Information sending server and method for sending information

Abstract

To determine sensitive information more efficiently.SOLUTION: An information sending server 100 includes a sensitive information determination unit 111 and an information sending unit 112. The sensitive information determination unit 111 presents information in a sensitive information server storing information including sensitive information related to a facility to the manager of the information, receives the input of a determination by the manager and / or makes a determination by itself, acquires the determination as to whether the information is sensitive information, and notifies the information sending unit 112 of the determination that the information is not sensitive information if the information is not sensitive information. The information sending unit 112 sends the notified information to a general information server, in which the sensitive information related to the facility is not stored, and instructs the sensitive information server to delete the information.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to an information transmission server and an information transmission method for transferring information that does not contain sensitive information among information stored in a sensitive information server to a general information server. [Background technology]

[0002] The Nuclear Reactor Regulation Act and other laws require licensees of nuclear reactors to manage sensitive information (sensitive information) stored in nuclear protection facilities so that it is not removed from specific areas of the facility. To remove information from specific areas, approval from the licensee of the reactor is required. Furthermore, only specific individuals within the licensee of the reactor are aware of what constitutes sensitive information, and the removal of information from specific areas is inspected by these specific individuals.

[0003] The Reactor Regulation Act and other laws require licensees of reactors to conduct periodic operator inspections at regular intervals, during which they inspect equipment according to the inspection cycles set out in the regulations. The number of pieces of equipment to be inspected is enormous, and contractors who inspect them submit the inspection results to the licensee of reactors in the form of a work report. This work report is accompanied by a huge number of measurement records from the inspection and work quality checklists. To transport information from a specific area on electronic recording media, approval from a specific person of the licensee of reactors is required, as described above. For this reason, in many cases, information is not transported on electronic recording media, but is transported from a specific area of ​​the nuclear protection facility on a memo or other medium, and then transcribed into a work report format outside the nuclear protection facility.

[0004] Furthermore, if contractor workers find any deterioration that they cannot assess during inspections, they need to get the opinion of an expert. If there is no expert on-site, in order to get a prompt opinion, it is necessary to send the video footage to the expert, who will then grasp the situation and make a judgment. However, in order to transport the video footage from a specific area, approval from a specific person from the reactor operator is required, which is time-consuming.

[0005] Patent Document 1 describes an invention in which images taken inside a nuclear reactor plant are processed within a specific area and sensitive information is masked before being transported from the specific area. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Patent No. 7179583 Summary of the Invention [Problem to be solved by the invention]

[0007] In order to transport information from a specific area of ​​a nuclear protection facility, it is necessary to have a specific person from the licensee of the reactor confirm that the information does not contain sensitive information on nuclear protection and to obtain approval for the transport. However, during regular operator inspections, the information to be transported is concentrated at the specific person, which creates the problem of being unable to quickly review the information (determine whether it is sensitive information).

[0008] In the method described in Patent Document 1, the person who processes the video must be able to identify the subject of sensitive information, so the video is processed by a designated person from the licensee of the reactor. This restricts the designated person to work within a specific area. This causes a decrease in efficiency not only in determining sensitive information, but also in the overall work of the designated person. The worker who took the video can identify the subject of sensitive information by comparing the processed video with the actual scene. Under the law, the subject of sensitive information is identified only by a specified person of the licensee of the nuclear reactor, and the method described in Patent Document 1 has such a problem.

[0009] The present invention has been made in view of the above background, and has an object to provide an information transmission server and an information transmission method that make it more efficient to determine sensitive information. [Means for solving the problem]

[0010] In order to solve the above-mentioned problems, the information transmission server of the present invention comprises a sensitive information determination unit and an information transmission unit, and the sensitive information determination unit presents information stored in a sensitive information server in which information including sensitive information related to a facility is stored to an administrator of the information and accepts input of a determination by the administrator, and / or makes a determination itself to obtain whether the information is sensitive information or not, and if the information is not sensitive information, notifies the information transmission unit that the information is not sensitive information, and the information transmission unit transmits the notified information to a general information server in which sensitive information related to the facility is not stored, and instructs the sensitive information server to delete the information. Effect of the Invention

[0011] According to the present invention, it is possible to provide an information transmission server and an information transmission method that can efficiently determine sensitive information. Problems, configurations, and effects other than those described above will become apparent from the following description of the embodiments. [Brief description of the drawings]

[0012] [Figure 1] 1 is a configuration diagram of an information transmission system according to a first embodiment. [Diagram 2] 2 is a functional block diagram of a sensitive information server according to the first embodiment. FIG. [Diagram 3] FIG. 2 is a functional block diagram of a general information server according to the first embodiment. [Figure 4] 2 is a functional block diagram of an information transmission server according to the first embodiment. FIG. [Diagram 5] 4 is a flowchart of an information transmission process according to the first embodiment. [Figure 6] FIG. 11 is a diagram showing a format of inspection information (work report) not including sensitive information according to the second embodiment. [Figure 7] FIG. 11 is a functional block diagram of an information transmission server according to the second embodiment. [Figure 8] 13 is a flowchart of non-sensitive information determination processing according to the second embodiment. [Figure 9]FIG. 11 is a functional block diagram of an information transmission server according to a third embodiment. [Figure 10] 13 is a flowchart of non-sensitive information determination processing according to the third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] <Configuration of information transmission system> An information transmission system in a form (embodiment) for carrying out the present invention will be described below. The information transmission system includes a sensitive information server in which information including sensitive information of the nuclear protection facility is stored, a general information server, and an information transmission server. The sensitive information server is installed in a specific area of ​​the nuclear protection facility, and the general information server and the information transmission server are installed outside the specific area.

[0014] The information transmission server presents the sensitive information to a specified person (administrator) of the nuclear protection facility to inquire whether each piece of information stored in the sensitive information server is sensitive information. If the information is not sensitive information, the information transmission server moves the information to general information (see the first embodiment described later (the same applies to the second embodiment, the third embodiment, and the modified example)).

[0015] If the information transmission server determines that the information is in a specified format (predetermined form), it may determine that the information is not sensitive information and move it to a general information server (see the second embodiment described later). In this case, the information transmission server does not present the information to a specific person to inquire whether the information is sensitive information or not.

[0016] Similarly, the information transmission server may determine that the information is not sensitive information if it is an image or video and the object in the nuclear protection facility that is captured is not an object related to sensitive information (see the third embodiment described later). Similarly, the information transmission server may determine that the image or video does not contain sensitive information based on the shooting position or shooting direction of the image or video (see the modified example described later).

[0017] According to this information transmission system, the designated person only needs to operate the information transmission server and does not need to work in the designated area. Therefore, the designated person can perform the judgment process of sensitive information not only within the designated area but also within the nuclear protection facility, and the work of the designated person, including the judgment process, can be carried out efficiently. In addition, depending on the information in the sensitive information server, the information transmission server may determine that the information is not sensitive information, so that the amount of information that the identifier must determine can be reduced, further improving the efficiency of the determination process.

[0018] <Configuration of information transmission system> 1 is a configuration diagram of an information transmission system 10 according to the first embodiment. The information transmission system 10 includes a sensitive information server 200, an information transmission server 100, and a general information server 300. The sensitive information server 200, the information transmission server 100, and the general information server 300 are connected to each other via a communication network in a nuclear protection facility 710.

[0019] The sensitive information server 200 is installed in a specific area 720 in a nuclear protection facility 710. A worker 510 performing inspections, including regular inspections, in the specific area 720 inputs information related to the inspection, such as measurement results and visual inspection results, into a portable device 410. The mobile device 410 and the sensitive information server 200 are connected, for example, via a wireless communication network. The mobile device 410 stores the input information in the sensitive information server 200. Note that the sensitive information server 200 has limited communication partners and can communicate only with the mobile device 410 and the information transmission server 100. Hereinafter, the information input from the mobile device 410 and stored in the sensitive information server 200 is also referred to as inspection information.

[0020] The information input by the worker 510 to the mobile device 410 includes identification information of the equipment to be inspected, information indicating the status of the equipment, and images and videos captured by a camera provided in the mobile device 410. Examples of information indicating the status of the equipment include, but are not limited to, the open / closed state of a valve, a numerical value indicated by a meter, and a measurement value obtained by measuring the equipment. Note that the number of workers 510 is not limited to one, and generally there are multiple workers.

[0021] The input information includes sensitive information related to the nuclear protection facility 710, but the worker 510 is not informed of what the sensitive information is. In other words, the sensitive information related to the nuclear protection facility 710 is information related to objects such as equipment and facilities within the specific area 720 and parts of the nuclear protection facility 710, which is a building, but the worker 510 does not know what these objects are. Hereinafter, the sensitive information related to the nuclear protection facility 710 may be simply referred to as sensitive information.

[0022] The information transmission server 100, in accordance with instructions from a specified person 520 (administrator) of the nuclear protection facility 710, moves the inspection information stored in the sensitive information server 200 that is not sensitive information to the general information server 300. Note that the inspection information stored in the sensitive information server 200 that is not sensitive information may be referred to as general information. The general information server 300 may store information that is not sensitive information other than that moved from the sensitive information server 200.

[0023] <Configuration of sensitive information server> 2 is a functional block diagram of the sensitive information server 200 according to the first embodiment. The sensitive information server 200 is a computer, and includes a control unit 210, a storage unit 220, and a communication unit 280. The communication unit 280 includes a communication device, and is capable of transmitting and receiving data to and from the information transmission server 100 and the mobile device 410.

[0024] The storage unit 220 includes storage devices such as a read only memory (ROM), a random access memory (RAM), a solid state drive (SSD), etc. The storage unit 220 stores an inspection information database 230, a user information database 240, and a program 228.

[0025] The program 228 includes a description of the processing of the control unit 210 (access management unit 211) described below. The user information database 240 stores identification information and authentication information of the workers 510 and specified persons 520 who access the sensitive information server 200.

[0026] The inspection information database 230 stores the inspection information input by the worker 510. The inspection information is stored in association with attribute information. The attribute information includes identification information, identification information of the device or facility to be inspected, stored date and time information, identification information of the worker 510 who input the inspection information, and information classification. The information classification includes "sensitive" indicating that the inspection information is sensitive information, "general" indicating that the inspection information is general information that is not sensitive information, and "undetermined" indicating that it has not been determined whether the information is sensitive or general information. When the inspection information is input from the portable device 410 and stored, the information classification is "undetermined."

[0027] The inspection information is not limited to each piece of input information, but for example, the measurement results and the values ​​indicated on a meter relating to one device are collected together as one piece of inspection information relating to the device and stored in the inspection information database 230. The identifier 520 (see FIG. 1) determines whether or not this piece of inspection information is sensitive information, for each unit of inspection information.

[0028] The control unit 210 is configured to include a CPU (Central Processing Unit) and is provided with an access management unit 211. The access management unit 211 stores the information input from the mobile device 410 as inspection information in the inspection information database 230 in association with the identification information of the worker 510. In addition, in response to a request from the information transmission server 100, the access management unit 211 transmits the inspection information and attribute information in the inspection information database 230 to the information transmission server 100, deletes the inspection information and the attribute information associated with the inspection information from the inspection information database 230, searches for the inspection information and attribute information, and changes the attribute information.

[0029] <General Information Server Configuration> 3 is a functional block diagram of the general information server 300 according to the first embodiment. The general information server 300 is a computer and has a configuration similar to that of the sensitive information server 200 (see FIG. 2), but the differences will be described below. The communication unit 380 includes a communication device, and can be accessed from the information transmission server 100 and an information terminal (not shown) used by a user who has been registered in a user information database 340 (described later) in the nuclear protection facility 710 .

[0030] The user information database 340 stores identification information and authentication information of staff belonging to the nuclear protection facility 710 who are permitted to access the general information server 300. The staff includes a specified person 520. The user information database 340 may also store identification information and authentication information of the worker 510.

[0031] The inspection information database 330 stores the inspection information transferred from the sensitive information server 200. Attribute information associated with the inspection information includes identification information, identification information of the device or facility to be inspected, date and time information stored in the sensitive information server 200, date and time information transferred from the sensitive information server 200, and identification information of the worker 510 who inputted the inspection information.

[0032] The access management unit 311 stores the inspection information and attribute information in the inspection information database 330 and changes the attribute information in response to a request from the information transmission server 100. In addition, the access management unit 311 transmits the inspection information to an information terminal used by a user registered in the user information database 340 in response to a request from the information terminal.

[0033] <Configuration of information transmission server> 4 is a functional block diagram of the information transmission server 100 according to the first embodiment. The information transmission server 100 is a computer, and includes a control unit 110, a storage unit 120, and an input / output unit 180. User interface devices such as a display, keyboard, and mouse are connected to the input / output unit 180. The input / output unit 180 includes a communication device, and is capable of transmitting and receiving data to and from the sensitive information server 200 and the general information server 300.

[0034] The storage unit 120 includes storage devices such as a ROM, a RAM, an SSD, etc. A program 128 is stored in the storage unit 120. The program 128 includes a description of an information transmission process (see FIG. 5, which will be described later).

[0035] The control unit 110 includes a CPU, and is provided with a sensitive information determination unit 111 and an information transmission unit 112. The sensitive information determination unit 111 acquires the inspection information stored in the sensitive information server 200, is connected to the input / output unit 180, and displays it on a display used by the specifyr 520. Next, the sensitive information determination unit 111 acquires a determination by the specifyr 520 as to whether or not the displayed inspection information is sensitive information.

[0036] If the inspection information is not sensitive information, the sensitive information determination unit 111 instructs the information transmission unit 112, which will be described later, to move the inspection information to the general information server 300. The inspection information is deleted from the inspection information database 230 (see FIG. 2). If the inspection information is sensitive information, the sensitive information determination unit 111 sets the information category of the attribute information of the inspection information to "sensitive."

[0037] The information transmission unit 112 transmits the inspection information instructed by the sensitive information determination unit 111 to the general information server 300. Next, the information transmission unit 112 instructs the sensitive information server 200 to delete the inspection information from the inspection information database 230.

[0038] As described above, the sensitive information determination unit 111 provided in the information transmission server 100 presents information in the sensitive information server 200, in which information (inspection information) including sensitive information related to a facility (see nuclear protection facility 710) is stored, to the administrator of the information (see identify 520) and accepts input of a determination by the administrator, and / or determines for itself whether the information is sensitive information or not, and if the information is not sensitive information, notifies the information transmission unit 112 that the information is not sensitive information. The information transmission unit 112 provided in the information transmission server 100 transmits the notified information (inspection information) to the general information server 300, which does not store sensitive information related to the facility, and instructs the sensitive information server 200 to delete the information.

[0039] <Information transmission processing> 5 is a flowchart of the information transmission process according to the first embodiment. The information transmission process is started by an instruction from a specified person 520. In step S11, the sensitive information determination unit 111 acquires identification information of inspection information for which the sensitive information has not been determined. In more detail, the sensitive information determination unit 111 requests the sensitive information server 200 to acquire identification information of inspection information whose information category is “undetermined” among the inspection information in the inspection information database 130.

[0040] In step S12, the sensitive information determination unit 111 starts the process of repeating steps S13 to S17 for each piece of identification information acquired in step S11. Hereinafter, identification information that is a processing target in this repeated process is referred to as processing target identification information. In step S13, the sensitive information determination unit 111 requests the sensitive information server 200 to acquire inspection information corresponding to the processing target identification information. Next, the sensitive information determination unit 111 displays the inspection information on a display connected to the input / output unit 180. The specified person 520 who has viewed the inspection information displayed on the display determines whether the inspection information is sensitive information or not, and inputs the determination result.

[0041] In step S14, the sensitive information determination unit 111 acquires the determination result of the sensitive information input by the specified person 520 (whether the sensitive information is valid or not). In step S15, the sensitive information determination unit 111 advances the process to step S16 if the information is sensitive (step S15→YES), and advances the process to step S17 if the information is not sensitive (step S15→NO). In step S16, the sensitive information determination unit 111 requests the sensitive information server 200 to change the information classification of the inspection information to "sensitive."

[0042] In step S17, the sensitive information determination unit 111 notifies the information transmission unit 112 of the processing target identification information and instructs it to move the inspection information from the sensitive information server 200 to the general information server 300. Upon receiving the notification, the information transmission unit 112 acquires the inspection information and its attribute information from the sensitive information server 200 and transmits them to the general information server 300. The general information server 300 stores the received inspection information and attribute information in the inspection information database 330. Next, the information transmission unit 112 transmits the processing target identification information to the sensitive information server 200 and instructs it to delete the inspection information. The sensitive information server 200 (access management unit 211) deletes the inspection information and attribute information corresponding to the received identification information from the inspection information database 230.

[0043] <Features of the information transmission server> According to the information transmission system 10 including such an information transmission server 100, the specified person 520 only needs to operate the information transmission server 100, and does not need to work in the specified area 720. Therefore, the specified person 520 can perform the process of determining sensitive information not only within the specified area 720 but also within the nuclear protection facility 710, and can efficiently carry out his / her own work, including the process of determining the sensitivity of inspection information.

[0044] Second Embodiment The information transmission server 100 according to the first embodiment judges whether the inspection information is sensitive information or not based on the judgment of the identifier 520 (see steps S14 to S15 in FIG. 5). If the format of the inspection information is a predetermined format, it may be judged that the inspection information does not contain sensitive information. FIG. 6 is a diagram showing the format of inspection information 610 (work report) according to the second embodiment that does not contain sensitive information. The worker 510 measures the equipment (flange) with the identification number shown in the "HCU No." and "Tag No." columns, and inputs the measurement result (gap width) into the column with a thick black frame. The input contents are numerical values.

[0045] In the second embodiment, such inspection information, in which the individual input contents and the format of the input contents are determined, is determined not to be sensitive information. The format of the input contents is a numerical value, a character, a date and time, etc. For numerical values, the range may be restricted. For characters, the characters that can be input, or the character type or the number of characters may be restricted.

[0046] Second embodiment: Configuration of information transmission server 7 is a functional block diagram of an information transmission server 100A according to the second embodiment. Compared to the information transmission server 100 (see FIG. 4), a non-sensitive information determination criterion 121 is stored in a storage unit 120, and a sensitive information determination unit 111A provided in a control unit 110 is different. In the non-sensitive information determination criteria 121, a format of inspection information (input contents and its format) that is determined not to be sensitive information is set.

[0047] The sensitive information determination unit 111A determines whether or not the inspection information matches a format (predetermined format) set in the non-sensitive information determination criteria 121. If it matches, the sensitive information determination unit 111A determines that the inspection information is not sensitive information (is non-sensitive information), and instructs the information transmission unit 112 to move the information to the general information server 300 (notifies the identification information).

[0048] The inspection information determined as non-sensitive information is moved to the general information server 300 without the identification party 520 determining whether it is sensitive information or not. For the inspection information not determined as non-sensitive information, the sensitive information determination unit 111A inquires of the identification party 520 and makes a determination, similar to the sensitive information determination unit 111 (see steps S13 to S14 in FIG. 5).

[0049] As described above, if the information (inspection information) is in a predetermined format (see non-sensitive information determination criteria 121) (is non-sensitive information), the sensitive information determination unit 111A notifies the information transmission unit 112 that the information is not sensitive information (the information transmission unit 112 moves to the general information server 300).

[0050] Second embodiment: non-sensitive information determination process 8 is a flowchart of the non-sensitive information determination process according to the second embodiment. The non-sensitive information determination process is a process executed before the information transmission process (see FIG. 5). In other words, the information transmission process is executed for the remaining inspection information that is not determined to be non-sensitive information (not sensitive information) by the non-sensitive information determination process.

[0051] In step S21, the sensitive information determination unit 111A makes a request to the sensitive information server 200 to acquire identification information of the inspection information in the inspection information database 130 whose information category is “undetermined”. In step S22, the sensitive information determination unit 111A starts the process of repeating steps S23 to S25 for each piece of identification information acquired in step S21. Hereinafter, identification information that becomes a processing target in this repeated process is referred to as processing target identification information. In step S23, the sensitive information determination unit 111A makes a request to the sensitive information server 200 to acquire inspection information corresponding to the processing target identification information.

[0052] In step S24, the sensitive information determination unit 111A determines whether the inspection information acquired in step S23 is in a format according to the non-sensitive information determination criteria 121 and is non-sensitive information. If the sensitive information determination unit 111A determines that the information is non-sensitive (step S24→YES), the process proceeds to step S25, and if not (step S24→NO), the process returns to step S23 and processes the next identification information. The confidentiality classification of the inspection information that was not determined to be non-sensitive information remains "undetermined." Step S25 is the same process as step S17 (see FIG. 5).

[0053] <<Second embodiment: Features of information transmission server>> According to the information transmission system 10 including such an information transmission server 100A, the specifier 520 does not need to judge whether the inspection information that matches the non-sensitive information judgment criteria 121 (has a predetermined format) is sensitive information. Therefore, the specifier 520 can reduce the effort of judgment and can make the judgment of sensitive information more efficient.

[0054] Third Embodiment The information transmission server 100A according to the second embodiment judges whether the inspection information is non-sensitive information. Inspection information judged as non-sensitive information is in a predetermined format including characters, numbers, and date and time, and images and videos are not subject to the sensitive information judgment. In the third embodiment, the sensitive information is judged based on whether an object related to sensitive information is captured in an image or video using machine learning technology.

[0055] Third embodiment: Configuration of information transmission server 9 is a functional block diagram of an information transmission server 100B according to the third embodiment. Compared to the information transmission server 100 (see FIG. 4), a sensitive information detection model 122 is stored in the storage unit 120, and a sensitive information determination unit 111B provided in the control unit 110 is different. In addition, the control unit 110 is provided with an image recognition unit 113.

[0056] The sensitive information detection model 122 is a machine learning model that detects objects related to sensitive information captured in an image or video, and is, for example, a convolutional neural network. The detected objects are parts of the nuclear protection facility 710, which is a facility, equipment, or building in a specific area 720, related to sensitive information. The image recognition unit 113 uses the sensitive information detection model 122 to determine whether or not an object related to sensitive information is captured in an image or video.

[0057] If the image recognition unit 113 determines that an object related to sensitive information is not captured in the image or video that is the inspection information, the sensitive information determination unit 111B determines the inspection information as non-sensitive information. The sensitive information determination unit 111B instructs the information transmission unit 112 to move the inspection information to the general information server 300. The inspection information is not judged by the identifyr 520 as to whether it is sensitive information or not. For the inspection information that has not been judged as non-sensitive information, the sensitive information determination unit 111B inquires of the identifyr 520 and makes a judgment in the same manner as the sensitive information determination unit 111 (see steps S13 to S14 in FIG. 5).

[0058] As described above, the image recognition unit 113 provided in the information transmission server 100B detects objects related to sensitive information that are provided in a facility (see nuclear protection facility 710) and appear in images or videos in the sensitive information server 200, using a machine learning model (see sensitive information detection model 122). If the information is an image or video and the image recognition unit 113 does not detect any object related to sensitive information that is attached to the facility and appears in the information, the sensitive information determination unit 111B notifies the information transmission unit 112 that the information is not sensitive information (the information transmission unit 112 moves to the general information server 300).

[0059] Third embodiment: non-sensitive information determination process 10 is a flowchart of the non-sensitive information determination process according to the third embodiment. The non-sensitive information determination process is a process executed before the information transmission process (see FIG. 5). In other words, the information transmission process is executed for the remaining inspection information that is not determined to be non-sensitive information by the non-sensitive information determination process.

[0060] In step S31, the sensitive information determination unit 111B makes a request to the sensitive information server 200 to acquire identification information of the inspection information in the inspection information database 130 whose information category is “undetermined”. In step S32, the sensitive information determination unit 111B starts the process of repeating steps S33 to S36 for each piece of identification information acquired in step S31. Hereinafter, identification information that becomes a processing target in this repeated process is referred to as processing target identification information. In step S33, the sensitive information determination unit 111B makes a request to the sensitive information server 200 to acquire inspection information corresponding to the processing target identification information.

[0061] In step S34, if the inspection information acquired in step S33 is an image or video (step S34 → YES), the sensitive information determination unit 111B proceeds to step S35, and if the inspection information acquired in step S33 is not an image or video (step S34 → NO), the sensitive information determination unit 111B returns to step S33 and processes the next identification information.

[0062] In step S35, the image recognition unit 113 determines whether or not an object related to sensitive information is captured in the inspection information, which is an image or video. If not, the image recognition unit 113 determines that the inspection information is non-sensitive information. If the sensitive information determination unit 111B determines that the information is non-sensitive (step S35→YES), the process proceeds to step S36, and if not (step S36→NO), the process returns to step S33 and processes the next identification information. The confidentiality classification of the inspection information that was not determined to be non-sensitive information remains "undetermined." Step S36 is the same process as step S17 (see FIG. 5).

[0063] <<Third embodiment: Features of information transmission server>> According to the information transmission system 10 including such an information transmission server 100B, the identifier 520 does not need to judge whether the inspection information, which is an image or video that does not include an object related to sensitive information, is sensitive information. Therefore, the identifier 520 can reduce the effort of judgment and can make the judgment of sensitive information more efficient.

[0064] <<Modification: Two non-sensitive information determination processes>> The information transmission server 100B may execute the non-sensitive information determination process of the second embodiment (see FIG. 8) and the non-sensitive information determination process of the third embodiment (see FIG. 10) before the information transmission process shown in FIG. 5. In this way, the identifier 520 is not required to determine the inspection information that is non-sensitive information in a predetermined format (see the non-sensitive information determination criteria 121 shown in FIG. 7) and the inspection information that is an image or video that does not include an object related to sensitive information. The inspection information can be reduced, and the work of the identifier 520 can be made more efficient.

[0065] <<Variation: Determination of Sensitive Information>> The information transmission server 100B of the third embodiment moves to the general information server 300 when the inspection information, which is an image or video, does not show an object related to sensitive information (step S35→YES, see step S36). The sensitive information determination unit 111B may determine that the inspection information, which is an image or video, is sensitive information when an object related to sensitive information is shown, and set the information classification of the inspection information to "sensitive" (see step S16 in FIG. 5). In this way, the inspection information to be determined by the identifyr 520 can be reduced, and the work of the identifyr 520 can be made more efficient.

[0066] <<Variation: Judgment based on 3D point cloud information>> In the third embodiment, the image recognition unit 113 determines whether an object related to sensitive information is captured in an image or video. Three-dimensional information may be used instead of an image or video. The mobile device 410 includes a LiDAR (Light Detection and Ranging or Laser Imaging Detection and Ranging) in addition to a camera, and captures images or videos and acquires three-dimensional point cloud information. If a part of the three-dimensional point cloud information is matched with a three-dimensional model of an object related to sensitive information, the image recognition unit 113 determines that the inspection information includes sensitive information. Then, the sensitive information determination unit 111B determines that the inspection information is sensitive information and sets the information classification of the inspection information to "sensitive".

[0067] <<Variation: Determination based on shooting position and shooting direction>> The shooting position and shooting direction of the image or video may be used to determine whether or not an object related to sensitive information is captured in the image or video. The mobile device 410 includes a three-dimensional accelerometer and a gyro sensor, and based on the movement trajectory and orientation of the mobile device 410, the shooting position and shooting direction within the specific area 720 are added to the image or video that is the inspection information.

[0068] The storage unit 120 stores a sensitive area in which an object related to sensitive information exists within the specific area 720. The sensitive information determination unit 111B may determine that an image or video is non-sensitive information if the shooting position is outside the sensitive area and there is no overlap between the shooting range calculated from the shooting position and shooting direction and the sensitive area.

[0069] As described above, the images and videos stored in the sensitive information server 200 are given the shooting position and shooting direction in the facility where the images were taken (see nuclear protection facility 710). If the information (inspection information) is an image or video, the shooting location of the information is outside a specified area (sensitive area), and there is no overlap between the shooting range calculated from the shooting location and shooting direction and the specified area, the sensitive information determination unit 111B notifies the information transmission unit 112 that the information is not sensitive information (the information transmission unit 112 moves to the general information server 300).

[0070] Other variations Although several embodiments of the present invention have been described above, these embodiments are merely illustrative and do not limit the technical scope of the present invention. The present invention can take various other embodiments, and various modifications such as omissions and substitutions can be made without departing from the gist of the present invention. These embodiments and their modifications are included in the scope and gist of the invention described in this specification, etc., and are included in the scope of the invention described in the claims and their equivalents. [Explanation of symbols]

[0071] 10 Information Transmission Systems 100, 100A, 100B Information transmission server 111, 111A, 111B Sensitive Information Determination Department 112 Information Transmission Department 113 Image Recognition Unit 121 Criteria for determining non-sensitive information (prescribed format) 122 Sensitive Information Detection Model (Machine Learning Model) 200 Sensitive Information Server 211 Access Control Department 230 Inspection Information Database 240 User Information Database 228 Programs 300 General Information Server 410 Mobile Devices 510 Worker 520 Specified Person (Administrator) 710 Nuclear Defense Facility 720 Specific Area

Claims

1. A sensitive information determination unit and an information transmission unit are provided, The sensitive information determination unit Present information stored in a sensitive information server that stores information including sensitive information related to the facility to a manager of the information and accept input of a judgment from the manager, and / or make a judgment on its own to obtain whether or not the information is sensitive information; If the information is not sensitive information, notify the information transmission unit that the information is not sensitive information; The information transmission unit is The notified information is transmitted to a general information server in which sensitive information related to the facility is not stored, and an instruction is given to the sensitive information server to delete the information. Information transmission server.

2. The sensitive information determination unit If the information is in a predetermined format, the information transmission unit is notified that the information is not sensitive information.

2. The information transmission server according to claim 1.

3. An image recognition unit that detects an object related to the sensitive information that is provided in the facility and appears in an image or video in the sensitive information server by using a machine learning model, The sensitive information determination unit When the information is an image or video, and the image recognition unit does not detect an object related to the sensitive information that is installed in the facility and appears in the information, the image recognition unit notifies the information transmission unit that the information is not sensitive information.

2. The information transmission server according to claim 1.

4. The images and videos stored on the sensitive information server include: The photographing position and the photographing direction in the facility are given, The sensitive information determination unit If the information is an image or video, the photographing position of the information is outside a predetermined area, and the photographing range calculated from the photographing position and photographing direction does not overlap with the predetermined area, the information transmission unit is notified that the information is not sensitive information.

2. The information transmission server according to claim 1.

5. The information transmission server A step of presenting information stored in a sensitive information server that stores information including sensitive information related to facilities to an administrator of the information and accepting input of a judgment from the administrator and / or making a judgment by itself to obtain whether the information is sensitive information; If the information is not sensitive information, the information is transmitted to a general information server in which sensitive information related to the facility is not stored, and an instruction is given to the sensitive information server to delete the information. Methods of information transmission.

Images