Calculation system, calculation method, calculation program, and calculating device

Abstract

To safely and easily utilize personal information possessed by multiple owners.SOLUTION: A calculation system includes a first terminal device, a second terminal device, a user terminal, and a calculating device, the first terminal device converts first personal information including first identification information and first attribute information to first non-identification working information, the second terminal device converts second personal information including second identification information and second attribute information to second non-identification working information, the calculating device generates matching information including third identification information and third attribute information obtained by matching the first non-identification working information and the second non-identification working information, the user terminal receives an object variable selected by a user from the third attribute information, and a restriction condition and an explanation variable, the calculating device searches a set of the explanation variable in which the object variable satisfies the restriction condition from the matching information, and the user terminal displays the set of the explanation variable.SELECTED DRAWING: Figure 14

Description

[Technical field]

[0001] The present invention relates to a computing system, a computing method, a computing program, and a computing device. [Background technology]

[0002] In recent years, many companies have begun to use personal information of their customers for marketing purposes, such as analyzing purchasing trends by customer segment and using the information for sales promotions.

[0003] As a technology for utilizing customer personal information, for example, Cited Document 1 discloses a marketing device that includes a customer information collection means for collecting sales information from customer POS data and creating customer aggregated data linking the collected sales information of the customer with the customer's personal information, and a segmentation analysis means for clustering the customers into segments based on their lifestyles by non-hierarchical clustering and hierarchical clustering based on the customer aggregated data. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2014-48780 A Summary of the Invention [Problem to be solved by the invention]

[0005] Since there is a limit to the amount of personal information that a company can possess, there is a need to use not only the personal information that one company possesses, but also that possessed by other companies. However, from the perspective of personal information protection, it is difficult to use personal information possessed by other companies.

[0006] The present invention has been made in consideration of the above problems, and has an object to enable personal information owned by multiple owners to be used safely and easily. [Means for solving the problem]

[0007] A computing system according to one embodiment is a computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, in which the first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information, the second terminal device converts second personal information including second identification information and second attribute information into second non-identifiable processed information, the computing device generates matched information including third identification information and third attribute information by matching the first non-identifiable processed information and the second non-identifiable processed information, the user terminal accepts a target variable, the constraint condition, and an explanatory variable selected by a user from the third attribute information, the computing device searches for a combination of explanatory variables for which the target variable satisfies the constraint condition from the matched information, and the user terminal displays the combination of explanatory variables. Effect of the Invention

[0008] According to one embodiment, personal information owned by multiple owners can be used safely and easily. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 illustrates an example of the configuration of a computing system 1000. [Diagram 2] FIG. 2 illustrates an example of a hardware configuration of a computing device 1. [Diagram 3] 2 is a diagram illustrating an example of a hardware configuration of a terminal device 2. FIG. [Figure 4] FIG. 2 is a diagram illustrating an example of a hardware configuration of a user terminal 3. [Diagram 5] FIG. 2 illustrates an example of a functional configuration of a calculation device 1. [Figure 6] 2 is a diagram illustrating an example of a functional configuration of a terminal device 2. FIG. [Figure 7] FIG. 11 is a diagram showing an example of personal information. [Figure 8] FIG. 11 is a diagram showing an example of non-identifiable processing information. [Figure 9] FIG. 2 is a diagram illustrating an example of a functional configuration of a user terminal 3. [Figure 10] 1 is a flowchart illustrating an example of a process executed by the computing system 1000. [Figure 11] FIG. 13 is a diagram showing an example of matching information 122. [Figure 12] FIG. 13 is a diagram showing an example of a search condition input screen sc1. [Figure 13] FIG. 13 is a diagram illustrating an example of a search method. [Figure 14] FIG. 13 is a diagram showing an example of a search result display screen sc2. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, each embodiment of the present invention will be described with reference to the accompanying drawings. In the description of the specification and drawings of each embodiment, components having substantially the same functional configuration are designated by the same reference numerals, and redundant description will be omitted.

[0011] <System configuration> First, an overview of a computing system 1000 according to this embodiment will be described. The computing system 1000 is an information processing system that enables all of the personal information owned by multiple owners to be legally used by converting the personal information owned by multiple owners into non-identifiable processed information and then matching the information.

[0012] Personal information is information about a living individual that can identify a specific individual based on the name, date of birth, and other descriptions contained in the information. Personal information includes identification information and attribute information.

[0013] Identification information is information that identifies an individual. Examples of identification information include, but are not limited to, a name, a telephone number, an email address, or a facial image. Personal information may include multiple pieces of identification information.

[0014] Attribute information is information that indicates the attributes of an individual. Examples of attribute information include, but are not limited to, age, sex, address, occupation, and purchased products. Personal information may include multiple pieces of attribute information.

[0015] De-identified processed information is information that has been processed so that personal information has been de-identified, that is, information that has been processed so that a specific individual cannot be identified unless it is at least compared with other information. De-identified processed information is personal information or non-personal information. De-identified processed information that is personal information is, for example, pseudonymized information. De-identified processed information that is non-personal information is, for example, pseudonymized information, anonymously processed information, individual-related information, or other non-personal information.

[0016] Pseudonymized information is information about an individual that has been obtained by processing personal information so that a specific individual cannot be identified unless it is compared with other information.

[0017] Anonymously processed information is information about an individual that is obtained by processing personal information so that a specific individual cannot be identified, and the personal information cannot be restored.

[0018] Personal information refers to information about a living individual that does not fall under any of the categories of personal information, pseudonymized information, or anonymously processed information.

[0019] FIG. 1 is a diagram showing an example of the configuration of a computing system 1000. As shown in FIG. 1, the computing system 1000 includes a computing device 1, a terminal device 2A, a terminal device 2B, and a user terminal 3, which are connected to each other so as to be able to communicate with each other via a network N. Hereinafter, the terminal devices 2A and 2B may be collectively referred to as a terminal device 2. The network N may be, for example, a wired local area network (LAN), a wireless LAN, the Internet, a public line network, a mobile data communication network, or a combination thereof. In the example of FIG. 1, the computing system 1000 includes one computing device 1 and one user terminal 3, but may include a plurality of each. In the example of FIG. 1, the computing system 1000 includes two terminal devices 2, but may include one or three or more.

[0020] The computing device 1 is an information processing device that executes a predetermined calculation using non-identifiable processed information. The computing device 1 is, for example, a personal computer (PC), a smartphone, a tablet terminal, a server device, or a microcomputer, but is not limited to these.

[0021] The terminal device 2 is an information processing device that converts personal information into non-identifiable processed information and transmits it to the computing device 1. The terminal device 2 is, for example, but not limited to, a PC, a smartphone, a tablet terminal, a server device, or a microcomputer. The terminal device 2A corresponds to the first terminal device in the claims, and the terminal device 2B corresponds to the second terminal device in the claims.

[0022] The user terminal 3 is an information processing device used by a user of the computing system 1000. The user may or may not be the owner of personal information. The user terminal 3 is, for example, but is not limited to, a PC, a smartphone, or a tablet terminal. The user terminal 3 may function as the terminal device 2.

[0023] <Hardware configuration of calculation device 1> Next, a description will be given of a hardware configuration of the computing device 1. Fig. 2 is a diagram showing an example of a hardware configuration of the computing device 1. As shown in Fig. 2, the computing device 1 includes a processor 101, a memory 102, a storage 103, a communication I / F 104, an input device 105, an output device 106, and a drive device 107, which are connected to each other via a bus B1.

[0024] The processor 101 controls each component of the computing device 1 and realizes the functions of the computing device 1 by expanding into the memory 102 various programs including an OS (Operating System) and a computing program stored in the storage 103 and executing them. The processor 101 is, for example, a CPU, an MPU (Micro Processing Unit), a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), or a DSP (Digital Signal Processor), but is not limited to these.

[0025] The memory 102 is, for example, a read only memory (ROM), a RAM, or a combination thereof. The ROM is, for example, a programmable ROM (PROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), or a combination thereof. The RAM is, for example, but is not limited to, a dynamic RAM (DRAM) or a static RAM (SRAM).

[0026] The storage 103 stores various programs including an OS and a computing program, and data. The storage 103 is, for example, a flash memory, a hard disk drive (HDD), a solid state drive (SSD), or a storage class memory (SCM), but is not limited to these.

[0027] The communication I / F 104 is an interface for connecting the computing device 1 to an external device via the network N and controlling communication. The communication I / F 104 is, for example, Bluetooth (registered trademark), Wi-Fi (registered trademark), ZigBee (registered trademark), or Ethernet (registered trademark), but is not limited thereto.

[0028] The input device 105 is a device for inputting information to the computing device 1. The input device 105 is, for example, a mouse, a keyboard, a touch panel, a microphone, a scanner, a photographing device (camera), various sensors, or an operation button, but is not limited to these.

[0029] The output device 106 is a device for outputting information from the calculation device 1. The output device 106 is, for example, a display device, a projector, a printer, a speaker, or a vibrator, but is not limited to these.

[0030] The drive device 107 is a device that reads and writes data to the recording medium 108. The drive device 107 is, for example, but not limited to, a magnetic disk drive, an optical disk drive, a magneto-optical disk drive, or an SD card reader. The recording medium 108 is, for example, but not limited to, a CD (Compact Disc), a DVD (Digital Versatile Disc), a FD (Floppy Disk), an MO (Magneto-Optical disk), a BD (Blu-ray (registered trademark) Disc), a USB (registered trademark) memory, or an SD card.

[0031] In this embodiment, the calculation program may be written into memory 102 or storage 103 during the manufacturing stage of the calculation device 1, or may be provided to the calculation device 1 via the network N, or may be provided to the calculation device 1 via a non-transitory computer-readable recording medium such as a recording medium 108.

[0032] <Hardware configuration of terminal device 2> Next, a description will be given of the hardware configuration of the terminal device 2. Fig. 3 is a diagram showing an example of the hardware configuration of the terminal device 2. As shown in Fig. 3, the terminal device 2 includes a processor 201, a memory 202, a storage 203, a communication I / F 204, an input device 205, an output device 206, and a drive device 207, which are mutually connected via a bus B2.

[0033] The processor 201 controls each component of the terminal device 2 and realizes the functions of the terminal device 2 by expanding in the memory 202 various programs including an OS and a calculation program stored in the storage 203 and executing them. The processor 201 is, for example, a CPU, an MPU, a GPU, an ASIC, or a DSP, but is not limited to these.

[0034] The memory 202 may be, for example, a ROM, a RAM, or a combination thereof. The ROM may be, for example, a PROM, an EPROM, an EEPROM, or a combination thereof. The RAM may be, for example, but is not limited to, a DRAM or an SRAM.

[0035] The storage 203 stores various programs including an OS and a calculation program, and data. The storage 203 is, for example, a flash memory, a HDD, an SSD, or an SCM, but is not limited to these.

[0036] The communication I / F 204 is an interface for connecting the terminal device 2 to an external device via the network N and controlling communication. The communication I / F 204 is, for example, Bluetooth (registered trademark), Wi-Fi (registered trademark), ZigBee (registered trademark), or Ethernet (registered trademark), but is not limited thereto.

[0037] The input device 205 is a device for inputting information to the terminal device 2. The input device 205 is, for example, a mouse, a keyboard, a touch panel, a microphone, a scanner, a photographing device (camera), various sensors, or an operation button, but is not limited to these.

[0038] The output device 206 is a device for outputting information from the terminal device 2. The output device 206 is, for example, a display device, a projector, a printer, a speaker, or a vibrator, but is not limited to these.

[0039] The drive device 207 is a device that reads and writes data to the recording medium 208. The drive device 207 is, for example, but not limited to, a magnetic disk drive, an optical disk drive, a magneto-optical disk drive, or an SD card reader. The recording medium 208 is, for example, but not limited to, a CD, a DVD, a FD, an MO, a BD (Blu-ray (registered trademark) Disc), a USB (registered trademark) memory, or an SD card.

[0040] In this embodiment, the calculation program may be written into the memory 202 or storage 203 during the manufacturing stage of the terminal device 2, or may be provided to the terminal device 2 via the network N, or may be provided to the terminal device 2 via a non-transitory computer-readable recording medium such as the recording medium 208.

[0041] <Hardware configuration of user terminal 3> Next, a description will be given of the hardware configuration of the user terminal 3. Fig. 4 is a diagram showing an example of the hardware configuration of the user terminal 3. As shown in Fig. 4, the user terminal 3 includes a processor 301, a memory 302, a storage 303, a communication I / F 304, an input device 305, an output device 306, and a drive device 307, which are connected to each other via a bus B3.

[0042] The processor 301 controls each component of the user terminal 3 and realizes the functions of the user terminal 3 by expanding into the memory 302 various programs including an OS and a calculation program stored in the storage 303 and executing them. The processor 301 is, for example, a CPU, an MPU, a GPU, an ASIC, or a DSP, but is not limited to these.

[0043] The memory 302 may be, for example, a ROM, a RAM, or a combination thereof. The ROM may be, for example, a PROM, an EPROM, an EEPROM, or a combination thereof. The RAM may be, for example, but is not limited to, a DRAM or an SRAM.

[0044] The storage 303 stores various programs including an OS and a calculation program, and data. The storage 303 is, for example, a flash memory, a HDD, an SSD, or an SCM, but is not limited to these.

[0045] The communication I / F 304 is an interface for connecting the user terminal 3 to an external device via the network N and controlling communication. The communication I / F 304 is, for example, Bluetooth (registered trademark), Wi-Fi (registered trademark), ZigBee (registered trademark), or Ethernet (registered trademark), but is not limited to these.

[0046] The input device 305 is a device for inputting information to the user terminal 3. The input device 305 is, for example, a mouse, a keyboard, a touch panel, a microphone, a scanner, an image capturing device (camera), various sensors, or an operation button, but is not limited to these.

[0047] The output device 306 is a device for outputting information from the user terminal 3. The output device 306 is, for example, but is not limited to, a display device (display), a projector, a printer, a speaker, or a vibrator. The user terminal 3 includes a display device 306D as the output device 306.

[0048] The drive device 307 is a device that reads and writes data to the recording medium 308. The drive device 307 is, for example, but not limited to, a magnetic disk drive, an optical disk drive, a magneto-optical disk drive, or an SD card reader. The recording medium 308 is, for example, but not limited to, a CD, a DVD, a FD, an MO, a BD (Blu-ray (registered trademark) Disc), a USB (registered trademark) memory, or an SD card.

[0049] In this embodiment, the calculation program may be written into the memory 302 or storage 303 during the manufacturing stage of the user terminal 3, or may be provided to the user terminal 3 via the network N, or may be provided to the user terminal 3 via a non-transitory computer-readable recording medium such as the recording medium 308.

[0050] <Functional configuration of calculation device 1> Next, a description will be given of the functional configuration of the computing device 1. Fig. 5 is a diagram showing an example of the functional configuration of the computing device 1. As shown in Fig. 5, the computing device 1 includes a communication unit 11, a storage unit 12, and a control unit 13.

[0051] The communication unit 11 is realized by the communication I / F 104. The communication unit 11 transmits and receives information between the terminal device 2 and the user terminal 3 via the network N. The communication unit 11 receives non-identifiable processed information from the terminal device 2, and transmits search results and calculation results to the user terminal 3.

[0052] The storage unit 12 is realized by the memory 102 and the storage 103. The storage unit 12 stores non-identifiable processed information 121A, 121B, matching information 122, search condition information 123, search result information 124, and calculation result information 125. Hereinafter, the non-identifiable processed information 121A, 121B may be collectively referred to as non-identifiable processed information 121.

[0053] The non-identification processing information 121 is non-identification processing information received from the terminal device 2. The non-identification processing information 121A is non-identification processing information received from the terminal device 2A, and the non-identification processing information 121B is non-identification processing information received from the terminal device 2B.

[0054] The matching information 122 is obtained by matching the non-identification processed information 121A and the non-identification processed information 121B and integrating them into one. The matching information 122 includes identification information and attribute information. The identification information and attribute information included in the matching information 122 are referred to as third identification information and third attribute information, respectively.

[0055] The search condition information 123 is information indicating search conditions for searching for a set of explanatory variables from the matching information 122. The search conditions include a target variable, a constraint condition, and an explanatory variable. The constraint condition is a condition that the target variable must satisfy. The search conditions will be described in detail later.

[0056] The search result information 124 is information indicating the search result obtained by searching for a combination of explanatory variables that satisfies the search conditions from the matching information 122. The search result includes a combination of explanatory variables in which the objective variable satisfies a predetermined condition. The search result will be described in detail later.

[0057] The calculation result information 125 is information indicating a calculation result obtained by performing a predetermined calculation from the matching information 122. The calculation result is, for example, a tabulation result for each attribute, a causal relationship between attributes, a correlation between attributes, a record overlap count, a statistical analysis result (sum, average, variance, median, frequency, etc.), a machine learning model (parameters) that has learned the matching information 122, or an inference result by a machine learning model, but is not limited to these.

[0058] The control unit 13 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware configurations. The control unit 13 controls the overall operation of the computing device 1. The control unit 13 includes an acquisition unit 131, a matching unit 132, a search unit 133, and a calculation unit 134.

[0059] The acquisition unit 131 acquires the non-identifiable processed information 121 from the terminal device 2 and stores it in the storage unit 12.

[0060] The matching unit 132 matches the non-identifiable processed information 121A and 121B to generate matching information 122 and stores it in the storage unit 12.

[0061] The search unit 133 searches the matching information 122 for a set of explanatory variables that satisfies the search conditions, and stores the search results in the storage unit 12 as search result information 124.

[0062] The calculation unit 134 executes a predetermined calculation on the matching information 122 , and stores the obtained calculation result in the storage unit 12 as calculation result information 125 .

[0063] The functional configuration of the computing device 1 is not limited to the above example. For example, the computing device 1 may have a functional configuration other than the above, or some of the functional configuration may be provided in another device.

[0064] <Functional configuration of terminal devices 2A and 2B> Next, the functional configuration of the terminal devices 2A and 2B will be described. Fig. 6 is a diagram showing an example of the functional configuration of the terminal devices 2A and 2B. As shown in Fig. 6, the terminal devices 2A and 2B each include a communication unit 21A, 21B, a storage unit 22A, 22B, and a control unit 23A, 23B. Hereinafter, the communication units 21A, 21B, the storage units 22A, 22B, and the control units 23A, 23B may be collectively referred to as the communication unit 21, the storage unit 22, and the control unit 23, respectively.

[0065] The communication unit 21 is realized by the communication I / F 204. The communication unit 21 transmits and receives information to and from the computing device 1 via the network N. The communication units 21A and 21B transmit non-identifiable processed information 222A and 222B to the computing device 1, respectively.

[0066] The storage unit 22 is realized by a memory 202 and a storage 203. The storage units 22A and 22B store personal information 221A and 221B and non-identifiable processed information 222A and 222B, respectively.

[0067] Personal information 221 includes identification information and attribute information. Personal information 221A corresponds to first personal information in the claims, and personal information 221B corresponds to second personal information in the claims. Personal information 221A and personal information 221B are personal information owned by different owners. The identification information and attribute information included in personal information 221A are referred to as first identification information and first attribute information, respectively. The identification information and attribute information included in personal information 221B are referred to as second identification information and second attribute information, respectively.

[0068] FIG. 7 is a diagram showing an example of the personal information 221A and 221B.

[0069] Personal information 221A in FIG. 7 includes "name," "age," "gender," and "product" as information items. "Name" is information indicating the name of an individual. "Name" corresponds to first identification information. "Age" is information indicating the age of an individual. "Age" corresponds to first attribute information. "Gender" is information indicating the gender of an individual. "Gender" corresponds to first attribute information. "Product" is information indicating a product purchased by an individual. "Product" corresponds to first attribute information.

[0070] Personal information 221B in FIG. 7 includes "name," "age," "address," and "product" as information items. "Name" is information indicating the name of an individual. "Name" corresponds to the second identification information. "Age" is information indicating the age of an individual. "Age" corresponds to the second attribute information. "Address" is information indicating the address of an individual. "Address" corresponds to the second attribute information. "Product" is information indicating a product purchased by an individual. "Product" corresponds to the second attribute information.

[0071] It should be noted that the personal information 221 is not limited to the example in Fig. 7. The personal information 221 may not include some of the above information items, and may include information items other than those described above.

[0072] The non-identifiable processed information 222 is non-identifiable processed information obtained by converting the personal information 221. In the non-identifiable processed information 222, identifying information is de-identified. The method of de-identifying identifying information in the non-identifiable processed information 222 is, for example, hashing, addition of noise, or salted hashing, but is not limited thereto. Furthermore, the non-identifiable processed information 222 may have attribute information de-identified. The method of de-identifying attribute information in the non-identifiable processed information 222 is, for example, deletion of part of attribute information, abstraction of attribute information, superordinate conceptualization, quantification, change of granularity, top coding, bottom coding, data exchange, k-anonymization, or addition of noise, but is not limited thereto.

[0073] The non-identifiable processed information 222A is obtained by converting the personal information 221A, and corresponds to the first non-identifiable processed information in the claims. The non-identifiable processed information 222B is obtained by converting the personal information 221B, and corresponds to the second non-identifiable processed information in the claims. The personal information 221A and 221B are non-identifiable in the same way.

[0074] FIG. 8 is a diagram showing an example of the non-identifiable processed information 222A and 222B.

[0075] The non-identifiable processed information 222A in Figure 8 includes "name," "age," "gender," and "product" as information items. "Name" is an individual's name (first identification information) that has been non-identified (hashed). "Age" is an individual's age (first attribute information) that has been non-identified (granularity changed). "Gender" and "product" are an individual's gender and purchased product (first attribute information).

[0076] The non-identifiable processed information 222B in Figure 8 includes "name," "age," "address," and "product" as information items. "Name" is an individual's name (second identification information) that has been non-identified (hashed). "Age" is an individual's age (second attribute information) that has been non-identified (granularity changed). "Address" and "product" are an individual's address and purchased product (second attribute information).

[0077] Since the personal information 221A and 221B are anonymized by the same method, the values ​​of the identification information and attribute information common to the personal information 221A and 221B are also common to the anonymized processed information 222A and 222B.

[0078] The control unit 23 is realized by the processor 201 reading and executing a program from the memory 202 and working in cooperation with other hardware configurations. The control unit 23 controls the overall operation of the terminal device 2. The control units 23A and 23B include conversion units 231A and 231B, respectively.

[0079] The conversion units 231A and 231B convert the personal information 221A and 221B into non-identifiable processed information 222A and 222B, respectively, and store the non-identifiable processed information in the storage units 22A and 22B, respectively.

[0080] The functional configurations of the terminal devices 2A and 2B are not limited to the above examples. For example, the terminal devices 2A and 2B may have functional configurations other than those described above. In addition, each functional configuration of the terminal device 2 may be realized by software as described above, or may be realized by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0081] <Functional configuration of user terminal 3> Next, a description will be given of the functional configuration of the user terminal 3. Fig. 9 is a diagram showing an example of the functional configuration of the user terminal 3. As shown in Fig. 9, the user terminal 3 includes a communication unit 31, a storage unit 32, and a control unit 33.

[0082] The communication unit 31 is realized by the communication I / F 304. The communication unit 31 transmits and receives information to and from the computing device 1 via the network N. The communication unit 31 receives search result information 124 and calculation result information 125 from the computing device 1.

[0083] The storage unit 32 is realized by a memory 302 and a storage 303. The storage unit 32 stores search condition information 321, search result information 322, and calculation result information 323.

[0084] The search condition information 321 is information indicating search conditions for searching for a set of explanatory variables from the matching information 122. The search conditions include a target variable, a constraint condition, and an explanatory variable. The search conditions will be described in detail later.

[0085] The search result information 322 is information indicating the search result obtained by searching for a combination of explanatory variables that satisfies the search conditions from the matching information 122. The search result includes a combination of explanatory variables in which the objective variable satisfies a predetermined condition. The search result will be described in detail later.

[0086] The calculation result information 323 is information indicating a calculation result obtained by performing a predetermined calculation from the matching information 122. The calculation result is, for example, a tabulation result for each attribute, a causal relationship between attributes, a correlation between attributes, a record overlap count, a statistical analysis result (sum, average, variance, median, frequency, etc.), a machine learning model (parameters) that has learned the matching information 122, or an inference result by a machine learning model, but is not limited to these.

[0087] The control unit 33 is realized by the processor 301 reading and executing a program from the memory 302 and working in cooperation with other hardware configurations. The control unit 33 controls the overall operation of the user terminal 3. The control unit 33 includes an acquisition unit 331, a display unit 332, and a reception unit 333.

[0088] The acquiring unit 331 acquires the search result information 124 and the calculation result information 125 from the calculation device 1 , and stores them in the storage unit 32 as the search result information 322 and the calculation result information 323 .

[0089] The display unit 332 controls the screen displayed on the display device 306 D. The display unit 332 displays the search result information 322 and the calculation result information 323 on the display device 306 D in response to a user operation.

[0090] The receiving unit 333 receives search conditions selected by the user, and stores information indicating the received search conditions in the storage unit 32 as search condition information 321.

[0091] The functional configuration of the user terminal 3 is not limited to the above example. For example, the user terminal 3 may have a functional configuration other than the above. Furthermore, each functional configuration of the user terminal 3 may be realized by software as described above, or may be realized by hardware such as an IC chip, an SoC, an LSI, or a microcomputer.

[0092] <Processing Executed by the Computing System 1000> Next, a description will be given of the processing executed by the computing system 1000. FIG 10 is a flowchart showing an example of the processing executed by the computing system 1000.

[0093] (Step S101) The conversion unit 231A of the terminal device 2A converts the personal information 221A including the first identification information and the first attribute information into non-identifiable processed information 222A, and stores it in the storage unit 22A (Step S101).

[0094] (Step S102) The communication unit 21A of the terminal device 2A transmits the non-identifiable processed information 222A to the computing device 1 (step S102). The terminal device 2A may transmit the non-identifiable processed information 222A as is, or may transmit the non-identifiable processed information 222A using encrypted communication such as SSL (Secure Sockets Layer) / TLS (Transport Layer Security).

[0095] (Step S103) The conversion unit 231B of the terminal device 2B converts the personal information 221B including the second identification information and the second attribute information into non-identifiable processed information 222B, and stores it in the storage unit 22B (step S103).

[0096] (Step S104) The communication unit 21B of the terminal device 2B transmits the non-identifiable processed information 222B to the computing device 1 (step S104). The terminal device 2B may transmit the non-identifiable processed information 222B as is, or may transmit the non-identifiable processed information 222B using encrypted communication such as SSL (Secure Sockets Layer) / TLS (Transport Layer Security).

[0097] The order of steps S101 and S102 and steps S103 and S104 may be reversed. When the computing system 1000 includes three or more terminal devices 2, each terminal device 2 may perform the same process as steps S101 and S102. This allows the computing device 1 to obtain anonymized information corresponding to personal information owned by multiple different owners.

[0098] (Step S105) The acquisition unit 131 of the computing device 1 acquires the non-identifiable processed information 222A received from the terminal device 2A and stores it in the storage unit 12 as non-identifiable processed information 121A (step S105). Similarly, the acquisition unit 131 of the computing device 1 acquires the non-identifiable processed information 222B received from the terminal device 2B and stores it in the storage unit 12 as non-identifiable processed information 121B (step S105).

[0099] (Step S106) The matching unit 132 matches the non-identifiable processed information 121A and 121B to generate matching information 122, and stores the matching information 122 in the storage unit 12 (step S106). As described above, the non-identifiable processed information 121A and 121B are de-identified by the same method, so the matching unit 132 can match the non-identifiable processed information 121A and 121B even when an individual cannot be identified. The matching unit 132 includes the first identification information and the second identification information included in the non-identifiable processed information 121A and 121B as third identification information. In addition, the matching unit 132 includes the first attribute information and the second attribute information included in the non-identifiable processed information 121A and 121B as third attribute information.

[0100] FIG. 11 is a diagram showing an example of matching information 122. Matching information 122 in FIG. 11 includes information items such as "name," "age," "address," "gender," and "product." "Name" is an individual's name that has been de-identified. "Name" corresponds to third identification information. "Age" is an individual's age that has been de-identified (with granularity changed). "Gender" and "product" are the individual's gender and purchased product. "Age," "gender," "address," and "product" correspond to third attribute information.

[0101] (Step S107) In response to a user operation, the display unit 332 of the user terminal 3 displays a search condition input screen sc1 on the display device 306D (step S107). The search condition input screen sc1 is a screen for the user to input search conditions.

[0102] Fig. 12 is a diagram showing an example of a search condition input screen sc1. The search condition input screen sc1 in Fig. 12 includes an explanatory variable selection section sc11, an objective variable selection section sc12, an objective variable value selection section sc13, a content rate selection section sc14, an execute button sc15, and a back button sc16.

[0103] The explanatory variable selection section sc11 is a section for allowing the user to select explanatory variables from the third attribute information included in the matching information 122. In the example of Fig. 12, the explanatory variable selection section sc11 displays the third attribute information ("age", "gender", "address", and "product") included in the matching information 122 of Fig. 11 selectable by check boxes, and the user selects "age", "gender", and "address" as explanatory variables.

[0104] The objective variable selection unit sc12 is a section for the user to select an objective variable from the third attribute information included in the matching information 122. In the example of Fig. 12, the objective variable selection unit sc12 displays the third attribute information ("age", "gender", "address", and "product") included in the matching information 122 of Fig. 11 selectable by check boxes, and the user selects "product" as the objective variable.

[0105] The objective variable value selection section sc13 is a section for allowing the user to select an objective variable value from the third attribute information included in the matching information 122. The objective variable value selected here is an example of a constraint condition. In the example of FIG. 12, the objective variable value selection section sc13 displays the values ​​(A, B, C, and D) of the objective variable "product" selected in the objective variable selection section sc12 in a selectable manner using check boxes, and the user selects "A" as the objective variable value.

[0106] The inclusion rate selection section sc14 is a section for allowing the user to select the inclusion rate of the matching information 122 having the value of the objective variable selected in the objective variable value selection section sc13. The inclusion rate selected here is an example of a constraint condition. In the example of FIG. 12, a text box in which a numerical value can be input is displayed in the inclusion rate selection section sc14, and the user selects (inputs) an inclusion rate of "70"% or more. Note that the method for selecting the inclusion rate is not limited to text input and is arbitrary.

[0107] The execute button sc15 is a button for requesting the computing device 1 to execute a search for matching information 122 according to the search conditions.

[0108] The back button sc16 is a button for returning to the previous screen of the search condition input screen sc1.

[0109] The search condition input screen sc1 is not limited to the example of FIG. 12. The search condition input screen sc1 may be any screen that allows the user to select a target variable, a constraint condition, and an explanatory variable for the search. Furthermore, the constraint condition is not limited to the value and content rate of the target variable. For example, the constraint condition may be the number of matching information 122 (the number of records).

[0110] (Step S108) When the user inputs search conditions on the search condition input screen sc1 and presses the execute button sc15, the reception unit 333 receives the search conditions selected by the user and stores information indicating the received search conditions in the memory unit 32 as search condition information 321 (step S108).

[0111] (Step S109) The communication unit 31 of the user terminal 3 transmits the search condition information 321 to the computing device 1 (step S109).

[0112] (Step S110) The acquisition unit 131 of the computing device 1 acquires the search condition information 321 received from the user terminal 3, and stores it in the storage unit 12 as the search condition information 123 (step S110).

[0113] (Step S111) The search unit 133 of the calculation device 1 refers to the search condition information 123, searches the matching information 122 for a combination of explanatory variables that satisfies the search condition, and stores the search result in the storage unit 12 as search result information 124 (step S111). The search result includes the combination of explanatory variables discovered by the search, and the number of matching information 122 extracted by the explanatory variables. More specifically, the search unit 133 searches for a combination of explanatory variables in which the objective variable satisfies the constraint condition. In the example of FIG. 12, the search unit 133 searches for a combination (combination of values) of "age", "gender", and "address" in which 70% or more of the matching information 122 (records) have "product" as "A".

[0114] FIG. 13 is a diagram showing an example of a search method by the search unit 133. The search method in FIG. 13 is a decision tree algorithm. In FIG. 13, X:Y is the number of matching information 122 that satisfies the constraint condition, and Y is the number of matching information 122 that does not satisfy the constraint condition. That is, X / (X+Y) corresponds to the content rate. Here, it is assumed that there are 100 pieces of matching information 122 (100 records), the objective variable is "product", the explanatory variables are "age", "address" and "sex", the constraint conditions are "product=A" and "content rate≧70%, and the search end condition is X≦5. In FIG. 13, "address" and "sex" are quantified.

[0115] (Step S201) First, the search unit 133 counts the matching information 122 (40 pieces) of "product=A" and the matching information 122 (60 pieces) other than "product=A" from among the entire matching information 122, and calculates the content rate of the matching information 122 of "product=A" (step S201). Since the content rate here is 40%, it does not satisfy the constraint conditions ("product=A" and "content rate ≧ 70%).

[0116] (Step S202) Therefore, the search unit 133 sets a threshold value (50 years old) for "age" (step S202).

[0117] (Step S203) The search unit 133 counts the matching information 122 (10 pieces) of "product=A" and the matching information 122 (50 pieces) other than "product=A" among the matching information 122 of "age>50", and calculates the content rate of the matching information 122 of "product=A" (step S203). Since the content rate here is about 17%, it does not satisfy the constraint conditions ("product=A" and "content rate ≧70%).

[0118] (Step S204) Therefore, the search unit 133 sets a threshold value (8) for "address (pref)" (step S204).

[0119] (Step S205) The search unit 133 counts the matching information 122 (2 pieces) of "product = A" and the matching information 122 (30 pieces) other than "product = A" among the matching information 122 of "age > 50" and "address > 8", and calculates the content rate of the matching information 122 of "product = A" (step S205). Since the content rate here is about 6%, it does not satisfy the constraint conditions ("product = A" and "content rate ≧ 70%). Since X ≦ 5, the search unit 133 ends the search of this branch.

[0120] (Step S206) Furthermore, the search unit 133 counts the matching information 122 (8 pieces) of "product=A" and the matching information 122 (20 pieces) of "product=A" among the matching information 122 of "age>50" and "address≦8", and calculates the content rate of the matching information 122 of "product=A" (step S206). Since the content rate here is about 29%, it does not satisfy the constraint conditions ("product=A" and "content rate≧70%).

[0121] (Step S207) Therefore, the search unit 133 sets a threshold value (0) for "gender (sex)" (step S207).

[0122] (Step S208) The search unit 133 counts the matching information 122 (7 pieces) of "product = A" and the matching information 122 (1 piece) of "product = A" among the matching information 122 of "age > 50", "address ≦ 8" and "gender > 0", and calculates the content rate of the matching information 122 of "product = A" (step S208). Since the content rate here is about 88%, it satisfies the constraints ("product = A" and "content rate ≧ 70%).

[0123] (Step S209) As a result, "age>50", "address≦8" and "gender>0" are found as a combination of explanatory variables for which the objective variable satisfies the constraint condition (step S209). Since the search unit 133 has found the combination of explanatory variables, it ends the search for this branch.

[0124] (Step S210) The search unit 133 counts the matching information 122 (1 item) of "product = A" and the matching information 122 (19 items) other than "product = A" among the matching information 122 of "age > 50", "address ≦ 8", and "gender ≦ 0", and calculates the inclusion rate of the matching information 122 of "product = A" (step S210). Since the inclusion rate here is 5%, it does not satisfy the constraint conditions ("product = A" and "inclusion rate ≧ 70%). Since X ≦ 5, the search unit 133 ends the search of this branch.

[0125] (Step S211) The search unit 133 counts the matching information 122 (30 pieces) of "product=A" and the matching information 122 (10 pieces) of "product=A" among the matching information 122 of "age≦50", and calculates the content rate of the matching information 122 of "product=A" (step S211). Since the content rate here is 75%, it satisfies the constraints ("product=A" and "content rate≧70%).

[0126] (Step S212) As a result, "age≦50" is found as a combination of explanatory variables for which the objective variable satisfies the constraint condition (step S212). Since the search unit 133 has found the combination of explanatory variables, it ends the search for this branch.

[0127] Using the above method, the search results include "age > 50," "address ≦ 8," "gender > 0," and "age ≦ 50."

[0128] The search unit 133 can search for a combination of explanatory variables in which the objective variable satisfies the constraint condition by repeatedly performing such a decision tree algorithm while changing the threshold value of each attribute information. The order of the attribute information in which the threshold value is set is arbitrary. The order of the attribute information in which the threshold value is set may be common throughout all searches, may be changed randomly for each search, or may be changed for each predetermined number of searches. The value of the threshold value set for each search is also arbitrary. The value of the threshold value may be set randomly for each search, or may be changed at predetermined intervals for each search. The search unit 133 may perform a search using a decision tree algorithm other than the above, or may perform a search using a method other than the decision tree algorithm (e.g., heuristics).

[0129] Returning now to the explanation of FIG.

[0130] (Step S112) The calculation unit 134 executes a predetermined calculation on the matching information 122, and stores the obtained calculation result in the storage unit 12 as the calculation result information 125 (step S112).

[0131] (Step S113) The communication unit 11 of the computing device 1 transmits the search result information 124 and the calculation result information 125 to the user terminal 3 (step S113). The computing device 1 may transmit the search result information 124 and the calculation result information 125 directly, or may transmit them using an encrypted communication path.

[0132] (Step S114) The acquisition unit 331 of the user terminal 3 acquires the search result information 124 and the calculation result information 125 received from the calculation device 1, and stores them in the storage unit 32 as the search result information 322 and the calculation result information 323 (step S114).

[0133] (Step S115) In response to a user's operation, the display unit 332 refers to the search result information 322 and the calculation result information 323, and displays the search results and the calculation results on the display device 306D (step S115).

[0134] FIG. 14 is a diagram showing an example of a search result display screen sc2. The search result display screen sc2 is a screen that displays a search result. As shown in FIG. 14, the search result display screen sc2 displays, for each set of explanatory variables, a set of explanatory variables sc21 and the number (volume) sc22 of matching information 122 extracted by the explanatory variables. This allows the user to easily understand how many people (segments) having attribute information that satisfies the constraint conditions are present without identifying individuals. In addition, in the example of FIG. 14, the sets of explanatory variables sc21 are displayed in descending order of the number (volume) sc22 of matching information 122 extracted by the explanatory variables. This allows the user to easily understand the large-scale segments.

[0135] <Summary> As described above, according to this embodiment, a computing system 1000 is realized that includes a terminal device 2A, a terminal device 2B, a user terminal 3, and a calculation device 1, in which the terminal device 2A converts personal information 221A including first identification information and first attribute information into non-identifiable processed information 222A, the terminal device 2B converts personal information 221B including second identification information and second attribute information into non-identifiable processed information 222B, the calculation device 1 generates matched information 122 including third identification information and third attribute information by matching the non-identifiable processed information 222A and the non-identifiable processed information 222B, the user terminal 3 accepts a target variable, a constraint condition, and an explanatory variable selected by a user from the third attribute information, the calculation device 1 searches for a combination of explanatory variables in which the target variable satisfies the constraint condition from the matched information 122, and the user terminal 3 displays the combination of explanatory variables.

[0136] For example, when a user who owns the personal information 221A analyzes a customer segment who purchases the product A only from the personal information 221A owned by his / her company, the analysis cannot be performed taking into account the "address" because the personal information 221A does not have an "address" field. By using the calculation system 1000, the user can use not only the personal information 221A owned by his / her company but also the personal information 221B owned by other companies, and can analyze the customer segment who purchases the product A while taking into account the "address". As a result, it becomes possible to discover a customer segment (for example, segment 2 in FIG. 14) that could not be discovered only from the personal information 221A owned by his / her company. In addition, the user can perform a more accurate analysis because the amount of available personal information increases compared to the case of analyzing with the personal information 221A. In addition, during the analysis, the user does not touch the personal information 221B owned by other companies itself and uses it in a state where the individual cannot be identified, so the personal information 221B can be used safely. In addition, the user can easily use the personal information because the desired results are displayed just by selecting a search condition. As a result, computing system 1000 allows a user to safely and easily utilize personal information owned by multiple owners.

[0137] <Additional Notes> The present embodiment includes the following disclosure.

[0138] (Appendix 1) A computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts the second personal information including the second identification information and the second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identification processed information and the second non-identification processed information, the user terminal receives a target variable, a constraint condition, and an explanatory variable selected by a user from the third attribute information; The computing device searches for a combination of the explanatory variables in which the objective variable satisfies the constraint condition, from the matching information; The user terminal displays the set of explanatory variables. Calculation system.

[0139] (Appendix 2) The user terminal displays the number of pieces of matching information extracted by the set of explanatory variables. 2. The computing system of claim 1.

[0140] (Appendix 3) The user terminal displays the sets of explanatory variables in descending order of the number of pieces of matching information extracted by the sets of explanatory variables. 2. The computing system of claim 1.

[0141] (Appendix 4) The computing device searches the set of explanatory variables using a decision tree algorithm. 2. The computing system of claim 1.

[0142] (Appendix 5) The first terminal device and the second terminal device hash, add noise to, or salt-hash the first identification information and the second identification information. 2. The computing system of claim 1.

[0143] (Appendix 6) The first non-identifiable processed information and the second non-identifiable processed information are personal information, pseudonymously processed information, anonymously processed information, personally related information, or non-personal information. 2. The computing system of claim 1.

[0144] (Appendix 7) A computing method executed by a computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, comprising: The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts second personal information including second identification information and second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identifiable processed information and the second non-identifiable processed information, the user terminal receives a target variable, a constraint condition, and an explanatory variable selected by a user from the third attribute information; the computing device searches for a combination of the explanatory variables in which the objective variable satisfies the constraint condition from the matching information; The user terminal displays the set of explanatory variables. Calculation method.

[0145] (Appendix 8) A computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts second personal information including second identification information and second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identifiable processed information and the second non-identifiable processed information, the user terminal receives a target variable and an explanatory variable selected by a user from the third attribute information; The computing device searches for a combination of the explanatory variables in which the objective variable satisfies a predetermined condition from the matching information, The user terminal displays the set of explanatory variables. A computational program that causes the computational method to be carried out.

[0146] (Appendix 9) an acquisition unit that acquires first non-identifiable processed information from a first terminal device and acquires second non-identifiable processed information from a second terminal device; a matching unit that generates matched information including third identification information and third attribute information by matching the first non-identification processed information and the second non-identification processed information; a search unit that searches for a combination of explanatory variables in which the objective variable satisfies the constraint condition from the matching information, based on an objective variable, the constraint condition, and an explanatory variable selected by a user from the third attribute information; A computing device comprising:

[0147] The embodiments disclosed herein are illustrative in all respects and should not be considered as limiting. The scope of the present invention is not defined by the above meaning, but is defined by the claims, and is intended to include all modifications within the meaning and scope of the claims. The present invention is not limited to the above-described embodiments, and various modifications are possible within the scope of the claims, and embodiments obtained by appropriately combining the technical means disclosed in the different embodiments are also included in the technical scope of the present invention. [Explanation of symbols]

[0148] 1: Computing device 2: Terminal device 3: User terminal 11: Communications Department 12: Storage part 13: Control unit 121: Non-identifiable processed information 122: Matching information 123: Search condition information 124: Search result information 125: Calculation result information 131: Acquisition Department 132: Butt joint 133: Search Department 134: Calculation section

Claims

1. A computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts the second personal information including the second identification information and the second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identification processed information and the second non-identification processed information, the user terminal accepts a target variable, a constraint condition, and an explanatory variable selected by a user from the third attribute information; The computing device searches for a combination of the explanatory variables in which the objective variable satisfies the constraint condition, from the matching information; The user terminal displays the set of explanatory variables. Calculation system.

2. The user terminal displays the number of pieces of matching information extracted by the set of explanatory variables. The computing system of claim 1 .

3. The user terminal displays the sets of explanatory variables in descending order of the number of pieces of matching information extracted by the sets of explanatory variables. The computing system of claim 1 .

4. The computing device searches the set of explanatory variables using a decision tree algorithm. The computing system of claim 1 .

5. The first terminal device and the second terminal device hash, add noise to, or salt-hash the first identification information and the second identification information. The computing system of claim 1 .

6. The first non-identifiable processed information and the second non-identifiable processed information are personal information, pseudonymously processed information, anonymously processed information, personally related information, or non-personal information. The computing system of claim 1 .

7. A computing method executed by a computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, comprising: The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts second personal information including second identification information and second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identifiable processed information and the second non-identifiable processed information, the user terminal receives a target variable, the constraint condition, and an explanatory variable selected by a user from the third attribute information; the computing device searches for a combination of the explanatory variables in which the objective variable satisfies the constraint condition from the matching information; The user terminal displays the set of explanatory variables. Calculation method.

8. A computing system including a first terminal device, a second terminal device, a user terminal, and a computing device, The first terminal device converts first personal information including first identification information and first attribute information into first non-identifiable processed information; The second terminal device converts second personal information including second identification information and second attribute information into second non-identifiable processed information; The computing device generates matched information including third identification information and third attribute information by matching the first non-identifiable processed information and the second non-identifiable processed information, the user terminal accepts a target variable and an explanatory variable selected by a user from the third attribute information; The computing device searches for a combination of the explanatory variables in which the objective variable satisfies a predetermined condition from the matching information, The user terminal displays the set of explanatory variables. A computational program that causes the computational method to be carried out.

9. an acquisition unit that acquires first non-identification processed information from a first terminal device and acquires second non-identification processed information from a second terminal device; a matching unit that generates matched information including third identification information and third attribute information by matching the first non-identification processed information and the second non-identification processed information; a search unit that searches the matching information for a combination of the explanatory variables that causes the objective variable to satisfy the constraint condition, based on the objective variable, the constraint condition, and the explanatory variable selected by a user from the third attribute information; A computing device comprising:

Images