extended base model area is added to the base model area information, and a correspondence between the requirement corresponding to the revised law and the extended base model area is added to the law system requirement information. The information management device according to claim 1 .

3. The processor generates requirements for the extended base model area by adding or overwriting requirements corresponding to the revised law to requirements for the base model area associated with the revised law area, and adds the requirements to the law system requirement information. The information management device according to claim 2 .

4. The memory further stores change response information that associates a method for detecting whether the design of the information system in the area where the law has been revised satisfies or violates the requirements for complying with the provisions of the revised law with an instruction to the information system for eliminating the violation detected by the method; the processor executes the method and proposes a design change to resolve a violation detected by the method using an instruction associated with the method; The information management device according to claim 1 .

5. The processor, If the requirements corresponding to the revised laws and regulations are included as requirements for multiple base model areas in the legal system requirement information, design change contents are generated for the multiple base model areas, and the base model area with the fewest number of change steps, which is the number of times personal information data is moved across areas, is recommended as a new base model area in the design change contents. The information management device according to claim 1 .

6. The memory further stores data path graph information for each of the base model areas, the data path being indicated in a graph structure with nodes representing storage locations of personal information data and links representing routes along which the personal information is transferred; The processor, Calculating a graph structure of a data path that satisfies the requirements corresponding to the revised law; Calculating the number of change steps by comparing a graph structure of the base model area with a graph structure of a data path that satisfies the requirements corresponding to the revised law; The information management device according to claim 5 .

7. the processor acquires information on the current location where the data is stored for a cloud service in which personal information is stored and where the physical location where the data is stored changes, and if the requirement corresponding to the revised law is a requirement regarding the location where personal information is stored and the personal information in the information system is stored using the cloud service, detects a violation and counts the number of commands to resolve the violation based on the current location; The information management device according to claim 5 .

8. The processor, When the statute revised area is not a base model area and the requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any base model area, the information of the base model area is recorded as base model area change candidate information in association with the statute revised area; When the laws of the law revision area are revised again, presenting a design change proposal for changing the design of the information system of the law revision area based on the requirements of the base model area recorded in the base model area change candidate information; The information management device according to claim 1 .

9. 1. An information management method for allowing a computer having a memory and a processor to function as an information management device that manages handling of personal information in an information system that handles the personal information, comprising: The memory comprises: Base model area information that records the correspondence between each area, which is the geographical range within which the law applies, and a base model area that has laws and regulations with requirements common to the requirements regarding the handling of personal information in the laws and regulations of the area; legal system requirement information that corresponds to each of the base model areas and records requirements regarding the handling of personal information in an information system for complying with legal provisions of the base model areas; Remember, The processor, When the law of an area is revised, the base model area information is referenced to determine whether the area in which the law has been revised is a base model area; If the statute revised area is a base model area, update the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute; If the statute revised area is not a base model area, it is determined whether or not a requirement corresponding to the revised statute is included in the statute system requirement information as a requirement of any base model area; If the requirements corresponding to the revised law are included as requirements for any of the base model areas in the law system requirement information, the base model area is designated as a new base model area that is a new base model area for the law revision area, and a design change proposal is presented for changing the design of the information system for the law revision area based on the requirements of the new base model area. Information management method.

10. A base server which is a server of an information system that handles personal information and is located in an area within the geographical range covered by laws and regulations; a base client that provides a user interface for managing the handling of personal information in the base server; a management server for managing the handling of the personal information in the information system, The management server stores base model area information that records the correspondence between each area and a base model area having laws and regulations with the same requirements as the requirements regarding the handling of personal information in the laws and regulations of the area, and legal system requirement information that records requirements regarding the handling of personal information in an information system for complying with the legal provisions of the base model area in correspondence with each of the base models, When a law of a certain area is revised, the management server refers to the base model area information and determines whether the law revision area, which is the area where the law is revised, is a base model; If the statute revised area is a base model, the management server updates the information of the base model area in the base model area information and the statute system requirement information in accordance with the revised statute; If the law revision area is not a base model area, the management server determines whether or not a requirement corresponding to the revised law is included in the law system requirement information as a requirement of any base model area; If the requirements corresponding to the revised law are included in the law system requirement information as requirements for any of the base model areas, the management server sets the base model area as a new base model area that is a new base model area for the law revision area, and presents to the base client a design change proposal for changing the design of the information system for the law revision area based on the requirements of the new base model area; When the design change proposal is approved by the base client, the management server sends an instruction to the base server to change the storage location of the personal information; The base server handles the personal information in accordance with requirements corresponding to the revised laws and regulations. Information management system.

11. Further, a change response server is provided in the same area as the base server and capable of storing personal information of the information system, If the requirement corresponding to the revised law requires that the location where personal information is stored be within its own area, the management server sends an instruction to the change response server, the base server, and the base client to change the storage location of the personal information to the change response server, The base server transmits the personal information to the change response server; The change response server stores the personal information in accordance with the requirements corresponding to the revised laws and regulations, the base client switches the destination of the acquired personal information to the change-compatible server; The information management system according to claim 10.

Images