Personal information concealing method

Abstract

To enable effective use of other information while keeping personal information confidential.SOLUTION: Original data including personal information is pseudonymized and encrypted, and transmitted to a service providing device. For pseudonymization and encryption, hashing is performed using a torque character string for each client. The service providing device transmits information after service processing to a user terminal. The information after service processing can be used without a risk of leakage of personal information and attribute information to the outside. When necessary, the information after service processing can be utilized by matching and restoring it using personal information held by the user terminal and key information obtained from the outside.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to a personal information concealment method for circulating data including personal information.

Background Art

[0002] Patent Document 1 discloses an information output device and an information output method that output by distinguishing between information that can identify an individual and information that cannot be identified. However, it is not clear how to distinguish.

Prior Art Documents

Patent Documents

[0003] Japanese Patent Application Laid-Open No. 2023-076763

Summary of the Invention

Problems to be Solved by the Invention

[0004] An object of the present invention is to enable effective utilization of other information while concealing personal information.

Means for Solving the Problems

[0005] For the original data including personal information and attribute information, the personal information is pseudonymized, the attribute information is encrypted, and sent to the service providing device. Receive a service result based on the pseudonymized and encrypted data from the service providing device. A personal information concealment method is provided, which is characterized in that the pseudonymized data in the service result is identified by matching it with the personal information, and the encrypted data is restored using key information.

Effects of the Invention

[0006] Personal information is concealed, and at the same time, other information can be used.

Brief Description of the Drawings

[0007]

Figure 1

DETAILED DESCRIPTION OF THE INVENTION

[0008] The device 1 of the present invention passes the original data including personal information 11a and attribute information 11b (such as company name and department name) through the anonymization / encryption tool 21. The personal information is anonymized (hereinafter referred to as "anonymized personal information 11c"), and the attribute information 11b is encrypted (hereinafter referred to as "encrypted attribute information 11d"), and then transmitted to the service providing device 2. The other information 12 is directly transmitted to the service providing device 2. Here, anonymization refers to an irreversible concealment method, and encryption refers to a reversible concealment method that can be restored using key information.

[0009] The service providing device 2 provides a service based on the anonymized personal information 11c, encrypted attribute information 11d, and other information 12, and as a result, transmits the processed information 11e. Here, the transmission destination is the user terminal 3, but it may also be the device 1 of the present invention.

[0010] The user terminal 3 matches the part related to the anonymized personal information 11c in the processed information 11e with the personal information it holds, and for the part related to the encrypted attribute information 11d, obtains the key information 4 for restoration (the operating company of the device of the present invention will permit restoration by sending the key information) from the device 1 of the present invention or the service providing device 2 and restores it, thereby creating and utilizing the matched / restored information 11f. Thereby, personal information can be protected.

[0011] As described above, personal information can be safely protected. Even if the information is obtained by a malicious person, it is protected by the anonymization of personal information and the encryption of attribute information.

EXAMPLE

[0012] The following will be described with reference to the drawings. The device 1 of the present invention holds personal information 11a, attribute information 11b, and other information 12. The device 1 of the present invention sends the personal information 11a, which has been anonymized through the anonymization / encryption process 21 to become anonymized personal information 11b, and the attribute information 11b, which has been encrypted to become encrypted attribute information, to the service providing device 2. The other information 12 is sent to the service providing device 2 as it is.

[0013] The service providing device 2 provides a service based on the anonymized personal information 11b, the encrypted attribute information 11d, and the other information 12, and returns the processed information 11e to the user terminal 3. At the user terminal 3, the processed information 11e can be used without fear of leakage of personal information to the outside. When it becomes necessary to use the personal information 11a and the attribute information 11b for the processed information 11e, the part related to the anonymized personal information 11c is matched with the personal information 11a held by the user terminal 3, and for the part related to the encrypted attribute information 11d, key information 4 for restoration is obtained from the device 1 of the present invention or the service providing device 2 (the operating company of the device of the present invention will permit restoration by sending the key information), and after restoration, the verified / restored information 11f is created and can be utilized in a form including the personal information 11a (or something equivalent thereto) and the attribute information 11b (or something equivalent thereto).

[0014] The operating company of the device 1 of the present invention can perform hashing with a salt string determined for each client when applying the anonymization / encryption tool. Thereby, anonymization / encryption specialized for the client can be performed, and the confidentiality of the personal information 11a and the attribute information 11b can be ensured perfectly. That is, even if the original data is the same, the hashed information after anonymization / encryption is different for each client.

[0015] When using the service, the service can be used while keeping the personal information confidential.

Industrial Applicability

[0016] It is a method capable of concealing personal information. It can be considered for use by many users.

Explanation of symbols

[0017] 1 The device of the present invention 11a Personal information 11b Attribute information 11c Pseudonymized personal information 11d Encrypted attribute information 11e Information after processing 11f Information after matching and restoration 12 Other information 2 Service providing device 21 Pseudonymization and encryption tool 3 User terminal 4 Key information

Claims

1. For the original data including personal information and attribute information, the personal information is anonymized, the attribute information is encrypted, and then sent to the service providing device. Receive the service result based on the anonymized and encrypted data from the service providing device. A personal information confidentiality method, characterized in that the anonymized data in the service result is identified by matching with the personal information, and the encrypted data is restored using key information.

2. The personal information confidentiality method according to claim 1, wherein the anonymization or encryption is performed by hashing using a salt string, and the salt string is used separately according to the situation.

3. The personal information confidentiality method according to claim 1 or 2, characterized in that the identification by matching is performed on the user terminal.

Images